./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4214419403 <...> 40.846444][ T327] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 40.859516][ T327] EXT4-fs (loop3): This should not happen!! Data will be lost [ 40.859516][ T327] [ 40.864773][ T1039] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 40.888751][ T1039] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 1048] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1042] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1048] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1042] <... futex resumed>) = 1 [pid 1041] <... futex resumed>) = 0 [pid 1048] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1042] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1041] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1048] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1041] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1051 attached [pid 1048] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1041] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1048] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1048] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1048] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1048] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1052]}, 88) = 1052 [pid 1048] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1048] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1048] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1052 attached [pid 1051] set_robust_list(0x7f13c8ce49a0, 24 [pid 1038] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 300] <... umount2 resumed>) = 0 [pid 300] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./28/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./28/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./28/file1") = 0 [ 40.900729][ T1042] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 40.900809][ T1042] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 40.900833][ T1042] EXT4-fs (loop2): This should not happen!! Data will be lost [ 40.900833][ T1042] [ 40.900845][ T1042] EXT4-fs (loop2): Total free blocks count 0 [ 40.900858][ T1042] EXT4-fs (loop2): Free/Dirty block details [ 40.900869][ T1042] EXT4-fs (loop2): free_blocks=2415919504 [pid 300] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./28") = 0 [pid 300] mkdir("./29", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1053 [pid 1042] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1050] <... futex resumed>) = ? [pid 1050] +++ killed by SIGBUS +++ [pid 1041] <... futex resumed>) = ? [pid 1052] set_robust_list(0x7f13c8ce49a0, 24 [pid 1051] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 1053 attached [pid 1053] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1053] chdir("./29") = 0 [pid 1053] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1053] setpgid(0, 0) = 0 [pid 1053] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1053] write(3, "1000", 4) = 4 [pid 1053] close(3) = 0 [pid 1053] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1053] write(1, "executing program\n", 18executing program ) = 18 [pid 1053] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1053] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1053] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1053] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1053] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1053] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1053] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1054]}, 88) = 1054 [pid 1053] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1053] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1053] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1054 attached [pid 1054] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1054] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1054] memfd_create("syzkaller", 0) = 3 [pid 1054] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1054] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1052] <... set_robust_list resumed>) = 0 [pid 1051] rt_sigprocmask(SIG_SETMASK, [], [pid 1052] rt_sigprocmask(SIG_SETMASK, [], [pid 1051] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 40.900881][ T1042] EXT4-fs (loop2): dirty_blocks=32 [ 40.900892][ T1042] EXT4-fs (loop2): Block reservation details [ 40.916016][ T1039] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.916016][ T1039] [ 40.936731][ T1042] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 40.942637][ T1039] EXT4-fs (loop0): Total free blocks count 0 [ 40.965838][ T1042] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 40.974709][ T1039] EXT4-fs (loop0): Free/Dirty block details [pid 1054] <... write resumed>) = 1048576 [pid 1054] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1054] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1054] ioctl(4, LOOP_SET_FD, 3 [pid 1052] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1051] memfd_create("syzkaller", 0 [pid 1042] +++ killed by SIGBUS +++ [pid 1041] +++ killed by SIGBUS +++ [pid 1054] <... ioctl resumed>) = 0 [pid 1054] close(3) = 0 [pid 1054] close(4 [pid 1052] memfd_create("syzkaller", 0 [pid 1051] <... memfd_create resumed>) = 3 [pid 1052] <... memfd_create resumed>) = 3 [pid 1051] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1041, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5} --- [pid 1054] <... close resumed>) = 0 [pid 1054] mkdir("./file1", 0777) = 0 [pid 1054] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 1052] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1051] <... mmap resumed>) = 0x7f13c08c4000 [pid 1052] <... mmap resumed>) = 0x7f13c08c4000 [pid 1039] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 299] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./29/binderfs", [pid 1051] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./29/binderfs") = 0 [pid 299] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1052] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 299] <... umount2 resumed>) = 0 [pid 1051] <... write resumed>) = 1048576 [pid 299] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1052] <... write resumed>) = 1048576 [pid 1051] munmap(0x7f13c08c4000, 138412032 [pid 1052] munmap(0x7f13c08c4000, 138412032 [pid 1047] <... futex resumed>) = ? [pid 1047] +++ killed by SIGBUS +++ [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./29/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 41.007094][ T1042] EXT4-fs (loop2): This should not happen!! Data will be lost [ 41.007094][ T1042] [ 41.016922][ T1054] loop3: detected capacity change from 0 to 2048 [ 41.018915][ T1039] EXT4-fs (loop0): free_blocks=2415919504 [ 41.030515][ T1039] EXT4-fs (loop0): dirty_blocks=32 [ 41.035478][ T1039] EXT4-fs (loop0): Block reservation details [ 41.041378][ T1039] EXT4-fs (loop0): i_reserved_data_blocks=2 [pid 299] openat(AT_FDCWD, "./29/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./29/file1") = 0 [pid 299] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./29") = 0 [pid 299] mkdir("./30", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 1052] <... munmap resumed>) = 0 [pid 1052] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1051] <... munmap resumed>) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1056 [pid 1052] <... openat resumed>) = 4 [pid 1052] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 1056 attached [pid 1051] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1039] +++ killed by SIGBUS +++ [pid 1038] +++ killed by SIGBUS +++ [pid 1056] set_robust_list(0x55558909e6a0, 24 [pid 1051] <... openat resumed>) = 4 [pid 1056] <... set_robust_list resumed>) = 0 [pid 1051] ioctl(4, LOOP_SET_FD, 3 [pid 1056] chdir("./30" [pid 1052] <... ioctl resumed>) = 0 [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1038, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=19} --- [pid 297] umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./27/binderfs") = 0 [pid 297] umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1052] close(3) = 0 [pid 1052] close(4executing program [pid 1056] <... chdir resumed>) = 0 [pid 1054] <... mount resumed>) = 0 [pid 1052] <... close resumed>) = 0 [pid 1051] <... ioctl resumed>) = 0 [pid 1056] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1056] setpgid(0, 0 [pid 1054] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1056] <... setpgid resumed>) = 0 [pid 1056] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1056] write(3, "1000", 4) = 4 [pid 1056] close(3) = 0 [pid 1056] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1056] write(1, "executing program\n", 18) = 18 [pid 1056] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1056] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1056] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1054] <... openat resumed>) = 3 [pid 1056] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1056] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1054] chdir("./file1" [pid 1056] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1054] <... chdir resumed>) = 0 [pid 1056] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1052] mkdir("./file1", 0777 [pid 1051] close(3 [pid 1056] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1056] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1054] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 1058 attached ) = 4 [pid 1052] <... mkdir resumed>) = 0 [pid 1051] <... close resumed>) = 0 [pid 297] <... umount2 resumed>) = 0 [pid 1056] <... clone3 resumed> => {parent_tid=[1058]}, 88) = 1058 [pid 1054] ioctl(4, LOOP_CLR_FD [pid 297] umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1054] <... ioctl resumed>) = 0 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1054] close(4 [pid 297] newfstatat(AT_FDCWD, "./27/file1", [pid 1054] <... close resumed>) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1054] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1058] set_robust_list(0x7f13c8ce49a0, 24 [pid 1054] <... futex resumed>) = 1 [pid 1053] <... futex resumed>) = 0 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1058] <... set_robust_list resumed>) = 0 [pid 1054] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1053] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] openat(AT_FDCWD, "./27/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1058] rt_sigprocmask(SIG_SETMASK, [], [pid 1054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1053] <... futex resumed>) = 0 [pid 297] <... openat resumed>) = 4 [pid 1058] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1054] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1053] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1052] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 1051] close(4 [pid 297] newfstatat(4, "", [pid 1058] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1056] rt_sigprocmask(SIG_SETMASK, [], [pid 1054] <... open resumed>) = 4 [pid 1051] <... close resumed>) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1056] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1054] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1051] mkdir("./file1", 0777 [pid 297] getdents64(4, [pid 1056] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1054] <... futex resumed>) = 1 [pid 1053] <... futex resumed>) = 0 [pid 1051] <... mkdir resumed>) = 0 [pid 297] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1058] <... futex resumed>) = 0 [pid 1056] <... futex resumed>) = 1 [pid 1054] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1053] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1051] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 297] getdents64(4, [pid 1058] memfd_create("syzkaller", 0 [pid 1056] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1053] <... futex resumed>) = 0 [pid 297] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1058] <... memfd_create resumed>) = 3 [pid 1054] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1053] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] close(4 [pid 1058] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1054] <... open resumed>) = 5 [pid 297] <... close resumed>) = 0 [pid 1058] <... mmap resumed>) = 0x7f13c08c4000 [pid 1054] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] rmdir("./27/file1" [pid 1054] <... futex resumed>) = 1 [pid 1053] <... futex resumed>) = 0 [pid 297] <... rmdir resumed>) = 0 [pid 1054] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1053] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] getdents64(3, [pid 1054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1053] <... futex resumed>) = 0 [pid 297] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1054] creat("./bus", 000 [pid 1053] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] close(3 [pid 1054] <... creat resumed>) = 6 [pid 297] <... close resumed>) = 0 [pid 1054] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] rmdir("./27" [pid 1054] <... futex resumed>) = 1 [pid 1053] <... futex resumed>) = 0 [pid 297] <... rmdir resumed>) = 0 [pid 1054] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1053] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] mkdir("./28", 0777 [pid 1054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1053] <... futex resumed>) = 0 [pid 297] <... mkdir resumed>) = 0 [pid 1054] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1053] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1054] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 297] <... openat resumed>) = 3 [pid 1054] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] ioctl(3, LOOP_CLR_FD [pid 1054] <... futex resumed>) = 1 [pid 1053] <... futex resumed>) = 0 [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1054] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1053] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] close(3 [pid 1054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1053] <... futex resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 1054] pwrite64(6, "+", 1, 0 [pid 1053] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1054] <... pwrite64 resumed>) = 1 [pid 1054] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... clone resumed>, child_tidptr=0x55558909e690) = 1060 [pid 1054] <... futex resumed>) = 1 [pid 1053] <... futex resumed>) = 0 [pid 1058] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1054] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1053] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1053] <... futex resumed>) = 0 [pid 1054] open("./bus", O_RDONLY [pid 1053] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1054] <... open resumed>) = 7 [pid 1054] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1053] <... futex resumed>) = 0 [pid 1054] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1053] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1053] <... futex resumed>) = 0 [pid 1054] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1053] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1054] <... copy_file_range resumed>) = 1 [pid 1053] <... futex resumed>) = 0 [pid 1054] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1053] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1054] <... futex resumed>) = 0 [pid 1053] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1054] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1053] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1053] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1053] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0}./strace-static-x86_64: Process 1060 attached => {parent_tid=[1062]}, 88) = 1062 [pid 1053] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1053] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1053] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1060] set_robust_list(0x55558909e6a0, 24 [pid 1052] <... mount resumed>) = 0 [pid 1052] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1052] chdir("./file1") = 0 [pid 1052] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1052] ioctl(4, LOOP_CLR_FD) = 0 [pid 1052] close(4./strace-static-x86_64: Process 1062 attached [pid 1060] <... set_robust_list resumed>) = 0 [pid 1058] <... write resumed>) = 1048576 [pid 1052] <... close resumed>) = 0 [pid 1060] chdir("./28" [pid 1058] munmap(0x7f13c08c4000, 138412032 [pid 1062] set_robust_list(0x7f13c8cc39a0, 24 [pid 1060] <... chdir resumed>) = 0 [pid 1052] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1062] <... set_robust_list resumed>) = 0 [pid 1060] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1058] <... munmap resumed>) = 0 [pid 1052] <... futex resumed>) = 1 [pid 1062] rt_sigprocmask(SIG_SETMASK, [], [pid 1060] <... prctl resumed>) = 0 [pid 1058] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1052] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1048] <... futex resumed>) = 0 [pid 1062] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1060] setpgid(0, 0 [pid 1058] <... openat resumed>) = 4 [pid 1051] <... mount resumed>) = 0 [pid 1048] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1062] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [ 41.063736][ T1039] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 41.076440][ T1039] EXT4-fs (loop0): This should not happen!! Data will be lost [ 41.076440][ T1039] [ 41.083760][ T1052] loop4: detected capacity change from 0 to 2048 [ 41.087356][ T1051] loop1: detected capacity change from 0 to 2048 [pid 1060] <... setpgid resumed>) = 0 [pid 1058] ioctl(4, LOOP_SET_FD, 3 [pid 1062] <... mmap resumed>) = 0x20000000 [pid 1060] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1052] <... futex resumed>) = 0 [pid 1051] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1048] <... futex resumed>) = 1 [pid 1052] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1051] <... openat resumed>) = 3 [pid 1048] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1052] <... open resumed>) = 4 [pid 1051] chdir("./file1" [pid 1052] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1051] <... chdir resumed>) = 0 [pid 1052] <... futex resumed>) = 1 [pid 1051] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1048] <... futex resumed>) = 0 [pid 1052] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1051] <... openat resumed>) = 4 [pid 1048] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1052] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1051] ioctl(4, LOOP_CLR_FD [pid 1048] <... futex resumed>) = 0 [pid 1052] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1051] <... ioctl resumed>) = 0 [pid 1048] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1052] <... open resumed>) = 5 [pid 1051] close(4 [pid 1062] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1060] <... openat resumed>) = 3 [pid 1058] <... ioctl resumed>) = 0 [pid 1052] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1051] <... close resumed>) = 0 [pid 1062] <... futex resumed>) = 1 [pid 1058] close(3 [pid 1053] <... futex resumed>) = 0 [pid 1052] <... futex resumed>) = 1 [pid 1048] <... futex resumed>) = 0 [pid 1062] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1058] <... close resumed>) = 0 [pid 1053] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1051] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1058] close(4 [pid 1054] <... futex resumed>) = 0 [pid 1053] <... futex resumed>) = 1 [pid 1052] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1048] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1060] write(3, "1000", 4 [pid 1058] <... close resumed>) = 0 [pid 1054] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1053] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1051] <... futex resumed>) = 1 [pid 1049] <... futex resumed>) = 0 [pid 1060] <... write resumed>) = 4 [pid 1058] mkdir("./file1", 0777 [pid 1054] <... open resumed>) = -1 EFAULT (Bad address) [pid 1052] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1051] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1049] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1048] <... futex resumed>) = 0 [pid 1060] close(3 [pid 1058] <... mkdir resumed>) = 0 [pid 1054] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1052] creat("./bus", 000 [pid 1060] <... close resumed>) = 0 [pid 1058] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 1054] <... futex resumed>) = 1 [pid 1053] <... futex resumed>) = 0 [pid 1051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1049] <... futex resumed>) = 0 [pid 1048] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1060] symlink("/dev/binderfs", "./binderfs" [pid 1054] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1053] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1052] <... creat resumed>) = 6 [pid 1051] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1049] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1060] <... symlink resumed>) = 0 [pid 1054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1053] <... futex resumed>) = 0 [pid 1052] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1051] <... open resumed>) = 4 [pid 1048] <... futex resumed>) = 0 [pid 1052] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1051] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1048] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1052] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1051] <... futex resumed>) = 1 [pid 1049] <... futex resumed>) = 0 [pid 1048] <... futex resumed>) = 0 [pid 1052] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1051] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1049] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1048] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1052] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1049] <... futex resumed>) = 0 [pid 1052] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1051] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1049] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1052] <... futex resumed>) = 1 [pid 1051] <... open resumed>) = 5 [pid 1048] <... futex resumed>) = 0 [pid 1052] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1051] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1048] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1052] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1051] <... futex resumed>) = 1 [pid 1049] <... futex resumed>) = 0 [pid 1048] <... futex resumed>) = 0 [pid 1052] pwrite64(6, "+", 1, 0 [pid 1051] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1049] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1048] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1052] <... pwrite64 resumed>) = 1 [pid 1051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1049] <... futex resumed>) = 0 [pid 1052] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1051] creat("./bus", 000 [pid 1049] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1052] <... futex resumed>) = 1 [pid 1051] <... creat resumed>) = 6 [pid 1048] <... futex resumed>) = 0 [pid 1052] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1051] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1048] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1052] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1051] <... futex resumed>) = 1 [pid 1049] <... futex resumed>) = 0 [pid 1048] <... futex resumed>) = 0 [pid 1052] open("./bus", O_RDONLY [pid 1051] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1049] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1048] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1052] <... open resumed>) = 7 [pid 1051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1049] <... futex resumed>) = 0 [pid 1052] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1051] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1049] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1052] <... futex resumed>) = 1 [pid 1051] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1048] <... futex resumed>) = 0 [pid 1052] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1051] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1048] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1052] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1051] <... futex resumed>) = 1 [pid 1049] <... futex resumed>) = 0 [pid 1048] <... futex resumed>) = 0 [pid 1052] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1051] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1049] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1048] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1052] <... copy_file_range resumed>) = 1 [pid 1051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1049] <... futex resumed>) = 0 [pid 1048] <... futex resumed>) = 0 [pid 1052] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1051] pwrite64(6, "+", 1, 0 [pid 1049] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1048] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1052] <... futex resumed>) = 0 [pid 1051] <... pwrite64 resumed>) = 1 [pid 1048] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1052] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1051] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1048] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1051] <... futex resumed>) = 1 [pid 1049] <... futex resumed>) = 0 [pid 1048] <... mprotect resumed>) = 0 [pid 1051] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1049] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1048] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1049] <... futex resumed>) = 0 [pid 1048] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1051] open("./bus", O_RDONLY [pid 1049] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1048] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1051] <... open resumed>) = 7 [pid 1051] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1048] <... clone3 resumed> => {parent_tid=[1065]}, 88) = 1065 [pid 1051] <... futex resumed>) = 1 [pid 1049] <... futex resumed>) = 0 [pid 1048] rt_sigprocmask(SIG_SETMASK, [], [pid 1051] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1049] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1048] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1049] <... futex resumed>) = 0 [pid 1048] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1051] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1049] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1048] <... futex resumed>) = 0 [pid 1051] <... copy_file_range resumed>) = 1 [pid 1049] <... futex resumed>) = 0 [pid 1048] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1051] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1051] <... futex resumed>) = 0 [pid 1049] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1051] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1049] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1049] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1049] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1066]}, 88) = 1066 [pid 1049] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1049] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1049] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1060] write(1, "executing program\n", 18executing program ) = 18 [pid 1060] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1060] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1060] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1060] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1060] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1060] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1060] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0}./strace-static-x86_64: Process 1066 attached ./strace-static-x86_64: Process 1065 attached [pid 1053] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1066] set_robust_list(0x7f13c8cc39a0, 24 [pid 1065] set_robust_list(0x7f13c8cc39a0, 24 [pid 1060] <... clone3 resumed> => {parent_tid=[1068]}, 88) = 1068 [pid 1066] <... set_robust_list resumed>) = 0 [pid 1065] <... set_robust_list resumed>) = 0 [pid 1060] rt_sigprocmask(SIG_SETMASK, [], [pid 1066] rt_sigprocmask(SIG_SETMASK, [], [pid 1065] rt_sigprocmask(SIG_SETMASK, [], [pid 1060] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1066] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1065] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1060] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1066] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1065] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1060] <... futex resumed>) = 0 [pid 1065] <... mmap resumed>) = 0x20000000 [pid 1060] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1065] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1048] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1068 attached [pid 1065] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1048] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1066] <... mmap resumed>) = 0x20000000 [pid 1052] <... futex resumed>) = 0 [pid 1048] <... futex resumed>) = 1 [pid 1066] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1052] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1048] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1066] <... futex resumed>) = 1 [pid 1052] <... open resumed>) = -1 EFAULT (Bad address) [pid 1049] <... futex resumed>) = 0 [pid 1066] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1052] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1049] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1052] <... futex resumed>) = 1 [pid 1051] <... futex resumed>) = 0 [pid 1049] <... futex resumed>) = 1 [pid 1048] <... futex resumed>) = 0 [pid 1052] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1051] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1049] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 41.145147][ T1058] loop2: detected capacity change from 0 to 2048 [ 41.158932][ T1054] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 41.174931][ T1054] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 41.187336][ T1054] EXT4-fs (loop3): This should not happen!! Data will be lost [pid 1048] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1052] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1051] <... open resumed>) = -1 EFAULT (Bad address) [pid 1048] <... futex resumed>) = 0 [pid 1068] set_robust_list(0x7f13c8ce49a0, 24 [pid 1058] <... mount resumed>) = 0 [pid 1051] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1048] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1051] <... futex resumed>) = 1 [pid 1049] <... futex resumed>) = 0 [pid 1051] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1049] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1068] <... set_robust_list resumed>) = 0 [pid 1058] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1049] <... futex resumed>) = 0 [pid 1068] rt_sigprocmask(SIG_SETMASK, [], [pid 1058] <... openat resumed>) = 3 [pid 1053] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 41.187336][ T1054] [ 41.194645][ T1052] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 41.198428][ T1054] EXT4-fs (loop3): Total free blocks count 0 [ 41.217591][ T1054] EXT4-fs (loop3): Free/Dirty block details [ 41.218267][ T1051] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 41.223647][ T1054] EXT4-fs (loop3): free_blocks=2415919504 [pid 1049] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1068] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1058] chdir("./file1" [pid 1068] memfd_create("syzkaller", 0 [pid 1058] <... chdir resumed>) = 0 [pid 1048] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1068] <... memfd_create resumed>) = 3 [ 41.239444][ T1052] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 41.243395][ T1054] EXT4-fs (loop3): dirty_blocks=32 [ 41.256802][ T1051] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 41.260404][ T1054] EXT4-fs (loop3): Block reservation details [ 41.274034][ T1052] EXT4-fs (loop4): This should not happen!! Data will be lost [ 41.274034][ T1052] [ 41.278210][ T1054] EXT4-fs (loop3): i_reserved_data_blocks=2 [pid 1058] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1058] <... openat resumed>) = 4 [pid 1054] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1049] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1068] <... mmap resumed>) = 0x7f13c08c4000 [pid 1062] <... futex resumed>) = ? [pid 1058] ioctl(4, LOOP_CLR_FD [pid 1062] +++ killed by SIGBUS +++ [pid 1058] <... ioctl resumed>) = 0 [ 41.289152][ T1051] EXT4-fs (loop1): This should not happen!! Data will be lost [ 41.289152][ T1051] [ 41.293730][ T1052] EXT4-fs (loop4): Total free blocks count 0 [ 41.308726][ T1052] EXT4-fs (loop4): Free/Dirty block details [ 41.314623][ T1052] EXT4-fs (loop4): free_blocks=2415919504 [ 41.315918][ T1054] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 41.322286][ T1052] EXT4-fs (loop4): dirty_blocks=32 [ 41.337770][ T1051] EXT4-fs (loop1): Total free blocks count 0 [pid 1058] close(4 [pid 1068] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1058] <... close resumed>) = 0 [pid 1068] <... write resumed>) = 1048576 [pid 1058] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1068] munmap(0x7f13c08c4000, 138412032 [pid 1058] <... futex resumed>) = 1 [pid 1056] <... futex resumed>) = 0 [pid 1054] +++ killed by SIGBUS +++ [pid 1053] +++ killed by SIGBUS +++ [pid 1052] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1068] <... munmap resumed>) = 0 [pid 1058] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1056] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1068] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1058] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1056] <... futex resumed>) = 0 [pid 1068] <... openat resumed>) = 4 [pid 1058] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1056] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1068] ioctl(4, LOOP_SET_FD, 3 [pid 1058] <... open resumed>) = 4 [pid 1058] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1056] <... futex resumed>) = 0 [pid 1058] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1056] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1058] <... open resumed>) = 5 [pid 1056] <... futex resumed>) = 0 [pid 1058] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1056] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1058] <... futex resumed>) = 0 [pid 1056] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1058] creat("./bus", 000 [pid 1056] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1058] <... creat resumed>) = 6 [pid 1056] <... futex resumed>) = 0 [pid 1058] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1056] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1058] <... futex resumed>) = 0 [pid 1056] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1058] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1056] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1058] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1056] <... futex resumed>) = 0 [pid 1058] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1056] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1058] <... futex resumed>) = 0 [pid 1056] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1058] pwrite64(6, "+", 1, 0 [pid 1056] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1058] <... pwrite64 resumed>) = 1 [pid 1056] <... futex resumed>) = 0 [pid 1058] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1056] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1058] <... futex resumed>) = 0 [pid 1056] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1058] open("./bus", O_RDONLY [pid 1056] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1058] <... open resumed>) = 7 [pid 1056] <... futex resumed>) = 0 [pid 1058] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1056] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1058] <... futex resumed>) = 0 [pid 1056] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1058] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1056] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1058] <... copy_file_range resumed>) = 1 [pid 1056] <... futex resumed>) = 0 [pid 1058] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1056] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1058] <... futex resumed>) = 0 [pid 1056] <... futex resumed>) = 0 [pid 1058] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1056] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1056] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1056] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1056] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1070]}, 88) = 1070 [pid 1056] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1056] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1056] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1068] <... ioctl resumed>) = 0 [pid 1068] close(3) = 0 [pid 1068] close(4) = 0 [pid 1068] mkdir("./file1", 0777) = 0 [pid 1068] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1053, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=18} --- [ 41.339533][ T1052] EXT4-fs (loop4): Block reservation details [ 41.351860][ T1054] EXT4-fs (loop3): This should not happen!! Data will be lost [ 41.351860][ T1054] [ 41.353042][ T1052] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 41.362823][ T1051] EXT4-fs (loop1): Free/Dirty block details [ 41.369101][ T1068] loop0: detected capacity change from 0 to 2048 [ 41.373191][ T1051] EXT4-fs (loop1): free_blocks=2415919504 [ 41.384887][ T1051] EXT4-fs (loop1): dirty_blocks=32 [pid 1065] <... futex resumed>) = ? [pid 1052] +++ killed by SIGBUS +++ ./strace-static-x86_64: Process 1070 attached [pid 1051] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1070] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1070] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1070] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 300] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1066] <... futex resumed>) = ? [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1066] +++ killed by SIGBUS +++ [pid 300] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", [pid 1068] <... mount resumed>) = 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1068] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 300] getdents64(3, [pid 1068] <... openat resumed>) = 3 [pid 300] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1068] chdir("./file1" [pid 1065] +++ killed by SIGBUS +++ [pid 1048] +++ killed by SIGBUS +++ [pid 300] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1068] <... chdir resumed>) = 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1068] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 300] newfstatat(AT_FDCWD, "./29/binderfs", [pid 1068] <... openat resumed>) = 4 [pid 300] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1068] ioctl(4, LOOP_CLR_FD [pid 300] unlink("./29/binderfs" [pid 1068] <... ioctl resumed>) = 0 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1048, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 1068] close(4 [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 300] <... unlink resumed>) = 0 [pid 1070] <... mmap resumed>) = 0x20000000 [pid 1068] <... close resumed>) = 0 [pid 300] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1056] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1056] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1056] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1056] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1058] <... futex resumed>) = 0 [pid 1056] <... futex resumed>) = 1 [pid 1058] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1056] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1058] <... open resumed>) = -1 EFAULT (Bad address) [pid 1058] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1056] <... futex resumed>) = 0 [pid 1058] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1056] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... restart_syscall resumed>) = 0 [ 41.390467][ T1051] EXT4-fs (loop1): Block reservation details [ 41.391206][ T1065] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 41.397029][ T1051] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 41.414181][ T1065] EXT4-fs (loop4): This should not happen!! Data will be lost [ 41.414181][ T1065] [ 41.428678][ T1051] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 1058] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1056] <... futex resumed>) = 0 [pid 1070] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1068] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1056] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./28/binderfs") = 0 [pid 301] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1070] <... futex resumed>) = 0 [pid 1068] <... futex resumed>) = 1 [pid 1060] <... futex resumed>) = 0 [pid 1051] +++ killed by SIGBUS +++ [pid 1049] +++ killed by SIGBUS +++ [pid 1070] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1068] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1060] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1068] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1060] <... futex resumed>) = 0 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1049, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 1068] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1060] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1068] <... open resumed>) = 4 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1068] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1068] <... futex resumed>) = 1 [pid 1060] <... futex resumed>) = 0 [pid 298] <... openat resumed>) = 3 [pid 1068] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1060] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] newfstatat(3, "", [pid 1068] <... open resumed>) = 5 [pid 1060] <... futex resumed>) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1068] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1060] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] getdents64(3, [pid 1068] <... futex resumed>) = 0 [pid 1060] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 298] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1068] creat("./bus", 000 [pid 1060] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1068] <... creat resumed>) = 6 [pid 1060] <... futex resumed>) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1068] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1060] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] newfstatat(AT_FDCWD, "./30/binderfs", [pid 1068] <... futex resumed>) = 0 [pid 1060] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1068] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1060] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] unlink("./30/binderfs" [pid 1068] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1060] <... futex resumed>) = 0 [pid 298] <... unlink resumed>) = 0 [pid 1068] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1060] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1068] <... futex resumed>) = 0 [pid 1060] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1068] pwrite64(6, "+", 1, 0 [pid 1060] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1068] <... pwrite64 resumed>) = 1 [pid 1060] <... futex resumed>) = 0 [pid 1068] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1060] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1068] <... futex resumed>) = 0 [pid 1060] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1068] open("./bus", O_RDONLY [pid 1060] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1068] <... open resumed>) = 7 [pid 1060] <... futex resumed>) = 0 [pid 1068] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1060] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1068] <... futex resumed>) = 0 [pid 1060] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1068] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1060] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1068] <... copy_file_range resumed>) = 1 [pid 1060] <... futex resumed>) = 0 [pid 1068] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1060] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1068] <... futex resumed>) = 0 [pid 1060] <... futex resumed>) = 0 [pid 1068] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1060] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1060] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1060] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1060] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1073]}, 88) = 1073 [pid 1060] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1060] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1060] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1073 attached [pid 1073] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1073] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1073] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1060] <... futex resumed>) = 0 [pid 1060] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1068] <... futex resumed>) = 0 [pid 1060] <... futex resumed>) = 1 [pid 1068] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1060] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1068] <... open resumed>) = -1 EFAULT (Bad address) [pid 1068] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1060] <... futex resumed>) = 0 [ 41.435794][ T1058] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 41.441632][ T1051] EXT4-fs (loop1): This should not happen!! Data will be lost [ 41.441632][ T1051] [ 41.460196][ T1058] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 41.475976][ T1068] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 1060] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1060] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1073] <... futex resumed>) = 1 [pid 1073] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] <... umount2 resumed>) = 0 [pid 300] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./29/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./29/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./29/file1") = 0 [pid 300] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./29") = 0 [pid 300] mkdir("./30", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1074 [pid 298] <... umount2 resumed>) = 0 [pid 1056] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 298] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./30/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./30/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./30/file1") = 0 [pid 298] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./30") = 0 [pid 298] mkdir("./31", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) executing program [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1075 ./strace-static-x86_64: Process 1074 attached [pid 1074] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1074] chdir("./30") = 0 [pid 1074] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1074] setpgid(0, 0) = 0 [pid 1074] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1074] write(3, "1000", 4) = 4 [pid 1074] close(3) = 0 [pid 1074] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1074] write(1, "executing program\n", 18) = 18 [pid 1074] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1074] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1074] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1074] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1074] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1074] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1074] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1076]}, 88) = 1076 [pid 1074] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1074] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1074] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1075 attached [pid 1075] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1075] chdir("./31") = 0 [pid 1075] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1075] setpgid(0, 0) = 0 [pid 1075] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1075] write(3, "1000", 4) = 4 [pid 1075] close(3) = 0 [pid 1075] symlink("/dev/binderfs", "./binderfs" [pid 301] <... umount2 resumed>) = 0 [pid 301] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 41.477481][ T1058] EXT4-fs (loop2): This should not happen!! Data will be lost [ 41.477481][ T1058] [ 41.501224][ T1058] EXT4-fs (loop2): Total free blocks count 0 [ 41.511269][ T1068] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 41.515425][ T1058] EXT4-fs (loop2): Free/Dirty block details [ 41.531617][ T1058] EXT4-fs (loop2): free_blocks=2415919504 [pid 301] newfstatat(AT_FDCWD, "./28/file1", executing program {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 1076 attached [pid 1075] <... symlink resumed>) = 0 [pid 1060] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1076] set_robust_list(0x7f13c8ce49a0, 24 [pid 1075] write(1, "executing program\n", 18 [pid 301] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1076] <... set_robust_list resumed>) = 0 [pid 1075] <... write resumed>) = 18 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1076] rt_sigprocmask(SIG_SETMASK, [], [pid 1075] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] openat(AT_FDCWD, "./28/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1076] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1075] <... futex resumed>) = 0 [pid 301] <... openat resumed>) = 4 [pid 1076] memfd_create("syzkaller", 0 [pid 1075] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 301] newfstatat(4, "", [pid 1076] <... memfd_create resumed>) = 3 [pid 1075] <... rt_sigaction resumed>NULL, 8) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1076] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1075] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 301] getdents64(4, [pid 1076] <... mmap resumed>) = 0x7f13c08c4000 [pid 1075] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 301] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1075] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 301] getdents64(4, [pid 1075] <... mmap resumed>) = 0x7f13c8cc4000 [pid 301] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1075] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 301] close(4 [pid 1075] <... mprotect resumed>) = 0 [pid 301] <... close resumed>) = 0 [pid 1075] rt_sigprocmask(SIG_BLOCK, ~[], [pid 301] rmdir("./28/file1" [pid 1075] <... rt_sigprocmask resumed>[], 8) = 0 [pid 301] <... rmdir resumed>) = 0 [pid 1075] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 301] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1075] <... clone3 resumed> => {parent_tid=[1077]}, 88) = 1077 [pid 301] close(3 [pid 1075] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 301] <... close resumed>) = 0 [pid 1075] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] rmdir("./28" [pid 1075] <... futex resumed>) = 0 [pid 301] <... rmdir resumed>) = 0 [pid 1075] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 301] mkdir("./29", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1078 [pid 1076] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 ./strace-static-x86_64: Process 1077 attached [pid 1077] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1077] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1077] memfd_create("syzkaller", 0) = 3 [pid 1077] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1076] munmap(0x7f13c08c4000, 138412032./strace-static-x86_64: Process 1078 attached [pid 1078] set_robust_list(0x55558909e6a0, 24 [pid 1058] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1076] <... munmap resumed>) = 0 [pid 1078] <... set_robust_list resumed>) = 0 [pid 1070] <... futex resumed>) = ? [ 41.543777][ T1058] EXT4-fs (loop2): dirty_blocks=32 [ 41.544781][ T1068] EXT4-fs (loop0): This should not happen!! Data will be lost [ 41.544781][ T1068] [ 41.551494][ T1058] EXT4-fs (loop2): Block reservation details [ 41.565683][ T1058] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 41.577135][ T1068] EXT4-fs (loop0): Total free blocks count 0 [ 41.578746][ T1058] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 1078] chdir("./29" [pid 1070] +++ killed by SIGBUS +++ [pid 1076] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1076] ioctl(4, LOOP_SET_FD, 3 [pid 1078] <... chdir resumed>) = 0 [pid 1077] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1078] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1077] <... write resumed>) = 1048576 [pid 1077] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1077] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1077] ioctl(4, LOOP_SET_FD, 3 [pid 1078] setpgid(0, 0 [pid 1076] <... ioctl resumed>) = 0 [pid 1076] close(3) = 0 [pid 1076] close(4) = 0 [pid 1076] mkdir("./file1", 0777) = 0 [pid 1076] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 1077] <... ioctl resumed>) = 0 [pid 1077] close(3) = 0 [pid 1077] close(4) = 0 [pid 1077] mkdir("./file1", 0777) = 0 [pid 1077] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 1078] <... setpgid resumed>) = 0 [pid 1078] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1078] write(3, "1000", 4 [pid 1068] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1058] +++ killed by SIGBUS +++ [pid 1056] +++ killed by SIGBUS +++ [pid 1078] <... write resumed>) = 4 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1056, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 1078] close(3 [pid 1073] <... futex resumed>) = ? [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 1078] <... close resumed>) = 0 [pid 1068] +++ killed by SIGBUS +++ [pid 1078] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 1078] write(1, "executing program\n", 18) = 18 [pid 1078] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1078] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1078] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1078] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1078] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1078] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1078] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1083]}, 88) = 1083 [pid 1078] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1078] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1078] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1083 attached [pid 1083] set_robust_list(0x7f13c8ce49a0, 24) = 0 [ 41.584064][ T1068] EXT4-fs (loop0): Free/Dirty block details [ 41.597230][ T1076] loop3: detected capacity change from 0 to 2048 [ 41.601536][ T1068] EXT4-fs (loop0): free_blocks=2415919504 [ 41.613301][ T1068] EXT4-fs (loop0): dirty_blocks=32 [ 41.617224][ T1077] loop1: detected capacity change from 0 to 2048 [ 41.618575][ T1068] EXT4-fs (loop0): Block reservation details [ 41.628874][ T1058] EXT4-fs (loop2): This should not happen!! Data will be lost [ 41.628874][ T1058] [ 41.638577][ T1068] EXT4-fs (loop0): i_reserved_data_blocks=2 [pid 1083] rt_sigprocmask(SIG_SETMASK, [], [pid 299] <... restart_syscall resumed>) = 0 [pid 299] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./30/binderfs") = 0 [pid 299] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1083] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1083] memfd_create("syzkaller", 0) = 3 [pid 1083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1083] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1083] ioctl(4, LOOP_SET_FD, 3 [pid 1077] <... mount resumed>) = 0 [pid 1076] <... mount resumed>) = 0 [pid 1083] <... ioctl resumed>) = 0 [pid 1083] close(3) = 0 [pid 1083] close(4) = 0 [pid 1083] mkdir("./file1", 0777) = 0 [pid 1083] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 1077] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1076] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1073] +++ killed by SIGBUS +++ [pid 1060] +++ killed by SIGBUS +++ [pid 1077] <... openat resumed>) = 3 [pid 1077] chdir("./file1") = 0 [pid 1077] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1077] ioctl(4, LOOP_CLR_FD) = 0 [pid 1077] close(4) = 0 [pid 1077] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1077] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1076] <... openat resumed>) = 3 [pid 1076] chdir("./file1") = 0 [pid 1076] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1076] ioctl(4, LOOP_CLR_FD) = 0 [pid 1076] close(4) = 0 [pid 1076] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1076] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1060, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 297] restart_syscall(<... resuming interrupted clone ...> [pid 1075] <... futex resumed>) = 0 [pid 1074] <... futex resumed>) = 0 [pid 299] <... umount2 resumed>) = 0 [pid 297] <... restart_syscall resumed>) = 0 [pid 1075] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1074] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1077] <... futex resumed>) = 0 [pid 1076] <... futex resumed>) = 0 [pid 1075] <... futex resumed>) = 1 [pid 1074] <... futex resumed>) = 1 [pid 1077] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1076] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1075] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1074] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1077] <... open resumed>) = 4 [pid 1076] <... open resumed>) = 4 [pid 297] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1077] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1076] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1077] <... futex resumed>) = 0 [pid 1076] <... futex resumed>) = 0 [pid 297] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1077] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1076] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 297] <... openat resumed>) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 1075] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1074] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1075] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1074] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] newfstatat(AT_FDCWD, "./28/binderfs", [pid 1077] <... futex resumed>) = 0 [pid 1076] <... futex resumed>) = 0 [pid 1075] <... futex resumed>) = 1 [pid 1074] <... futex resumed>) = 1 [pid 297] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1077] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1076] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1075] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1074] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] unlink("./28/binderfs" [pid 1077] <... open resumed>) = 5 [pid 1076] <... open resumed>) = 5 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... unlink resumed>) = 0 [pid 1077] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1076] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] newfstatat(AT_FDCWD, "./30/file1", [pid 297] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1077] <... futex resumed>) = 1 [pid 1076] <... futex resumed>) = 1 [pid 1075] <... futex resumed>) = 0 [pid 1074] <... futex resumed>) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1077] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1076] creat("./bus", 000 [pid 1075] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1074] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 1077] <... futex resumed>) = 0 [pid 1075] <... futex resumed>) = 1 [pid 1074] <... futex resumed>) = 0 [pid 1077] creat("./bus", 000 [pid 299] openat(AT_FDCWD, "./30/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1077] <... creat resumed>) = 6 [pid 1076] <... creat resumed>) = 6 [pid 1075] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1074] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1077] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... openat resumed>) = 4 [pid 1077] <... futex resumed>) = 0 [pid 1077] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] newfstatat(4, "", [pid 1076] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1075] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1076] <... futex resumed>) = 1 [pid 1075] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1074] <... futex resumed>) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1076] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1074] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1077] <... futex resumed>) = 0 [pid 1075] <... futex resumed>) = 1 [pid 299] getdents64(4, [pid 1077] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1074] <... futex resumed>) = 0 [pid 1077] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1075] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1077] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1075] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1074] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] getdents64(4, [pid 1077] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1076] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1077] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1075] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1077] pwrite64(6, "+", 1, 0 [pid 1076] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1075] <... futex resumed>) = 0 [pid 299] close(4 [pid 1077] <... pwrite64 resumed>) = 1 [pid 1076] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1075] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... close resumed>) = 0 [pid 1077] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1076] <... futex resumed>) = 1 [pid 1075] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1074] <... futex resumed>) = 0 [pid 299] rmdir("./30/file1" [pid 1077] <... futex resumed>) = 0 [pid 1076] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1075] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1074] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... rmdir resumed>) = 0 [pid 1077] open("./bus", O_RDONLY [pid 1076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1075] <... futex resumed>) = 0 [pid 1074] <... futex resumed>) = 0 [pid 299] getdents64(3, [pid 1077] <... open resumed>) = 7 [pid 1076] pwrite64(6, "+", 1, 0 [pid 1075] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1074] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1077] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1076] <... pwrite64 resumed>) = 1 [pid 1075] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] close(3 [pid 297] <... umount2 resumed>) = 0 [pid 1077] <... futex resumed>) = 0 [pid 1076] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1075] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... close resumed>) = 0 [pid 1077] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1076] <... futex resumed>) = 1 [pid 1075] <... futex resumed>) = 0 [pid 1074] <... futex resumed>) = 0 [pid 299] rmdir("./30" [pid 297] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1077] <... copy_file_range resumed>) = 1 [pid 1076] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1075] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1074] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... rmdir resumed>) = 0 [pid 1077] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1075] <... futex resumed>) = 0 [pid 1074] <... futex resumed>) = 0 [pid 299] mkdir("./31", 0777 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1077] <... futex resumed>) = 0 [pid 1076] open("./bus", O_RDONLY [pid 1075] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1074] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... mkdir resumed>) = 0 [pid 297] newfstatat(AT_FDCWD, "./28/file1", [pid 1077] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1076] <... open resumed>) = 7 [pid 1075] <... mmap resumed>) = 0x7f13c8ca3000 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1076] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1075] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 299] <... openat resumed>) = 3 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1076] <... futex resumed>) = 1 [pid 1075] <... mprotect resumed>) = 0 [pid 1074] <... futex resumed>) = 0 [pid 299] ioctl(3, LOOP_CLR_FD [pid 297] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1076] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1075] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1074] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1075] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1074] <... futex resumed>) = 0 [pid 299] close(3 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1076] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1075] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1074] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... close resumed>) = 0 [pid 297] openat(AT_FDCWD, "./28/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1076] <... copy_file_range resumed>) = 1 [pid 1074] <... futex resumed>) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1076] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1075] <... clone3 resumed> => {parent_tid=[1085]}, 88) = 1085 [pid 1074] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 297] <... openat resumed>) = 4 [pid 1076] <... futex resumed>) = 0 [pid 1075] rt_sigprocmask(SIG_SETMASK, [], [pid 1074] <... mmap resumed>) = 0x7f13c8ca3000 [pid 299] <... clone resumed>, child_tidptr=0x55558909e690) = 1086 [pid 1076] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1075] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1074] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 297] newfstatat(4, "", [pid 1075] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1074] <... mprotect resumed>) = 0 [pid 1075] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1074] rt_sigprocmask(SIG_BLOCK, ~[], [pid 297] getdents64(4, ./strace-static-x86_64: Process 1085 attached [pid 1074] <... rt_sigprocmask resumed>[], 8) = 0 [pid 297] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1074] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 297] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1074] <... clone3 resumed> => {parent_tid=[1087]}, 88) = 1087 [pid 1074] rt_sigprocmask(SIG_SETMASK, [], [pid 297] close(4 [pid 1074] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1074] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... close resumed>) = 0 [pid 1074] <... futex resumed>) = 0 [pid 1074] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] rmdir("./28/file1"./strace-static-x86_64: Process 1086 attached [pid 1086] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1086] chdir("./31") = 0 [pid 1086] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1086] setpgid(0, 0) = 0 [pid 1086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1086] write(3, "1000", 4) = 4 [pid 1086] close(3) = 0 [pid 1086] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1086] write(1, "executing program\n", 18executing program ) = 18 [pid 1086] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1083] <... mount resumed>) = 0 [pid 1083] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1086] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 297] <... rmdir resumed>) = 0 [pid 1083] <... openat resumed>) = 3 [pid 297] getdents64(3, [pid 1083] chdir("./file1") = 0 [pid 297] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 297] close(3 [pid 1083] ioctl(4, LOOP_CLR_FD) = 0 [pid 297] <... close resumed>) = 0 [pid 1083] close(4) = 0 [pid 297] rmdir("./28" [pid 1083] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1078] <... futex resumed>) = 0 [pid 297] <... rmdir resumed>) = 0 [pid 1083] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1078] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1078] <... futex resumed>) = 0 [pid 297] mkdir("./29", 0777 [pid 1083] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1078] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1086] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1083] <... open resumed>) = 4 [pid 1086] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 297] <... mkdir resumed>) = 0 [pid 1083] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1078] <... futex resumed>) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1083] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1078] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1078] <... futex resumed>) = 0 [pid 1083] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1078] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... openat resumed>) = 3 [pid 1083] <... open resumed>) = 5 [pid 1083] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] ioctl(3, LOOP_CLR_FD [pid 1083] <... futex resumed>) = 1 [pid 1078] <... futex resumed>) = 0 [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1083] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1078] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] close(3 [pid 1083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1078] <... futex resumed>) = 0 [pid 1083] creat("./bus", 000 [pid 297] <... close resumed>) = 0 [pid 1078] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1083] <... creat resumed>) = 6 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1083] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1078] <... futex resumed>) = 0 [pid 1083] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1078] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... clone resumed>, child_tidptr=0x55558909e690) = 1089 [pid 1083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1078] <... futex resumed>) = 0 [pid 1083] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1078] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1085] set_robust_list(0x7f13c8cc39a0, 24 [pid 1083] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1085] <... set_robust_list resumed>) = 0 [pid 1083] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1085] rt_sigprocmask(SIG_SETMASK, [], [pid 1083] <... futex resumed>) = 1 [pid 1078] <... futex resumed>) = 0 [pid 1083] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1085] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1078] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1085] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1083] pwrite64(6, "+", 1, 0 [pid 1078] <... futex resumed>) = 0 [pid 1083] <... pwrite64 resumed>) = 1 [pid 1078] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1083] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1083] <... futex resumed>) = 0 [pid 1078] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1083] open("./bus", O_RDONLY [pid 1078] <... futex resumed>) = 0 [pid 1083] <... open resumed>) = 7 [pid 1078] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1083] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1083] <... futex resumed>) = 0 [pid 1078] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1083] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1078] <... futex resumed>) = 0 [ 41.652713][ T1073] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 41.666382][ T1083] loop4: detected capacity change from 0 to 2048 [ 41.668635][ T1073] EXT4-fs (loop0): This should not happen!! Data will be lost [ 41.668635][ T1073] [pid 1083] <... copy_file_range resumed>) = 1 [pid 1078] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1083] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1078] <... futex resumed>) = 0 [pid 1083] <... futex resumed>) = 0 [pid 1078] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1083] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1078] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1078] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1078] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1086] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1078] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1086] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1078] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1086] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1085] <... mmap resumed>) = 0x20000000 [pid 1078] <... clone3 resumed> => {parent_tid=[1090]}, 88) = 1090 ./strace-static-x86_64: Process 1087 attached [pid 1086] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1085] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1078] rt_sigprocmask(SIG_SETMASK, [], [pid 1086] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1078] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1086] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1078] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1086] <... clone3 resumed> => {parent_tid=[1091]}, 88) = 1091 [pid 1078] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1086] rt_sigprocmask(SIG_SETMASK, [], [pid 1085] <... futex resumed>) = 1 [pid 1075] <... futex resumed>) = 0 [pid 1087] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1086] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1085] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1075] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1087] rt_sigprocmask(SIG_SETMASK, [], [pid 1086] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1077] <... futex resumed>) = 0 [pid 1075] <... futex resumed>) = 1 [pid 1087] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1077] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1075] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1091 attached ./strace-static-x86_64: Process 1090 attached ./strace-static-x86_64: Process 1089 attached [pid 1087] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1086] <... futex resumed>) = 0 [pid 1077] <... open resumed>) = -1 EFAULT (Bad address) [pid 1086] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1077] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1075] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1077] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1091] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1091] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1091] memfd_create("syzkaller", 0) = 3 [pid 1091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1075] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1087] <... mmap resumed>) = 0x20000000 [pid 1077] <... futex resumed>) = 0 [pid 1075] <... futex resumed>) = 1 [pid 1091] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1090] set_robust_list(0x7f13c8cc39a0, 24 [pid 1089] set_robust_list(0x55558909e6a0, 24 [pid 1087] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1075] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1090] <... set_robust_list resumed>) = 0 [pid 1089] <... set_robust_list resumed>) = 0 [pid 1087] <... futex resumed>) = 1 [pid 1074] <... futex resumed>) = 0 [pid 1090] rt_sigprocmask(SIG_SETMASK, [], [pid 1089] chdir("./29" [pid 1087] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1074] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1090] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1089] <... chdir resumed>) = 0 [pid 1076] <... futex resumed>) = 0 [pid 1074] <... futex resumed>) = 1 [pid 1090] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1089] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1076] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1074] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1090] <... mmap resumed>) = 0x20000000 [pid 1089] <... prctl resumed>) = 0 [pid 1076] <... open resumed>) = -1 EFAULT (Bad address) [pid 1090] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1089] setpgid(0, 0 [pid 1076] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1090] <... futex resumed>) = 1 [pid 1089] <... setpgid resumed>) = 0 [pid 1078] <... futex resumed>) = 0 [pid 1076] <... futex resumed>) = 1 [pid 1074] <... futex resumed>) = 0 [pid 1090] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1078] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1076] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1074] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1091] <... write resumed>) = 1048576 [pid 1089] <... openat resumed>) = 3 [pid 1083] <... futex resumed>) = 0 [pid 1078] <... futex resumed>) = 1 [pid 1076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1074] <... futex resumed>) = 0 [pid 1089] write(3, "1000", 4 [pid 1083] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1078] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1091] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1091] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1091] ioctl(4, LOOP_SET_FD, 3 [pid 1089] <... write resumed>) = 4 [pid 1083] <... open resumed>) = -1 EFAULT (Bad address) [ 41.746093][ T1077] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 41.756947][ T1076] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 41.763607][ T1091] loop2: detected capacity change from 0 to 2048 [ 41.776933][ T1076] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 1074] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1089] close(3 [pid 1083] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1091] <... ioctl resumed>) = 0 [pid 1091] close(3) = 0 [pid 1091] close(4) = 0 [pid 1091] mkdir("./file1", 0777) = 0 [pid 1091] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 1089] <... close resumed>) = 0 [pid 1083] <... futex resumed>) = 1 [pid 1078] <... futex resumed>) = 0 [pid 1075] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1089] symlink("/dev/binderfs", "./binderfs" [pid 1083] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1078] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1089] <... symlink resumed>) = 0 [pid 1083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1078] <... futex resumed>) = 0 [ 41.782991][ T1077] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 41.793837][ T1076] EXT4-fs (loop3): This should not happen!! Data will be lost [ 41.793837][ T1076] [ 41.812612][ T1077] EXT4-fs (loop1): This should not happen!! Data will be lost [ 41.812612][ T1077] [ 41.821994][ T1076] EXT4-fs (loop3): Total free blocks count 0 [ 41.830380][ T1076] EXT4-fs (loop3): Free/Dirty block details [ 41.831718][ T1077] EXT4-fs (loop1): Total free blocks count 0 [pid 1089] write(1, "executing program\n", 18 [pid 1078] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1074] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) executing program [pid 1089] <... write resumed>) = 18 [pid 1089] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 41.836904][ T1076] EXT4-fs (loop3): free_blocks=2415919504 [ 41.842972][ T1077] EXT4-fs (loop1): Free/Dirty block details [ 41.847674][ T1083] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 41.854389][ T1077] EXT4-fs (loop1): free_blocks=2415919504 [ 41.874567][ T1076] EXT4-fs (loop3): dirty_blocks=32 [ 41.876112][ T1077] EXT4-fs (loop1): dirty_blocks=32 [ 41.879890][ T1076] EXT4-fs (loop3): Block reservation details [ 41.884915][ T1077] EXT4-fs (loop1): Block reservation details [pid 1089] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1077] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1089] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1076] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1089] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1089] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1089] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1089] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1089] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1095]}, 88) = 1095 [pid 1089] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1089] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1089] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1087] <... futex resumed>) = ? [pid 1087] +++ killed by SIGBUS +++ [pid 1091] <... mount resumed>) = 0 ./strace-static-x86_64: Process 1095 attached [pid 1095] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1095] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1095] memfd_create("syzkaller", 0) = 3 [pid 1095] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1095] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1085] <... futex resumed>) = ? [pid 1078] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 41.890971][ T1083] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 41.897267][ T1077] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 41.908763][ T1076] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 41.915311][ T1083] EXT4-fs (loop4): This should not happen!! Data will be lost [ 41.915311][ T1083] [ 41.923035][ T1076] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 41.930696][ T1083] EXT4-fs (loop4): Total free blocks count 0 [pid 1091] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1077] +++ killed by SIGBUS +++ [pid 1091] <... openat resumed>) = 3 [pid 1095] <... write resumed>) = 1048576 [pid 1095] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1095] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1095] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1091] chdir("./file1") = 0 [pid 1091] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1091] ioctl(4, LOOP_CLR_FD) = 0 [pid 1091] close(4) = 0 [pid 1091] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1086] <... futex resumed>) = 0 [pid 1091] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1086] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1091] <... open resumed>) = 4 [pid 1086] <... futex resumed>) = 0 [pid 1091] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1086] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1091] <... futex resumed>) = 0 [pid 1086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1091] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1086] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1091] <... open resumed>) = 5 [pid 1086] <... futex resumed>) = 0 [pid 1091] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1086] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1091] <... futex resumed>) = 0 [pid 1086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1091] creat("./bus", 000 [pid 1086] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1091] <... creat resumed>) = 6 [pid 1086] <... futex resumed>) = 0 [pid 1091] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1086] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1091] <... futex resumed>) = 0 [pid 1086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1091] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1086] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1091] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1086] <... futex resumed>) = 0 [pid 1091] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1086] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1091] <... futex resumed>) = 0 [pid 1086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1091] pwrite64(6, "+", 1, 0 [pid 1086] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1091] <... pwrite64 resumed>) = 1 [pid 1086] <... futex resumed>) = 0 [pid 1095] close(3 [pid 1091] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1086] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1091] <... futex resumed>) = 0 [pid 1086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1091] open("./bus", O_RDONLY [pid 1086] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1091] <... open resumed>) = 7 [pid 1086] <... futex resumed>) = 0 [pid 1091] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1086] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1091] <... futex resumed>) = 0 [pid 1086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1091] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1086] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1091] <... copy_file_range resumed>) = 1 [pid 1086] <... futex resumed>) = 0 [pid 1095] <... close resumed>) = 0 [pid 1091] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1086] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1095] close(4 [pid 1085] +++ killed by SIGBUS +++ [pid 1075] +++ killed by SIGBUS +++ [pid 1091] <... futex resumed>) = 0 [pid 1086] <... futex resumed>) = 0 [pid 1091] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1086] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1075, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=17} --- [pid 1086] <... mmap resumed>) = 0x7f13c8ca3000 [pid 298] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1086] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1086] <... mprotect resumed>) = 0 [pid 298] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1086] rt_sigprocmask(SIG_BLOCK, ~[], [pid 298] <... openat resumed>) = 3 [pid 1086] <... rt_sigprocmask resumed>[], 8) = 0 [pid 298] newfstatat(3, "", [pid 1086] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, [pid 1095] <... close resumed>) = 0 [pid 1086] <... clone3 resumed> => {parent_tid=[1096]}, 88) = 1096 [pid 298] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1086] rt_sigprocmask(SIG_SETMASK, [], [pid 298] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1086] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1086] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] newfstatat(AT_FDCWD, "./31/binderfs", [pid 1086] <... futex resumed>) = 0 [ 41.948442][ T1085] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 41.951564][ T1095] loop0: detected capacity change from 0 to 2048 [ 41.960911][ T1083] EXT4-fs (loop4): Free/Dirty block details [ 41.966826][ T1085] EXT4-fs (loop1): This should not happen!! Data will be lost [ 41.966826][ T1085] [ 41.988069][ T1083] EXT4-fs (loop4): free_blocks=2415919504 [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1095] mkdir("./file1", 0777 [pid 1086] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] unlink("./31/binderfs" [pid 1095] <... mkdir resumed>) = 0 [pid 298] <... unlink resumed>) = 0 [pid 1095] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 298] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 1096 attached [pid 1083] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 298] <... umount2 resumed>) = 0 [pid 1096] set_robust_list(0x7f13c8cc39a0, 24 [pid 1090] <... futex resumed>) = ? [pid 298] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1096] <... set_robust_list resumed>) = 0 [pid 1090] +++ killed by SIGBUS +++ [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./31/file1", [pid 1096] rt_sigprocmask(SIG_SETMASK, [], [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1096] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1096] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1076] +++ killed by SIGBUS +++ [pid 1074] +++ killed by SIGBUS +++ [pid 298] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1096] <... mmap resumed>) = 0x20000000 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1074, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 1096] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1096] <... futex resumed>) = 1 [pid 1086] <... futex resumed>) = 0 [pid 1096] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1086] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] openat(AT_FDCWD, "./31/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1091] <... futex resumed>) = 0 [pid 1086] <... futex resumed>) = 1 [pid 1091] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1086] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... openat resumed>) = 4 [pid 1091] <... open resumed>) = -1 EFAULT (Bad address) [pid 1091] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] newfstatat(4, "", [pid 1091] <... futex resumed>) = 1 [pid 1086] <... futex resumed>) = 0 [pid 1091] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [ 41.993823][ T1083] EXT4-fs (loop4): dirty_blocks=32 [ 41.998763][ T1083] EXT4-fs (loop4): Block reservation details [ 42.002539][ T1076] EXT4-fs (loop3): This should not happen!! Data will be lost [ 42.002539][ T1076] [ 42.005037][ T1083] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 42.021943][ T1083] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 42.031654][ T1091] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 1086] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1091] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1086] <... futex resumed>) = 0 [pid 1086] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... restart_syscall resumed>) = 0 [pid 298] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, [pid 300] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] close(4 [pid 300] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] <... close resumed>) = 0 [pid 300] <... openat resumed>) = 3 [pid 298] rmdir("./31/file1" [pid 300] newfstatat(3, "", [pid 298] <... rmdir resumed>) = 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, [pid 300] getdents64(3, [pid 298] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 300] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 298] close(3 [pid 300] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... close resumed>) = 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] rmdir("./31" [pid 300] newfstatat(AT_FDCWD, "./30/binderfs", [pid 298] <... rmdir resumed>) = 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] mkdir("./32", 0777 [pid 300] unlink("./30/binderfs" [pid 298] <... mkdir resumed>) = 0 [pid 300] <... unlink resumed>) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 300] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... openat resumed>) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3 [pid 1083] +++ killed by SIGBUS +++ [pid 1078] +++ killed by SIGBUS +++ [pid 300] <... umount2 resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1078, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=18} --- [pid 300] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./30/file1", [pid 298] <... clone resumed>, child_tidptr=0x55558909e690) = 1099 [pid 301] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... openat resumed>) = 3 [pid 300] openat(AT_FDCWD, "./30/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] newfstatat(3, "", [pid 300] <... openat resumed>) = 4 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, [pid 300] newfstatat(4, "", [pid 301] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] getdents64(4, [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] newfstatat(AT_FDCWD, "./29/binderfs", [pid 300] getdents64(4, [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] unlink("./29/binderfs" [pid 300] close(4 [pid 301] <... unlink resumed>) = 0 [pid 300] <... close resumed>) = 0 [pid 301] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] rmdir("./30/file1") = 0 [pid 300] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./30") = 0 [pid 300] mkdir("./31", 0777executing program ) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1100 ./strace-static-x86_64: Process 1099 attached [pid 1099] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1099] chdir("./32") = 0 [pid 1099] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1099] setpgid(0, 0) = 0 [pid 1099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1099] write(3, "1000", 4) = 4 [pid 1099] close(3) = 0 [pid 1099] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1099] write(1, "executing program\n", 18) = 18 [pid 1099] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1099] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1099] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1099] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1099] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1099] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1099] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1101]}, 88) = 1101 [pid 1099] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1099] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1100 attached [pid 1100] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1100] chdir("./31") = 0 [pid 1100] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1100] setpgid(0, 0) = 0 [pid 1100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1100] write(3, "1000", 4 [pid 1099] <... futex resumed>) = 0 [pid 1100] <... write resumed>) = 4 [ 42.034635][ T1083] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.034635][ T1083] [ 42.058808][ T1091] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 42.070913][ T1091] EXT4-fs (loop2): This should not happen!! Data will be lost [ 42.070913][ T1091] [ 42.080614][ T1091] EXT4-fs (loop2): Total free blocks count 0 [ 42.087390][ T1091] EXT4-fs (loop2): Free/Dirty block details [ 42.093335][ T1091] EXT4-fs (loop2): free_blocks=2415919504 [pid 1100] close(3) = 0 [pid 1100] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1100] write(1, "executing program\n", 18executing program ) = 18 [pid 1099] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1086] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1100] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... umount2 resumed>) = 0 [pid 301] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1095] <... mount resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1095] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 301] newfstatat(AT_FDCWD, "./29/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1095] <... openat resumed>) = 3 [pid 1095] chdir("./file1" [pid 301] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1095] <... chdir resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./29/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./29/file1") = 0 [pid 301] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./29" [pid 1095] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 301] <... rmdir resumed>) = 0 [pid 301] mkdir("./30", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3./strace-static-x86_64: Process 1101 attached [pid 1100] <... futex resumed>) = 0 [pid 1095] ioctl(4, LOOP_CLR_FD [pid 1091] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 301] <... close resumed>) = 0 [pid 1095] <... ioctl resumed>) = 0 [pid 1095] close(4) = 0 [pid 1095] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1096] <... futex resumed>) = ? [pid 1095] <... futex resumed>) = 1 [pid 1089] <... futex resumed>) = 0 [pid 1096] +++ killed by SIGBUS +++ [pid 1095] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1089] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1095] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1089] <... futex resumed>) = 0 [pid 1095] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1089] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1102 [pid 1101] set_robust_list(0x7f13c8ce49a0, 24 [pid 1100] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1101] <... set_robust_list resumed>) = 0 [pid 1101] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1101] memfd_create("syzkaller", 0 [pid 1100] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1100] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1101] <... memfd_create resumed>) = 3 [pid 1100] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1101] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1100] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1101] <... mmap resumed>) = 0x7f13c08c4000 [pid 1100] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1100] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1095] <... open resumed>) = 4 [pid 1100] <... mprotect resumed>) = 0 [pid 1100] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1100] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1103]}, 88) = 1103 [pid 1100] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1100] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1100] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1102 attached [pid 1102] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1102] chdir("./30") = 0 [pid 1102] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1102] setpgid(0, 0) = 0 [pid 1102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1102] write(3, "1000", 4) = 4 [pid 1102] close(3) = 0 [pid 1102] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1102] write(1, "executing program\n", 18executing program ) = 18 [pid 1102] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1102] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1102] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], ./strace-static-x86_64: Process 1103 attached NULL, 8) = 0 [pid 1103] set_robust_list(0x7f13c8ce49a0, 24 [pid 1102] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1103] <... set_robust_list resumed>) = 0 [pid 1102] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1103] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1103] memfd_create("syzkaller", 0 [pid 1102] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1102] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1103] <... memfd_create resumed>) = 3 [pid 1103] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1102] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1095] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1091] +++ killed by SIGBUS +++ [pid 1086] +++ killed by SIGBUS +++ [pid 1102] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1101] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1103] <... mmap resumed>) = 0x7f13c08c4000 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1086, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=10} --- [pid 1102] <... clone3 resumed> => {parent_tid=[1104]}, 88) = 1104 [pid 1101] <... write resumed>) = 1048576 [pid 299] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1102] rt_sigprocmask(SIG_SETMASK, [], [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 1104 attached [pid 1102] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 299] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1104] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 299] <... openat resumed>) = 3 [pid 1102] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] newfstatat(3, "", [pid 1104] rt_sigprocmask(SIG_SETMASK, [], [pid 1102] <... futex resumed>) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1104] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 299] getdents64(3, [pid 1102] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 299] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 1104] memfd_create("syzkaller", 0 [pid 299] newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1095] <... futex resumed>) = 1 [pid 1089] <... futex resumed>) = 0 [pid 299] unlink("./31/binderfs" [pid 1095] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1089] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1089] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... unlink resumed>) = 0 [pid 1104] <... memfd_create resumed>) = 3 [pid 299] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1103] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1101] munmap(0x7f13c08c4000, 138412032 [pid 1095] <... open resumed>) = 5 [pid 1095] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1095] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1089] <... futex resumed>) = 0 [pid 1089] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1101] <... munmap resumed>) = 0 [pid 1089] <... futex resumed>) = 1 [pid 1101] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1101] ioctl(4, LOOP_SET_FD, 3 [ 42.109681][ T1091] EXT4-fs (loop2): dirty_blocks=32 [ 42.114973][ T1091] EXT4-fs (loop2): Block reservation details [ 42.120885][ T1091] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 42.129739][ T1091] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 42.142375][ T1091] EXT4-fs (loop2): This should not happen!! Data will be lost [ 42.142375][ T1091] [pid 1089] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... umount2 resumed>) = 0 [pid 1095] <... futex resumed>) = 0 [pid 299] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1095] creat("./bus", 000 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1095] <... creat resumed>) = 6 [pid 299] newfstatat(AT_FDCWD, "./31/file1", [pid 1095] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1095] <... futex resumed>) = 1 [pid 1089] <... futex resumed>) = 0 [pid 299] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1095] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1089] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1095] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1089] <... futex resumed>) = 0 [pid 299] openat(AT_FDCWD, "./31/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1095] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1089] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... openat resumed>) = 4 [pid 1095] <... futex resumed>) = 0 [pid 1095] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1089] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] newfstatat(4, "", [pid 1089] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1095] <... futex resumed>) = 0 [pid 1089] <... futex resumed>) = 1 [pid 299] getdents64(4, [pid 1095] pwrite64(6, "+", 1, 0 [pid 1089] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1095] <... pwrite64 resumed>) = 1 [pid 299] getdents64(4, [pid 1095] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1095] <... futex resumed>) = 1 [pid 1089] <... futex resumed>) = 0 [pid 299] close(4 [pid 1095] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1089] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1095] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] <... close resumed>) = 0 [pid 1095] open("./bus", O_RDONLY [pid 1089] <... futex resumed>) = 0 [pid 299] rmdir("./31/file1" [pid 1095] <... open resumed>) = 7 [pid 1089] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1103] <... write resumed>) = 1048576 [pid 1095] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... rmdir resumed>) = 0 [pid 1095] <... futex resumed>) = 1 [pid 1089] <... futex resumed>) = 0 [pid 299] getdents64(3, [pid 1095] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1089] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1095] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1089] <... futex resumed>) = 0 [pid 299] close(3 [pid 1095] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1089] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... close resumed>) = 0 [pid 1103] munmap(0x7f13c08c4000, 138412032 [pid 1095] <... copy_file_range resumed>) = 1 [pid 1095] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1089] <... futex resumed>) = 0 [pid 299] rmdir("./31" [pid 1095] <... futex resumed>) = 0 [pid 1089] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1103] <... munmap resumed>) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 1095] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1089] <... mmap resumed>) = 0x7f13c8ca3000 [pid 299] mkdir("./32", 0777 [pid 1089] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1103] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 299] <... mkdir resumed>) = 0 [pid 1089] <... mprotect resumed>) = 0 [pid 1103] ioctl(4, LOOP_SET_FD, 3 [pid 1089] rt_sigprocmask(SIG_BLOCK, ~[], [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1104] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1101] <... ioctl resumed>) = 0 [pid 1089] <... rt_sigprocmask resumed>[], 8) = 0 [pid 299] <... openat resumed>) = 3 [pid 1101] close(3 [pid 1089] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 299] ioctl(3, LOOP_CLR_FD [pid 1101] <... close resumed>) = 0 [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1101] close(4 [pid 1089] <... clone3 resumed> => {parent_tid=[1105]}, 88) = 1105 [pid 299] close(3./strace-static-x86_64: Process 1105 attached [pid 1104] <... write resumed>) = 1048576 [pid 1103] <... ioctl resumed>) = 0 [pid 1089] rt_sigprocmask(SIG_SETMASK, [], [pid 1105] set_robust_list(0x7f13c8cc39a0, 24 [pid 1104] munmap(0x7f13c08c4000, 138412032 [pid 1103] close(3 [pid 1105] <... set_robust_list resumed>) = 0 [pid 1104] <... munmap resumed>) = 0 [pid 1103] <... close resumed>) = 0 [pid 1105] rt_sigprocmask(SIG_SETMASK, [], [pid 1104] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1103] close(4 [pid 1105] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1104] <... openat resumed>) = 4 [pid 1103] <... close resumed>) = 0 [pid 1105] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1104] ioctl(4, LOOP_SET_FD, 3 [pid 1103] mkdir("./file1", 0777 [pid 1101] <... close resumed>) = 0 [pid 1089] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 299] <... close resumed>) = 0 [pid 1089] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1105] <... futex resumed>) = 0 [pid 1089] <... futex resumed>) = 1 [pid 1105] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1089] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... clone resumed>, child_tidptr=0x55558909e690) = 1106 [pid 1105] <... mmap resumed>) = 0x20000000 [pid 1105] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1089] <... futex resumed>) = 0 [pid 1089] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1095] <... futex resumed>) = 0 [pid 1089] <... futex resumed>) = 1 [pid 1095] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1089] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1095] <... open resumed>) = -1 EFAULT (Bad address) [pid 1105] <... futex resumed>) = 1 [pid 1095] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1105] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1095] <... futex resumed>) = 1 [pid 1089] <... futex resumed>) = 0 [pid 1095] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1089] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1095] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1089] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1106 attached [pid 1104] <... ioctl resumed>) = 0 [pid 1103] <... mkdir resumed>) = 0 [pid 1101] mkdir("./file1", 0777 [pid 1106] set_robust_list(0x55558909e6a0, 24 [pid 1104] close(3 [pid 1103] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 1101] <... mkdir resumed>) = 0 [pid 1106] <... set_robust_list resumed>) = 0 [pid 1104] <... close resumed>) = 0 [pid 1101] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 1106] chdir("./32" [ 42.163653][ T1101] loop1: detected capacity change from 0 to 2048 [ 42.179821][ T1103] loop3: detected capacity change from 0 to 2048 [ 42.195883][ T1104] loop4: detected capacity change from 0 to 2048 [pid 1104] close(4 [pid 1106] <... chdir resumed>) = 0 [pid 1104] <... close resumed>) = 0 [pid 1106] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1104] mkdir("./file1", 0777 [pid 1089] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1106] <... prctl resumed>) = 0 [pid 1104] <... mkdir resumed>) = 0 [pid 1106] setpgid(0, 0 [pid 1104] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 1106] <... setpgid resumed>) = 0 [pid 1106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1106] write(3, "1000", 4) = 4 [pid 1106] close(3) = 0 [pid 1104] <... mount resumed>) = 0 [pid 1104] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1104] chdir("./file1") = 0 [pid 1104] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1104] ioctl(4, LOOP_CLR_FD) = 0 [pid 1104] close(4) = 0 [pid 1104] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1104] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1106] symlink("/dev/binderfs", "./binderfs" [pid 1102] <... futex resumed>) = 0 [pid 1106] <... symlink resumed>) = 0 [pid 1102] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1101] <... mount resumed>) = 0 [pid 1101] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1102] <... futex resumed>) = 1 [pid 1106] write(1, "executing program\n", 18 [pid 1104] <... futex resumed>) = 0 [pid 1101] <... openat resumed>) = 3 [pid 1101] chdir("./file1") = 0 [pid 1101] openat(AT_FDCWD, "/dev/loop1", O_RDWRexecuting program ) = 4 [pid 1102] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1106] <... write resumed>) = 18 [pid 1104] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1101] ioctl(4, LOOP_CLR_FD) = 0 [pid 1101] close(4 [pid 1106] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1104] <... open resumed>) = 4 [pid 1101] <... close resumed>) = 0 [pid 1104] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1101] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1104] <... futex resumed>) = 1 [pid 1102] <... futex resumed>) = 0 [pid 1101] <... futex resumed>) = 1 [pid 1099] <... futex resumed>) = 0 [pid 1104] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1102] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1101] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1099] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1104] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1102] <... futex resumed>) = 0 [pid 1101] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1099] <... futex resumed>) = 0 [pid 1104] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1102] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1101] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1099] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1104] <... open resumed>) = 5 [pid 1103] <... mount resumed>) = 0 [pid 1101] <... open resumed>) = 4 [pid 1104] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1101] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1104] <... futex resumed>) = 1 [pid 1102] <... futex resumed>) = 0 [pid 1101] <... futex resumed>) = 1 [pid 1099] <... futex resumed>) = 0 [pid 1104] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1102] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1101] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1099] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1106] <... futex resumed>) = 0 [pid 1104] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1103] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1102] <... futex resumed>) = 0 [pid 1101] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1099] <... futex resumed>) = 0 [pid 1104] creat("./bus", 000 [pid 1102] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1101] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1099] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1104] <... creat resumed>) = 6 [pid 1101] <... open resumed>) = 5 [pid 1104] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1101] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1104] <... futex resumed>) = 1 [pid 1102] <... futex resumed>) = 0 [pid 1101] <... futex resumed>) = 1 [pid 1099] <... futex resumed>) = 0 [pid 1104] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1102] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1101] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1099] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1104] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1102] <... futex resumed>) = 0 [pid 1101] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1099] <... futex resumed>) = 0 [pid 1104] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1102] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1101] creat("./bus", 000 [pid 1099] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1104] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1101] <... creat resumed>) = 6 [pid 1104] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1101] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1104] <... futex resumed>) = 1 [pid 1102] <... futex resumed>) = 0 [pid 1101] <... futex resumed>) = 1 [pid 1099] <... futex resumed>) = 0 [pid 1104] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1102] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1101] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1099] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1104] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1102] <... futex resumed>) = 0 [pid 1101] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1099] <... futex resumed>) = 0 [pid 1104] pwrite64(6, "+", 1, 0 [pid 1102] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1101] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1099] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1104] <... pwrite64 resumed>) = 1 [pid 1101] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1104] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1101] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1104] <... futex resumed>) = 1 [pid 1102] <... futex resumed>) = 0 [pid 1101] <... futex resumed>) = 1 [pid 1099] <... futex resumed>) = 0 [pid 1104] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1102] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1101] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1099] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1104] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1102] <... futex resumed>) = 0 [pid 1101] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1099] <... futex resumed>) = 0 [pid 1104] open("./bus", O_RDONLY [pid 1102] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1101] pwrite64(6, "+", 1, 0 [pid 1099] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1106] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1104] <... open resumed>) = 7 [pid 1103] <... openat resumed>) = 3 [pid 1101] <... pwrite64 resumed>) = 1 [pid 1104] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1101] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1104] <... futex resumed>) = 1 [pid 1102] <... futex resumed>) = 0 [pid 1101] <... futex resumed>) = 1 [pid 1099] <... futex resumed>) = 0 [pid 1104] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1102] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1101] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1099] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1104] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1102] <... futex resumed>) = 0 [pid 1101] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1099] <... futex resumed>) = 0 [pid 1104] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1102] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1101] open("./bus", O_RDONLY [pid 1099] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1104] <... copy_file_range resumed>) = 1 [pid 1102] <... futex resumed>) = 0 [pid 1101] <... open resumed>) = 7 [pid 1104] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1102] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1101] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1104] <... futex resumed>) = 0 [pid 1102] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1101] <... futex resumed>) = 1 [pid 1099] <... futex resumed>) = 0 [pid 1104] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1102] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1101] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1099] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1102] <... mprotect resumed>) = 0 [pid 1101] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1099] <... futex resumed>) = 0 [pid 1102] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1101] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1099] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1102] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1101] <... copy_file_range resumed>) = 1 [pid 1099] <... futex resumed>) = 0 [pid 1102] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1101] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1099] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1101] <... futex resumed>) = 0 [pid 1099] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1102] <... clone3 resumed> => {parent_tid=[1113]}, 88) = 1113 [pid 1101] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1099] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1102] rt_sigprocmask(SIG_SETMASK, [], [pid 1099] <... mprotect resumed>) = 0 [pid 1102] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1099] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1102] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1099] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1102] <... futex resumed>) = 0 [pid 1099] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1102] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1099] <... clone3 resumed> => {parent_tid=[1114]}, 88) = 1114 [pid 1099] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1099] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1099] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1106] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1106] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1103] chdir("./file1" [pid 1106] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1103] <... chdir resumed>) = 0 [pid 1103] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1103] ioctl(4, LOOP_CLR_FD) = 0 [ 42.199525][ T1095] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 42.222621][ T1095] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 42.239225][ T1095] EXT4-fs (loop0): This should not happen!! Data will be lost [ 42.239225][ T1095] [ 42.250421][ T1095] EXT4-fs (loop0): Total free blocks count 0 [ 42.257358][ T1095] EXT4-fs (loop0): Free/Dirty block details [pid 1103] close(4./strace-static-x86_64: Process 1114 attached ./strace-static-x86_64: Process 1113 attached [pid 1106] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1103] <... close resumed>) = 0 [pid 1103] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1100] <... futex resumed>) = 0 [pid 1103] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1100] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1103] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1100] <... futex resumed>) = 0 [pid 1103] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1100] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1103] <... open resumed>) = 4 [pid 1103] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1100] <... futex resumed>) = 0 [pid 1103] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1100] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1103] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1100] <... futex resumed>) = 0 [pid 1103] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1100] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1103] <... open resumed>) = 5 [pid 1103] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1100] <... futex resumed>) = 0 [pid 1103] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1100] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1103] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1100] <... futex resumed>) = 0 [pid 1103] creat("./bus", 000 [pid 1100] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1103] <... creat resumed>) = 6 [pid 1103] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1100] <... futex resumed>) = 0 [pid 1103] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1100] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1103] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1100] <... futex resumed>) = 0 [pid 1103] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1100] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1103] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1103] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1100] <... futex resumed>) = 0 [pid 1103] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1100] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1103] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1100] <... futex resumed>) = 0 [pid 1103] pwrite64(6, "+", 1, 0 [pid 1100] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1103] <... pwrite64 resumed>) = 1 [pid 1103] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1100] <... futex resumed>) = 0 [pid 1103] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1100] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1103] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1100] <... futex resumed>) = 0 [pid 1103] open("./bus", O_RDONLY [pid 1100] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1103] <... open resumed>) = 7 [pid 1103] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1100] <... futex resumed>) = 0 [pid 1103] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1100] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1103] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1100] <... futex resumed>) = 0 [pid 1103] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1100] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1103] <... copy_file_range resumed>) = 1 [pid 1100] <... futex resumed>) = 0 [pid 1103] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1100] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1103] <... futex resumed>) = 0 [pid 1100] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1103] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1100] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1100] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1100] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1115]}, 88) = 1115 [pid 1100] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1100] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1100] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1115 attached [pid 1115] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1115] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1115] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1114] set_robust_list(0x7f13c8cc39a0, 24 [pid 1113] set_robust_list(0x7f13c8cc39a0, 24 [pid 1106] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1089] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1106] <... mprotect resumed>) = 0 [pid 1114] <... set_robust_list resumed>) = 0 [pid 1113] <... set_robust_list resumed>) = 0 [pid 1106] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1114] rt_sigprocmask(SIG_SETMASK, [], [pid 1113] rt_sigprocmask(SIG_SETMASK, [], [pid 1106] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1114] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1113] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1106] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1114] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1113] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1115] <... mmap resumed>) = 0x20000000 [pid 1115] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1100] <... futex resumed>) = 0 [pid 1100] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1103] <... futex resumed>) = 0 [pid 1100] <... futex resumed>) = 1 [pid 1103] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1100] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1114] <... mmap resumed>) = 0x20000000 [pid 1103] <... open resumed>) = -1 EFAULT (Bad address) [pid 1103] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1100] <... futex resumed>) = 0 [pid 1103] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1100] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1103] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1100] <... futex resumed>) = 0 [pid 1114] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1113] <... mmap resumed>) = 0x20000000 [pid 1106] <... clone3 resumed> => {parent_tid=[1116]}, 88) = 1116 [pid 1100] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1115] <... futex resumed>) = 1 [pid 1115] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1116 attached [pid 1116] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1116] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1116] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1114] <... futex resumed>) = 1 [pid 1113] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1106] rt_sigprocmask(SIG_SETMASK, [], [pid 1114] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1113] <... futex resumed>) = 1 [pid 1106] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1102] <... futex resumed>) = 0 [pid 1099] <... futex resumed>) = 0 [pid 1113] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1106] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1102] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1099] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1116] <... futex resumed>) = 0 [pid 1106] <... futex resumed>) = 1 [pid 1104] <... futex resumed>) = 0 [pid 1102] <... futex resumed>) = 1 [pid 1101] <... futex resumed>) = 0 [pid 1099] <... futex resumed>) = 1 [pid 1116] memfd_create("syzkaller", 0 [pid 1106] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1104] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1102] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1101] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1099] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1116] <... memfd_create resumed>) = 3 [pid 1104] <... open resumed>) = -1 EFAULT (Bad address) [pid 1101] <... open resumed>) = -1 EFAULT (Bad address) [pid 1116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1104] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [ 42.264506][ T1095] EXT4-fs (loop0): free_blocks=2415919504 [ 42.276094][ T1103] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 42.279423][ T1095] EXT4-fs (loop0): dirty_blocks=32 [ 42.292082][ T1103] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 42.295767][ T1095] EXT4-fs (loop0): Block reservation details [pid 1101] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1116] <... mmap resumed>) = 0x7f13c08c4000 [pid 1104] <... futex resumed>) = 1 [pid 1102] <... futex resumed>) = 0 [pid 1101] <... futex resumed>) = 1 [pid 1099] <... futex resumed>) = 0 [pid 1102] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1099] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1095] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1102] <... futex resumed>) = 0 [pid 1099] <... futex resumed>) = 0 [pid 1102] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1099] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1116] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1100] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1105] <... futex resumed>) = ? [pid 1105] +++ killed by SIGBUS +++ [pid 1116] <... write resumed>) = 1048576 [pid 1116] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1116] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 42.311656][ T1101] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 42.313639][ T1095] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 42.328321][ T1104] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 42.333766][ T1103] EXT4-fs (loop3): This should not happen!! Data will be lost [ 42.333766][ T1103] [ 42.357768][ T1103] EXT4-fs (loop3): Total free blocks count 0 [pid 1116] ioctl(4, LOOP_SET_FD, 3 [pid 1099] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1102] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 42.358941][ T1095] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 42.359349][ T1116] loop2: detected capacity change from 0 to 2048 [ 42.377237][ T1104] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 42.383190][ T1101] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 42.407048][ T1103] EXT4-fs (loop3): Free/Dirty block details [pid 1116] <... ioctl resumed>) = 0 [pid 1116] close(3) = 0 [pid 1116] close(4) = 0 [pid 1095] +++ killed by SIGBUS +++ [pid 1089] +++ killed by SIGBUS +++ [pid 1116] mkdir("./file1", 0777) = 0 [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1089, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=17} --- [ 42.407486][ T1095] EXT4-fs (loop0): This should not happen!! Data will be lost [ 42.407486][ T1095] [ 42.413154][ T1103] EXT4-fs (loop3): free_blocks=2415919504 [ 42.428203][ T1101] EXT4-fs (loop1): This should not happen!! Data will be lost [ 42.428203][ T1101] [ 42.439116][ T1103] EXT4-fs (loop3): dirty_blocks=32 [ 42.444596][ T1103] EXT4-fs (loop3): Block reservation details [ 42.445280][ T1101] EXT4-fs (loop1): Total free blocks count 0 [ 42.451081][ T1103] EXT4-fs (loop3): i_reserved_data_blocks=2 [pid 1116] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 1103] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1115] <... futex resumed>) = ? [pid 1115] +++ killed by SIGBUS +++ [pid 297] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1103] +++ killed by SIGBUS +++ [pid 1100] +++ killed by SIGBUS +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1100, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [ 42.456508][ T1104] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.456508][ T1104] [ 42.464722][ T1103] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 42.472358][ T1101] EXT4-fs (loop1): Free/Dirty block details [ 42.484385][ T1103] EXT4-fs (loop3): This should not happen!! Data will be lost [ 42.484385][ T1103] [ 42.489856][ T1104] EXT4-fs (loop4): Total free blocks count 0 [ 42.500211][ T1101] EXT4-fs (loop1): free_blocks=2415919504 [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] <... restart_syscall resumed>) = 0 [pid 300] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./31/binderfs") = 0 [pid 300] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 1116] <... mount resumed>) = 0 [pid 1116] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1116] chdir("./file1") = 0 [pid 1116] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1116] ioctl(4, LOOP_CLR_FD) = 0 [pid 1116] close(4) = 0 [pid 1116] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1106] <... futex resumed>) = 0 [pid 1106] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1106] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1116] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 1116] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1106] <... futex resumed>) = 0 [pid 1106] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1106] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1116] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 1116] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1106] <... futex resumed>) = 0 [pid 1116] creat("./bus", 000 [pid 1106] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1116] <... creat resumed>) = 6 [pid 1106] <... futex resumed>) = 0 [pid 1116] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1106] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1116] <... futex resumed>) = 0 [pid 1106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1116] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1106] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1116] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1106] <... futex resumed>) = 0 [pid 1116] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1106] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1116] <... futex resumed>) = 0 [pid 1106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1116] pwrite64(6, "+", 1, 0 [pid 1106] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1116] <... pwrite64 resumed>) = 1 [pid 1106] <... futex resumed>) = 0 [pid 1116] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1106] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1116] <... futex resumed>) = 0 [pid 1106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1116] open("./bus", O_RDONLY [pid 1106] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1116] <... open resumed>) = 7 [pid 1106] <... futex resumed>) = 0 [pid 1116] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1106] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1116] <... futex resumed>) = 0 [pid 1106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1116] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1106] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1116] <... copy_file_range resumed>) = 1 [pid 1106] <... futex resumed>) = 0 [pid 1116] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1106] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1116] <... futex resumed>) = 0 [pid 1106] <... futex resumed>) = 0 [pid 1116] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1106] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1106] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1106] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 297] newfstatat(3, "", [pid 1106] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1119]}, 88) = 1119 [pid 1106] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1106] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1106] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, [pid 1104] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 300] <... umount2 resumed>) = 0 [pid 297] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./31/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./31/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./31/file1") = 0 [pid 300] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./31") = 0 [pid 300] mkdir("./32", 0777./strace-static-x86_64: Process 1119 attached [pid 1113] <... futex resumed>) = ? [pid 1101] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 297] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1113] +++ killed by SIGBUS +++ [pid 1104] +++ killed by SIGBUS +++ [pid 300] <... mkdir resumed>) = 0 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1119] set_robust_list(0x7f13c8cc39a0, 24 [pid 297] newfstatat(AT_FDCWD, "./29/binderfs", [pid 1119] <... set_robust_list resumed>) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1119] rt_sigprocmask(SIG_SETMASK, [], [pid 297] unlink("./29/binderfs" [pid 1119] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 297] <... unlink resumed>) = 0 [pid 1119] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 297] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1119] <... mmap resumed>) = 0x20000000 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 42.504998][ T1104] EXT4-fs (loop4): Free/Dirty block details [ 42.512757][ T1101] EXT4-fs (loop1): dirty_blocks=32 [ 42.516908][ T1104] EXT4-fs (loop4): free_blocks=2415919504 [ 42.526522][ T1101] EXT4-fs (loop1): Block reservation details [ 42.527100][ T1104] EXT4-fs (loop4): dirty_blocks=32 [ 42.540389][ T1104] EXT4-fs (loop4): Block reservation details [ 42.546888][ T1104] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 42.553471][ T1101] EXT4-fs (loop1): i_reserved_data_blocks=2 [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1119] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1119] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] <... clone resumed>, child_tidptr=0x55558909e690) = 1120 [pid 1106] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1120 attached [pid 1114] <... futex resumed>) = ? [pid 1106] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... umount2 resumed>) = 0 [pid 1116] <... futex resumed>) = 0 [pid 1114] +++ killed by SIGBUS +++ [pid 1106] <... futex resumed>) = 1 [pid 1120] set_robust_list(0x55558909e6a0, 24 [pid 1116] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1106] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1116] <... open resumed>) = -1 EFAULT (Bad address) [pid 1116] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1116] <... futex resumed>) = 1 [pid 1106] <... futex resumed>) = 0 [pid 1116] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1106] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] newfstatat(AT_FDCWD, "./29/file1", [pid 1116] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 42.560567][ T1102] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 42.574910][ T1102] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.574910][ T1102] [ 42.585594][ T1101] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 42.588438][ T1116] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 1106] <... futex resumed>) = 0 [pid 1120] <... set_robust_list resumed>) = 0 [pid 1106] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1102] +++ killed by SIGBUS +++ [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1102, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 297] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./29/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] <... openat resumed>) = 4 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(4, "", [pid 301] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] <... openat resumed>) = 3 [pid 297] getdents64(4, [pid 301] newfstatat(3, "", [pid 297] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, [pid 301] getdents64(3, [pid 297] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] close(4 [pid 301] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] <... close resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] rmdir("./29/file1" [pid 301] newfstatat(AT_FDCWD, "./30/binderfs", [pid 297] <... rmdir resumed>) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] getdents64(3, [pid 301] unlink("./30/binderfs" [pid 297] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] <... unlink resumed>) = 0 [pid 297] close(3 [pid 301] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] <... close resumed>) = 0 [pid 297] rmdir("./29") = 0 [pid 297] mkdir("./30", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3executing program [pid 1120] chdir("./32" [pid 1101] +++ killed by SIGBUS +++ [pid 1099] +++ killed by SIGBUS +++ [pid 297] <... close resumed>) = 0 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1099, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1121 [pid 298] umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./32/binderfs") = 0 [pid 298] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 1121 attached [pid 1121] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1121] chdir("./30") = 0 [pid 1121] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1121] setpgid(0, 0) = 0 [pid 1121] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1121] write(3, "1000", 4) = 4 [pid 1121] close(3) = 0 [pid 1121] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1121] write(1, "executing program\n", 18) = 18 [pid 1121] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1121] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1121] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1121] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1121] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1121] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1121] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1122]}, 88) = 1122 [pid 1121] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1121] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1121] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1122 attached [pid 1122] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1122] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1122] memfd_create("syzkaller", 0) = 3 [pid 1122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1120] <... chdir resumed>) = 0 [pid 1120] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1122] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1122] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1122] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1122] ioctl(4, LOOP_SET_FD, 3 [pid 1120] <... prctl resumed>) = 0 [pid 1122] <... ioctl resumed>) = 0 [pid 1122] close(3) = 0 [ 42.598296][ T1101] EXT4-fs (loop1): This should not happen!! Data will be lost [ 42.598296][ T1101] [ 42.622733][ T1116] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 42.635186][ T1116] EXT4-fs (loop2): This should not happen!! Data will be lost [ 42.635186][ T1116] [ 42.642902][ T1122] loop0: detected capacity change from 0 to 2048 [ 42.645564][ T1116] EXT4-fs (loop2): Total free blocks count 0 [ 42.657287][ T1116] EXT4-fs (loop2): Free/Dirty block details [pid 1122] close(4 [pid 1120] setpgid(0, 0 [pid 1106] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 301] <... umount2 resumed>) = 0 [pid 1120] <... setpgid resumed>) = 0 [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] newfstatat(AT_FDCWD, "./32/file1", [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] newfstatat(AT_FDCWD, "./30/file1", [pid 298] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] openat(AT_FDCWD, "./32/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./30/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 1120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 298] <... openat resumed>) = 4 [pid 301] newfstatat(4, "", [pid 298] newfstatat(4, "", [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, [pid 298] getdents64(4, [pid 301] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 298] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 298] close(4 [pid 301] getdents64(4, [pid 298] <... close resumed>) = 0 [pid 301] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 298] rmdir("./32/file1") = 0 [pid 301] rmdir("./30/file1" [pid 1120] <... openat resumed>) = 3 [pid 301] <... rmdir resumed>) = 0 [pid 298] getdents64(3, [pid 301] getdents64(3, [pid 298] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] close(3 [pid 298] close(3 [pid 301] <... close resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 301] rmdir("./30" [pid 298] rmdir("./32" [pid 301] <... rmdir resumed>) = 0 [pid 1120] write(3, "1000", 4) = 4 [pid 298] <... rmdir resumed>) = 0 [pid 298] mkdir("./33", 0777 [pid 301] mkdir("./31", 0777 [pid 298] <... mkdir resumed>) = 0 [pid 301] <... mkdir resumed>) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3 [pid 298] ioctl(3, LOOP_CLR_FD [pid 301] <... close resumed>) = 0 [pid 1120] close(3 [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1124 [pid 301] <... clone resumed>, child_tidptr=0x55558909e690) = 1123 [pid 1122] <... close resumed>) = 0 [pid 1120] <... close resumed>) = 0 [pid 1116] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1122] mkdir("./file1", 0777 [pid 1120] symlink("/dev/binderfs", "./binderfs" [pid 1119] <... futex resumed>) = ? [pid 1120] <... symlink resumed>) = 0 [pid 1119] +++ killed by SIGBUS +++ [pid 1122] <... mkdir resumed>) = 0 [pid 1120] write(1, "executing program\n", 18./strace-static-x86_64: Process 1124 attached [pid 1124] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1124] chdir("./33") = 0 [pid 1124] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1124] setpgid(0, 0) = 0 [pid 1124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1124] write(3, "1000", 4) = 4 [pid 1124] close(3) = 0 [pid 1124] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 1124] write(1, "executing program\n", 18) = 18 [pid 1124] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1124] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1124] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1124] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1124] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1124] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1124] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0}executing program => {parent_tid=[1125]}, 88) = 1125 [pid 1120] <... write resumed>) = 18 [pid 1124] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1124] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1120] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1124] <... futex resumed>) = 0 [pid 1124] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1125 attached [pid 1125] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1125] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1125] memfd_create("syzkaller", 0) = 3 [pid 1125] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1120] <... futex resumed>) = 0 [pid 1122] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 1120] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1120] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1120] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1120] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1120] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1120] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1126]}, 88) = 1126 [pid 1120] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1120] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1120] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1125] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 1126 attached [pid 1126] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1126] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1126] memfd_create("syzkaller", 0) = 3 [pid 1126] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1126] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 1123 attached [ 42.663193][ T1116] EXT4-fs (loop2): free_blocks=2415919504 [ 42.669079][ T1116] EXT4-fs (loop2): dirty_blocks=32 [ 42.674484][ T1116] EXT4-fs (loop2): Block reservation details [ 42.683702][ T1116] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 42.701144][ T1116] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 1123] set_robust_list(0x55558909e6a0, 24 [pid 1125] <... write resumed>) = 1048576 [pid 1126] <... write resumed>) = 1048576 [pid 1125] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1125] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1125] ioctl(4, LOOP_SET_FD, 3 [pid 1126] munmap(0x7f13c08c4000, 138412032 [pid 1123] <... set_robust_list resumed>) = 0 [pid 1116] +++ killed by SIGBUS +++ [pid 1106] +++ killed by SIGBUS +++ [pid 1123] chdir("./31" [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1106, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 1123] <... chdir resumed>) = 0 [pid 1123] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 299] umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1123] setpgid(0, 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1123] <... setpgid resumed>) = 0 [pid 299] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 299] <... openat resumed>) = 3 [pid 1123] <... openat resumed>) = 3 [pid 299] newfstatat(3, "", [pid 1123] write(3, "1000", 4 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1123] <... write resumed>) = 4 [pid 299] getdents64(3, [pid 1123] close(3 [pid 299] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1123] <... close resumed>) = 0 [pid 299] umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1123] symlink("/dev/binderfs", "./binderfs" [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1123] <... symlink resumed>) = 0 [pid 299] newfstatat(AT_FDCWD, "./32/binderfs", executing program [pid 1123] write(1, "executing program\n", 18 [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1123] <... write resumed>) = 18 [pid 299] unlink("./32/binderfs" [pid 1123] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... unlink resumed>) = 0 [pid 1122] <... mount resumed>) = 0 [pid 1125] <... ioctl resumed>) = 0 [pid 1123] <... futex resumed>) = 0 [pid 1122] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 299] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1125] close(3 [pid 1123] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1122] <... openat resumed>) = 3 [pid 1123] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1122] chdir("./file1" [pid 1123] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1123] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1122] <... chdir resumed>) = 0 [pid 1123] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1122] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1123] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1122] <... openat resumed>) = 4 [pid 1125] <... close resumed>) = 0 [pid 1123] <... mprotect resumed>) = 0 [pid 1122] ioctl(4, LOOP_CLR_FD [pid 1125] close(4 [pid 1123] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1122] <... ioctl resumed>) = 0 [pid 1123] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1123] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1129]}, 88) = 1129 [pid 1123] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1123] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1123] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1126] <... munmap resumed>) = 0 [pid 1126] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1126] ioctl(4, LOOP_SET_FD, 3 [pid 1122] close(4) = 0 [pid 1122] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1121] <... futex resumed>) = 0 [pid 1122] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1121] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1121] <... futex resumed>) = 0 [pid 1122] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1121] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1126] <... ioctl resumed>) = 0 [pid 1122] <... open resumed>) = 4 [pid 1122] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1121] <... futex resumed>) = 0 [pid 1122] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1121] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1121] <... futex resumed>) = 0 [pid 1122] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1121] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1122] <... open resumed>) = 5 [pid 1122] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1121] <... futex resumed>) = 0 [pid 1122] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1121] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1121] <... futex resumed>) = 0 [pid 1122] creat("./bus", 000 [pid 1121] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1122] <... creat resumed>) = 6 [pid 1122] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1121] <... futex resumed>) = 0 [pid 1122] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1121] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1121] <... futex resumed>) = 0 [pid 1122] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1121] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1122] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1122] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1121] <... futex resumed>) = 0 [pid 1122] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1121] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1121] <... futex resumed>) = 0 [pid 1122] pwrite64(6, "+", 1, 0 [pid 1121] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1122] <... pwrite64 resumed>) = 1 [pid 1122] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1121] <... futex resumed>) = 0 [pid 1122] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1121] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1121] <... futex resumed>) = 0 [pid 1122] open("./bus", O_RDONLY [pid 1121] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1122] <... open resumed>) = 7 [pid 1122] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1121] <... futex resumed>) = 0 [pid 1122] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1121] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1121] <... futex resumed>) = 0 [pid 1122] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1121] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1126] close(3 [pid 1122] <... copy_file_range resumed>) = 1 [pid 1121] <... futex resumed>) = 0 [pid 1122] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1121] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1122] <... futex resumed>) = 0 [pid 1122] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1121] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1121] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 299] <... umount2 resumed>) = 0 [pid 1121] <... mprotect resumed>) = 0 [pid 299] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1121] rt_sigprocmask(SIG_BLOCK, ~[], [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1121] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1121] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 299] newfstatat(AT_FDCWD, "./32/file1", [pid 1126] <... close resumed>) = 0 [pid 1121] <... clone3 resumed> => {parent_tid=[1130]}, 88) = 1130 ./strace-static-x86_64: Process 1129 attached [pid 1129] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1129] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1129] memfd_create("syzkaller", 0) = 3 [pid 1129] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1129] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1121] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1121] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1121] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1129] <... write resumed>) = 1048576 [pid 1129] munmap(0x7f13c08c4000, 138412032 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1129] <... munmap resumed>) = 0 [pid 1129] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 299] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1129] ioctl(4, LOOP_SET_FD, 3 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 42.714204][ T1116] EXT4-fs (loop2): This should not happen!! Data will be lost [ 42.714204][ T1116] [ 42.719039][ T1125] loop1: detected capacity change from 0 to 2048 [ 42.737986][ T1126] loop3: detected capacity change from 0 to 2048 [pid 1126] close(4 [pid 1125] <... close resumed>) = 0 [pid 299] openat(AT_FDCWD, "./32/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1129] <... ioctl resumed>) = 0 [pid 1129] close(3) = 0 [pid 1129] close(4) = 0 [pid 1126] <... close resumed>) = 0 [pid 1125] mkdir("./file1", 0777 [pid 299] <... openat resumed>) = 4 [pid 1129] mkdir("./file1", 0777) = 0 [pid 1126] mkdir("./file1", 0777 [pid 1125] <... mkdir resumed>) = 0 [pid 299] newfstatat(4, "", [pid 1129] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1126] <... mkdir resumed>) = 0 [pid 1125] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 299] getdents64(4, ./strace-static-x86_64: Process 1130 attached 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1130] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1130] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1130] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1126] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 299] getdents64(4, [pid 1130] <... mmap resumed>) = 0x20000000 [pid 299] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1130] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1121] <... futex resumed>) = 0 [pid 299] close(4 [pid 1121] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1130] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1122] <... futex resumed>) = 0 [pid 1121] <... futex resumed>) = 1 [pid 1122] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1121] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... close resumed>) = 0 [pid 1122] <... open resumed>) = -1 EFAULT (Bad address) [pid 299] rmdir("./32/file1" [pid 1122] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1121] <... futex resumed>) = 0 [pid 1122] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1121] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1121] <... futex resumed>) = 0 [pid 1121] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... rmdir resumed>) = 0 [pid 299] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./32") = 0 [pid 299] mkdir("./33", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1131 ./strace-static-x86_64: Process 1131 attached [pid 1131] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1126] <... mount resumed>) = 0 [pid 1131] chdir("./33") = 0 [pid 1131] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1131] setpgid(0, 0) = 0 [pid 1126] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1126] chdir("./file1") = 0 [pid 1126] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1126] ioctl(4, LOOP_CLR_FD) = 0 [pid 1126] close(4) = 0 [pid 1126] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1120] <... futex resumed>) = 0 [pid 1126] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1120] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1131] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1126] <... open resumed>) = 4 [pid 1120] <... futex resumed>) = 0 [pid 1131] <... openat resumed>) = 3 [pid 1126] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1120] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1131] write(3, "1000", 4 [pid 1126] <... futex resumed>) = 0 [pid 1120] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1131] <... write resumed>) = 4 [pid 1126] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1120] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1131] close(3 [pid 1126] <... open resumed>) = 5 [pid 1120] <... futex resumed>) = 0 [pid 1131] <... close resumed>) = 0 [pid 1126] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1120] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1131] symlink("/dev/binderfs", "./binderfs" [pid 1126] <... futex resumed>) = 0 [pid 1120] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1120] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1120] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}executing program [pid 1131] <... symlink resumed>) = 0 [pid 1126] creat("./bus", 000 [pid 1131] write(1, "executing program\n", 18 [pid 1126] <... creat resumed>) = 6 [pid 1131] <... write resumed>) = 18 [pid 1126] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1131] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1126] <... futex resumed>) = 1 [pid 1120] <... futex resumed>) = 0 [pid 1120] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1120] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1131] <... futex resumed>) = 0 [pid 1126] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1131] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1126] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1131] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1126] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1131] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1126] <... futex resumed>) = 1 [pid 1120] <... futex resumed>) = 0 [pid 1120] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 42.762168][ T1129] loop4: detected capacity change from 0 to 2048 [ 42.775434][ T1122] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 42.795590][ T1122] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 1120] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1131] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1126] pwrite64(6, "+", 1, 0 [pid 1131] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1126] <... pwrite64 resumed>) = 1 [pid 1131] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1126] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1131] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1126] <... futex resumed>) = 1 [pid 1120] <... futex resumed>) = 0 [pid 1120] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1120] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1126] open("./bus", O_RDONLY [pid 1131] <... mprotect resumed>) = 0 [pid 1126] <... open resumed>) = 7 [pid 1131] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1126] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1131] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1126] <... futex resumed>) = 1 [pid 1120] <... futex resumed>) = 0 [pid 1131] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1126] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1120] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1126] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1120] <... futex resumed>) = 0 [pid 1131] <... clone3 resumed> => {parent_tid=[1136]}, 88) = 1136 [pid 1126] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1120] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1131] rt_sigprocmask(SIG_SETMASK, [], [pid 1126] <... copy_file_range resumed>) = 1 [pid 1120] <... futex resumed>) = 0 [pid 1131] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1126] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1120] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1131] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1126] <... futex resumed>) = 0 [pid 1120] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1131] <... futex resumed>) = 0 [pid 1126] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1120] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1131] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1120] <... mprotect resumed>) = 0 [pid 1120] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1120] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1137]}, 88) = 1137 [pid 1120] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1120] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1120] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1137 attached [pid 1137] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1137] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1137] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1136] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1136] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1136] memfd_create("syzkaller", 0 [pid 1137] <... mmap resumed>) = 0x20000000 [pid 1136] <... memfd_create resumed>) = 3 [pid 1136] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1129] <... mount resumed>) = 0 [pid 1129] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1129] chdir("./file1") = 0 [pid 1129] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1129] ioctl(4, LOOP_CLR_FD) = 0 [pid 1129] close(4) = 0 [pid 1129] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1129] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1137] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1120] <... futex resumed>) = 0 [pid 1120] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1126] <... futex resumed>) = 0 [pid 1120] <... futex resumed>) = 1 [pid 1126] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1120] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1126] <... open resumed>) = -1 EFAULT (Bad address) [pid 1126] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1120] <... futex resumed>) = 0 [pid 1126] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1120] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1126] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1120] <... futex resumed>) = 0 [pid 1123] <... futex resumed>) = 0 [pid 1121] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1120] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1137] <... futex resumed>) = 1 [pid 1137] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1125] <... mount resumed>) = 0 [pid 1125] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1125] chdir("./file1") = 0 [pid 1125] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1125] ioctl(4, LOOP_CLR_FD) = 0 [pid 1125] close(4) = 0 [pid 1125] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1124] <... futex resumed>) = 0 [pid 1125] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1124] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1124] <... futex resumed>) = 0 [pid 1125] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1124] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1125] <... open resumed>) = 4 [pid 1123] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1125] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1124] <... futex resumed>) = 0 [pid 1125] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1124] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1124] <... futex resumed>) = 0 [pid 1125] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1124] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1125] <... open resumed>) = 5 [pid 1125] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1124] <... futex resumed>) = 0 [pid 1129] <... futex resumed>) = 0 [pid 1125] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1124] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1123] <... futex resumed>) = 1 [pid 1125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1124] <... futex resumed>) = 0 [pid 1125] creat("./bus", 000 [pid 1124] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1125] <... creat resumed>) = 6 [pid 1125] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1124] <... futex resumed>) = 0 [pid 1125] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1124] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1124] <... futex resumed>) = 0 [pid 1125] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1124] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1125] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1125] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1124] <... futex resumed>) = 0 [pid 1125] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1124] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1124] <... futex resumed>) = 0 [pid 1125] pwrite64(6, "+", 1, 0 [pid 1124] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1125] <... pwrite64 resumed>) = 1 [pid 1125] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1124] <... futex resumed>) = 0 [pid 1125] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1124] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1124] <... futex resumed>) = 0 [pid 1125] open("./bus", O_RDONLY [pid 1124] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1125] <... open resumed>) = 7 [pid 1125] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1124] <... futex resumed>) = 0 [pid 1125] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1124] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1124] <... futex resumed>) = 0 [pid 1129] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1125] copy_file_range(7, NULL, 5, [65536], 6, 0 [ 42.810683][ T1122] EXT4-fs (loop0): This should not happen!! Data will be lost [ 42.810683][ T1122] [ 42.820863][ T1122] EXT4-fs (loop0): Total free blocks count 0 [ 42.833410][ T1122] EXT4-fs (loop0): Free/Dirty block details [ 42.838242][ T1126] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 42.843642][ T1122] EXT4-fs (loop0): free_blocks=2415919504 [ 42.859616][ T1122] EXT4-fs (loop0): dirty_blocks=32 [pid 1123] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1129] <... open resumed>) = 4 [pid 1125] <... copy_file_range resumed>) = 1 [pid 1124] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1129] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1136] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1129] <... futex resumed>) = 1 [pid 1123] <... futex resumed>) = 0 [pid 1129] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1123] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1129] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1125] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1123] <... futex resumed>) = 0 [pid 1124] <... futex resumed>) = 0 [pid 1122] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1136] <... write resumed>) = 1048576 [pid 1129] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1123] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1129] <... open resumed>) = 5 [pid 1129] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1123] <... futex resumed>) = 0 [pid 1129] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1123] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1129] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1123] <... futex resumed>) = 0 [pid 1129] creat("./bus", 000 [pid 1123] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1129] <... creat resumed>) = 6 [pid 1129] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1123] <... futex resumed>) = 0 [pid 1129] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1123] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1129] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1123] <... futex resumed>) = 0 [pid 1129] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1123] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1130] <... futex resumed>) = ? [pid 1129] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1125] <... futex resumed>) = 0 [pid 1124] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1130] +++ killed by SIGBUS +++ [pid 1129] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1123] <... futex resumed>) = 0 [pid 1129] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1123] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1129] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1123] <... futex resumed>) = 0 [pid 1129] pwrite64(6, "+", 1, 0 [pid 1123] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1129] <... pwrite64 resumed>) = 1 [pid 1129] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1123] <... futex resumed>) = 0 [pid 1129] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1123] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1129] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1123] <... futex resumed>) = 0 [pid 1129] open("./bus", O_RDONLY [pid 1123] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1129] <... open resumed>) = 7 [pid 1129] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1123] <... futex resumed>) = 0 [pid 1129] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1123] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1129] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1123] <... futex resumed>) = 0 [pid 1129] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1123] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1129] <... copy_file_range resumed>) = 1 [pid 1123] <... futex resumed>) = 0 [pid 1129] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1123] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1129] <... futex resumed>) = 0 [pid 1123] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1129] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1123] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1125] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1123] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1124] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1123] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1122] +++ killed by SIGBUS +++ [pid 1123] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1141]}, 88) = 1141 [pid 1136] munmap(0x7f13c08c4000, 138412032 [pid 1123] rt_sigprocmask(SIG_SETMASK, [], [pid 1136] <... munmap resumed>) = 0 [pid 1123] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1123] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1136] openat(AT_FDCWD, "/dev/loop2", O_RDWR [ 42.865775][ T1122] EXT4-fs (loop0): Block reservation details [ 42.871798][ T1122] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 42.877894][ T1126] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 42.890211][ T1126] EXT4-fs (loop3): This should not happen!! Data will be lost [ 42.890211][ T1126] [ 42.900705][ T1121] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 1123] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1136] <... openat resumed>) = 4 [pid 1136] ioctl(4, LOOP_SET_FD, 3 [pid 1124] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1120] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1124] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1124] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1142]}, 88) = 1142 [pid 1124] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1124] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1124] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1141 attached [pid 1141] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1141] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1141] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1141] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1123] <... futex resumed>) = 0 [pid 1123] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1129] <... futex resumed>) = 0 [pid 1123] <... futex resumed>) = 1 [pid 1129] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1123] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1129] <... open resumed>) = -1 EFAULT (Bad address) [pid 1129] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1123] <... futex resumed>) = 0 [pid 1129] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1123] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1129] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1123] <... futex resumed>) = 0 [pid 1123] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... restart_syscall resumed>) = 0 [pid 297] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./30/binderfs") = 0 [ 42.902940][ T1136] loop2: detected capacity change from 0 to 2048 [ 42.913012][ T1121] EXT4-fs (loop0): This should not happen!! Data will be lost [ 42.913012][ T1121] [ 42.928850][ T1126] EXT4-fs (loop3): Total free blocks count 0 [ 42.930496][ T1129] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 42.934737][ T1126] EXT4-fs (loop3): Free/Dirty block details [ 42.954911][ T1126] EXT4-fs (loop3): free_blocks=2415919504 [ 42.960477][ T1126] EXT4-fs (loop3): dirty_blocks=32 [pid 297] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1142] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1141] <... futex resumed>) = 1 [pid 1136] <... ioctl resumed>) = 0 [pid 1126] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1124] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1120] ????( [pid 297] <... umount2 resumed>) = 0 [pid 1142] <... futex resumed>) = 0 [pid 1141] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1136] close(3 [pid 1124] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1125] <... futex resumed>) = 0 [pid 1124] <... futex resumed>) = 1 [pid 1125] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1124] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1125] <... open resumed>) = -1 EFAULT (Bad address) [pid 1125] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1124] <... futex resumed>) = 0 [pid 1125] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1124] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1124] <... futex resumed>) = 0 [pid 1142] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1137] <... futex resumed>) = ? [pid 1136] <... close resumed>) = 0 [pid 1124] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1123] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 297] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./30/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./30/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 42.965467][ T1126] EXT4-fs (loop3): Block reservation details [ 42.971208][ T1126] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 42.977157][ T1129] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 42.989289][ T1129] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.989289][ T1129] [ 42.993263][ T1125] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 297] close(4 [pid 1137] +++ killed by SIGBUS +++ [pid 1136] close(4 [pid 297] <... close resumed>) = 0 [pid 297] rmdir("./30/file1") = 0 [pid 297] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./30") = 0 [pid 297] mkdir("./31", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3 [pid 1136] <... close resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1143 [pid 1136] mkdir("./file1", 0777./strace-static-x86_64: Process 1143 attached [pid 1143] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1143] chdir("./31") = 0 [pid 1143] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1143] setpgid(0, 0) = 0 [pid 1143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1143] write(3, "1000", 4) = 4 [pid 1143] close(3) = 0 [pid 1143] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1143] write(1, "executing program\n", 18executing program ) = 18 [pid 1143] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1136] <... mkdir resumed>) = 0 [pid 1143] <... futex resumed>) = 0 [pid 1143] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1143] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1143] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1143] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1143] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1144]}, 88) = 1144 [pid 1143] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1143] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1143] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1144 attached [pid 1144] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1144] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1144] memfd_create("syzkaller", 0 [pid 1136] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 1144] <... memfd_create resumed>) = 3 [pid 1144] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1126] +++ killed by SIGBUS +++ [pid 1124] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1120] +++ killed by SIGBUS +++ [pid 1124] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1120, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 1124] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 300] umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./32/binderfs") = 0 [ 42.998895][ T1129] EXT4-fs (loop4): Total free blocks count 0 [ 43.019908][ T1126] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 43.032106][ T1129] EXT4-fs (loop4): Free/Dirty block details [ 43.037881][ T1129] EXT4-fs (loop4): free_blocks=2415919504 [ 43.043466][ T1126] EXT4-fs (loop3): This should not happen!! Data will be lost [ 43.043466][ T1126] [ 43.053316][ T1129] EXT4-fs (loop4): dirty_blocks=32 [ 43.058300][ T1129] EXT4-fs (loop4): Block reservation details [pid 300] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1144] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1136] <... mount resumed>) = 0 [pid 1129] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 300] <... umount2 resumed>) = 0 [pid 1144] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1144] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1144] ioctl(4, LOOP_SET_FD, 3 [pid 1136] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 300] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1141] <... futex resumed>) = ? [pid 1136] <... openat resumed>) = 3 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1144] <... ioctl resumed>) = 0 [ 43.065222][ T1125] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 43.079162][ T1129] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 43.089695][ T1125] EXT4-fs (loop1): This should not happen!! Data will be lost [ 43.089695][ T1125] [ 43.096472][ T1144] loop0: detected capacity change from 0 to 2048 [ 43.099530][ T1125] EXT4-fs (loop1): Total free blocks count 0 [ 43.111725][ T1125] EXT4-fs (loop1): Free/Dirty block details [pid 1144] close(3 [pid 1141] +++ killed by SIGBUS +++ [pid 1136] chdir("./file1" [pid 300] newfstatat(AT_FDCWD, "./32/file1", [pid 1136] <... chdir resumed>) = 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1136] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 300] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1136] <... openat resumed>) = 4 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1136] ioctl(4, LOOP_CLR_FD [pid 300] openat(AT_FDCWD, "./32/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1136] <... ioctl resumed>) = 0 [pid 300] <... openat resumed>) = 4 [pid 1136] close(4 [pid 300] newfstatat(4, "", [pid 1136] <... close resumed>) = 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1136] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] getdents64(4, [pid 1136] <... futex resumed>) = 1 [pid 1131] <... futex resumed>) = 0 [pid 300] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1136] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1131] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] getdents64(4, [pid 1131] <... futex resumed>) = 0 [pid 300] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1131] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] close(4) = 0 [pid 300] rmdir("./32/file1") = 0 [pid 300] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./32") = 0 [pid 300] mkdir("./33", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1147 ./strace-static-x86_64: Process 1147 attached [pid 1147] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1147] chdir("./33") = 0 [pid 1147] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1147] setpgid(0, 0) = 0 [pid 1147] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program ) = 3 [pid 1144] <... close resumed>) = 0 [pid 1147] write(3, "1000", 4) = 4 [pid 1147] close(3) = 0 [pid 1147] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1147] write(1, "executing program\n", 18) = 18 [pid 1147] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1147] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1147] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1147] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1147] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1147] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1147] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1148]}, 88) = 1148 [pid 1147] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1147] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1147] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1144] close(4 [pid 1136] <... open resumed>) = 4 [pid 1144] <... close resumed>) = 0 [pid 1144] mkdir("./file1", 0777 [pid 1136] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1131] <... futex resumed>) = 0 [pid 1136] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1131] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1136] <... open resumed>) = 5 [pid 1131] <... futex resumed>) = 0 [pid 1136] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1131] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1136] <... futex resumed>) = 0 [pid 1131] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1144] <... mkdir resumed>) = 0 [pid 1136] creat("./bus", 000 [pid 1131] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1136] <... creat resumed>) = 6 [pid 1131] <... futex resumed>) = 0 [pid 1144] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 1136] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1131] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1136] <... futex resumed>) = 0 [pid 1131] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1136] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1131] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1136] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1131] <... futex resumed>) = 0 [pid 1136] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1131] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1136] <... futex resumed>) = 0 [pid 1131] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1136] pwrite64(6, "+", 1, 0 [pid 1131] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1136] <... pwrite64 resumed>) = 1 [pid 1131] <... futex resumed>) = 0 [pid 1136] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1131] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1136] <... futex resumed>) = 0 [pid 1131] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1136] open("./bus", O_RDONLY [pid 1131] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1136] <... open resumed>) = 7 [pid 1131] <... futex resumed>) = 0 [pid 1136] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1131] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1136] <... futex resumed>) = 0 [pid 1136] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1131] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1131] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1136] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1131] <... futex resumed>) = 0 [pid 1136] <... copy_file_range resumed>) = 1 [pid 1131] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1136] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1131] <... futex resumed>) = 0 [pid 1136] <... futex resumed>) = 0 [pid 1131] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1136] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1131] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1131] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1131] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1131] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1149]}, 88) = 1149 [pid 1131] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1131] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1131] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1149 attached [pid 1149] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1149] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1149] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1131] <... futex resumed>) = 0 [pid 1131] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1136] <... futex resumed>) = 0 [pid 1131] <... futex resumed>) = 1 [pid 1136] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1131] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1136] <... open resumed>) = -1 EFAULT (Bad address) [pid 1136] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1131] <... futex resumed>) = 0 [ 43.113042][ T1129] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 43.117983][ T1125] EXT4-fs (loop1): free_blocks=2415919504 [ 43.138826][ T1129] EXT4-fs (loop4): This should not happen!! Data will be lost [ 43.138826][ T1129] ./strace-static-x86_64: Process 1148 attached [pid 1131] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1131] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1149] <... futex resumed>) = 1 [pid 1149] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1129] +++ killed by SIGBUS +++ [pid 1123] +++ killed by SIGBUS +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1123, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 1148] set_robust_list(0x7f13c8ce49a0, 24 [pid 301] <... restart_syscall resumed>) = 0 [pid 301] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./31/binderfs") = 0 [pid 301] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1148] <... set_robust_list resumed>) = 0 [pid 1144] <... mount resumed>) = 0 [pid 1144] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1144] chdir("./file1") = 0 [pid 1144] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1144] ioctl(4, LOOP_CLR_FD) = 0 [pid 1144] close(4 [pid 1148] rt_sigprocmask(SIG_SETMASK, [], [pid 1144] <... close resumed>) = 0 [pid 1125] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1144] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1143] <... futex resumed>) = 0 [pid 1144] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1143] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1144] <... open resumed>) = 4 [pid 1143] <... futex resumed>) = 0 [pid 1144] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1143] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1144] <... futex resumed>) = 0 [pid 1143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1144] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1143] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1144] <... open resumed>) = 5 [pid 1143] <... futex resumed>) = 0 [pid 1144] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1143] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1144] <... futex resumed>) = 0 [pid 1143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1144] creat("./bus", 000 [pid 1143] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1144] <... creat resumed>) = 6 [pid 1143] <... futex resumed>) = 0 [pid 1144] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1143] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1144] <... futex resumed>) = 0 [pid 1143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1144] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1143] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1144] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1143] <... futex resumed>) = 0 [pid 1144] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1143] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1144] <... futex resumed>) = 0 [pid 1143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1144] pwrite64(6, "+", 1, 0 [pid 1143] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1144] <... pwrite64 resumed>) = 1 [pid 1143] <... futex resumed>) = 0 [pid 1144] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1143] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1144] <... futex resumed>) = 0 [pid 1143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1144] open("./bus", O_RDONLY [pid 1143] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1144] <... open resumed>) = 7 [pid 1143] <... futex resumed>) = 0 [pid 1144] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1143] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1144] <... futex resumed>) = 0 [pid 1143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1144] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1143] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1144] <... copy_file_range resumed>) = 1 [pid 1143] <... futex resumed>) = 0 [pid 1144] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1143] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1144] <... futex resumed>) = 0 [pid 1143] <... futex resumed>) = 0 [pid 1144] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1143] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1143] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1143] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1152]}, 88) = 1152 [pid 1143] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1143] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1143] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1152 attached [pid 1152] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1152] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1152] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1143] <... futex resumed>) = 0 [pid 1143] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1144] <... futex resumed>) = 0 [pid 1143] <... futex resumed>) = 1 [pid 1144] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1143] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1144] <... open resumed>) = -1 EFAULT (Bad address) [pid 1144] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1143] <... futex resumed>) = 0 [ 43.156606][ T1136] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 43.163667][ T1125] EXT4-fs (loop1): dirty_blocks=32 [ 43.172922][ T1136] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 43.176828][ T1125] EXT4-fs (loop1): Block reservation details [ 43.190600][ T1136] EXT4-fs (loop2): This should not happen!! Data will be lost [ 43.190600][ T1136] [ 43.194682][ T1125] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 43.209952][ T1136] EXT4-fs (loop2): Total free blocks count 0 [pid 1148] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1143] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1131] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1143] <... futex resumed>) = 0 [pid 1142] <... futex resumed>) = ? [pid 1143] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1142] +++ killed by SIGBUS +++ [pid 1152] <... futex resumed>) = 1 [pid 1152] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1148] memfd_create("syzkaller", 0 [pid 301] <... umount2 resumed>) = 0 [pid 301] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./31/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./31/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./31/file1") = 0 [pid 301] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./31") = 0 [pid 301] mkdir("./32", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1153 ./strace-static-x86_64: Process 1153 attached [pid 1153] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1153] chdir("./32") = 0 [pid 1153] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1153] setpgid(0, 0) = 0 [pid 1153] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1153] write(3, "1000", 4) = 4 [pid 1153] close(3) = 0 [ 43.219369][ T1144] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 43.220018][ T1136] EXT4-fs (loop2): Free/Dirty block details [ 43.239727][ T1136] EXT4-fs (loop2): free_blocks=2415919504 [ 43.241032][ T1144] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 43.246498][ T1125] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 1153] symlink("/dev/binderfs", "./binderfs"executing program [pid 1148] <... memfd_create resumed>) = 3 [pid 1153] <... symlink resumed>) = 0 [pid 1153] write(1, "executing program\n", 18) = 18 [pid 1153] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1153] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1153] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1153] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1153] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1153] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1153] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1154]}, 88) = 1154 [pid 1153] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1153] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1153] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1148] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 1154 attached [pid 1154] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1154] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1154] memfd_create("syzkaller", 0) = 3 [pid 1154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1148] <... mmap resumed>) = 0x7f13c08c4000 [pid 1125] +++ killed by SIGBUS +++ [pid 1124] +++ killed by SIGBUS +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1124, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 298] umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, [pid 1143] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 298] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1143] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 298] umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1143] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./33/binderfs") = 0 [pid 298] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1148] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./33/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./33/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./33/file1") = 0 [pid 298] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./33") = 0 [ 43.273009][ T1136] EXT4-fs (loop2): dirty_blocks=32 [ 43.274730][ T1125] EXT4-fs (loop1): This should not happen!! Data will be lost [ 43.274730][ T1125] [ 43.287742][ T1144] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.287742][ T1144] [ 43.297681][ T1144] EXT4-fs (loop0): Total free blocks count 0 [ 43.303552][ T1144] EXT4-fs (loop0): Free/Dirty block details [ 43.309424][ T1144] EXT4-fs (loop0): free_blocks=2415919504 [ 43.315448][ T1144] EXT4-fs (loop0): dirty_blocks=32 [pid 298] mkdir("./34", 0777) = 0 [pid 1154] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1155 [pid 1148] <... write resumed>) = 1048576 ./strace-static-x86_64: Process 1155 attached [pid 1144] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1148] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1148] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1148] ioctl(4, LOOP_SET_FD, 3executing program [pid 1155] set_robust_list(0x55558909e6a0, 24 [pid 1154] <... write resumed>) = 1048576 [pid 1136] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1155] <... set_robust_list resumed>) = 0 [pid 1155] chdir("./34") = 0 [pid 1155] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1155] setpgid(0, 0) = 0 [pid 1155] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1155] write(3, "1000", 4) = 4 [pid 1154] munmap(0x7f13c08c4000, 138412032 [pid 1155] close(3) = 0 [pid 1154] <... munmap resumed>) = 0 [pid 1155] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1155] write(1, "executing program\n", 18 [pid 1154] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1155] <... write resumed>) = 18 [pid 1155] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1154] <... openat resumed>) = 4 [pid 1155] <... futex resumed>) = 0 [pid 1155] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1154] ioctl(4, LOOP_SET_FD, 3 [pid 1155] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1155] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1152] <... futex resumed>) = ? [pid 1148] <... ioctl resumed>) = 0 [pid 1155] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1152] +++ killed by SIGBUS +++ [pid 1149] <... futex resumed>) = ? [pid 1144] +++ killed by SIGBUS +++ [pid 1155] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1154] <... ioctl resumed>) = 0 [pid 1149] +++ killed by SIGBUS +++ [pid 1148] close(3 [pid 1154] close(3) = 0 [pid 1154] close(4) = 0 [pid 1154] mkdir("./file1", 0777) = 0 [ 43.318642][ T1136] EXT4-fs (loop2): Block reservation details [ 43.320689][ T1144] EXT4-fs (loop0): Block reservation details [ 43.332486][ T1144] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 43.338551][ T1136] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 43.342894][ T1148] loop3: detected capacity change from 0 to 2048 [ 43.350407][ T1154] loop4: detected capacity change from 0 to 2048 [ 43.354277][ T1143] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 1154] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 1155] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1148] <... close resumed>) = 0 [pid 1155] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1148] close(4 [pid 1143] +++ killed by SIGBUS +++ [pid 1155] <... mprotect resumed>) = 0 [pid 1148] <... close resumed>) = 0 [pid 1155] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1148] mkdir("./file1", 0777 [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1143, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 1155] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1148] <... mkdir resumed>) = 0 [pid 297] restart_syscall(<... resuming interrupted clone ...> [pid 1155] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1148] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 1155] <... clone3 resumed> => {parent_tid=[1156]}, 88) = 1156 [pid 1155] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1155] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1155] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1136] +++ killed by SIGBUS +++ [pid 1131] +++ killed by SIGBUS +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1131, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 297] <... restart_syscall resumed>) = 0 [pid 299] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 297] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... openat resumed>) = 3 [pid 299] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] newfstatat(3, "", [pid 299] <... openat resumed>) = 3 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] newfstatat(3, "", [pid 297] getdents64(3, [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] getdents64(3, [pid 297] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] newfstatat(AT_FDCWD, "./31/binderfs", [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] newfstatat(AT_FDCWD, "./33/binderfs", [pid 297] unlink("./31/binderfs" [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] <... unlink resumed>) = 0 [pid 299] unlink("./33/binderfs" [pid 297] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 1156 attached [pid 1148] <... mount resumed>) = 0 [pid 299] <... unlink resumed>) = 0 [pid 1148] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1148] chdir("./file1") = 0 [pid 1148] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1148] ioctl(4, LOOP_CLR_FD) = 0 [pid 1148] close(4) = 0 [pid 1148] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1147] <... futex resumed>) = 0 [pid 299] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1148] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1147] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1148] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1147] <... futex resumed>) = 0 [pid 1148] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1147] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1148] <... open resumed>) = 4 [pid 1148] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1156] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1156] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1156] memfd_create("syzkaller", 0) = 3 [pid 1156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 299] <... umount2 resumed>) = 0 [pid 1156] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1154] <... mount resumed>) = 0 [pid 1148] <... futex resumed>) = 1 [pid 1147] <... futex resumed>) = 0 [pid 1147] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1154] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1148] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1147] <... futex resumed>) = 0 [pid 299] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1154] <... openat resumed>) = 3 [pid 1154] chdir("./file1" [pid 1148] <... open resumed>) = 5 [pid 1147] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1154] <... chdir resumed>) = 0 [pid 1148] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1147] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1147] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1154] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1148] <... futex resumed>) = 0 [pid 299] newfstatat(AT_FDCWD, "./33/file1", [pid 1154] <... openat resumed>) = 4 [pid 1148] creat("./bus", 000 [pid 1154] ioctl(4, LOOP_CLR_FD [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1147] <... futex resumed>) = 0 [pid 1154] <... ioctl resumed>) = 0 [pid 1148] <... creat resumed>) = 6 [pid 1154] close(4 [pid 299] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1154] <... close resumed>) = 0 [pid 1148] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1154] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1153] <... futex resumed>) = 0 [pid 1148] <... futex resumed>) = 0 [pid 1147] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] openat(AT_FDCWD, "./33/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1154] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1148] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1153] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1147] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] <... openat resumed>) = 4 [pid 297] <... umount2 resumed>) = 0 [pid 299] newfstatat(4, "", [pid 1154] <... futex resumed>) = 0 [pid 1153] <... futex resumed>) = 1 [pid 1147] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1154] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1153] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1147] <... futex resumed>) = 1 [pid 1147] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1154] <... open resumed>) = 4 [pid 1148] <... futex resumed>) = 0 [pid 299] getdents64(4, [pid 297] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1154] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1148] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1154] <... futex resumed>) = 1 [pid 1153] <... futex resumed>) = 0 [pid 1148] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 299] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1154] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1153] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1148] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1153] <... futex resumed>) = 0 [pid 299] getdents64(4, [pid 1148] <... futex resumed>) = 1 [pid 1147] <... futex resumed>) = 0 [pid 1154] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1153] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1148] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1147] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1154] <... open resumed>) = 5 [pid 1148] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1147] <... futex resumed>) = 0 [pid 1154] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1148] pwrite64(6, "+", 1, 0 [pid 1147] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] close(4 [pid 297] newfstatat(AT_FDCWD, "./31/file1", [pid 1154] <... futex resumed>) = 1 [pid 1153] <... futex resumed>) = 0 [pid 1148] <... pwrite64 resumed>) = 1 [pid 299] <... close resumed>) = 0 [pid 1154] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1153] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1148] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] rmdir("./33/file1" [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1153] <... futex resumed>) = 0 [pid 1148] <... futex resumed>) = 1 [pid 1147] <... futex resumed>) = 0 [pid 1154] creat("./bus", 000 [pid 1153] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1148] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1147] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1154] <... creat resumed>) = 6 [pid 1148] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1147] <... futex resumed>) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 297] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1154] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1148] open("./bus", O_RDONLY [pid 1147] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] getdents64(3, [pid 1154] <... futex resumed>) = 1 [pid 1153] <... futex resumed>) = 0 [pid 1148] <... open resumed>) = 7 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1154] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1153] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1148] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] close(3 [pid 297] openat(AT_FDCWD, "./31/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1153] <... futex resumed>) = 0 [pid 1148] <... futex resumed>) = 1 [pid 1147] <... futex resumed>) = 0 [pid 1147] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... close resumed>) = 0 [pid 1147] <... futex resumed>) = 0 [pid 1153] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1154] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1147] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1148] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 297] <... openat resumed>) = 4 [pid 299] rmdir("./33" [pid 1147] <... futex resumed>) = 0 [pid 1147] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1147] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1154] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1148] <... copy_file_range resumed>) = 1 [pid 1147] <... mprotect resumed>) = 0 [pid 1147] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1147] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1154] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1148] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... rmdir resumed>) = 0 [pid 297] newfstatat(4, "", [pid 1154] <... futex resumed>) = 1 [pid 1153] <... futex resumed>) = 0 [pid 1148] <... futex resumed>) = 0 [pid 1147] <... clone3 resumed> => {parent_tid=[1161]}, 88) = 1161 [pid 1154] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1153] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1148] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1147] rt_sigprocmask(SIG_SETMASK, [], [pid 299] mkdir("./34", 0777 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1153] <... futex resumed>) = 0 [pid 1147] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1147] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1147] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1161 attached [pid 1154] pwrite64(6, "+", 1, 0 [pid 1153] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... mkdir resumed>) = 0 [pid 297] getdents64(4, [pid 1161] set_robust_list(0x7f13c8cc39a0, 24 [pid 1156] <... write resumed>) = 1048576 [pid 1154] <... pwrite64 resumed>) = 1 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 297] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1154] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... openat resumed>) = 3 [pid 1161] <... set_robust_list resumed>) = 0 [pid 1156] munmap(0x7f13c08c4000, 138412032 [pid 1161] rt_sigprocmask(SIG_SETMASK, [], [pid 1156] <... munmap resumed>) = 0 [pid 1154] <... futex resumed>) = 1 [pid 1153] <... futex resumed>) = 0 [pid 299] ioctl(3, LOOP_CLR_FD [pid 297] getdents64(4, [pid 1156] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1156] ioctl(4, LOOP_SET_FD, 3 [pid 1161] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 43.370361][ T1136] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 43.373159][ T1143] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.373159][ T1143] [ 43.383972][ T1136] EXT4-fs (loop2): This should not happen!! Data will be lost [ 43.383972][ T1136] [pid 1154] open("./bus", O_RDONLY [pid 1153] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 297] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1161] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1154] <... open resumed>) = 7 [pid 1153] <... futex resumed>) = 0 [pid 299] close(3 [pid 297] close(4 [pid 1161] <... mmap resumed>) = 0x20000000 [pid 1154] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1153] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... close resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 1154] <... futex resumed>) = 0 [pid 1153] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] rmdir("./31/file1" [pid 1154] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1153] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... rmdir resumed>) = 0 [pid 1154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1153] <... futex resumed>) = 0 [pid 299] <... clone resumed>, child_tidptr=0x55558909e690) = 1162 [pid 297] getdents64(3, ./strace-static-x86_64: Process 1162 attached [pid 1161] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1156] <... ioctl resumed>) = 0 [pid 1154] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1162] set_robust_list(0x55558909e6a0, 24 [pid 1161] <... futex resumed>) = 1 [pid 1156] close(3 [pid 1147] <... futex resumed>) = 0 [pid 1162] <... set_robust_list resumed>) = 0 [pid 1161] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1156] <... close resumed>) = 0 [pid 1147] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1162] chdir("./34" [pid 1156] close(4 [pid 1147] <... futex resumed>) = 1 [pid 1162] <... chdir resumed>) = 0 [pid 1156] <... close resumed>) = 0 [pid 1154] <... copy_file_range resumed>) = 1 [pid 1153] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1148] <... futex resumed>) = 0 [pid 1147] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1162] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1156] mkdir("./file1", 0777 [pid 1154] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1153] <... futex resumed>) = 0 [pid 1148] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 297] close(3 [pid 1162] <... prctl resumed>) = 0 [pid 1156] <... mkdir resumed>) = 0 [pid 1154] <... futex resumed>) = 0 [pid 1153] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1162] setpgid(0, 0 [pid 1156] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 1154] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1148] <... open resumed>) = -1 EFAULT (Bad address) [pid 297] <... close resumed>) = 0 [pid 1162] <... setpgid resumed>) = 0 [pid 1153] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1148] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] rmdir("./31" [pid 1148] <... futex resumed>) = 1 [pid 1153] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1147] <... futex resumed>) = 0 [pid 1162] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1147] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... rmdir resumed>) = 0 [pid 1162] write(3, "1000", 4) = 4 [pid 1162] close(3) = 0 [pid 1162] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1162] write(1, "executing program\n", 18) = 18 [pid 1162] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1162] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1162] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1162] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1162] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1162] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1162] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1163]}, 88) = 1163 [pid 1162] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1162] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1162] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1163 attached [pid 1163] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1163] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1163] memfd_create("syzkaller", 0) = 3 [pid 1163] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1163] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1163] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1163] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1163] ioctl(4, LOOP_SET_FD, 3executing program [pid 1153] <... mprotect resumed>) = 0 [pid 1147] <... futex resumed>) = 0 [pid 297] mkdir("./32", 0777 [pid 1163] <... ioctl resumed>) = 0 [pid 1163] close(3) = 0 [pid 1163] close(4) = 0 [pid 1163] mkdir("./file1", 0777) = 0 [ 43.440632][ T1156] loop1: detected capacity change from 0 to 2048 [ 43.456843][ T1148] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 43.468668][ T1163] loop2: detected capacity change from 0 to 2048 [ 43.476176][ T1148] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 1163] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 1153] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1147] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1153] <... rt_sigprocmask resumed>[], 8) = 0 [pid 297] <... mkdir resumed>) = 0 [pid 1153] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 1165 attached ) = 3 [pid 1153] <... clone3 resumed> => {parent_tid=[1165]}, 88) = 1165 [pid 297] ioctl(3, LOOP_CLR_FD [pid 1153] rt_sigprocmask(SIG_SETMASK, [], [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1153] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 297] close(3 [pid 1165] set_robust_list(0x7f13c8cc39a0, 24 [pid 1156] <... mount resumed>) = 0 [pid 1153] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... close resumed>) = 0 [pid 1153] <... futex resumed>) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1165] <... set_robust_list resumed>) = 0 [pid 1156] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1153] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1165] rt_sigprocmask(SIG_SETMASK, [], [pid 1156] <... openat resumed>) = 3 [pid 297] <... clone resumed>, child_tidptr=0x55558909e690) = 1168 [pid 1165] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1156] chdir("./file1" [pid 1165] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1156] <... chdir resumed>) = 0 [pid 1165] <... mmap resumed>) = 0x20000000 [pid 1156] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1156] ioctl(4, LOOP_CLR_FD) = 0 [pid 1165] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1156] close(4./strace-static-x86_64: Process 1168 attached [pid 1165] <... futex resumed>) = 1 [pid 1156] <... close resumed>) = 0 [pid 1153] <... futex resumed>) = 0 [pid 1165] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1156] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1153] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1156] <... futex resumed>) = 1 [pid 1155] <... futex resumed>) = 0 [pid 1154] <... futex resumed>) = 0 [pid 1153] <... futex resumed>) = 1 [pid 1156] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1155] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1154] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1153] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1156] <... open resumed>) = 4 [pid 1155] <... futex resumed>) = 0 [pid 1154] <... open resumed>) = -1 EFAULT (Bad address) [pid 1156] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1155] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1154] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1156] <... futex resumed>) = 0 [pid 1155] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1154] <... futex resumed>) = 1 [pid 1153] <... futex resumed>) = 0 [pid 1156] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1155] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1154] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1153] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1168] set_robust_list(0x55558909e6a0, 24 [pid 1156] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1155] <... futex resumed>) = 0 [pid 1154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1153] <... futex resumed>) = 0 [pid 1168] <... set_robust_list resumed>) = 0 [pid 1156] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1155] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1153] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1156] <... open resumed>) = 5 [pid 1156] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1155] <... futex resumed>) = 0 [pid 1156] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1155] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1156] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1155] <... futex resumed>) = 0 [pid 1156] creat("./bus", 000 [pid 1155] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1156] <... creat resumed>) = 6 [pid 1156] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1155] <... futex resumed>) = 0 [pid 1156] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1155] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1156] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1155] <... futex resumed>) = 0 [pid 1156] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1155] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1156] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1156] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1155] <... futex resumed>) = 0 [pid 1156] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1155] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1156] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1155] <... futex resumed>) = 0 [pid 1168] chdir("./32" [pid 1156] pwrite64(6, "+", 1, 0 [pid 1155] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1156] <... pwrite64 resumed>) = 1 [ 43.490521][ T1148] EXT4-fs (loop3): This should not happen!! Data will be lost [ 43.490521][ T1148] [ 43.501603][ T1148] EXT4-fs (loop3): Total free blocks count 0 [ 43.507682][ T1148] EXT4-fs (loop3): Free/Dirty block details [ 43.513649][ T1148] EXT4-fs (loop3): free_blocks=2415919504 [ 43.514271][ T1154] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 43.519216][ T1148] EXT4-fs (loop3): dirty_blocks=32 [pid 1156] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1155] <... futex resumed>) = 0 [pid 1156] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1155] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1168] <... chdir resumed>) = 0 [pid 1156] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1155] <... futex resumed>) = 0 [pid 1147] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1156] open("./bus", O_RDONLY [pid 1155] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1156] <... open resumed>) = 7 [pid 1156] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1155] <... futex resumed>) = 0 [pid 1156] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1155] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1156] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1155] <... futex resumed>) = 0 [pid 1156] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1155] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1156] <... copy_file_range resumed>) = 1 [pid 1155] <... futex resumed>) = 0 [pid 1156] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1155] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1156] <... futex resumed>) = 0 [pid 1155] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1156] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1155] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1155] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1155] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1169]}, 88) = 1169 [pid 1155] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1155] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1155] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1168] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1148] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1168] <... prctl resumed>) = 0 [pid 1168] setpgid(0, 0 [pid 1148] +++ killed by SIGBUS +++ ./strace-static-x86_64: Process 1169 attached [pid 1169] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1169] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1169] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1155] <... futex resumed>) = 0 [pid 1155] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1156] <... futex resumed>) = 0 [pid 1155] <... futex resumed>) = 1 [pid 1156] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1155] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1156] <... open resumed>) = -1 EFAULT (Bad address) [pid 1156] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1155] <... futex resumed>) = 0 [ 43.538790][ T1148] EXT4-fs (loop3): Block reservation details [ 43.544687][ T1148] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 43.550945][ T1154] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 43.561785][ T1156] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 43.563130][ T1154] EXT4-fs (loop4): This should not happen!! Data will be lost [ 43.563130][ T1154] [pid 1156] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1155] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1156] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 43.579583][ T28] audit: type=1400 audit(1735195627.592:81): avc: denied { unlink } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.587062][ T1154] EXT4-fs (loop4): Total free blocks count 0 [ 43.614739][ T1154] EXT4-fs (loop4): Free/Dirty block details [ 43.620411][ T1154] EXT4-fs (loop4): free_blocks=2415919504 [ 43.626001][ T1154] EXT4-fs (loop4): dirty_blocks=32 [ 43.630895][ T1154] EXT4-fs (loop4): Block reservation details [pid 1155] <... futex resumed>) = 0 [pid 1168] <... setpgid resumed>) = 0 [pid 1163] <... mount resumed>) = 0 [pid 1161] <... futex resumed>) = ? [pid 1153] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1163] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1163] chdir("./file1") = 0 [pid 1163] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1163] ioctl(4, LOOP_CLR_FD) = 0 [pid 1163] close(4) = 0 [pid 1163] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1162] <... futex resumed>) = 0 [pid 1163] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1162] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1163] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1162] <... futex resumed>) = 0 [pid 1163] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1162] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1163] <... open resumed>) = 4 [pid 1163] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1162] <... futex resumed>) = 0 [pid 1163] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1162] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1163] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1162] <... futex resumed>) = 0 [pid 1163] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1162] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1163] <... open resumed>) = 5 [pid 1163] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1162] <... futex resumed>) = 0 [pid 1163] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1162] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1163] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1162] <... futex resumed>) = 0 [pid 1163] creat("./bus", 000 [pid 1162] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1163] <... creat resumed>) = 6 [pid 1163] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1169] <... futex resumed>) = 1 [pid 1163] <... futex resumed>) = 1 [pid 1162] <... futex resumed>) = 0 [pid 1169] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1163] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1162] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1163] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1162] <... futex resumed>) = 0 [pid 1163] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1162] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1163] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1163] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1162] <... futex resumed>) = 0 [pid 1163] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1162] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1163] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1162] <... futex resumed>) = 0 [pid 1163] pwrite64(6, "+", 1, 0 [pid 1162] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1163] <... pwrite64 resumed>) = 1 [pid 1163] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1162] <... futex resumed>) = 0 [pid 1163] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1162] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1163] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1162] <... futex resumed>) = 0 [pid 1163] open("./bus", O_RDONLY [pid 1162] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1163] <... open resumed>) = 7 [pid 1163] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1162] <... futex resumed>) = 0 [pid 1163] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1162] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1163] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1162] <... futex resumed>) = 0 [pid 1163] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1162] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1163] <... copy_file_range resumed>) = 1 [pid 1162] <... futex resumed>) = 0 [pid 1163] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1162] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1163] <... futex resumed>) = 0 [pid 1162] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1163] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1162] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1162] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1162] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1171]}, 88) = 1171 [pid 1162] rt_sigprocmask(SIG_SETMASK, [], [pid 1155] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1162] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1162] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1168] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1162] <... futex resumed>) = 0 [pid 1162] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1171 attached [pid 1171] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1171] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1171] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1168] <... openat resumed>) = 3 [pid 1168] write(3, "1000", 4) = 4 [pid 1168] close(3) = 0 [pid 1168] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 1168] write(1, "executing program\n", 18) = 18 [pid 1168] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1168] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1168] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1168] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1168] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1168] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1168] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1172]}, 88) = 1172 [pid 1168] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1168] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1168] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1171] <... mmap resumed>) = 0x20000000 [pid 1171] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1162] <... futex resumed>) = 0 [pid 1162] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1163] <... futex resumed>) = 0 [pid 1162] <... futex resumed>) = 1 [pid 1163] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1162] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1163] <... open resumed>) = -1 EFAULT (Bad address) [pid 1163] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1162] <... futex resumed>) = 0 [pid 1163] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1162] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1163] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1162] <... futex resumed>) = 0 [pid 1162] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1171] <... futex resumed>) = 1 [pid 1171] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1172 attached [pid 1172] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1172] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1172] memfd_create("syzkaller", 0) = 3 [pid 1172] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [ 43.631005][ T1156] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 43.651832][ T1161] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 43.661134][ T1163] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 43.664366][ T1161] EXT4-fs (loop3): This should not happen!! Data will be lost [ 43.664366][ T1161] [pid 1161] +++ killed by SIGBUS +++ [pid 1147] +++ killed by SIGBUS +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1147, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=10} --- [pid 300] umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./33/binderfs") = 0 [pid 300] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1172] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1155] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1172] <... write resumed>) = 1048576 [pid 1172] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1172] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1172] ioctl(4, LOOP_SET_FD, 3 [pid 1162] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1154] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1165] <... futex resumed>) = ? [pid 1165] +++ killed by SIGBUS +++ [ 43.686300][ T1154] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 43.688352][ T1156] EXT4-fs (loop1): This should not happen!! Data will be lost [ 43.688352][ T1156] [ 43.703333][ T1156] EXT4-fs (loop1): Total free blocks count 0 [ 43.708473][ T1172] loop0: detected capacity change from 0 to 2048 [ 43.709499][ T1156] EXT4-fs (loop1): Free/Dirty block details [ 43.721037][ T1156] EXT4-fs (loop1): free_blocks=2415919504 [ 43.721627][ T1163] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 300] <... umount2 resumed>) = 0 [pid 1172] <... ioctl resumed>) = 0 [pid 1156] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 300] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./33/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./33/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./33/file1" [pid 1172] close(3 [pid 1169] <... futex resumed>) = ? [pid 1172] <... close resumed>) = 0 [pid 1169] +++ killed by SIGBUS +++ [pid 1156] +++ killed by SIGBUS +++ [ 43.726765][ T1156] EXT4-fs (loop1): dirty_blocks=32 [ 43.742123][ T1154] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 43.743869][ T1156] EXT4-fs (loop1): Block reservation details [ 43.761437][ T1156] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 43.767385][ T1163] EXT4-fs (loop2): This should not happen!! Data will be lost [ 43.767385][ T1163] [ 43.773869][ T1155] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 1172] close(4) = 0 [pid 1172] mkdir("./file1", 0777) = 0 [pid 1172] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 300] <... rmdir resumed>) = 0 [pid 300] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./33") = 0 [pid 300] mkdir("./34", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1173 ./strace-static-x86_64: Process 1173 attached [pid 1173] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1173] chdir("./34") = 0 [pid 1173] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1173] setpgid(0, 0) = 0 [pid 1173] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1173] write(3, "1000", 4) = 4 [pid 1173] close(3) = 0 [pid 1173] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 1173] write(1, "executing program\n", 18) = 18 [pid 1173] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1173] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1173] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1173] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1173] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1172] <... mount resumed>) = 0 [pid 1172] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1172] chdir("./file1") = 0 [pid 1172] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1172] ioctl(4, LOOP_CLR_FD) = 0 [pid 1172] close(4) = 0 [pid 1172] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1168] <... futex resumed>) = 0 [pid 1172] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1168] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1172] <... open resumed>) = 4 [pid 1168] <... futex resumed>) = 0 [pid 1172] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1168] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1172] <... futex resumed>) = 0 [pid 1168] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1172] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1168] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1172] <... open resumed>) = 5 [pid 1168] <... futex resumed>) = 0 [pid 1172] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1168] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1172] <... futex resumed>) = 0 [pid 1168] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1172] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1168] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1172] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1168] <... futex resumed>) = 0 [pid 1172] creat("./bus", 000 [pid 1168] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1172] <... creat resumed>) = 6 [pid 1172] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1168] <... futex resumed>) = 0 [pid 1172] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1168] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1172] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1168] <... futex resumed>) = 0 [pid 1172] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1168] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1172] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1172] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1168] <... futex resumed>) = 0 [pid 1172] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1168] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1172] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1168] <... futex resumed>) = 0 [pid 1172] pwrite64(6, "+", 1, 0 [pid 1168] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1172] <... pwrite64 resumed>) = 1 [pid 1172] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1168] <... futex resumed>) = 0 [pid 1172] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1168] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1172] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1168] <... futex resumed>) = 0 [pid 1172] open("./bus", O_RDONLY [pid 1168] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1172] <... open resumed>) = 7 [pid 1172] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1168] <... futex resumed>) = 0 [pid 1172] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1168] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1172] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1168] <... futex resumed>) = 0 [pid 1172] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1168] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1172] <... copy_file_range resumed>) = 1 [pid 1168] <... futex resumed>) = 0 [pid 1172] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1168] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1172] <... futex resumed>) = 0 [pid 1168] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1172] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1168] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1168] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1173] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1168] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1173] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1173] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1168] <... clone3 resumed> => {parent_tid=[1176]}, 88) = 1176 [pid 1168] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1168] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1168] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1173] <... clone3 resumed> => {parent_tid=[1177]}, 88) = 1177 [pid 1173] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1173] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1173] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1176 attached [pid 1176] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1176] rt_sigprocmask(SIG_SETMASK, [], [pid 1163] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- ./strace-static-x86_64: Process 1177 attached [pid 1176] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1177] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1176] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1177] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1177] memfd_create("syzkaller", 0) = 3 [pid 1177] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1176] <... mmap resumed>) = 0x20000000 [ 43.777157][ T1163] EXT4-fs (loop2): Total free blocks count 0 [ 43.795101][ T1163] EXT4-fs (loop2): Free/Dirty block details [ 43.801115][ T1163] EXT4-fs (loop2): free_blocks=2415919504 [ 43.808212][ T1163] EXT4-fs (loop2): dirty_blocks=32 [ 43.813564][ T1163] EXT4-fs (loop2): Block reservation details [ 43.819788][ T1163] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 43.829854][ T1154] EXT4-fs (loop4): This should not happen!! Data will be lost [ 43.829854][ T1154] [pid 1176] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1168] <... futex resumed>) = 0 [pid 1168] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1172] <... futex resumed>) = 0 [pid 1168] <... futex resumed>) = 1 [pid 1172] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1168] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1172] <... open resumed>) = -1 EFAULT (Bad address) [pid 1172] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1168] <... futex resumed>) = 0 [pid 1172] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1168] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1172] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1168] <... futex resumed>) = 0 [pid 1171] <... futex resumed>) = ? [pid 1168] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1154] +++ killed by SIGBUS +++ [pid 1153] +++ killed by SIGBUS +++ [pid 1177] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1176] <... futex resumed>) = 1 [pid 1171] +++ killed by SIGBUS +++ [pid 1163] +++ killed by SIGBUS +++ [pid 1155] +++ killed by SIGBUS +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1153, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1155, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 301] umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] <... openat resumed>) = 3 [pid 298] <... openat resumed>) = 3 [pid 301] newfstatat(3, "", [pid 298] newfstatat(3, "", [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, [pid 298] getdents64(3, [pid 301] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 298] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./32/binderfs", [pid 298] newfstatat(AT_FDCWD, "./34/binderfs", [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./32/binderfs" [pid 298] unlink("./34/binderfs" [pid 301] <... unlink resumed>) = 0 [pid 298] <... unlink resumed>) = 0 [pid 301] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [ 43.837256][ T1172] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 43.840018][ T1155] EXT4-fs (loop1): This should not happen!! Data will be lost [ 43.840018][ T1155] [ 43.856359][ T1162] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 43.865938][ T1172] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 298] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1177] <... write resumed>) = 1048576 [pid 1176] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1162] +++ killed by SIGBUS +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1162, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 1177] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1177] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1177] ioctl(4, LOOP_SET_FD, 3 [pid 1168] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 299] <... restart_syscall resumed>) = 0 [pid 299] umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./34/binderfs") = 0 [pid 299] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1177] <... ioctl resumed>) = 0 [pid 1177] close(3) = 0 [pid 1177] close(4 [pid 301] <... umount2 resumed>) = 0 [pid 298] <... umount2 resumed>) = 0 [pid 301] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] newfstatat(AT_FDCWD, "./32/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./34/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./32/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] openat(AT_FDCWD, "./34/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] <... openat resumed>) = 4 [pid 298] <... openat resumed>) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, [pid 301] getdents64(4, [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 43.882703][ T1162] EXT4-fs (loop2): This should not happen!! Data will be lost [ 43.882703][ T1162] [ 43.891630][ T1172] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.891630][ T1172] [ 43.901541][ T1177] loop3: detected capacity change from 0 to 2048 [ 43.906572][ T1172] EXT4-fs (loop0): Total free blocks count 0 [ 43.919608][ T1172] EXT4-fs (loop0): Free/Dirty block details [ 43.925588][ T1172] EXT4-fs (loop0): free_blocks=2415919504 [ 43.931174][ T1172] EXT4-fs (loop0): dirty_blocks=32 [pid 299] newfstatat(AT_FDCWD, "./34/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 298] close(4 [pid 299] openat(AT_FDCWD, "./34/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] <... close resumed>) = 0 [pid 299] <... openat resumed>) = 4 [pid 298] rmdir("./34/file1" [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, [pid 301] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, [pid 298] <... rmdir resumed>) = 0 [pid 1172] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1177] <... close resumed>) = 0 [pid 301] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 299] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] close(4 [pid 299] getdents64(4, [pid 298] getdents64(3, [pid 1177] mkdir("./file1", 0777 [pid 301] <... close resumed>) = 0 [pid 299] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 298] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] rmdir("./32/file1" [pid 299] close(4 [pid 298] close(3 [pid 301] <... rmdir resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 301] getdents64(3, [pid 299] rmdir("./34/file1" [pid 298] rmdir("./34" [pid 301] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 298] <... rmdir resumed>) = 0 [pid 301] close(3 [pid 299] getdents64(3, [pid 298] mkdir("./35", 0777 [pid 301] <... close resumed>) = 0 [pid 299] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 298] <... mkdir resumed>) = 0 [pid 301] rmdir("./32" [pid 299] close(3 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 301] <... rmdir resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 298] <... openat resumed>) = 3 [pid 301] mkdir("./33", 0777 [pid 299] rmdir("./34" [pid 298] ioctl(3, LOOP_CLR_FD [pid 301] <... mkdir resumed>) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 299] mkdir("./35", 0777 [pid 298] close(3 [pid 301] <... openat resumed>) = 3 [pid 299] <... mkdir resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 301] ioctl(3, LOOP_CLR_FD [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 299] <... openat resumed>) = 3 [pid 301] close(3 [pid 299] ioctl(3, LOOP_CLR_FD [pid 298] <... clone resumed>, child_tidptr=0x55558909e690) = 1179 [pid 301] <... close resumed>) = 0 [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] close(3 [pid 301] <... clone resumed>, child_tidptr=0x55558909e690) = 1180 [pid 299] <... close resumed>) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1181 [pid 1176] <... futex resumed>) = ? ./strace-static-x86_64: Process 1181 attached ./strace-static-x86_64: Process 1180 attached ./strace-static-x86_64: Process 1179 attached [pid 1177] <... mkdir resumed>) = 0 [pid 1176] +++ killed by SIGBUS +++ [pid 1177] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 1179] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1179] chdir("./35") = 0 [pid 1179] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1179] setpgid(0, 0) = 0 [pid 1180] set_robust_list(0x55558909e6a0, 24 [pid 1179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1180] <... set_robust_list resumed>) = 0 [pid 1180] chdir("./33" [pid 1179] <... openat resumed>) = 3 [pid 1180] <... chdir resumed>) = 0 [pid 1180] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1180] setpgid(0, 0) = 0 [pid 1180] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1180] write(3, "1000", 4) = 4 [pid 1180] close(3) = 0 [pid 1180] symlink("/dev/binderfs", "./binderfs" [pid 1179] write(3, "1000", 4executing program [pid 1180] <... symlink resumed>) = 0 [pid 1180] write(1, "executing program\n", 18) = 18 [pid 1180] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1180] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1180] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1180] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1180] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1180] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1179] <... write resumed>) = 4 [pid 1180] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1180] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1182]}, 88) = 1182 [pid 1179] close(3 [pid 1180] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1180] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1180] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1181] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1181] chdir("./35") = 0 [pid 1181] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1181] setpgid(0, 0) = 0 [pid 1181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1179] <... close resumed>) = 0 [pid 1179] symlink("/dev/binderfs", "./binderfs" [pid 1181] <... openat resumed>) = 3 [pid 1181] write(3, "1000", 4) = 4 [pid 1179] <... symlink resumed>) = 0 [pid 1181] close(3 executing program [pid 1179] write(1, "executing program\n", 18) = 18 [pid 1181] <... close resumed>) = 0 [pid 1179] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1181] symlink("/dev/binderfs", "./binderfs" [pid 1179] <... futex resumed>) = 0 [pid 1181] <... symlink resumed>) = 0 executing program [pid 1179] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1181] write(1, "executing program\n", 18) = 18 [pid 1179] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1181] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1179] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1181] <... futex resumed>) = 0 [pid 1179] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1181] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1181] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1179] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1181] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1179] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1181] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1179] <... mprotect resumed>) = 0 [pid 1181] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1181] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1179] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1181] <... mprotect resumed>) = 0 [pid 1179] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1181] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1179] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1183]}, 88) = 1183 [pid 1172] +++ killed by SIGBUS +++ [pid 1168] +++ killed by SIGBUS +++ ./strace-static-x86_64: Process 1183 attached [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1168, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 297] restart_syscall(<... resuming interrupted clone ...> [pid 1181] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1181] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1184]}, 88) = 1184 [pid 1181] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1181] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1181] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1182 attached [pid 1182] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1182] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1182] memfd_create("syzkaller", 0) = 3 [pid 1182] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1179] rt_sigprocmask(SIG_SETMASK, [], [pid 1183] set_robust_list(0x7f13c8ce49a0, 24./strace-static-x86_64: Process 1184 attached [pid 1179] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1183] <... set_robust_list resumed>) = 0 [pid 1184] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1183] rt_sigprocmask(SIG_SETMASK, [], [pid 1179] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... restart_syscall resumed>) = 0 [pid 1184] rt_sigprocmask(SIG_SETMASK, [], [pid 1183] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1179] <... futex resumed>) = 0 [pid 297] umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1179] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./32/binderfs") = 0 [pid 297] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1184] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1183] memfd_create("syzkaller", 0 [pid 1184] memfd_create("syzkaller", 0 [pid 1183] <... memfd_create resumed>) = 3 [pid 1182] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 297] <... umount2 resumed>) = 0 [pid 1184] <... memfd_create resumed>) = 3 [pid 1183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1183] <... mmap resumed>) = 0x7f13c08c4000 [pid 1184] <... mmap resumed>) = 0x7f13c08c4000 [pid 1177] <... mount resumed>) = 0 [pid 297] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1183] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1182] <... write resumed>) = 1048576 [pid 1177] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./32/file1", [pid 1177] <... openat resumed>) = 3 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./32/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 1177] chdir("./file1" [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1177] <... chdir resumed>) = 0 [pid 297] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./32/file1" [pid 1184] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1182] munmap(0x7f13c08c4000, 138412032 [pid 1177] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 297] <... rmdir resumed>) = 0 [pid 1177] <... openat resumed>) = 4 [pid 297] getdents64(3, [pid 1177] ioctl(4, LOOP_CLR_FD) = 0 [ 43.939868][ T1172] EXT4-fs (loop0): Block reservation details [ 43.945801][ T1172] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 43.966898][ T1172] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 43.979847][ T1172] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.979847][ T1172] [pid 297] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1177] close(4 [pid 297] close(3 [pid 1184] <... write resumed>) = 1048576 [pid 1183] <... write resumed>) = 1048576 [pid 1182] <... munmap resumed>) = 0 [pid 1177] <... close resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 1183] munmap(0x7f13c08c4000, 138412032 [pid 1182] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 297] rmdir("./32" [pid 1184] munmap(0x7f13c08c4000, 138412032 [pid 1177] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1173] <... futex resumed>) = 0 [pid 1177] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1173] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1177] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1173] <... futex resumed>) = 0 [pid 297] <... rmdir resumed>) = 0 [pid 1183] <... munmap resumed>) = 0 [pid 1182] <... openat resumed>) = 4 [pid 1177] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1173] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1177] <... open resumed>) = 4 [pid 297] mkdir("./33", 0777 [pid 1177] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1173] <... futex resumed>) = 0 [pid 1177] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1173] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... mkdir resumed>) = 0 [pid 1177] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1173] <... futex resumed>) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1184] <... munmap resumed>) = 0 [pid 1183] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1182] ioctl(4, LOOP_SET_FD, 3 [pid 1177] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1173] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... openat resumed>) = 3 [pid 1184] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1183] <... openat resumed>) = 4 [pid 1177] <... open resumed>) = 5 [pid 1184] <... openat resumed>) = 4 [pid 1177] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1184] ioctl(4, LOOP_SET_FD, 3 [pid 1177] <... futex resumed>) = 1 [pid 1173] <... futex resumed>) = 0 [pid 1182] <... ioctl resumed>) = 0 [pid 1177] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1182] close(3) = 0 [pid 1182] close(4) = 0 [pid 1182] mkdir("./file1", 0777) = 0 [pid 1182] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 1183] ioctl(4, LOOP_SET_FD, 3 [pid 1184] <... ioctl resumed>) = 0 [pid 1183] <... ioctl resumed>) = 0 [pid 1177] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1173] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] ioctl(3, LOOP_CLR_FD [pid 1184] close(3 [pid 1177] creat("./bus", 000 [pid 1184] <... close resumed>) = 0 [pid 1183] close(3 [pid 1177] <... creat resumed>) = 6 [pid 1173] <... futex resumed>) = 0 [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1184] close(4 [pid 1177] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1173] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] close(3 [pid 1183] <... close resumed>) = 0 [pid 1183] close(4) = 0 [pid 1183] mkdir("./file1", 0777) = 0 [pid 1183] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 1184] <... close resumed>) = 0 [pid 1184] mkdir("./file1", 0777) = 0 executing program [pid 1173] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1184] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 1177] <... futex resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 1173] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1177] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1173] <... futex resumed>) = 0 [pid 1177] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1173] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1177] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1173] <... futex resumed>) = 0 [pid 297] <... clone resumed>, child_tidptr=0x55558909e690) = 1189 [pid 1173] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1177] pwrite64(6, "+", 1, 0 [pid 1173] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1189 attached [pid 1189] set_robust_list(0x55558909e6a0, 24 [pid 1177] <... pwrite64 resumed>) = 1 [pid 1189] <... set_robust_list resumed>) = 0 [pid 1189] chdir("./33") = 0 [pid 1189] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1189] setpgid(0, 0) = 0 [pid 1189] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1189] write(3, "1000", 4) = 4 [pid 1189] close(3) = 0 [pid 1189] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1189] write(1, "executing program\n", 18) = 18 [pid 1189] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1189] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1189] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1189] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1189] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1189] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1189] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1190]}, 88) = 1190 [pid 1189] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1189] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1189] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1190 attached [pid 1190] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1190] rt_sigprocmask(SIG_SETMASK, [], [pid 1177] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1190] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1190] memfd_create("syzkaller", 0) = 3 [pid 1190] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1177] <... futex resumed>) = 1 [pid 1173] <... futex resumed>) = 0 [pid 1177] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1173] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1177] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1173] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1177] open("./bus", O_RDONLY) = 7 [pid 1177] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1173] <... futex resumed>) = 0 [pid 1177] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1173] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1177] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1173] <... futex resumed>) = 0 [pid 1177] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1173] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1177] <... copy_file_range resumed>) = 1 [pid 1173] <... futex resumed>) = 0 [pid 1177] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1173] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1177] <... futex resumed>) = 0 [pid 1173] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1177] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1173] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1173] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1173] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1191]}, 88) = 1191 [pid 1173] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1173] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1173] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1190] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 1191 attached [pid 1191] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1191] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1191] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1183] <... mount resumed>) = 0 [pid 1183] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1182] <... mount resumed>) = 0 [pid 1182] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1182] chdir("./file1") = 0 [pid 1182] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1183] chdir("./file1" [pid 1182] ioctl(4, LOOP_CLR_FD) = 0 [pid 1182] close(4) = 0 [pid 1182] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1180] <... futex resumed>) = 0 [pid 1180] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1180] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1183] <... chdir resumed>) = 0 [pid 1182] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1183] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1182] <... open resumed>) = 4 [pid 1182] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1180] <... futex resumed>) = 0 [pid 1180] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1182] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1180] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1182] <... open resumed>) = 5 [pid 1182] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1180] <... futex resumed>) = 0 [pid 1182] creat("./bus", 000 [pid 1180] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1182] <... creat resumed>) = 6 [pid 1180] <... futex resumed>) = 0 [pid 1182] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1180] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1182] <... futex resumed>) = 0 [pid 1180] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1182] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1180] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1182] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1180] <... futex resumed>) = 0 [pid 1182] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1180] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1182] <... futex resumed>) = 0 [pid 1180] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1183] <... openat resumed>) = 4 [pid 1182] pwrite64(6, "+", 1, 0 [pid 1180] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1182] <... pwrite64 resumed>) = 1 [pid 1180] <... futex resumed>) = 0 [pid 1183] ioctl(4, LOOP_CLR_FD [pid 1182] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1180] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1191] <... mmap resumed>) = 0x20000000 [pid 1190] <... write resumed>) = 1048576 [pid 1183] <... ioctl resumed>) = 0 [pid 1182] <... futex resumed>) = 0 [pid 1180] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1190] munmap(0x7f13c08c4000, 138412032 [pid 1184] <... mount resumed>) = 0 [pid 1183] close(4 [pid 1182] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1180] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1191] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1190] <... munmap resumed>) = 0 [pid 1184] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1183] <... close resumed>) = 0 [pid 1182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1180] <... futex resumed>) = 0 [pid 1191] <... futex resumed>) = 1 [pid 1190] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1184] <... openat resumed>) = 3 [pid 1183] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1182] open("./bus", O_RDONLY [pid 1180] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1173] <... futex resumed>) = 0 [pid 1191] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1190] <... openat resumed>) = 4 [pid 1184] chdir("./file1" [pid 1183] <... futex resumed>) = 1 [pid 1182] <... open resumed>) = 7 [pid 1179] <... futex resumed>) = 0 [ 44.030296][ T1182] loop4: detected capacity change from 0 to 2048 [ 44.031704][ T1184] loop2: detected capacity change from 0 to 2048 [ 44.038454][ T1183] loop1: detected capacity change from 0 to 2048 [pid 1173] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1190] ioctl(4, LOOP_SET_FD, 3 [pid 1184] <... chdir resumed>) = 0 [pid 1183] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1182] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1179] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1177] <... futex resumed>) = 0 [pid 1173] <... futex resumed>) = 1 [pid 1184] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1182] <... futex resumed>) = 1 [pid 1180] <... futex resumed>) = 0 [pid 1184] <... openat resumed>) = 4 [pid 1182] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1180] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1184] ioctl(4, LOOP_CLR_FD [pid 1182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1180] <... futex resumed>) = 0 [pid 1184] <... ioctl resumed>) = 0 [pid 1182] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1180] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1184] close(4 [pid 1182] <... copy_file_range resumed>) = 1 [pid 1180] <... futex resumed>) = 0 [pid 1184] <... close resumed>) = 0 [pid 1182] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1180] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1184] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1182] <... futex resumed>) = 0 [pid 1180] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1184] <... futex resumed>) = 1 [pid 1182] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1181] <... futex resumed>) = 0 [pid 1180] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1184] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1181] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1180] <... mprotect resumed>) = 0 [pid 1184] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1181] <... futex resumed>) = 0 [pid 1180] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1184] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1183] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1181] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1180] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1179] <... futex resumed>) = 0 [pid 1177] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1173] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1190] <... ioctl resumed>) = 0 [pid 1184] <... open resumed>) = 4 [pid 1180] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1184] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1181] <... futex resumed>) = 0 [pid 1180] <... clone3 resumed> => {parent_tid=[1196]}, 88) = 1196 [pid 1184] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1183] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1181] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1180] rt_sigprocmask(SIG_SETMASK, [], [pid 1179] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1177] <... open resumed>) = -1 EFAULT (Bad address) [pid 1184] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1181] <... futex resumed>) = 0 [pid 1180] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1184] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1181] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1180] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1184] <... open resumed>) = 5 [pid 1180] <... futex resumed>) = 0 [pid 1184] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1180] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1184] <... futex resumed>) = 1 [pid 1181] <... futex resumed>) = 0 [pid 1184] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1181] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1184] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1181] <... futex resumed>) = 0 [pid 1184] creat("./bus", 000 [pid 1181] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1184] <... creat resumed>) = 6 [pid 1184] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1181] <... futex resumed>) = 0 [pid 1184] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1181] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1184] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1181] <... futex resumed>) = 0 [pid 1184] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1181] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1184] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1183] <... open resumed>) = 4 [pid 1177] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1190] close(3 [pid 1184] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1181] <... futex resumed>) = 0 [pid 1184] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1181] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1184] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1181] <... futex resumed>) = 0 [pid 1184] pwrite64(6, "+", 1, 0 [pid 1181] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1184] <... pwrite64 resumed>) = 1 [pid 1184] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1181] <... futex resumed>) = 0 [pid 1184] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1181] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1184] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1181] <... futex resumed>) = 0 [pid 1184] open("./bus", O_RDONLY [pid 1181] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1184] <... open resumed>) = 7 [pid 1184] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1181] <... futex resumed>) = 0 [pid 1184] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1181] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1184] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1181] <... futex resumed>) = 0 [pid 1184] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1181] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1184] <... copy_file_range resumed>) = 1 [pid 1181] <... futex resumed>) = 0 [pid 1184] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1181] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1184] <... futex resumed>) = 0 [pid 1181] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1184] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1181] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1181] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1181] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0}./strace-static-x86_64: Process 1196 attached [pid 1196] set_robust_list(0x7f13c8cc39a0, 24 [pid 1190] <... close resumed>) = 0 [pid 1183] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1177] <... futex resumed>) = 1 [pid 1173] <... futex resumed>) = 0 [pid 1196] <... set_robust_list resumed>) = 0 [pid 1190] close(4 [pid 1183] <... futex resumed>) = 1 [pid 1181] <... clone3 resumed> => {parent_tid=[1197]}, 88) = 1197 [pid 1179] <... futex resumed>) = 0 [pid 1177] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1173] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1196] rt_sigprocmask(SIG_SETMASK, [], [pid 1190] <... close resumed>) = 0 [pid 1183] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1181] rt_sigprocmask(SIG_SETMASK, [], [pid 1179] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1177] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1173] <... futex resumed>) = 0 [pid 1196] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1183] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1181] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1179] <... futex resumed>) = 0 [pid 1196] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1197] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1197] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1197] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1190] mkdir("./file1", 0777) = 0 [pid 1190] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 1180] <... futex resumed>) = 0 [pid 1179] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1181] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1183] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1180] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1173] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1197] <... futex resumed>) = 0 [pid 1182] <... futex resumed>) = 0 [pid 1181] <... futex resumed>) = 1 [pid 1180] <... futex resumed>) = 1 [pid 1197] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1183] <... open resumed>) = 5 [pid 1182] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1181] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1180] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1182] <... open resumed>) = -1 EFAULT (Bad address) [pid 1197] <... mmap resumed>) = 0x20000000 [pid 1183] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1182] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1180] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1183] <... futex resumed>) = 1 [pid 1182] <... futex resumed>) = 0 [pid 1180] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1179] <... futex resumed>) = 0 [ 44.090131][ T1190] loop0: detected capacity change from 0 to 2048 [ 44.107328][ T1177] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 44.123496][ T1177] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 1183] creat("./bus", 000 [pid 1180] <... futex resumed>) = 0 [pid 1179] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1183] <... creat resumed>) = 6 [pid 1180] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1179] <... futex resumed>) = 0 [pid 1183] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1179] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1183] <... futex resumed>) = 0 [pid 1179] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1183] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1179] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1183] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1179] <... futex resumed>) = 0 [pid 1183] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1179] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1183] <... futex resumed>) = 0 [pid 1179] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1183] pwrite64(6, "+", 1, 0 [pid 1179] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1183] <... pwrite64 resumed>) = 1 [pid 1179] <... futex resumed>) = 0 [pid 1197] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1183] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1179] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1197] <... futex resumed>) = 1 [pid 1183] <... futex resumed>) = 0 [pid 1181] <... futex resumed>) = 0 [pid 1179] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1197] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1183] open("./bus", O_RDONLY [pid 1181] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1179] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1184] <... futex resumed>) = 0 [pid 1183] <... open resumed>) = 7 [pid 1181] <... futex resumed>) = 1 [pid 1179] <... futex resumed>) = 0 [pid 1184] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1183] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1181] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1184] <... open resumed>) = -1 EFAULT (Bad address) [pid 1183] <... futex resumed>) = 0 [pid 1179] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1184] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1183] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1179] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1184] <... futex resumed>) = 1 [pid 1183] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1181] <... futex resumed>) = 0 [pid 1179] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1184] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1183] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1181] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1179] <... futex resumed>) = 0 [pid 1184] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1183] <... copy_file_range resumed>) = 1 [pid 1181] <... futex resumed>) = 0 [pid 1179] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1183] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1181] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1179] <... futex resumed>) = 0 [pid 1173] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1183] <... futex resumed>) = 0 [pid 1179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1183] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1179] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1179] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1179] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1179] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1199]}, 88) = 1199 [pid 1179] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1179] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 44.129809][ T1182] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, [ 44.135639][ T1177] EXT4-fs (loop3): This should not happen!! Data will be lost [ 44.135639][ T1177] [ 44.135640][ T1182] block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 44.156883][ T1184] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 44.162179][ T1177] EXT4-fs (loop3): Total free blocks count 0 [pid 1179] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1199 attached [pid 1199] set_robust_list(0x7f13c8cc39a0, 24 [pid 1190] <... mount resumed>) = 0 [pid 1190] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1190] chdir("./file1") = 0 [pid 1190] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1190] ioctl(4, LOOP_CLR_FD) = 0 [pid 1190] close(4 [pid 1199] <... set_robust_list resumed>) = 0 [pid 1190] <... close resumed>) = 0 [pid 1180] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1181] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1190] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1189] <... futex resumed>) = 0 [pid 1189] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1189] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1190] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 1190] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1179] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1190] <... futex resumed>) = 1 [pid 1189] <... futex resumed>) = 0 [pid 1179] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1189] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1183] <... futex resumed>) = 0 [pid 1179] <... futex resumed>) = 1 [pid 1189] <... futex resumed>) = 0 [pid 1183] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1179] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1189] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1183] <... open resumed>) = -1 EFAULT (Bad address) [pid 1183] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1179] <... futex resumed>) = 0 [pid 1183] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1179] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1183] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1179] <... futex resumed>) = 0 [pid 1183] write(-1, "\x30\x78\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65983 [pid 1179] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1183] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 1183] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1179] <... futex resumed>) = 0 [pid 1183] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1199] rt_sigprocmask(SIG_SETMASK, [], [pid 1190] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 1190] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1189] <... futex resumed>) = 0 [pid 1190] creat("./bus", 000 [pid 1189] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1190] <... creat resumed>) = 6 [pid 1189] <... futex resumed>) = 0 [pid 1190] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1189] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1190] <... futex resumed>) = 0 [pid 1189] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1190] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1189] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1199] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1190] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1189] <... futex resumed>) = 0 [pid 1190] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1189] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1190] <... futex resumed>) = 0 [pid 1189] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1190] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1189] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1190] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1189] <... futex resumed>) = 0 [ 44.180348][ T1182] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 44.182059][ T1177] EXT4-fs (loop3): Free/Dirty block details [ 44.199909][ T1177] EXT4-fs (loop3): free_blocks=2415919504 [ 44.200422][ T1184] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 44.205789][ T1177] EXT4-fs (loop3): dirty_blocks=32 [ 44.223095][ T1182] EXT4-fs (loop4): This should not happen!! Data will be lost [ 44.223095][ T1182] [ 44.233087][ T1177] EXT4-fs (loop3): Block reservation details [pid 1190] pwrite64(6, "+", 1, 0 [pid 1189] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1190] <... pwrite64 resumed>) = 1 [pid 1190] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1189] <... futex resumed>) = 0 [pid 1190] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1189] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1190] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1189] <... futex resumed>) = 0 [pid 1190] open("./bus", O_RDONLY [pid 1189] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1190] <... open resumed>) = 7 [pid 1190] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1189] <... futex resumed>) = 0 [pid 1190] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1189] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1190] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1189] <... futex resumed>) = 0 [pid 1199] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1190] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1189] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1190] <... copy_file_range resumed>) = 1 [pid 1189] <... futex resumed>) = 0 [pid 1190] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1189] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1190] <... futex resumed>) = 0 [pid 1189] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1190] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1189] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1199] <... mmap resumed>) = 0x20000000 [pid 1189] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1199] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1189] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1189] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1201]}, 88) = 1201 [pid 1189] rt_sigprocmask(SIG_SETMASK, [], [pid 1179] exit_group(0 [pid 1189] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1183] <... futex resumed>) = ? [pid 1179] <... exit_group resumed>) = ? [pid 1189] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1183] +++ exited with 0 +++ [pid 1189] <... futex resumed>) = 0 [pid 1189] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1201 attached [pid 1199] <... futex resumed>) = ? [ 44.239120][ T1182] EXT4-fs (loop4): Total free blocks count 0 [ 44.247510][ T1177] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 44.249815][ T1184] EXT4-fs (loop2): This should not happen!! Data will be lost [ 44.249815][ T1184] [ 44.253783][ T1182] EXT4-fs (loop4): Free/Dirty block details [ 44.263768][ T1184] EXT4-fs (loop2): Total free blocks count 0 [ 44.269738][ T1199] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 1201] set_robust_list(0x7f13c8cc39a0, 24 [pid 1177] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1201] <... set_robust_list resumed>) = 0 [pid 1201] rt_sigprocmask(SIG_SETMASK, [], [pid 1191] <... futex resumed>) = ? [pid 1189] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 44.275196][ T1184] EXT4-fs (loop2): Free/Dirty block details [ 44.289641][ T1182] EXT4-fs (loop4): free_blocks=2415919504 [ 44.295981][ T1184] EXT4-fs (loop2): free_blocks=2415919504 [ 44.300628][ T1182] EXT4-fs (loop4): dirty_blocks=32 [ 44.306237][ T1184] EXT4-fs (loop2): dirty_blocks=32 [ 44.312706][ T1177] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 44.316420][ T1184] EXT4-fs (loop2): Block reservation details [pid 1201] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1191] +++ killed by SIGBUS +++ [pid 1189] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1201] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1190] <... futex resumed>) = 0 [pid 1189] <... futex resumed>) = 1 [pid 1201] <... mmap resumed>) = 0x20000000 [pid 1190] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1189] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1190] <... open resumed>) = -1 EFAULT (Bad address) [pid 1190] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1189] <... futex resumed>) = 0 [pid 1190] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1189] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1190] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1189] <... futex resumed>) = 0 [pid 1189] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1201] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 44.331133][ T1190] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 44.334058][ T1199] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 44.350843][ T1182] EXT4-fs (loop4): Block reservation details [ 44.360524][ T1199] EXT4-fs (loop1): This should not happen!! Data will be lost [ 44.360524][ T1199] [ 44.367180][ T1184] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 44.375635][ T1199] EXT4-fs (loop1): Total free blocks count 0 [pid 1201] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1189] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1184] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1177] +++ killed by SIGBUS +++ [pid 1173] +++ killed by SIGBUS +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1173, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 300] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 1184] +++ killed by SIGBUS +++ [pid 300] umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./34/binderfs") = 0 [pid 300] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1197] <... futex resumed>) = ? [ 44.382269][ T1177] EXT4-fs (loop3): This should not happen!! Data will be lost [ 44.382269][ T1177] [ 44.387174][ T1199] EXT4-fs (loop1): Free/Dirty block details [ 44.397618][ T1190] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 44.402495][ T1199] EXT4-fs (loop1): free_blocks=2415919504 [ 44.417084][ T1190] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.417084][ T1190] [ 44.420001][ T1182] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 44.434870][ T1190] EXT4-fs (loop0): Total free blocks count 0 [pid 1182] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1196] <... futex resumed>) = ? [pid 1196] +++ killed by SIGBUS +++ [ 44.435244][ T1199] EXT4-fs (loop1): dirty_blocks=32 [ 44.441325][ T1190] EXT4-fs (loop0): Free/Dirty block details [ 44.446855][ T1197] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 44.452668][ T1190] EXT4-fs (loop0): free_blocks=2415919504 [ 44.463977][ T1199] EXT4-fs (loop1): Block reservation details [ 44.470622][ T1190] EXT4-fs (loop0): dirty_blocks=32 [ 44.475423][ T1197] EXT4-fs (loop2): This should not happen!! Data will be lost [ 44.475423][ T1197] [pid 1199] +++ exited with 0 +++ [pid 1197] +++ killed by SIGBUS +++ [pid 1181] +++ killed by SIGBUS +++ [pid 1179] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1181, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=18} --- [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1179, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- [pid 299] umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 299] <... openat resumed>) = 3 [pid 298] <... openat resumed>) = 3 [pid 299] newfstatat(3, "", [pid 298] newfstatat(3, "", [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, [pid 298] getdents64(3, [pid 299] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 298] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./35/binderfs", [pid 298] newfstatat(AT_FDCWD, "./35/binderfs", [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./35/binderfs" [pid 298] unlink("./35/binderfs" [pid 299] <... unlink resumed>) = 0 [pid 298] <... unlink resumed>) = 0 [pid 299] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1190] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1201] <... futex resumed>) = ? [pid 1201] +++ killed by SIGBUS +++ [pid 1182] +++ killed by SIGBUS +++ [pid 1180] +++ killed by SIGBUS +++ [pid 300] <... umount2 resumed>) = 0 [ 44.489728][ T1199] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 44.490519][ T1190] EXT4-fs (loop0): Block reservation details [ 44.496725][ T1182] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 44.502645][ T1190] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 44.514132][ T1182] EXT4-fs (loop4): This should not happen!! Data will be lost [ 44.514132][ T1182] [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1180, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 301] umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./33/binderfs") = 0 [pid 301] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./34/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./34/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./34/file1") = 0 [pid 300] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./34") = 0 [pid 300] mkdir("./35", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1202 ./strace-static-x86_64: Process 1202 attached [pid 1202] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1202] chdir("./35") = 0 [pid 1202] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1202] setpgid(0, 0) = 0 [pid 1202] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1202] write(3, "1000", 4) = 4 [pid 1202] close(3) = 0 [pid 1202] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1202] write(1, "executing program\n", 18executing program ) = 18 [pid 1202] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1202] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1202] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1202] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1202] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1202] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1202] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1203]}, 88) = 1203 [pid 1202] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1202] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] <... umount2 resumed>) = 0 [pid 1202] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 299] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 1203 attached [pid 1203] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1203] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1203] memfd_create("syzkaller", 0) = 3 [pid 1203] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1203] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./35/file1", [pid 1203] <... write resumed>) = 1048576 [pid 1203] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1203] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 44.532102][ T327] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 44.539013][ T1190] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 44.566129][ T327] EXT4-fs (loop1): This should not happen!! Data will be lost [ 44.566129][ T327] [ 44.573087][ T1190] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.573087][ T1190] [pid 1203] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1190] +++ killed by SIGBUS +++ [pid 1189] +++ killed by SIGBUS +++ [pid 301] <... umount2 resumed>) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./33/file1", [pid 299] openat(AT_FDCWD, "./35/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] <... openat resumed>) = 4 [pid 301] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] newfstatat(4, "", [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] openat(AT_FDCWD, "./33/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 299] getdents64(4, [pid 301] <... openat resumed>) = 4 [pid 299] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1189, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 301] newfstatat(4, "", [pid 299] getdents64(4, [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] getdents64(4, [pid 299] close(4 [pid 301] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 299] <... close resumed>) = 0 [pid 301] getdents64(4, [pid 299] rmdir("./35/file1" [pid 297] umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] close(4 [pid 299] getdents64(3, [pid 297] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] <... close resumed>) = 0 [pid 299] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 297] <... openat resumed>) = 3 [pid 301] rmdir("./33/file1" [pid 299] close(3 [pid 297] newfstatat(3, "", [pid 301] <... rmdir resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, [pid 299] rmdir("./35" [pid 301] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 297] getdents64(3, [pid 301] close(3 [pid 299] mkdir("./36", 0777 [pid 301] <... close resumed>) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 297] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1203] close(3 [pid 298] <... umount2 resumed>) = 0 [pid 297] umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./33/binderfs" [pid 301] rmdir("./33" [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 297] <... unlink resumed>) = 0 [pid 297] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./35/file1", [pid 301] <... rmdir resumed>) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] mkdir("./34", 0777 [pid 299] <... openat resumed>) = 3 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... mkdir resumed>) = 0 [pid 299] ioctl(3, LOOP_CLR_FD [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 301] <... openat resumed>) = 3 [pid 299] close(3 [pid 301] ioctl(3, LOOP_CLR_FD [pid 299] <... close resumed>) = 0 [pid 298] openat(AT_FDCWD, "./35/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./35/file1") = 0 [pid 298] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./35") = 0 [pid 298] mkdir("./36", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 301] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 301] close(3 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] <... close resumed>) = 0 [pid 299] <... clone resumed>, child_tidptr=0x55558909e690) = 1204 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] <... clone resumed>, child_tidptr=0x55558909e690) = 1205 [pid 1203] <... close resumed>) = 0 [pid 1203] close(4) = 0 [pid 1203] mkdir("./file1", 0777) = 0 [pid 1203] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue"./strace-static-x86_64: Process 1205 attached [pid 1205] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1205] chdir("./36") = 0 [pid 1205] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1205] setpgid(0, 0 [pid 301] <... clone resumed>, child_tidptr=0x55558909e690) = 1206 [pid 1205] <... setpgid resumed>) = 0 [pid 1205] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 297] <... umount2 resumed>) = 0 [pid 1205] <... openat resumed>) = 3 [pid 1205] write(3, "1000", 4) = 4 [pid 1205] close(3) = 0 [pid 1205] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1205] write(1, "executing program\n", 18executing program ) = 18 [pid 1205] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1205] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1205] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1205] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 297] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1205] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1205] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1205] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1208]}, 88) = 1208 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 1206 attached [pid 297] newfstatat(AT_FDCWD, "./33/file1", ./strace-static-x86_64: Process 1204 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1206] set_robust_list(0x55558909e6a0, 24 [pid 1204] set_robust_list(0x55558909e6a0, 24 [pid 297] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 1206] <... set_robust_list resumed>) = 0 [pid 1204] <... set_robust_list resumed>) = 0 [pid 297] openat(AT_FDCWD, "./33/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1206] chdir("./34" [pid 297] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1206] <... chdir resumed>) = 0 [pid 1204] chdir("./36" [pid 297] getdents64(4, [pid 1206] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1204] <... chdir resumed>) = 0 [pid 297] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1205] rt_sigprocmask(SIG_SETMASK, [], [pid 1206] <... prctl resumed>) = 0 [pid 297] close(4 [pid 1204] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 297] <... close resumed>) = 0 [pid 1205] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1206] setpgid(0, 0 [pid 297] rmdir("./33/file1" [pid 1204] <... prctl resumed>) = 0 [pid 1205] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1205] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1206] <... setpgid resumed>) = 0 [pid 297] <... rmdir resumed>) = 0 [pid 1204] setpgid(0, 0 [pid 297] getdents64(3, [pid 1206] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1204] <... setpgid resumed>) = 0 [pid 297] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 297] close(3 [pid 1206] <... openat resumed>) = 3 [pid 1206] write(3, "1000", 4 [pid 1204] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 297] <... close resumed>) = 0 [pid 1206] <... write resumed>) = 4 [pid 1204] <... openat resumed>) = 3 [pid 297] rmdir("./33" [pid 1206] close(3 [pid 1204] write(3, "1000", 4 [pid 297] <... rmdir resumed>) = 0 [pid 1206] <... close resumed>) = 0 [pid 297] mkdir("./34", 0777 [pid 1206] symlink("/dev/binderfs", "./binderfs" [pid 1204] <... write resumed>) = 4 ./strace-static-x86_64: Process 1208 attached [pid 297] <... mkdir resumed>) = 0 [pid 1206] <... symlink resumed>) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1204] close(3executing program [pid 1206] write(1, "executing program\n", 18 [pid 1204] <... close resumed>) = 0 [pid 297] <... openat resumed>) = 3 [pid 1206] <... write resumed>) = 18 [pid 1204] symlink("/dev/binderfs", "./binderfs" [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 1206] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1204] <... symlink resumed>) = 0 [pid 297] close(3 [pid 1208] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1208] rt_sigprocmask(SIG_SETMASK, [], [pid 297] <... close resumed>) = 0 [pid 1208] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1208] memfd_create("syzkaller", 0) = 3 [pid 1208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1206] <... futex resumed>) = 0 [pid 1204] write(1, "executing program\n", 18executing program [pid 1206] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1204] <... write resumed>) = 18 [pid 297] <... clone resumed>, child_tidptr=0x55558909e690) = 1210 [ 44.589274][ T1203] loop3: detected capacity change from 0 to 2048 [pid 1206] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1204] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1206] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1204] <... futex resumed>) = 0 [pid 1206] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1204] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, ./strace-static-x86_64: Process 1210 attached [pid 1206] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1204] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1203] <... mount resumed>) = 0 [pid 1206] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1203] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1204] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1210] set_robust_list(0x55558909e6a0, 24 [pid 1206] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1204] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1206] <... mprotect resumed>) = 0 [pid 1210] <... set_robust_list resumed>) = 0 [pid 1204] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1203] <... openat resumed>) = 3 [pid 1203] chdir("./file1" [pid 1206] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1204] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1206] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1204] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1206] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1204] <... mprotect resumed>) = 0 [pid 1203] <... chdir resumed>) = 0 [pid 1203] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1204] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1206] <... clone3 resumed> => {parent_tid=[1211]}, 88) = 1211 [pid 1210] chdir("./34" [pid 1206] rt_sigprocmask(SIG_SETMASK, [], [pid 1204] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1210] <... chdir resumed>) = 0 [pid 1206] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1204] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1210] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1206] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1203] ioctl(4, LOOP_CLR_FD) = 0 [pid 1210] <... prctl resumed>) = 0 [pid 1206] <... futex resumed>) = 0 [pid 1204] <... clone3 resumed> => {parent_tid=[1212]}, 88) = 1212 [pid 1206] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1210] setpgid(0, 0 [pid 1204] rt_sigprocmask(SIG_SETMASK, [], [pid 1203] close(4 [pid 1210] <... setpgid resumed>) = 0 [pid 1204] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1203] <... close resumed>) = 0 [pid 1210] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1204] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1203] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1210] <... openat resumed>) = 3 [pid 1204] <... futex resumed>) = 0 [pid 1203] <... futex resumed>) = 1 [pid 1202] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1212 attached ./strace-static-x86_64: Process 1211 attached [pid 1210] write(3, "1000", 4 [pid 1208] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1204] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1203] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1202] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1210] <... write resumed>) = 4 [pid 1203] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1202] <... futex resumed>) = 0 [pid 1210] close(3 [pid 1203] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1202] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1210] <... close resumed>) = 0 [pid 1203] <... open resumed>) = 4 [pid 1210] symlink("/dev/binderfs", "./binderfs" [pid 1203] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1202] <... futex resumed>) = 0 [pid 1210] <... symlink resumed>) = 0 [pid 1203] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULLexecuting program [pid 1202] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1210] write(1, "executing program\n", 18 [pid 1203] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1202] <... futex resumed>) = 0 [pid 1210] <... write resumed>) = 18 [pid 1203] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1202] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1210] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1203] <... open resumed>) = 5 [pid 1210] <... futex resumed>) = 0 [pid 1203] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1210] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1203] <... futex resumed>) = 1 [pid 1202] <... futex resumed>) = 0 [pid 1210] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1203] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1202] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1211] set_robust_list(0x7f13c8ce49a0, 24 [pid 1210] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1203] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1202] <... futex resumed>) = 0 [pid 1211] <... set_robust_list resumed>) = 0 [pid 1210] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1203] creat("./bus", 000 [pid 1202] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1211] rt_sigprocmask(SIG_SETMASK, [], [pid 1210] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1203] <... creat resumed>) = 6 [pid 1211] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1210] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1203] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1210] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1203] <... futex resumed>) = 1 [pid 1211] memfd_create("syzkaller", 0 [pid 1202] <... futex resumed>) = 0 [pid 1210] <... mprotect resumed>) = 0 [pid 1203] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1202] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1211] <... memfd_create resumed>) = 3 [pid 1210] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1203] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1202] <... futex resumed>) = 0 [pid 1211] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1210] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1203] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1202] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1211] <... mmap resumed>) = 0x7f13c08c4000 [pid 1210] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1203] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1203] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1210] <... clone3 resumed> => {parent_tid=[1213]}, 88) = 1213 [pid 1203] <... futex resumed>) = 1 [pid 1202] <... futex resumed>) = 0 [pid 1210] rt_sigprocmask(SIG_SETMASK, [], [pid 1203] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1202] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1210] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1203] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1202] <... futex resumed>) = 0 [pid 1210] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1203] pwrite64(6, "+", 1, 0 [pid 1202] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1210] <... futex resumed>) = 0 [pid 1208] <... write resumed>) = 1048576 [pid 1203] <... pwrite64 resumed>) = 1 [pid 1210] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1203] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1202] <... futex resumed>) = 0 [pid 1203] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1202] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1203] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1202] <... futex resumed>) = 0 [pid 1203] open("./bus", O_RDONLY [pid 1202] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1203] <... open resumed>) = 7 [pid 1203] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1202] <... futex resumed>) = 0 [pid 1203] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1202] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1203] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1202] <... futex resumed>) = 0 [pid 1203] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1202] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1203] <... copy_file_range resumed>) = 1 [pid 1202] <... futex resumed>) = 0 [pid 1203] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1202] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1203] <... futex resumed>) = 0 [pid 1202] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1203] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1202] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1202] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1202] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1214]}, 88) = 1214 [pid 1202] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 1213 attached NULL, 8) = 0 [pid 1213] set_robust_list(0x7f13c8ce49a0, 24 [pid 1212] set_robust_list(0x7f13c8ce49a0, 24 [pid 1208] munmap(0x7f13c08c4000, 138412032 [pid 1202] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1213] <... set_robust_list resumed>) = 0 [pid 1202] <... futex resumed>) = 0 [pid 1213] rt_sigprocmask(SIG_SETMASK, [], [pid 1212] <... set_robust_list resumed>) = 0 [pid 1208] <... munmap resumed>) = 0 [pid 1202] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1213] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1212] rt_sigprocmask(SIG_SETMASK, [], [pid 1208] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1213] memfd_create("syzkaller", 0) = 3 [pid 1213] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 ./strace-static-x86_64: Process 1214 attached [pid 1212] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1211] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1208] <... openat resumed>) = 4 [pid 1214] set_robust_list(0x7f13c8cc39a0, 24 [pid 1212] memfd_create("syzkaller", 0 [pid 1208] ioctl(4, LOOP_SET_FD, 3 [pid 1214] <... set_robust_list resumed>) = 0 [pid 1213] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1212] <... memfd_create resumed>) = 3 [pid 1211] <... write resumed>) = 1048576 [pid 1213] <... write resumed>) = 1048576 [pid 1211] munmap(0x7f13c08c4000, 138412032 [pid 1214] rt_sigprocmask(SIG_SETMASK, [], [pid 1212] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1211] <... munmap resumed>) = 0 [pid 1212] <... mmap resumed>) = 0x7f13c08c4000 [pid 1211] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1214] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1211] <... openat resumed>) = 4 [pid 1213] munmap(0x7f13c08c4000, 138412032 [pid 1211] ioctl(4, LOOP_SET_FD, 3 [pid 1214] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1213] <... munmap resumed>) = 0 [pid 1212] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1208] <... ioctl resumed>) = 0 [pid 1214] <... mmap resumed>) = 0x20000000 [pid 1211] <... ioctl resumed>) = 0 [pid 1211] close(3) = 0 [pid 1211] close(4 [pid 1214] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1213] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1212] <... write resumed>) = 1048576 [pid 1211] <... close resumed>) = 0 [pid 1208] close(3 [pid 1214] <... futex resumed>) = 1 [pid 1213] <... openat resumed>) = 4 [pid 1208] <... close resumed>) = 0 [pid 1202] <... futex resumed>) = 0 [pid 1214] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1213] ioctl(4, LOOP_SET_FD, 3 [pid 1208] close(4 [pid 1202] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1213] <... ioctl resumed>) = 0 [pid 1212] munmap(0x7f13c08c4000, 138412032 [pid 1211] mkdir("./file1", 0777 [pid 1203] <... futex resumed>) = 0 [pid 1202] <... futex resumed>) = 1 [pid 1208] <... close resumed>) = 0 [pid 1208] mkdir("./file1", 0777) = 0 [pid 1208] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 1213] close(3) = 0 [pid 1213] close(4) = 0 [pid 1213] mkdir("./file1", 0777) = 0 [pid 1213] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 1212] <... munmap resumed>) = 0 [pid 1212] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1203] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1202] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1212] ioctl(4, LOOP_SET_FD, 3 [pid 1211] <... mkdir resumed>) = 0 [pid 1203] <... open resumed>) = -1 EFAULT (Bad address) [pid 1211] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 1203] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1202] <... futex resumed>) = 0 [pid 1212] <... ioctl resumed>) = 0 [pid 1202] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1212] close(3) = 0 [pid 1212] close(4) = 0 [pid 1212] mkdir("./file1", 0777) = 0 [ 44.659767][ T1208] loop1: detected capacity change from 0 to 2048 [ 44.667151][ T1211] loop4: detected capacity change from 0 to 2048 [ 44.680451][ T1213] loop0: detected capacity change from 0 to 2048 [ 44.692637][ T1212] loop2: detected capacity change from 0 to 2048 [pid 1212] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 1202] <... futex resumed>) = 0 [pid 1202] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1213] <... mount resumed>) = 0 [pid 1213] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1213] chdir("./file1") = 0 [pid 1213] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1213] ioctl(4, LOOP_CLR_FD) = 0 [pid 1213] close(4) = 0 [pid 1213] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1213] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1211] <... mount resumed>) = 0 [pid 1211] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1211] chdir("./file1") = 0 [pid 1211] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1211] ioctl(4, LOOP_CLR_FD) = 0 [pid 1211] close(4) = 0 [pid 1211] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1211] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1210] <... futex resumed>) = 0 [pid 1206] <... futex resumed>) = 0 [ 44.700085][ T1203] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 44.718818][ T1203] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 44.730935][ T1203] EXT4-fs (loop3): This should not happen!! Data will be lost [ 44.730935][ T1203] [ 44.740639][ T1203] EXT4-fs (loop3): Total free blocks count 0 [ 44.746874][ T1203] EXT4-fs (loop3): Free/Dirty block details [ 44.752732][ T1203] EXT4-fs (loop3): free_blocks=2415919504 [pid 1210] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1206] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1213] <... futex resumed>) = 0 [pid 1211] <... futex resumed>) = 0 [pid 1210] <... futex resumed>) = 1 [pid 1206] <... futex resumed>) = 1 [pid 1208] <... mount resumed>) = 0 [pid 1208] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1213] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1211] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1210] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1206] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1208] <... openat resumed>) = 3 [pid 1208] chdir("./file1") = 0 [pid 1208] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1208] ioctl(4, LOOP_CLR_FD) = 0 [pid 1208] close(4) = 0 [pid 1208] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1205] <... futex resumed>) = 0 [pid 1205] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1205] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1208] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 1208] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1205] <... futex resumed>) = 0 [pid 1205] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1205] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1208] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 1208] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1205] <... futex resumed>) = 0 [pid 1211] <... open resumed>) = 4 [pid 1208] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1205] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1213] <... open resumed>) = 4 [pid 1211] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1205] <... futex resumed>) = 0 [pid 1213] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1211] <... futex resumed>) = 1 [pid 1208] creat("./bus", 000 [pid 1206] <... futex resumed>) = 0 [pid 1205] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1203] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1213] <... futex resumed>) = 1 [pid 1211] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1210] <... futex resumed>) = 0 [pid 1208] <... creat resumed>) = 6 [pid 1206] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1214] <... futex resumed>) = ? [pid 1213] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1211] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1210] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1208] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1206] <... futex resumed>) = 0 [pid 1202] <... futex resumed>) = ? [pid 1214] +++ killed by SIGBUS +++ [pid 1213] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1211] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1210] <... futex resumed>) = 0 [pid 1208] <... futex resumed>) = 1 [pid 1206] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1205] <... futex resumed>) = 0 [pid 1213] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1212] <... mount resumed>) = 0 [pid 1208] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1205] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1212] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1205] <... futex resumed>) = 0 [pid 1212] <... openat resumed>) = 3 [pid 1208] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1205] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1212] chdir("./file1" [pid 1208] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1212] <... chdir resumed>) = 0 [pid 1208] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1212] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1208] <... futex resumed>) = 1 [pid 1205] <... futex resumed>) = 0 [pid 1212] <... openat resumed>) = 4 [pid 1208] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1205] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1212] ioctl(4, LOOP_CLR_FD [pid 1208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1205] <... futex resumed>) = 0 [pid 1212] <... ioctl resumed>) = 0 [pid 1208] pwrite64(6, "+", 1, 0 [pid 1205] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1212] close(4 [pid 1208] <... pwrite64 resumed>) = 1 [pid 1213] <... open resumed>) = 5 [pid 1212] <... close resumed>) = 0 [pid 1211] <... open resumed>) = 5 [pid 1210] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1208] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1213] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1212] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1211] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1208] <... futex resumed>) = 1 [pid 1213] <... futex resumed>) = 0 [pid 1211] <... futex resumed>) = 1 [pid 1210] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1206] <... futex resumed>) = 0 [pid 1205] <... futex resumed>) = 0 [pid 1213] creat("./bus", 000 [pid 1212] <... futex resumed>) = 1 [pid 1211] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1210] <... futex resumed>) = 0 [pid 1208] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1206] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1205] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1204] <... futex resumed>) = 0 [pid 1213] <... creat resumed>) = 6 [pid 1212] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1211] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1210] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1206] <... futex resumed>) = 0 [pid 1205] <... futex resumed>) = 0 [pid 1204] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1213] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1212] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1211] creat("./bus", 000 [pid 1210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1208] open("./bus", O_RDONLY [pid 1206] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1205] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1204] <... futex resumed>) = 0 [pid 1213] <... futex resumed>) = 0 [pid 1212] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1211] <... creat resumed>) = 6 [pid 1210] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1208] <... open resumed>) = 7 [pid 1204] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1213] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1211] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1210] <... futex resumed>) = 0 [pid 1213] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1212] <... open resumed>) = 4 [pid 1211] <... futex resumed>) = 1 [pid 1210] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1208] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1206] <... futex resumed>) = 0 [pid 1213] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1212] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1211] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1208] <... futex resumed>) = 1 [pid 1206] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1205] <... futex resumed>) = 0 [pid 1213] <... futex resumed>) = 0 [pid 1212] <... futex resumed>) = 1 [pid 1211] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1210] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1208] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1206] <... futex resumed>) = 0 [pid 1205] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1204] <... futex resumed>) = 0 [pid 1213] pwrite64(6, "+", 1, 0 [pid 1212] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1211] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1210] <... futex resumed>) = 0 [pid 1208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1206] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1205] <... futex resumed>) = 0 [pid 1204] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1213] <... pwrite64 resumed>) = 1 [pid 1212] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1211] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1210] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1208] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1205] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1204] <... futex resumed>) = 0 [pid 1213] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1212] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1211] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1204] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1213] <... futex resumed>) = 0 [pid 1212] <... open resumed>) = 5 [pid 1211] <... futex resumed>) = 1 [pid 1210] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1208] <... copy_file_range resumed>) = 1 [pid 1206] <... futex resumed>) = 0 [pid 1205] <... futex resumed>) = 0 [pid 1213] open("./bus", O_RDONLY [pid 1212] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1211] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1210] <... futex resumed>) = 0 [pid 1208] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1206] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1205] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1213] <... open resumed>) = 7 [pid 1212] <... futex resumed>) = 1 [pid 1211] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1210] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1208] <... futex resumed>) = 0 [pid 1206] <... futex resumed>) = 0 [pid 1204] <... futex resumed>) = 0 [pid 1213] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1212] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1211] pwrite64(6, "+", 1, 0 [pid 1210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1208] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1206] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1205] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1204] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1213] <... futex resumed>) = 0 [pid 1212] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1211] <... pwrite64 resumed>) = 1 [pid 1210] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1205] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1212] creat("./bus", 000 [pid 1213] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1211] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1210] <... futex resumed>) = 0 [pid 1205] <... mprotect resumed>) = 0 [pid 1204] <... futex resumed>) = 0 [pid 1213] <... copy_file_range resumed>) = 1 [pid 1212] <... creat resumed>) = 6 [pid 1211] <... futex resumed>) = 1 [pid 1210] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1206] <... futex resumed>) = 0 [pid 1205] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1204] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1212] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1205] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1212] <... futex resumed>) = 0 [pid 1205] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1213] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1211] open("./bus", O_RDONLY [pid 1210] <... futex resumed>) = 0 [pid 1206] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1204] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1212] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1213] <... futex resumed>) = 0 [pid 1211] <... open resumed>) = 7 [pid 1210] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1206] <... futex resumed>) = 0 [pid 1205] <... clone3 resumed> => {parent_tid=[1223]}, 88) = 1223 [pid 1204] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1213] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1212] <... futex resumed>) = 0 [pid 1211] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1210] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1206] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1205] rt_sigprocmask(SIG_SETMASK, [], [pid 1204] <... futex resumed>) = 1 [pid 1205] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1212] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1211] <... futex resumed>) = 0 [pid 1210] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1206] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1205] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1204] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1211] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1210] <... mprotect resumed>) = 0 [pid 1206] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1205] <... futex resumed>) = 0 [pid 1212] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1211] <... copy_file_range resumed>) = 1 [pid 1210] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1206] <... futex resumed>) = 0 [pid 1205] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1212] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1211] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1210] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1206] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1212] <... futex resumed>) = 1 [pid 1211] <... futex resumed>) = 0 [pid 1210] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1206] <... futex resumed>) = 0 [pid 1204] <... futex resumed>) = 0 [pid 1212] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [ 44.758417][ T1203] EXT4-fs (loop3): dirty_blocks=32 [ 44.763579][ T1203] EXT4-fs (loop3): Block reservation details [ 44.769521][ T1203] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 44.778500][ T1203] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 1211] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1206] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1204] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1212] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1211] <... mmap resumed>) = 0x20000000 [pid 1210] <... clone3 resumed> => {parent_tid=[1224]}, 88) = 1224 [pid 1204] <... futex resumed>) = 0 [pid 1212] pwrite64(6, "+", 1, 0 [pid 1211] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1210] rt_sigprocmask(SIG_SETMASK, [], [pid 1204] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1212] <... pwrite64 resumed>) = 1 [pid 1211] <... futex resumed>) = 1 [pid 1210] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1206] <... futex resumed>) = 0 [pid 1212] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1211] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1210] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1206] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1212] <... futex resumed>) = 1 [pid 1211] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1210] <... futex resumed>) = 0 [pid 1206] <... futex resumed>) = 0 [pid 1204] <... futex resumed>) = 0 [pid 1212] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1211] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1210] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1206] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1204] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1212] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1211] <... open resumed>) = -1 EFAULT (Bad address) [pid 1204] <... futex resumed>) = 0 [pid 1212] open("./bus", O_RDONLY [pid 1211] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1204] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1212] <... open resumed>) = 7 [pid 1211] <... futex resumed>) = 1 [pid 1206] <... futex resumed>) = 0 [pid 1212] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1211] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1206] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1212] <... futex resumed>) = 1 [pid 1211] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1206] <... futex resumed>) = 0 [pid 1204] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1224 attached ./strace-static-x86_64: Process 1223 attached [pid 1212] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1203] +++ killed by SIGBUS +++ [pid 1202] +++ killed by SIGBUS +++ [pid 1223] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1223] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1223] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1205] <... futex resumed>) = 0 [pid 1205] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1208] <... futex resumed>) = 0 [pid 1205] <... futex resumed>) = 1 [pid 1208] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1205] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1208] <... open resumed>) = -1 EFAULT (Bad address) [pid 1208] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1205] <... futex resumed>) = 0 [pid 1208] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1205] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1205] <... futex resumed>) = 0 [pid 1212] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1206] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1204] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1223] <... futex resumed>) = 1 [pid 1212] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1204] <... futex resumed>) = 0 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1202, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11} --- [pid 1223] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1212] <... copy_file_range resumed>) = 1 [pid 1210] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1204] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1212] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1210] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1204] <... futex resumed>) = 0 [pid 1224] set_robust_list(0x7f13c8cc39a0, 24 [pid 1213] <... futex resumed>) = 0 [pid 1212] <... futex resumed>) = 0 [pid 1210] <... futex resumed>) = 1 [pid 1204] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [ 44.800918][ T1203] EXT4-fs (loop3): This should not happen!! Data will be lost [ 44.800918][ T1203] [ 44.808136][ T1211] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 44.817567][ T1208] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 44.829613][ T1211] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 300] umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1224] <... set_robust_list resumed>) = 0 [pid 1213] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1212] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1210] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1204] <... mmap resumed>) = 0x7f13c8ca3000 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1224] rt_sigprocmask(SIG_SETMASK, [], [pid 1213] <... open resumed>) = -1 EFAULT (Bad address) [pid 1204] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 300] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1224] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1213] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1204] <... mprotect resumed>) = 0 [pid 300] <... openat resumed>) = 3 [pid 1224] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1213] <... futex resumed>) = 1 [pid 1210] <... futex resumed>) = 0 [pid 1204] rt_sigprocmask(SIG_BLOCK, ~[], [pid 300] newfstatat(3, "", [pid 1224] <... mmap resumed>) = 0x20000000 [pid 1213] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1210] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1204] <... rt_sigprocmask resumed>[], 8) = 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1213] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1210] <... futex resumed>) = 0 [pid 1204] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 300] getdents64(3, [pid 1224] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1210] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1205] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1224] <... futex resumed>) = 0 [pid 1204] <... clone3 resumed> => {parent_tid=[1226]}, 88) = 1226 [pid 300] umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1224] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1204] rt_sigprocmask(SIG_SETMASK, [], [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1204] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 300] newfstatat(AT_FDCWD, "./35/binderfs", [pid 1204] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1204] <... futex resumed>) = 0 [pid 300] unlink("./35/binderfs" [pid 1204] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... unlink resumed>) = 0 [pid 300] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 1226 attached [pid 1226] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1226] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1226] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1204] <... futex resumed>) = 0 [pid 1204] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1212] <... futex resumed>) = 0 [pid 1204] <... futex resumed>) = 1 [pid 1212] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1204] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1212] <... open resumed>) = -1 EFAULT (Bad address) [pid 1212] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1204] <... futex resumed>) = 0 [pid 1212] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [ 44.843725][ T1208] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 44.867143][ T1213] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 44.868090][ T1208] EXT4-fs (loop1): This should not happen!! Data will be lost [ 44.868090][ T1208] [ 44.891316][ T1212] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 1204] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1212] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1204] <... futex resumed>) = 0 [pid 1206] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1204] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1226] <... futex resumed>) = 1 [pid 1226] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1210] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 300] <... umount2 resumed>) = 0 [ 44.891398][ T1212] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 44.907962][ T1208] EXT4-fs (loop1): Total free blocks count 0 [ 44.919855][ T1213] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 44.924025][ T1208] EXT4-fs (loop1): Free/Dirty block details [ 44.941441][ T1211] EXT4-fs (loop4): This should not happen!! Data will be lost [ 44.941441][ T1211] [ 44.945357][ T1208] EXT4-fs (loop1): free_blocks=2415919504 [pid 1205] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 300] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 1204] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 300] newfstatat(AT_FDCWD, "./35/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 44.956323][ T1211] EXT4-fs (loop4): Total free blocks count 0 [ 44.957242][ T1208] EXT4-fs (loop1): dirty_blocks=32 [ 44.965150][ T1212] EXT4-fs (loop2): This should not happen!! Data will be lost [ 44.965150][ T1212] [ 44.972309][ T1213] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.972309][ T1213] [ 44.978246][ T1211] EXT4-fs (loop4): Free/Dirty block details [ 44.986904][ T1208] EXT4-fs (loop1): Block reservation details [ 44.993475][ T1212] EXT4-fs (loop2): Total free blocks count 0 [ 44.998539][ T1208] EXT4-fs (loop1): i_reserved_data_blocks=2 [pid 1208] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 300] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./35/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1223] <... futex resumed>) = ? [pid 1223] +++ killed by SIGBUS +++ [pid 1208] +++ killed by SIGBUS +++ [ 45.005181][ T1211] EXT4-fs (loop4): free_blocks=2415919504 [ 45.010069][ T1213] EXT4-fs (loop0): Total free blocks count 0 [ 45.016285][ T1212] EXT4-fs (loop2): Free/Dirty block details [ 45.021419][ T1213] EXT4-fs (loop0): Free/Dirty block details [ 45.027740][ T1211] EXT4-fs (loop4): dirty_blocks=32 [ 45.032854][ T1213] EXT4-fs (loop0): free_blocks=2415919504 [ 45.038935][ T1211] EXT4-fs (loop4): Block reservation details [ 45.044242][ T1205] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 300] <... openat resumed>) = 4 [pid 300] newfstatat(4, "", [pid 1211] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1211] +++ killed by SIGBUS +++ [ 45.050068][ T1212] EXT4-fs (loop2): free_blocks=2415919504 [ 45.061435][ T1213] EXT4-fs (loop0): dirty_blocks=32 [ 45.067562][ T1211] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 45.071639][ T1213] EXT4-fs (loop0): Block reservation details [ 45.078569][ T1212] EXT4-fs (loop2): dirty_blocks=32 [ 45.083283][ T1205] EXT4-fs (loop1): This should not happen!! Data will be lost [ 45.083283][ T1205] [ 45.089397][ T1212] EXT4-fs (loop2): Block reservation details [ 45.097800][ T1213] EXT4-fs (loop0): i_reserved_data_blocks=2 [pid 300] getdents64(4, [pid 1205] +++ killed by SIGBUS +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1205, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=19} --- [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 1212] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1213] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 300] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 298] <... restart_syscall resumed>) = 0 [pid 1226] <... futex resumed>) = ? [pid 300] getdents64(4, [pid 1226] +++ killed by SIGBUS +++ [pid 1206] +++ killed by SIGBUS +++ [pid 300] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1224] <... futex resumed>) = ? [pid 1224] +++ killed by SIGBUS +++ [pid 298] umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1206, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 300] close(4) = 0 [ 45.104281][ T1212] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 45.109936][ T1206] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 45.127081][ T1206] EXT4-fs (loop4): This should not happen!! Data will be lost [ 45.127081][ T1206] [ 45.128368][ T1212] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 45.139540][ T1213] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 300] rmdir("./35/file1") = 0 [pid 300] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./35") = 0 [pid 300] mkdir("./36", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1227 executing program ./strace-static-x86_64: Process 1227 attached [pid 1212] +++ killed by SIGBUS +++ [pid 1204] +++ killed by SIGBUS +++ [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1227] set_robust_list(0x55558909e6a0, 24 [pid 298] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1227] <... set_robust_list resumed>) = 0 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1204, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 298] <... openat resumed>) = 3 [pid 1227] chdir("./36" [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 298] newfstatat(3, "", [pid 1227] <... chdir resumed>) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1227] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 298] getdents64(3, [pid 1227] <... prctl resumed>) = 0 [pid 298] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1227] setpgid(0, 0 [pid 298] umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1227] <... setpgid resumed>) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1227] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 298] newfstatat(AT_FDCWD, "./36/binderfs", [pid 1227] <... openat resumed>) = 3 [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1227] write(3, "1000", 4 [pid 298] unlink("./36/binderfs" [pid 1227] <... write resumed>) = 4 [pid 298] <... unlink resumed>) = 0 [pid 1227] close(3 [pid 298] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1227] <... close resumed>) = 0 [pid 1227] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1227] write(1, "executing program\n", 18) = 18 [pid 1227] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1227] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1227] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1227] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1227] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1227] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1227] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1228]}, 88) = 1228 [pid 1227] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1227] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1227] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1228 attached [pid 1228] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1228] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1228] memfd_create("syzkaller", 0) = 3 [pid 1228] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 299] <... restart_syscall resumed>) = 0 [pid 299] umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", [pid 301] umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./36/binderfs" [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... unlink resumed>) = 0 [pid 299] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... umount2 resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./34/binderfs") = 0 [pid 299] <... umount2 resumed>) = 0 [pid 301] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./36/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./36/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./36/file1") = 0 [pid 299] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./36") = 0 [pid 299] mkdir("./37", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1228] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 299] <... clone resumed>, child_tidptr=0x55558909e690) = 1229 [pid 298] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./36/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] <... umount2 resumed>) = 0 [pid 298] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] openat(AT_FDCWD, "./36/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... openat resumed>) = 4 [pid 298] newfstatat(4, "", [pid 301] newfstatat(AT_FDCWD, "./34/file1", ./strace-static-x86_64: Process 1229 attached [pid 1229] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1229] chdir("./37") = 0 [pid 1229] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1229] setpgid(0, 0 [pid 1228] <... write resumed>) = 1048576 [pid 1229] <... setpgid resumed>) = 0 [pid 1229] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1229] <... openat resumed>) = 3 [pid 298] getdents64(4, [pid 1229] write(3, "1000", 4) = 4 [pid 1229] close(3) = 0 [pid 1228] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1229] symlink("/dev/binderfs", "./binderfs" [pid 298] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] getdents64(4, [pid 1229] <... symlink resumed>) = 0 [pid 301] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW executing program [pid 298] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1228] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1229] write(1, "executing program\n", 18) = 18 [pid 1228] <... openat resumed>) = 4 [pid 1229] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1228] ioctl(4, LOOP_SET_FD, 3 [ 45.148814][ T1212] EXT4-fs (loop2): This should not happen!! Data will be lost [ 45.148814][ T1212] [ 45.170135][ T1213] EXT4-fs (loop0): This should not happen!! Data will be lost [ 45.170135][ T1213] [pid 1229] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1213] +++ killed by SIGBUS +++ [pid 1210] +++ killed by SIGBUS +++ [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] close(4) = 0 [pid 298] rmdir("./36/file1") = 0 [pid 298] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./36") = 0 [pid 298] mkdir("./37", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] openat(AT_FDCWD, "./34/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1210, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=19} --- [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, [pid 297] umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 297] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] getdents64(4, [pid 297] <... openat resumed>) = 3 [pid 301] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 297] newfstatat(3, "", [pid 301] close(4 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] <... close resumed>) = 0 [pid 297] getdents64(3, [pid 301] rmdir("./34/file1") = 0 [pid 297] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 298] <... clone resumed>, child_tidptr=0x55558909e690) = 1230 [pid 297] umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./34/binderfs", [pid 301] getdents64(3, [pid 297] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 297] unlink("./34/binderfs" [pid 301] close(3) = 0 [pid 301] rmdir("./34" [pid 297] <... unlink resumed>) = 0 [pid 301] <... rmdir resumed>) = 0 [pid 297] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] mkdir("./35", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 1229] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 301] ioctl(3, LOOP_CLR_FD [pid 1229] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 301] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1229] <... mmap resumed>) = 0x7f13c8cc4000 [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1229] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 1230 attached [pid 1229] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1228] <... ioctl resumed>) = 0 [pid 1230] set_robust_list(0x55558909e6a0, 24) = 0 [pid 301] <... clone resumed>, child_tidptr=0x55558909e690) = 1231 [pid 1230] chdir("./37") = 0 [pid 1230] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1229] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1230] <... prctl resumed>) = 0 [pid 1228] close(3 [pid 297] <... umount2 resumed>) = 0 [pid 1230] setpgid(0, 0 [pid 1228] <... close resumed>) = 0 [pid 1230] <... setpgid resumed>) = 0 [pid 1229] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 297] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 1231 attached [pid 1230] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1228] close(4 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 1232 attached [pid 1232] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1232] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1232] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1231] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1231] chdir("./35" [pid 1230] <... openat resumed>) = 3 [pid 1230] write(3, "1000", 4 [pid 1229] <... clone3 resumed> => {parent_tid=[1232]}, 88) = 1232 [pid 1228] <... close resumed>) = 0 [pid 297] newfstatat(AT_FDCWD, "./34/file1", [pid 1230] <... write resumed>) = 4 [pid 1229] rt_sigprocmask(SIG_SETMASK, [], [pid 1228] mkdir("./file1", 0777 [pid 1230] close(3 [pid 1229] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1231] <... chdir resumed>) = 0 [pid 1230] <... close resumed>) = 0 [pid 1228] <... mkdir resumed>) = 0 [pid 297] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1229] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1230] symlink("/dev/binderfs", "./binderfs" [pid 1228] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1229] <... futex resumed>) = 1 [pid 1230] <... symlink resumed>) = 0 [pid 1230] write(1, "executing program\n", 18 [pid 1229] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 297] openat(AT_FDCWD, "./34/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYexecuting program [pid 1231] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1230] <... write resumed>) = 18 [pid 1230] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... openat resumed>) = 4 [pid 1230] <... futex resumed>) = 0 [pid 1230] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 297] newfstatat(4, "", [pid 1230] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1230] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1230] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 297] getdents64(4, [pid 1230] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 297] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1230] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 297] getdents64(4, [pid 1230] <... mprotect resumed>) = 0 [pid 297] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1230] rt_sigprocmask(SIG_BLOCK, ~[], [pid 297] close(4 [pid 1230] <... rt_sigprocmask resumed>[], 8) = 0 [pid 297] <... close resumed>) = 0 [pid 1230] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 297] rmdir("./34/file1" [pid 1231] <... prctl resumed>) = 0 [pid 1230] <... clone3 resumed> => {parent_tid=[1233]}, 88) = 1233 [pid 297] <... rmdir resumed>) = 0 [pid 1230] rt_sigprocmask(SIG_SETMASK, [], [pid 297] getdents64(3, [pid 1230] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 297] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1230] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] close(3 [pid 1230] <... futex resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 1230] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 297] rmdir("./34" [pid 1231] setpgid(0, 0 [pid 297] <... rmdir resumed>) = 0 [pid 297] mkdir("./35", 0777 [pid 1231] <... setpgid resumed>) = 0 [pid 297] <... mkdir resumed>) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1231] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 297] <... clone resumed>, child_tidptr=0x55558909e690) = 1234 [pid 1231] <... openat resumed>) = 3 [pid 1231] write(3, "1000", 4) = 4 [pid 1231] close(3) = 0 [pid 1231] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1232] <... futex resumed>) = 0 [pid 1232] memfd_create("syzkaller", 0executing program ) = 3 [pid 1231] write(1, "executing program\n", 18) = 18 [pid 1232] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1231] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1231] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1231] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1231] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1231] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1231] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1231] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1236]}, 88) = 1236 [pid 1231] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1231] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1231] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1234 attached [pid 1234] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1234] chdir("./35"./strace-static-x86_64: Process 1233 attached [pid 1233] set_robust_list(0x7f13c8ce49a0, 24./strace-static-x86_64: Process 1236 attached ) = 0 [pid 1236] set_robust_list(0x7f13c8ce49a0, 24 [pid 1233] rt_sigprocmask(SIG_SETMASK, [], [pid 1236] <... set_robust_list resumed>) = 0 [pid 1234] <... chdir resumed>) = 0 [pid 1234] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1234] setpgid(0, 0 [pid 1228] <... mount resumed>) = 0 [pid 1233] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1228] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [ 45.211043][ T1228] loop3: detected capacity change from 0 to 2048 [pid 1236] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1233] memfd_create("syzkaller", 0 [pid 1228] <... openat resumed>) = 3 [pid 1233] <... memfd_create resumed>) = 3 [pid 1228] chdir("./file1" [pid 1236] memfd_create("syzkaller", 0 [pid 1233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1228] <... chdir resumed>) = 0 [pid 1236] <... memfd_create resumed>) = 3 [pid 1233] <... mmap resumed>) = 0x7f13c08c4000 [pid 1236] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1228] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1234] <... setpgid resumed>) = 0 [pid 1234] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1234] write(3, "1000", 4) = 4 [pid 1234] close(3) = 0 [pid 1234] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1234] write(1, "executing program\n", 18executing program ) = 18 [pid 1234] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1234] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1236] <... mmap resumed>) = 0x7f13c08c4000 [pid 1233] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1228] <... openat resumed>) = 4 [pid 1228] ioctl(4, LOOP_CLR_FD [pid 1234] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1228] <... ioctl resumed>) = 0 [pid 1234] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1228] close(4 [pid 1234] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1228] <... close resumed>) = 0 [pid 1234] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1228] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1234] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1228] <... futex resumed>) = 1 [pid 1227] <... futex resumed>) = 0 [pid 1228] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1227] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1227] <... futex resumed>) = 0 [pid 1228] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1227] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1234] <... mprotect resumed>) = 0 [pid 1234] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1228] <... open resumed>) = 4 [pid 1228] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1234] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1228] <... futex resumed>) = 1 [pid 1227] <... futex resumed>) = 0 [pid 1228] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1227] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1227] <... futex resumed>) = 0 [pid 1228] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1227] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1228] <... open resumed>) = 5 [pid 1234] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1228] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1227] <... futex resumed>) = 0 [pid 1228] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1227] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1227] <... futex resumed>) = 0 [pid 1228] creat("./bus", 000 [pid 1227] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1234] <... clone3 resumed> => {parent_tid=[1238]}, 88) = 1238 [pid 1228] <... creat resumed>) = 6 [pid 1234] rt_sigprocmask(SIG_SETMASK, [], [pid 1228] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1234] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1228] <... futex resumed>) = 1 [pid 1227] <... futex resumed>) = 0 [pid 1234] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1228] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1227] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1234] <... futex resumed>) = 0 [pid 1228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1227] <... futex resumed>) = 0 [pid 1234] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1228] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1227] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1228] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1228] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1227] <... futex resumed>) = 0 [pid 1228] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1227] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1227] <... futex resumed>) = 0 [pid 1228] pwrite64(6, "+", 1, 0 [pid 1227] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1228] <... pwrite64 resumed>) = 1 [pid 1228] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1227] <... futex resumed>) = 0 [pid 1228] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1227] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1227] <... futex resumed>) = 0 [pid 1228] open("./bus", O_RDONLY [pid 1227] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1228] <... open resumed>) = 7 [pid 1228] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1227] <... futex resumed>) = 0 [pid 1228] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1227] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1227] <... futex resumed>) = 0 [pid 1228] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1227] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1228] <... copy_file_range resumed>) = 1 [pid 1227] <... futex resumed>) = 0 [pid 1228] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1227] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1228] <... futex resumed>) = 0 [pid 1227] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1228] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1227] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1227] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1232] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1227] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 1238 attached [pid 1238] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1238] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1238] memfd_create("syzkaller", 0) = 3 [pid 1238] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1227] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1239]}, 88) = 1239 [pid 1227] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 1239 attached [pid 1239] set_robust_list(0x7f13c8cc39a0, 24 [pid 1227] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1227] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1227] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1239] <... set_robust_list resumed>) = 0 [pid 1239] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1239] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1238] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1236] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1233] <... write resumed>) = 1048576 [pid 1239] <... mmap resumed>) = 0x20000000 [pid 1232] <... write resumed>) = 1048576 [pid 1239] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1227] <... futex resumed>) = 0 [pid 1227] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1228] <... futex resumed>) = 0 [pid 1227] <... futex resumed>) = 1 [pid 1228] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1227] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1228] <... open resumed>) = -1 EFAULT (Bad address) [pid 1228] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1227] <... futex resumed>) = 0 [pid 1228] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1227] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1227] <... futex resumed>) = 0 [pid 1239] <... futex resumed>) = 1 [pid 1238] <... write resumed>) = 1048576 [pid 1236] <... write resumed>) = 1048576 [pid 1233] munmap(0x7f13c08c4000, 138412032 [pid 1232] munmap(0x7f13c08c4000, 138412032 [pid 1236] munmap(0x7f13c08c4000, 138412032 [pid 1233] <... munmap resumed>) = 0 [pid 1232] <... munmap resumed>) = 0 [pid 1236] <... munmap resumed>) = 0 [pid 1233] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1232] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1236] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1233] <... openat resumed>) = 4 [pid 1232] <... openat resumed>) = 4 [pid 1236] <... openat resumed>) = 4 [pid 1233] ioctl(4, LOOP_SET_FD, 3 [pid 1232] ioctl(4, LOOP_SET_FD, 3 [pid 1236] ioctl(4, LOOP_SET_FD, 3 [pid 1227] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1238] munmap(0x7f13c08c4000, 138412032 [pid 1239] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1238] <... munmap resumed>) = 0 [pid 1238] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1238] ioctl(4, LOOP_SET_FD, 3 [pid 1233] <... ioctl resumed>) = 0 [pid 1232] <... ioctl resumed>) = 0 [pid 1236] <... ioctl resumed>) = 0 [pid 1236] close(3) = 0 [pid 1236] close(4) = 0 [pid 1236] mkdir("./file1", 0777) = 0 [pid 1236] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 1238] <... ioctl resumed>) = 0 [pid 1238] close(3) = 0 [pid 1238] close(4) = 0 [ 45.279444][ T1228] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 45.287894][ T1233] loop1: detected capacity change from 0 to 2048 [ 45.295299][ T1236] loop4: detected capacity change from 0 to 2048 [ 45.300244][ T1232] loop2: detected capacity change from 0 to 2048 [ 45.308978][ T1238] loop0: detected capacity change from 0 to 2048 [pid 1233] close(3 [pid 1232] close(3 [pid 1238] mkdir("./file1", 0777) = 0 [pid 1233] <... close resumed>) = 0 [pid 1232] <... close resumed>) = 0 [pid 1233] close(4 [pid 1232] close(4 [pid 1233] <... close resumed>) = 0 [pid 1232] <... close resumed>) = 0 [pid 1233] mkdir("./file1", 0777 [pid 1232] mkdir("./file1", 0777 [pid 1233] <... mkdir resumed>) = 0 [pid 1232] <... mkdir resumed>) = 0 [pid 1233] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 1232] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 1238] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 1227] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1232] <... mount resumed>) = 0 [pid 1238] <... mount resumed>) = 0 [pid 1232] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1238] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1232] <... openat resumed>) = 3 [pid 1238] <... openat resumed>) = 3 [pid 1232] chdir("./file1" [pid 1238] chdir("./file1") = 0 [pid 1232] <... chdir resumed>) = 0 [pid 1232] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1238] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1232] <... openat resumed>) = 4 [pid 1232] ioctl(4, LOOP_CLR_FD [pid 1238] ioctl(4, LOOP_CLR_FD [pid 1232] <... ioctl resumed>) = 0 [pid 1238] <... ioctl resumed>) = 0 [pid 1238] close(4 [pid 1232] close(4 [pid 1238] <... close resumed>) = 0 [pid 1232] <... close resumed>) = 0 [pid 1238] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1232] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1238] <... futex resumed>) = 1 [pid 1234] <... futex resumed>) = 0 [pid 1232] <... futex resumed>) = 1 [pid 1238] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1234] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1232] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1238] <... open resumed>) = 4 [pid 1234] <... futex resumed>) = 0 [pid 1238] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1234] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1238] <... futex resumed>) = 0 [pid 1234] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1238] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1234] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1238] <... open resumed>) = 5 [pid 1234] <... futex resumed>) = 0 [pid 1238] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1234] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1229] <... futex resumed>) = 0 [pid 1238] <... futex resumed>) = 0 [pid 1234] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1238] creat("./bus", 000 [pid 1234] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1238] <... creat resumed>) = 6 [pid 1234] <... futex resumed>) = 0 [pid 1238] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1234] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1238] <... futex resumed>) = 0 [pid 1234] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1238] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1234] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1238] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1234] <... futex resumed>) = 0 [pid 1238] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1234] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1238] <... futex resumed>) = 0 [pid 1234] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1238] pwrite64(6, "+", 1, 0 [pid 1234] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1238] <... pwrite64 resumed>) = 1 [pid 1234] <... futex resumed>) = 0 [pid 1238] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1234] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1238] <... futex resumed>) = 0 [pid 1234] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1238] open("./bus", O_RDONLY [pid 1234] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1238] <... open resumed>) = 7 [pid 1234] <... futex resumed>) = 0 [pid 1229] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1238] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1234] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1238] <... futex resumed>) = 0 [pid 1234] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1232] <... futex resumed>) = 0 [pid 1229] <... futex resumed>) = 1 [pid 1238] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1234] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1232] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1229] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1238] <... copy_file_range resumed>) = 1 [ 45.312892][ T1228] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 45.336490][ T1228] EXT4-fs (loop3): This should not happen!! Data will be lost [ 45.336490][ T1228] [ 45.346228][ T1228] EXT4-fs (loop3): Total free blocks count 0 [ 45.352478][ T1228] EXT4-fs (loop3): Free/Dirty block details [ 45.358299][ T1228] EXT4-fs (loop3): free_blocks=2415919504 [ 45.364071][ T1228] EXT4-fs (loop3): dirty_blocks=32 [pid 1234] <... futex resumed>) = 0 [pid 1232] <... open resumed>) = 4 [pid 1238] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1234] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1232] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1238] <... futex resumed>) = 0 [pid 1234] <... futex resumed>) = 0 [pid 1232] <... futex resumed>) = 1 [pid 1229] <... futex resumed>) = 0 [pid 1238] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1234] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1232] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1229] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1228] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1229] <... futex resumed>) = 0 [pid 1229] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1238] <... mmap resumed>) = 0x20000000 [pid 1238] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1238] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1233] <... mount resumed>) = 0 [pid 1228] +++ killed by SIGBUS +++ [pid 1234] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1234] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1238] <... futex resumed>) = 0 [pid 1234] <... futex resumed>) = 1 [pid 1238] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1234] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1238] <... open resumed>) = -1 EFAULT (Bad address) [pid 1239] <... futex resumed>) = ? [pid 1236] <... mount resumed>) = 0 [pid 1238] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1234] <... futex resumed>) = 0 [pid 1238] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1234] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1238] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1234] <... futex resumed>) = 0 [ 45.378994][ T1228] EXT4-fs (loop3): Block reservation details [ 45.385032][ T1228] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 45.394399][ T1238] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 45.394930][ T1239] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 1234] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1236] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1233] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1232] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1236] <... openat resumed>) = 3 [pid 1233] <... openat resumed>) = 3 [pid 1232] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1229] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1236] chdir("./file1" [pid 1233] chdir("./file1" [pid 1232] <... open resumed>) = 5 [pid 1229] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1236] <... chdir resumed>) = 0 [pid 1233] <... chdir resumed>) = 0 [pid 1232] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1229] <... futex resumed>) = 0 [pid 1236] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1233] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1232] <... futex resumed>) = 0 [pid 1229] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1236] <... openat resumed>) = 4 [pid 1233] <... openat resumed>) = 4 [pid 1232] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1229] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1236] ioctl(4, LOOP_CLR_FD [pid 1233] ioctl(4, LOOP_CLR_FD [pid 1229] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1236] <... ioctl resumed>) = 0 [pid 1233] <... ioctl resumed>) = 0 [pid 1229] <... mprotect resumed>) = 0 [pid 1236] close(4 [pid 1233] close(4 [pid 1229] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1236] <... close resumed>) = 0 [pid 1233] <... close resumed>) = 0 [pid 1229] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1236] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1233] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1229] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1236] <... futex resumed>) = 1 [pid 1233] <... futex resumed>) = 1 [pid 1231] <... futex resumed>) = 0 [pid 1230] <... futex resumed>) = 0 [pid 1236] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1233] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1231] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1230] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1229] <... clone3 resumed> => {parent_tid=[1248]}, 88) = 1248 [pid 1236] <... open resumed>) = 4 [pid 1233] <... open resumed>) = 4 [pid 1231] <... futex resumed>) = 0 [pid 1230] <... futex resumed>) = 0 [pid 1229] rt_sigprocmask(SIG_SETMASK, [], [pid 1236] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1233] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1231] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1230] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1236] <... futex resumed>) = 0 [pid 1233] <... futex resumed>) = 0 [pid 1231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1230] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1229] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1236] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1233] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1231] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1230] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1236] <... open resumed>) = 5 [pid 1233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1231] <... futex resumed>) = 0 [pid 1230] <... futex resumed>) = 0 [pid 1229] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1236] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1233] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1231] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1230] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1229] <... futex resumed>) = 0 [pid 1236] <... futex resumed>) = 0 [pid 1233] <... open resumed>) = 5 [pid 1231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1229] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1236] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1233] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1231] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1236] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1233] <... futex resumed>) = 1 [pid 1231] <... futex resumed>) = 0 [pid 1230] <... futex resumed>) = 0 [pid 1236] creat("./bus", 000 [pid 1233] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1231] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1230] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1236] <... creat resumed>) = 6 [pid 1233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1230] <... futex resumed>) = 0 [pid 1236] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1233] creat("./bus", 000 [pid 1230] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1236] <... futex resumed>) = 1 [pid 1233] <... creat resumed>) = 6 [pid 1231] <... futex resumed>) = 0 [pid 1236] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1233] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1231] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1236] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1233] <... futex resumed>) = 1 [pid 1231] <... futex resumed>) = 0 [pid 1230] <... futex resumed>) = 0 [pid 1236] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1233] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1231] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1230] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1236] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1230] <... futex resumed>) = 0 [pid 1236] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1233] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1230] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1236] <... futex resumed>) = 1 [pid 1233] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1231] <... futex resumed>) = 0 [pid 1236] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1233] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1231] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1236] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1233] <... futex resumed>) = 1 [pid 1231] <... futex resumed>) = 0 [pid 1230] <... futex resumed>) = 0 [pid 1236] pwrite64(6, "+", 1, 0 [pid 1233] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1231] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1230] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1236] <... pwrite64 resumed>) = 1 [pid 1233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1230] <... futex resumed>) = 0 [pid 1236] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1233] pwrite64(6, "+", 1, 0 [pid 1230] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1236] <... futex resumed>) = 1 [pid 1233] <... pwrite64 resumed>) = 1 [pid 1231] <... futex resumed>) = 0 [pid 1236] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1233] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1231] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1236] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1233] <... futex resumed>) = 1 [pid 1231] <... futex resumed>) = 0 [pid 1230] <... futex resumed>) = 0 [pid 1236] open("./bus", O_RDONLY [pid 1233] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1231] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1230] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1236] <... open resumed>) = 7 [pid 1233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1230] <... futex resumed>) = 0 [pid 1236] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1233] open("./bus", O_RDONLY [pid 1230] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1236] <... futex resumed>) = 1 [pid 1233] <... open resumed>) = 7 [pid 1231] <... futex resumed>) = 0 [pid 1236] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1233] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1231] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1236] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1233] <... futex resumed>) = 1 [pid 1231] <... futex resumed>) = 0 [pid 1230] <... futex resumed>) = 0 [pid 1236] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1233] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1231] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1230] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1236] <... copy_file_range resumed>) = 1 [pid 1233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1231] <... futex resumed>) = 0 [pid 1230] <... futex resumed>) = 0 [pid 1236] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1233] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1231] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1230] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1236] <... futex resumed>) = 0 [pid 1233] <... copy_file_range resumed>) = 1 [pid 1231] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1230] <... futex resumed>) = 0 [pid 1236] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1233] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1231] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1230] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1233] <... futex resumed>) = 0 [pid 1231] <... mprotect resumed>) = 0 [pid 1230] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1233] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1231] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1230] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1231] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1230] <... mprotect resumed>) = 0 [pid 1231] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1230] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1231] <... clone3 resumed> => {parent_tid=[1249]}, 88) = 1249 [pid 1230] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1231] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1230] <... clone3 resumed> => {parent_tid=[1250]}, 88) = 1250 [pid 1231] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1230] rt_sigprocmask(SIG_SETMASK, [], [pid 1231] <... futex resumed>) = 0 [pid 1230] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1231] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1230] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1230] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1248 attached ./strace-static-x86_64: Process 1250 attached [pid 1248] set_robust_list(0x7f13c8cc39a0, 24 [pid 1250] set_robust_list(0x7f13c8cc39a0, 24 [pid 1248] <... set_robust_list resumed>) = 0 [pid 1250] <... set_robust_list resumed>) = 0 [pid 1250] rt_sigprocmask(SIG_SETMASK, [], [pid 1248] rt_sigprocmask(SIG_SETMASK, [], [pid 1250] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1248] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1250] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1248] creat("./bus", 000 [pid 1250] <... mmap resumed>) = 0x20000000 [pid 1234] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1248] <... creat resumed>) = 6 ./strace-static-x86_64: Process 1249 attached [pid 1249] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1249] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1249] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1229] <... futex resumed>) = 0 [pid 1229] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1232] <... futex resumed>) = 0 [pid 1229] <... futex resumed>) = 1 [pid 1248] <... futex resumed>) = 1 [pid 1232] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1229] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1248] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1232] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1232] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1229] <... futex resumed>) = 0 [pid 1232] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1229] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1232] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1229] <... futex resumed>) = 0 [pid 1232] pwrite64(6, "+", 1, 0 [pid 1229] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1232] <... pwrite64 resumed>) = 1 [pid 1232] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1229] <... futex resumed>) = 0 [pid 1232] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1229] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1232] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1229] <... futex resumed>) = 0 [pid 1232] open("./bus", O_RDONLY [pid 1229] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1232] <... open resumed>) = 7 [pid 1232] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1229] <... futex resumed>) = 0 [pid 1232] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1229] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1250] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1232] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1229] <... futex resumed>) = 0 [pid 1250] <... futex resumed>) = 1 [pid 1249] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1232] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1230] <... futex resumed>) = 0 [pid 1229] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1250] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1249] <... futex resumed>) = 1 [pid 1248] <... futex resumed>) = 0 [ 45.409579][ T1238] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 45.422035][ T1239] EXT4-fs (loop3): This should not happen!! Data will be lost [ 45.422035][ T1239] [ 45.433110][ T1238] EXT4-fs (loop0): This should not happen!! Data will be lost [ 45.433110][ T1238] [ 45.459073][ T1238] EXT4-fs (loop0): Total free blocks count 0 [ 45.465033][ T1238] EXT4-fs (loop0): Free/Dirty block details [ 45.470987][ T1238] EXT4-fs (loop0): free_blocks=2415919504 [pid 1232] <... copy_file_range resumed>) = 1 [pid 1231] <... futex resumed>) = 0 [pid 1230] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1229] <... futex resumed>) = 1 [pid 1249] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1248] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1233] <... futex resumed>) = 0 [pid 1232] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1231] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1230] <... futex resumed>) = 1 [pid 1229] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1248] <... mmap resumed>) = 0x20000000 [pid 1236] <... futex resumed>) = 0 [pid 1233] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1232] <... futex resumed>) = 0 [pid 1231] <... futex resumed>) = 1 [pid 1230] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1248] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1236] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1233] <... open resumed>) = -1 EFAULT (Bad address) [pid 1232] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1231] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1248] <... futex resumed>) = 1 [pid 1236] <... open resumed>) = -1 EFAULT (Bad address) [pid 1233] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1229] <... futex resumed>) = 0 [pid 1248] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1236] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1233] <... futex resumed>) = 1 [pid 1230] <... futex resumed>) = 0 [pid 1229] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1236] <... futex resumed>) = 1 [pid 1233] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1232] <... futex resumed>) = 0 [pid 1231] <... futex resumed>) = 0 [pid 1230] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1229] <... futex resumed>) = 1 [pid 1236] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1232] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1231] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1230] <... futex resumed>) = 0 [pid 1229] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1239] +++ killed by SIGBUS +++ [pid 1238] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1236] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1227] +++ killed by SIGBUS +++ [pid 1238] +++ killed by SIGBUS +++ [pid 1232] <... open resumed>) = -1 EFAULT (Bad address) [pid 1231] <... futex resumed>) = 0 [ 45.476632][ T1238] EXT4-fs (loop0): dirty_blocks=32 [ 45.481481][ T1238] EXT4-fs (loop0): Block reservation details [ 45.487363][ T1238] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 45.491575][ T1233] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 45.494824][ T1234] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 1230] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1232] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1227, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=10} --- [pid 1232] <... futex resumed>) = 1 [pid 1231] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1232] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1234] +++ killed by SIGBUS +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1234, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 297] restart_syscall(<... resuming interrupted clone ...> [pid 1229] <... futex resumed>) = 0 [pid 297] <... restart_syscall resumed>) = 0 [ 45.507850][ T1236] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 45.520252][ T1234] EXT4-fs (loop0): This should not happen!! Data will be lost [ 45.520252][ T1234] [ 45.534953][ T1236] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 45.545870][ T1233] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 45.556216][ T1236] EXT4-fs (loop4): This should not happen!! Data will be lost [ 45.556216][ T1236] [pid 1229] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1231] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1230] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1229] <... futex resumed>) = 1 [pid 300] umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1232] <... futex resumed>) = 0 [pid 1229] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 45.570920][ T1233] EXT4-fs (loop1): This should not happen!! Data will be lost [ 45.570920][ T1233] [ 45.580628][ T1236] EXT4-fs (loop4): Total free blocks count 0 [ 45.589704][ T1233] EXT4-fs (loop1): Total free blocks count 0 [ 45.595845][ T1236] EXT4-fs (loop4): Free/Dirty block details [ 45.601492][ T1232] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 45.607354][ T1236] EXT4-fs (loop4): free_blocks=2415919504 [pid 297] umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] <... openat resumed>) = 3 [pid 297] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 300] newfstatat(3, "", [pid 297] <... openat resumed>) = 3 [pid 1236] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 45.621643][ T1233] EXT4-fs (loop1): Free/Dirty block details [ 45.627421][ T1236] EXT4-fs (loop4): dirty_blocks=32 [ 45.632864][ T1232] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 45.637911][ T1236] EXT4-fs (loop4): Block reservation details [ 45.649658][ T1233] EXT4-fs (loop1): free_blocks=2415919504 [ 45.655641][ T1236] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 45.661024][ T1233] EXT4-fs (loop1): dirty_blocks=32 [ 45.667133][ T1232] EXT4-fs (loop2): This should not happen!! Data will be lost [ 45.667133][ T1232] [pid 297] newfstatat(3, "", [pid 1229] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 300] getdents64(3, [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1236] +++ killed by SIGBUS +++ [pid 1249] <... futex resumed>) = ? [pid 300] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] getdents64(3, [pid 1233] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 300] umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1233] +++ killed by SIGBUS +++ [pid 1250] <... futex resumed>) = ? [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1249] +++ killed by SIGBUS +++ [pid 1231] +++ killed by SIGBUS +++ [ 45.671716][ T1233] EXT4-fs (loop1): Block reservation details [ 45.681515][ T1232] EXT4-fs (loop2): Total free blocks count 0 [ 45.687400][ T1233] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 45.692949][ T1232] EXT4-fs (loop2): Free/Dirty block details [ 45.700008][ T1249] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 45.704162][ T1232] EXT4-fs (loop2): free_blocks=2415919504 [ 45.717414][ T1249] EXT4-fs (loop4): This should not happen!! Data will be lost [ 45.717414][ T1249] [pid 1250] +++ killed by SIGBUS +++ [pid 300] newfstatat(AT_FDCWD, "./36/binderfs", [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1232] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1231, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=20} --- [pid 301] umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./35/binderfs") = 0 [pid 301] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./36/binderfs") = 0 [pid 300] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./35/binderfs") = 0 [pid 297] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1248] <... futex resumed>) = ? [pid 1248] +++ killed by SIGBUS +++ [pid 1230] +++ killed by SIGBUS +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1230, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=19} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./37/binderfs") = 0 [ 45.721763][ T1232] EXT4-fs (loop2): dirty_blocks=32 [ 45.735941][ T1232] EXT4-fs (loop2): Block reservation details [ 45.737193][ T1230] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 45.742663][ T1232] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 45.754900][ T1230] EXT4-fs (loop1): This should not happen!! Data will be lost [ 45.754900][ T1230] [pid 298] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1232] +++ killed by SIGBUS +++ [pid 1229] +++ killed by SIGBUS +++ [pid 300] <... umount2 resumed>) = 0 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1229, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=17} --- [pid 300] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./36/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./36/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./36/file1") = 0 [pid 300] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./36") = 0 [pid 300] mkdir("./37", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 299] umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1251 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 1251 attached [pid 299] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1251] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1251] chdir("./37" [pid 299] <... openat resumed>) = 3 [pid 1251] <... chdir resumed>) = 0 [pid 1251] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 299] newfstatat(3, "", [pid 1251] <... prctl resumed>) = 0 [pid 1251] setpgid(0, 0) = 0 [pid 1251] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, [pid 1251] <... openat resumed>) = 3 [pid 299] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 298] <... umount2 resumed>) = 0 [pid 299] umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./37/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./37/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./37/file1") = 0 [pid 298] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./37") = 0 [pid 298] mkdir("./38", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 297] <... umount2 resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] newfstatat(AT_FDCWD, "./37/binderfs", [pid 1251] write(3, "1000", 4 [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1251] <... write resumed>) = 4 [pid 298] <... clone resumed>, child_tidptr=0x55558909e690) = 1252 [pid 1251] close(3) = 0 [pid 1251] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 1251] write(1, "executing program\n", 18) = 18 [pid 1251] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1251] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1251] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1251] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1251] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1251] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1251] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1253]}, 88) = 1253 [pid 1251] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1251] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1251] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1252 attached [pid 1252] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1252] chdir("./38") = 0 [pid 1252] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1252] setpgid(0, 0) = 0 [pid 1252] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program ) = 3 [pid 1252] write(3, "1000", 4) = 4 [pid 1252] close(3 [pid 299] unlink("./37/binderfs" [pid 1252] <... close resumed>) = 0 [pid 1252] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1252] write(1, "executing program\n", 18) = 18 [pid 1252] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1252] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1252] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1252] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1252] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1252] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1252] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1254]}, 88) = 1254 [pid 1252] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1252] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1252] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1253 attached [pid 1253] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1253] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1253] memfd_create("syzkaller", 0) = 3 [pid 1253] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 299] <... unlink resumed>) = 0 [pid 299] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 1254 attached [pid 1253] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 301] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./35/file1", [pid 1254] set_robust_list(0x7f13c8ce49a0, 24 [pid 297] newfstatat(AT_FDCWD, "./35/file1", [pid 1254] <... set_robust_list resumed>) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./35/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] openat(AT_FDCWD, "./35/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] <... openat resumed>) = 4 [pid 297] newfstatat(4, "", [pid 301] newfstatat(4, "", [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, [pid 1254] rt_sigprocmask(SIG_SETMASK, [], [pid 301] getdents64(4, [pid 297] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1254] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 301] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, [pid 301] getdents64(4, [pid 297] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 297] close(4 [pid 301] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] close(4 [pid 297] <... close resumed>) = 0 [pid 301] <... close resumed>) = 0 [pid 297] rmdir("./35/file1" [pid 301] rmdir("./35/file1" [pid 297] <... rmdir resumed>) = 0 [pid 301] <... rmdir resumed>) = 0 [pid 297] getdents64(3, [pid 301] getdents64(3, [pid 297] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 297] close(3 [pid 301] close(3 [pid 297] <... close resumed>) = 0 [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./37/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./37/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./37/file1" [pid 301] <... close resumed>) = 0 [pid 297] rmdir("./35" [pid 299] <... rmdir resumed>) = 0 [pid 299] getdents64(3, [pid 301] rmdir("./35" [pid 299] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./37" [pid 297] <... rmdir resumed>) = 0 [pid 301] <... rmdir resumed>) = 0 [pid 297] mkdir("./36", 0777 [pid 299] <... rmdir resumed>) = 0 [pid 299] mkdir("./38", 0777 [pid 301] mkdir("./36", 0777 [pid 299] <... mkdir resumed>) = 0 [pid 297] <... mkdir resumed>) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] <... mkdir resumed>) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 299] close(3 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 297] <... openat resumed>) = 3 [pid 299] <... close resumed>) = 0 [pid 301] <... openat resumed>) = 3 [pid 297] ioctl(3, LOOP_CLR_FD [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] ioctl(3, LOOP_CLR_FD [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 301] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 299] <... clone resumed>, child_tidptr=0x55558909e690) = 1255 ./strace-static-x86_64: Process 1255 attached [pid 1255] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1255] chdir("./38") = 0 [pid 1255] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1255] setpgid(0, 0) = 0 [ 45.767342][ T1232] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 45.782945][ T1232] EXT4-fs (loop2): This should not happen!! Data will be lost [ 45.782945][ T1232] executing program [pid 301] close(3 [pid 297] close(3 [pid 301] <... close resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1255] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1255] write(3, "1000", 4) = 4 [pid 1255] close(3) = 0 [pid 1255] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1255] write(1, "executing program\n", 18) = 18 [pid 1255] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1255] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1255] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1255] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1255] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1255] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1255] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1257]}, 88) = 1257 [pid 1255] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1255] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1255] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1257 attached [pid 1257] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1257] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1257] memfd_create("syzkaller", 0) = 3 [pid 1257] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 301] <... clone resumed>, child_tidptr=0x55558909e690) = 1256 [pid 1257] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 297] <... clone resumed>, child_tidptr=0x55558909e690) = 1258 [pid 1254] memfd_create("syzkaller", 0) = 3 [pid 1254] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1257] <... write resumed>) = 1048576 ./strace-static-x86_64: Process 1258 attached [pid 1258] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1258] chdir("./36") = 0 [pid 1258] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1258] setpgid(0, 0 [pid 1254] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1258] <... setpgid resumed>) = 0 [pid 1258] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1258] write(3, "1000", 4) = 4 [pid 1258] close(3) = 0 [pid 1258] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1253] <... write resumed>) = 1048576 executing program [pid 1258] write(1, "executing program\n", 18) = 18 [pid 1258] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1258] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1258] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1258] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1258] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1258] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1258] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1259]}, 88) = 1259 [pid 1258] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 1256 attached NULL, 8) = 0 [pid 1258] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1258] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1257] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1257] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1257] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 1259 attached [pid 1256] set_robust_list(0x55558909e6a0, 24 [pid 1254] <... write resumed>) = 1048576 [pid 1253] munmap(0x7f13c08c4000, 138412032 [pid 1256] <... set_robust_list resumed>) = 0 [pid 1256] chdir("./36") = 0 [pid 1256] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1256] setpgid(0, 0) = 0 [pid 1256] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1253] <... munmap resumed>) = 0 [pid 1259] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1259] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1259] memfd_create("syzkaller", 0 [pid 1256] write(3, "1000", 4) = 4 [pid 1256] close(3) = 0 [pid 1259] <... memfd_create resumed>) = 3 [pid 1256] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1259] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1253] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1253] ioctl(4, LOOP_SET_FD, 3 [pid 1257] <... ioctl resumed>) = 0 [pid 1254] munmap(0x7f13c08c4000, 138412032 [pid 1256] write(1, "executing program\n", 18executing program [pid 1257] close(3 [pid 1254] <... munmap resumed>) = 0 [pid 1259] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1257] <... close resumed>) = 0 [pid 1256] <... write resumed>) = 18 [pid 1254] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1257] close(4 [pid 1256] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1254] <... openat resumed>) = 4 [pid 1257] <... close resumed>) = 0 [pid 1256] <... futex resumed>) = 0 [pid 1256] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1254] ioctl(4, LOOP_SET_FD, 3 [pid 1257] mkdir("./file1", 0777) = 0 [pid 1253] <... ioctl resumed>) = 0 [pid 1256] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1256] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1256] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1256] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1256] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1257] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 1256] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1256] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1253] close(3 [pid 1256] <... clone3 resumed> => {parent_tid=[1260]}, 88) = 1260 [pid 1253] <... close resumed>) = 0 [pid 1256] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1256] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1256] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1254] <... ioctl resumed>) = 0 [pid 1254] close(3) = 0 [pid 1254] close(4) = 0 [pid 1254] mkdir("./file1", 0777) = 0 [pid 1254] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue"./strace-static-x86_64: Process 1260 attached [pid 1260] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1260] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1260] memfd_create("syzkaller", 0) = 3 [pid 1260] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1253] close(4) = 0 [pid 1253] mkdir("./file1", 0777) = 0 [pid 1253] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 1260] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1259] <... write resumed>) = 1048576 [pid 1259] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1259] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1257] <... mount resumed>) = 0 [pid 1254] <... mount resumed>) = 0 [pid 1259] ioctl(4, LOOP_SET_FD, 3 [pid 1254] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [ 45.865977][ T1257] loop2: detected capacity change from 0 to 2048 [ 45.873381][ T1253] loop3: detected capacity change from 0 to 2048 [ 45.879171][ T1254] loop1: detected capacity change from 0 to 2048 [pid 1257] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1254] <... openat resumed>) = 3 [pid 1257] <... openat resumed>) = 3 [pid 1257] chdir("./file1" [pid 1254] chdir("./file1" [pid 1257] <... chdir resumed>) = 0 [pid 1254] <... chdir resumed>) = 0 [pid 1257] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1254] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1257] <... openat resumed>) = 4 [pid 1254] <... openat resumed>) = 4 [pid 1257] ioctl(4, LOOP_CLR_FD [pid 1254] ioctl(4, LOOP_CLR_FD [pid 1257] <... ioctl resumed>) = 0 [pid 1254] <... ioctl resumed>) = 0 [pid 1257] close(4 [pid 1254] close(4 [pid 1257] <... close resumed>) = 0 [pid 1254] <... close resumed>) = 0 [pid 1257] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1254] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1257] <... futex resumed>) = 1 [pid 1255] <... futex resumed>) = 0 [pid 1254] <... futex resumed>) = 1 [pid 1252] <... futex resumed>) = 0 [pid 1257] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1255] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1254] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1252] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1257] <... open resumed>) = 4 [pid 1255] <... futex resumed>) = 0 [pid 1254] <... open resumed>) = 4 [pid 1252] <... futex resumed>) = 0 [pid 1257] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1255] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1254] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1252] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1257] <... futex resumed>) = 0 [pid 1255] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1254] <... futex resumed>) = 0 [pid 1252] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1257] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1255] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1254] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1252] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1257] <... open resumed>) = 5 [pid 1255] <... futex resumed>) = 0 [pid 1254] <... open resumed>) = 5 [pid 1252] <... futex resumed>) = 0 [pid 1257] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1255] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1254] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1252] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1257] <... futex resumed>) = 0 [pid 1255] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1254] <... futex resumed>) = 0 [pid 1252] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1257] creat("./bus", 000 [pid 1255] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1254] creat("./bus", 000 [pid 1252] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1257] <... creat resumed>) = 6 [pid 1255] <... futex resumed>) = 0 [pid 1254] <... creat resumed>) = 6 [pid 1252] <... futex resumed>) = 0 [pid 1257] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1255] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1254] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1252] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1257] <... futex resumed>) = 0 [pid 1255] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1254] <... futex resumed>) = 0 [pid 1252] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1257] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1255] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1254] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1252] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1257] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1255] <... futex resumed>) = 0 [pid 1254] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1252] <... futex resumed>) = 0 [pid 1257] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1255] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1254] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1252] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1257] <... futex resumed>) = 0 [pid 1255] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1254] <... futex resumed>) = 0 [pid 1252] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1257] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1255] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1254] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1252] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1255] <... futex resumed>) = 0 [pid 1254] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1252] <... futex resumed>) = 0 [pid 1257] pwrite64(6, "+", 1, 0 [pid 1255] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1254] pwrite64(6, "+", 1, 0 [pid 1252] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1257] <... pwrite64 resumed>) = 1 [pid 1254] <... pwrite64 resumed>) = 1 [pid 1257] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1254] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1257] <... futex resumed>) = 1 [pid 1255] <... futex resumed>) = 0 [pid 1254] <... futex resumed>) = 1 [pid 1252] <... futex resumed>) = 0 [pid 1257] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1255] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1254] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1252] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1255] <... futex resumed>) = 0 [pid 1254] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1252] <... futex resumed>) = 0 [pid 1257] open("./bus", O_RDONLY [pid 1255] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1254] open("./bus", O_RDONLY [pid 1252] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1257] <... open resumed>) = 7 [pid 1254] <... open resumed>) = 7 [pid 1257] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1254] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1257] <... futex resumed>) = 1 [pid 1255] <... futex resumed>) = 0 [pid 1254] <... futex resumed>) = 1 [pid 1252] <... futex resumed>) = 0 [pid 1257] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1255] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1254] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1252] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1255] <... futex resumed>) = 0 [pid 1254] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1252] <... futex resumed>) = 0 [pid 1257] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1255] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1254] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1252] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1257] <... copy_file_range resumed>) = 1 [pid 1255] <... futex resumed>) = 0 [pid 1254] <... copy_file_range resumed>) = 1 [pid 1252] <... futex resumed>) = 0 [pid 1257] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1255] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1254] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1252] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1257] <... futex resumed>) = 0 [pid 1255] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1254] <... futex resumed>) = 0 [pid 1252] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1257] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1255] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1254] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1252] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1255] <... mprotect resumed>) = 0 [pid 1252] <... mprotect resumed>) = 0 [pid 1255] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1252] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1255] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1252] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1255] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1252] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1255] <... clone3 resumed> => {parent_tid=[1268]}, 88) = 1268 [pid 1252] <... clone3 resumed> => {parent_tid=[1269]}, 88) = 1269 [pid 1255] rt_sigprocmask(SIG_SETMASK, [], [pid 1252] rt_sigprocmask(SIG_SETMASK, [], [pid 1255] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1252] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1255] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1252] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1255] <... futex resumed>) = 0 [pid 1252] <... futex resumed>) = 0 [pid 1255] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1252] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1268 attached [pid 1260] <... write resumed>) = 1048576 [pid 1259] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 1269 attached [pid 1260] munmap(0x7f13c08c4000, 138412032 [pid 1259] close(3 [pid 1269] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1260] <... munmap resumed>) = 0 [pid 1259] <... close resumed>) = 0 [pid 1269] rt_sigprocmask(SIG_SETMASK, [], [pid 1268] set_robust_list(0x7f13c8cc39a0, 24 [pid 1260] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1259] close(4 [pid 1269] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1253] <... mount resumed>) = 0 [pid 1260] <... openat resumed>) = 4 [pid 1259] <... close resumed>) = 0 [pid 1253] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1253] chdir("./file1") = 0 [pid 1253] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1253] ioctl(4, LOOP_CLR_FD) = 0 [pid 1253] close(4) = 0 [pid 1253] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1251] <... futex resumed>) = 0 [pid 1253] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1251] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1253] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1251] <... futex resumed>) = 0 [pid 1253] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1251] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1268] <... set_robust_list resumed>) = 0 [pid 1268] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1268] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1253] <... open resumed>) = 4 [pid 1253] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1251] <... futex resumed>) = 0 [pid 1253] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1251] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1253] <... open resumed>) = 5 [pid 1251] <... futex resumed>) = 0 [pid 1251] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1253] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1260] ioctl(4, LOOP_SET_FD, 3 [pid 1253] <... futex resumed>) = 0 [pid 1251] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1253] creat("./bus", 000 [pid 1251] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1268] <... mmap resumed>) = 0x20000000 [pid 1268] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1255] <... futex resumed>) = 0 [pid 1255] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1257] <... futex resumed>) = 0 [pid 1255] <... futex resumed>) = 1 [pid 1257] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1255] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1257] <... open resumed>) = -1 EFAULT (Bad address) [pid 1257] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1255] <... futex resumed>) = 0 [pid 1257] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1255] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1255] <... futex resumed>) = 0 [pid 1269] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1259] mkdir("./file1", 0777 [pid 1255] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1253] <... creat resumed>) = 6 [pid 1251] <... futex resumed>) = 0 [pid 1251] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1268] <... futex resumed>) = 1 [pid 1259] <... mkdir resumed>) = 0 [pid 1253] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1259] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 1253] <... futex resumed>) = 1 [pid 1251] <... futex resumed>) = 0 [pid 1253] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1251] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1253] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1251] <... futex resumed>) = 0 [pid 1253] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1251] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1253] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1253] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1251] <... futex resumed>) = 0 [pid 1253] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1251] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1253] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1251] <... futex resumed>) = 0 [pid 1253] pwrite64(6, "+", 1, 0 [pid 1251] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1253] <... pwrite64 resumed>) = 1 [pid 1253] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1251] <... futex resumed>) = 0 [pid 1253] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1251] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1253] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1268] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1253] open("./bus", O_RDONLY [pid 1251] <... futex resumed>) = 0 [pid 1253] <... open resumed>) = 7 [pid 1251] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1253] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1251] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1253] <... futex resumed>) = 0 [pid 1251] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1253] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1251] <... futex resumed>) = 0 [pid 1253] <... copy_file_range resumed>) = 1 [pid 1251] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1253] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1251] <... futex resumed>) = 0 [ 45.911618][ T1259] loop0: detected capacity change from 0 to 2048 [ 45.940162][ T1260] loop4: detected capacity change from 0 to 2048 [ 45.943063][ T1257] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 1269] <... mmap resumed>) = 0x20000000 [pid 1260] <... ioctl resumed>) = 0 [pid 1253] <... futex resumed>) = 0 [pid 1251] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1253] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1251] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1251] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1251] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1251] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1271]}, 88) = 1271 [pid 1251] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1251] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1251] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1269] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1269] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1260] close(3) = 0 [pid 1260] close(4) = 0 [pid 1260] mkdir("./file1", 0777) = 0 [pid 1260] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 1252] <... futex resumed>) = 0 [pid 1252] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1271 attached ) = 1 [pid 1254] <... futex resumed>) = 0 [pid 1252] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1271] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1271] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1271] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 1251] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1253] <... futex resumed>) = 0 [pid 1251] <... futex resumed>) = 1 [pid 1253] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1251] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1253] <... open resumed>) = -1 EFAULT (Bad address) [pid 1253] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1251] <... futex resumed>) = 0 [pid 1254] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1251] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1259] <... mount resumed>) = 0 [pid 1251] <... futex resumed>) = 0 [pid 1259] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1251] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1259] <... openat resumed>) = 3 [pid 1259] chdir("./file1") = 0 [pid 1259] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1271] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1259] <... openat resumed>) = 4 [pid 1259] ioctl(4, LOOP_CLR_FD) = 0 [pid 1259] close(4) = 0 [pid 1259] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1259] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1258] <... futex resumed>) = 0 [pid 1254] <... open resumed>) = -1 EFAULT (Bad address) [pid 1258] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1255] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1254] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1258] <... futex resumed>) = 1 [pid 1259] <... futex resumed>) = 0 [pid 1254] <... futex resumed>) = 1 [pid 1252] <... futex resumed>) = 0 [pid 1259] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1258] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1254] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1252] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1254] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1252] <... futex resumed>) = 0 [ 45.966023][ T1257] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 45.980169][ T1257] EXT4-fs (loop2): This should not happen!! Data will be lost [ 45.980169][ T1257] [ 45.988856][ T1253] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 45.990225][ T1257] EXT4-fs (loop2): Total free blocks count 0 [pid 1252] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1260] <... mount resumed>) = 0 [pid 1259] <... open resumed>) = 4 [pid 1260] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1259] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1260] <... openat resumed>) = 3 [ 46.014340][ T1257] EXT4-fs (loop2): Free/Dirty block details [ 46.016811][ T1253] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 46.020310][ T1254] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 46.032463][ T1257] EXT4-fs (loop2): free_blocks=2415919504 [ 46.052968][ T1254] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 1260] chdir("./file1" [pid 1259] <... futex resumed>) = 1 [pid 1258] <... futex resumed>) = 0 [pid 1252] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1251] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1260] <... chdir resumed>) = 0 [pid 1259] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1258] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1260] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1259] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1258] <... futex resumed>) = 0 [pid 1260] <... openat resumed>) = 4 [pid 1259] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [ 46.053402][ T1257] EXT4-fs (loop2): dirty_blocks=32 [ 46.066216][ T1254] EXT4-fs (loop1): This should not happen!! Data will be lost [ 46.066216][ T1254] [ 46.070883][ T1253] EXT4-fs (loop3): This should not happen!! Data will be lost [ 46.070883][ T1253] [ 46.080271][ T1254] EXT4-fs (loop1): Total free blocks count 0 [ 46.089711][ T1257] EXT4-fs (loop2): Block reservation details [ 46.095551][ T1254] EXT4-fs (loop1): Free/Dirty block details [ 46.101607][ T1257] EXT4-fs (loop2): i_reserved_data_blocks=2 [pid 1258] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1260] ioctl(4, LOOP_CLR_FD [pid 1259] <... open resumed>) = 5 [pid 1260] <... ioctl resumed>) = 0 [pid 1259] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1257] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1268] <... futex resumed>) = ? [pid 1260] close(4 [pid 1259] <... futex resumed>) = 1 [pid 1260] <... close resumed>) = 0 [pid 1259] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1258] <... futex resumed>) = 0 [pid 1260] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1259] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1258] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1260] <... futex resumed>) = 1 [pid 1259] creat("./bus", 000 [pid 1258] <... futex resumed>) = 0 [pid 1260] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1259] <... creat resumed>) = 6 [pid 1258] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1259] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1258] <... futex resumed>) = 0 [pid 1259] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1258] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1259] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1258] <... futex resumed>) = 0 [pid 1259] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1258] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1259] <... futex resumed>) = 0 [pid 1258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1259] pwrite64(6, "+", 1, 0 [pid 1258] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1259] <... pwrite64 resumed>) = 1 [pid 1258] <... futex resumed>) = 0 [pid 1259] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1258] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1259] <... futex resumed>) = 0 [pid 1258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1259] open("./bus", O_RDONLY [pid 1258] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1259] <... open resumed>) = 7 [pid 1258] <... futex resumed>) = 0 [pid 1259] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1258] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1259] <... futex resumed>) = 0 [pid 1258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1259] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1258] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1268] +++ killed by SIGBUS +++ [pid 1257] +++ killed by SIGBUS +++ [pid 1259] <... copy_file_range resumed>) = 1 [pid 1258] <... futex resumed>) = 0 [pid 1259] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1258] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1259] <... futex resumed>) = 0 [pid 1258] <... futex resumed>) = 0 [pid 1259] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1258] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1258] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1258] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1258] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1276]}, 88) = 1276 [pid 1258] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1258] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1258] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1276 attached [pid 1276] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1276] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1276] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1258] <... futex resumed>) = 0 [pid 1258] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1259] <... futex resumed>) = 0 [pid 1258] <... futex resumed>) = 1 [pid 1259] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1258] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1259] <... open resumed>) = -1 EFAULT (Bad address) [ 46.107053][ T1254] EXT4-fs (loop1): free_blocks=2415919504 [ 46.112916][ T1253] EXT4-fs (loop3): Total free blocks count 0 [ 46.118251][ T1254] EXT4-fs (loop1): dirty_blocks=32 [ 46.124309][ T1253] EXT4-fs (loop3): Free/Dirty block details [ 46.129091][ T1254] EXT4-fs (loop1): Block reservation details [ 46.134746][ T1253] EXT4-fs (loop3): free_blocks=2415919504 [ 46.146683][ T1255] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 1259] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1258] <... futex resumed>) = 0 [pid 1258] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1256] <... futex resumed>) = 0 [pid 1258] <... futex resumed>) = 0 [pid 1258] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1276] <... futex resumed>) = 1 [pid 1276] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1256] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1254] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1260] <... futex resumed>) = 0 [pid 1256] <... futex resumed>) = 1 [pid 1269] <... futex resumed>) = ? [pid 1260] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1269] +++ killed by SIGBUS +++ [pid 1260] <... open resumed>) = 4 [pid 1254] +++ killed by SIGBUS +++ [pid 1260] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 46.154258][ T1259] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 46.167053][ T1253] EXT4-fs (loop3): dirty_blocks=32 [ 46.174882][ T1254] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 46.178581][ T1255] EXT4-fs (loop2): This should not happen!! Data will be lost [ 46.178581][ T1255] [ 46.185033][ T1259] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 46.193790][ T1253] EXT4-fs (loop3): Block reservation details [pid 1260] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1256] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1255] +++ killed by SIGBUS +++ [pid 1258] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1256] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1256] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1260] <... futex resumed>) = 0 [pid 1256] <... futex resumed>) = 1 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1255, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 1260] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1256] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1253] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1252] +++ killed by SIGBUS +++ [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 1260] <... open resumed>) = 5 [pid 299] <... restart_syscall resumed>) = 0 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1252, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 1260] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1256] <... futex resumed>) = 0 [pid 1260] creat("./bus", 000 [pid 1256] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1260] <... creat resumed>) = 6 [pid 1256] <... futex resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1260] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1256] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1260] <... futex resumed>) = 0 [pid 1256] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] <... openat resumed>) = 3 [pid 298] <... openat resumed>) = 3 [pid 1260] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1256] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] newfstatat(3, "", [pid 298] newfstatat(3, "", [pid 1260] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1256] <... futex resumed>) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1260] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1256] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] getdents64(3, [pid 298] getdents64(3, [pid 1260] <... futex resumed>) = 0 [pid 1256] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 298] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1260] pwrite64(6, "+", 1, 0 [pid 1256] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1260] <... pwrite64 resumed>) = 1 [pid 1256] <... futex resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1260] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1256] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] newfstatat(AT_FDCWD, "./38/binderfs", [pid 298] newfstatat(AT_FDCWD, "./38/binderfs", [pid 1260] <... futex resumed>) = 0 [pid 1256] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1260] open("./bus", O_RDONLY [pid 1256] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1260] <... open resumed>) = 7 [pid 1256] <... futex resumed>) = 0 [pid 299] unlink("./38/binderfs" [pid 298] unlink("./38/binderfs" [pid 1260] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1256] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... unlink resumed>) = 0 [pid 298] <... unlink resumed>) = 0 [pid 1260] <... futex resumed>) = 0 [pid 1256] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 46.207915][ T1259] EXT4-fs (loop0): This should not happen!! Data will be lost [ 46.207915][ T1259] [ 46.211651][ T1253] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 46.221360][ T1259] EXT4-fs (loop0): Total free blocks count 0 [ 46.227384][ T1252] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 46.232850][ T1259] EXT4-fs (loop0): Free/Dirty block details [ 46.250509][ T1252] EXT4-fs (loop1): This should not happen!! Data will be lost [ 46.250509][ T1252] [ 46.251131][ T1259] EXT4-fs (loop0): free_blocks=2415919504 [pid 299] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1260] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1256] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1260] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1256] <... futex resumed>) = 0 [pid 1260] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1256] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1260] <... copy_file_range resumed>) = 1 [pid 1256] <... futex resumed>) = 0 [pid 1260] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1256] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1260] <... futex resumed>) = 0 [pid 1256] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1260] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1256] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1256] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1256] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1277]}, 88) = 1277 [pid 1256] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1256] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1256] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1277 attached [pid 1253] +++ killed by SIGBUS +++ [pid 1277] set_robust_list(0x7f13c8cc39a0, 24 [pid 1271] <... futex resumed>) = ? [pid 298] <... umount2 resumed>) = 0 [pid 1277] <... set_robust_list resumed>) = 0 [pid 1259] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 299] <... umount2 resumed>) = 0 [pid 298] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1277] rt_sigprocmask(SIG_SETMASK, [], [pid 299] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1277] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./38/file1", [pid 1277] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 299] newfstatat(AT_FDCWD, "./38/file1", [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1277] <... mmap resumed>) = 0x20000000 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1277] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1277] <... futex resumed>) = 1 [pid 1256] <... futex resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./38/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1277] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1256] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] openat(AT_FDCWD, "./38/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] <... openat resumed>) = 4 [pid 1260] <... futex resumed>) = 0 [pid 1256] <... futex resumed>) = 1 [pid 299] <... openat resumed>) = 4 [pid 298] newfstatat(4, "", [pid 1260] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1256] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] newfstatat(4, "", [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1260] <... open resumed>) = -1 EFAULT (Bad address) [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, [pid 1260] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] getdents64(4, [pid 298] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1260] <... futex resumed>) = 1 [pid 1256] <... futex resumed>) = 0 [pid 299] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, [pid 1260] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1256] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] getdents64(4, [pid 298] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1260] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 46.266389][ T1259] EXT4-fs (loop0): dirty_blocks=32 [ 46.271870][ T1259] EXT4-fs (loop0): Block reservation details [ 46.278108][ T1259] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 46.284695][ T1271] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 46.294202][ T1260] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters executing program [pid 1256] <... futex resumed>) = 0 [pid 299] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 298] close(4 [pid 1256] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] close(4 [pid 298] <... close resumed>) = 0 [pid 1259] +++ killed by SIGBUS +++ [pid 299] <... close resumed>) = 0 [pid 298] rmdir("./38/file1" [pid 299] rmdir("./38/file1" [pid 298] <... rmdir resumed>) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 298] getdents64(3, [pid 299] getdents64(3, [pid 298] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 299] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 298] close(3 [pid 299] close(3 [pid 298] <... close resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 298] rmdir("./38" [pid 299] rmdir("./38" [pid 298] <... rmdir resumed>) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 298] mkdir("./39", 0777 [pid 299] mkdir("./39", 0777 [pid 298] <... mkdir resumed>) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 298] <... openat resumed>) = 3 [pid 299] <... openat resumed>) = 3 [pid 298] ioctl(3, LOOP_CLR_FD [pid 299] ioctl(3, LOOP_CLR_FD [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 298] close(3 [pid 299] close(3 [pid 298] <... close resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] <... clone resumed>, child_tidptr=0x55558909e690) = 1278 [pid 299] <... clone resumed>, child_tidptr=0x55558909e690) = 1279 ./strace-static-x86_64: Process 1279 attached [pid 1279] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1279] chdir("./39") = 0 [pid 1279] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1279] setpgid(0, 0) = 0 [pid 1279] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1279] write(3, "1000", 4) = 4 [pid 1279] close(3) = 0 [pid 1279] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1279] write(1, "executing program\n", 18) = 18 [pid 1279] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1279] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1279] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1279] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1279] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1279] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1279] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1280]}, 88) = 1280 [pid 1279] rt_sigprocmask(SIG_SETMASK, [], [pid 1276] <... futex resumed>) = ? [pid 1279] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1279] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1279] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1280 attached ./strace-static-x86_64: Process 1278 attached [pid 1271] +++ killed by SIGBUS +++ [pid 1251] +++ killed by SIGBUS +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1251, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 300] umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./37/binderfs") = 0 [pid 300] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1280] set_robust_list(0x7f13c8ce49a0, 24 [pid 1278] set_robust_list(0x55558909e6a0, 24 [pid 1276] +++ killed by SIGBUS +++ [pid 1258] +++ killed by SIGBUS +++ [pid 1256] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1280] <... set_robust_list resumed>) = 0 [pid 1278] <... set_robust_list resumed>) = 0 [pid 1280] rt_sigprocmask(SIG_SETMASK, [], [pid 1278] chdir("./39" [pid 1280] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1278] <... chdir resumed>) = 0 [pid 1280] memfd_create("syzkaller", 0 [pid 1278] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1280] <... memfd_create resumed>) = 3 [pid 1278] <... prctl resumed>) = 0 [ 46.304537][ T1271] EXT4-fs (loop3): This should not happen!! Data will be lost [ 46.304537][ T1271] [ 46.321064][ T1260] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 46.329788][ T1276] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 46.333727][ T1260] EXT4-fs (loop4): This should not happen!! Data will be lost [ 46.333727][ T1260] [ 46.348885][ T1276] EXT4-fs (loop0): This should not happen!! Data will be lost [ 46.348885][ T1276] [pid 1280] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1278] setpgid(0, 0 [pid 1280] <... mmap resumed>) = 0x7f13c08c4000 [pid 1278] <... setpgid resumed>) = 0 [pid 1278] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1258, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 1278] write(3, "1000", 4) = 4 [pid 1278] close(3) = 0 [pid 1278] symlink("/dev/binderfs", "./binderfs") = 0 [pid 297] umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 1278] write(1, "executing program\n", 18) = 18 [pid 1278] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1278] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1278] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1278] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1278] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1278] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1278] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1281]}, 88) = 1281 [pid 1278] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1278] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1278] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] <... umount2 resumed>) = 0 [pid 297] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1280] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 1281 attached [pid 300] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] <... openat resumed>) = 3 [pid 1281] set_robust_list(0x7f13c8ce49a0, 24 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1281] <... set_robust_list resumed>) = 0 [pid 300] newfstatat(AT_FDCWD, "./37/file1", [pid 297] newfstatat(3, "", [pid 1280] <... write resumed>) = 1048576 [pid 1280] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1280] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1280] ioctl(4, LOOP_SET_FD, 3 [pid 1281] rt_sigprocmask(SIG_SETMASK, [], [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1280] <... ioctl resumed>) = 0 [pid 1280] close(3) = 0 [pid 1280] close(4 [pid 1281] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 300] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] getdents64(3, [pid 1280] <... close resumed>) = 0 [pid 1281] memfd_create("syzkaller", 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1281] <... memfd_create resumed>) = 3 [pid 300] openat(AT_FDCWD, "./37/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1280] mkdir("./file1", 0777) = 0 [pid 1280] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 1260] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1281] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 300] <... openat resumed>) = 4 [pid 297] umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1281] <... mmap resumed>) = 0x7f13c08c4000 [pid 300] newfstatat(4, "", [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1277] <... futex resumed>) = ? [pid 1277] +++ killed by SIGBUS +++ [ 46.357602][ T1260] EXT4-fs (loop4): Total free blocks count 0 [ 46.372028][ T1260] EXT4-fs (loop4): Free/Dirty block details [ 46.378441][ T1260] EXT4-fs (loop4): free_blocks=2415919504 [ 46.386830][ T1260] EXT4-fs (loop4): dirty_blocks=32 [ 46.391999][ T1260] EXT4-fs (loop4): Block reservation details [ 46.394934][ T1280] loop2: detected capacity change from 0 to 2048 [ 46.397980][ T1260] EXT4-fs (loop4): i_reserved_data_blocks=2 [pid 1281] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] newfstatat(AT_FDCWD, "./36/binderfs", [pid 300] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 297] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] getdents64(4, [pid 297] unlink("./36/binderfs" [pid 300] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 297] <... unlink resumed>) = 0 [pid 300] close(4 [pid 297] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] <... close resumed>) = 0 [pid 300] rmdir("./37/file1") = 0 [pid 300] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./37") = 0 [pid 300] mkdir("./38", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1282 [pid 1281] <... write resumed>) = 1048576 [pid 1281] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1281] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1281] ioctl(4, LOOP_SET_FD, 3 [pid 297] <... umount2 resumed>) = 0 [pid 297] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./36/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./36/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./36/file1") = 0 [pid 297] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./36") = 0 [pid 297] mkdir("./37", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program , child_tidptr=0x55558909e690) = 1285 ./strace-static-x86_64: Process 1285 attached [pid 1285] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1285] chdir("./37") = 0 [pid 1285] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1285] setpgid(0, 0) = 0 [pid 1285] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1285] write(3, "1000", 4) = 4 [pid 1285] close(3) = 0 [pid 1285] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1285] write(1, "executing program\n", 18) = 18 [pid 1285] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1285] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1285] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1285] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1285] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1285] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1285] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1286]}, 88) = 1286 [pid 1285] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1285] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1285] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1281] <... ioctl resumed>) = 0 [pid 1281] close(3) = 0 [pid 1281] close(4) = 0 [pid 1281] mkdir("./file1", 0777) = 0 [pid 1281] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue"./strace-static-x86_64: Process 1286 attached [pid 1286] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1286] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1286] memfd_create("syzkaller", 0) = 3 [pid 1286] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1286] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1281] <... mount resumed>) = 0 [pid 1280] <... mount resumed>) = 0 [pid 1280] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1281] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1280] chdir("./file1" [pid 1281] chdir("./file1" [pid 1280] <... chdir resumed>) = 0 [pid 1281] <... chdir resumed>) = 0 [pid 1280] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1281] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1280] <... openat resumed>) = 4 [pid 1281] ioctl(4, LOOP_CLR_FD [pid 1280] ioctl(4, LOOP_CLR_FD [pid 1281] <... ioctl resumed>) = 0 [pid 1280] <... ioctl resumed>) = 0 [pid 1281] close(4 [pid 1280] close(4 [pid 1281] <... close resumed>) = 0 [pid 1280] <... close resumed>) = 0 [pid 1281] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1280] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1281] <... futex resumed>) = 1 [pid 1280] <... futex resumed>) = 1 [pid 1279] <... futex resumed>) = 0 [pid 1281] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1280] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1279] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1280] <... open resumed>) = 4 [pid 1279] <... futex resumed>) = 0 [pid 1278] <... futex resumed>) = 0 [pid 1280] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1279] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1278] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1280] <... futex resumed>) = 0 [pid 1279] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1281] <... futex resumed>) = 0 [pid 1278] <... futex resumed>) = 1 [pid 1280] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1279] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1278] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1281] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1280] <... open resumed>) = 5 [pid 1279] <... futex resumed>) = 0 [pid 1280] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1279] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1280] <... futex resumed>) = 0 [pid 1279] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1281] <... open resumed>) = 4 [pid 1280] creat("./bus", 000 [pid 1279] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1281] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1280] <... creat resumed>) = 6 [pid 1279] <... futex resumed>) = 0 [pid 1280] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1279] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1280] <... futex resumed>) = 0 [pid 1279] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1280] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1279] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1280] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1279] <... futex resumed>) = 0 [pid 1280] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1279] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1280] <... futex resumed>) = 0 [pid 1279] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1280] pwrite64(6, "+", 1, 0 [pid 1279] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1280] <... pwrite64 resumed>) = 1 [pid 1279] <... futex resumed>) = 0 [pid 1280] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1279] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1280] <... futex resumed>) = 0 [pid 1279] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1280] open("./bus", O_RDONLY [pid 1279] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1280] <... open resumed>) = 7 [pid 1279] <... futex resumed>) = 0 [pid 1280] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1279] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1280] <... futex resumed>) = 0 [pid 1279] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1280] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1279] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1280] <... copy_file_range resumed>) = 1 [pid 1279] <... futex resumed>) = 0 [pid 1280] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1279] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1280] <... futex resumed>) = 0 [pid 1279] <... futex resumed>) = 0 [pid 1280] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1279] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1279] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1279] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1279] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1281] <... futex resumed>) = 1 [pid 1278] <... futex resumed>) = 0 [pid 1279] <... clone3 resumed> => {parent_tid=[1289]}, 88) = 1289 [pid 1279] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1279] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1279] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1286] <... write resumed>) = 1048576 [pid 1281] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1278] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1286] munmap(0x7f13c08c4000, 138412032 [pid 1278] <... futex resumed>) = 0 [pid 1281] <... open resumed>) = 5 [pid 1278] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1281] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1286] <... munmap resumed>) = 0 [pid 1286] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1286] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 1289 attached [pid 1289] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1289] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1289] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1281] <... futex resumed>) = 1 [pid 1278] <... futex resumed>) = 0 [pid 1278] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1281] creat("./bus", 000 [pid 1278] <... futex resumed>) = 0 [pid 1281] <... creat resumed>) = 6 [pid 1278] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1281] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1278] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1281] <... futex resumed>) = 0 [pid 1278] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1281] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1278] <... futex resumed>) = 0 [pid 1281] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1278] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1281] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1278] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1281] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1278] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1281] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1278] <... futex resumed>) = 0 [pid 1281] pwrite64(6, "+", 1, 0 [pid 1278] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1281] <... pwrite64 resumed>) = 1 [pid 1281] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1278] <... futex resumed>) = 0 [pid 1281] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1278] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1281] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1278] <... futex resumed>) = 0 [pid 1281] open("./bus", O_RDONLY [pid 1278] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1281] <... open resumed>) = 7 [pid 1281] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1278] <... futex resumed>) = 0 [pid 1281] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1278] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1281] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1278] <... futex resumed>) = 0 [pid 1281] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1278] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1281] <... copy_file_range resumed>) = 1 [pid 1278] <... futex resumed>) = 0 [pid 1281] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1278] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1281] <... futex resumed>) = 0 [pid 1281] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1278] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1278] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1278] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1278] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1290]}, 88) = 1290 [pid 1289] <... mmap resumed>) = 0x20000000 [pid 1289] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1278] rt_sigprocmask(SIG_SETMASK, [], [pid 1279] <... futex resumed>) = 0 [pid 1278] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1279] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1278] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1280] <... futex resumed>) = 0 [pid 1279] <... futex resumed>) = 1 [pid 1278] <... futex resumed>) = 0 [pid 1280] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1279] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1278] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1280] <... open resumed>) = -1 EFAULT (Bad address) [pid 1280] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1279] <... futex resumed>) = 0 [pid 1280] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1279] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1280] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 46.416281][ T1260] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 46.427521][ T1281] loop1: detected capacity change from 0 to 2048 [pid 1279] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1282 attached [pid 1279] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1289] <... futex resumed>) = 1 [pid 1289] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1290 attached [pid 1290] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1290] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1290] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1282] set_robust_list(0x55558909e6a0, 24 [pid 1278] <... futex resumed>) = 0 [pid 1260] +++ killed by SIGBUS +++ [pid 1256] +++ killed by SIGBUS +++ [pid 1286] <... ioctl resumed>) = 0 [pid 1282] <... set_robust_list resumed>) = 0 [pid 1278] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1282] chdir("./38" [pid 1281] <... futex resumed>) = 0 [pid 1278] <... futex resumed>) = 1 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1256, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 1282] <... chdir resumed>) = 0 [pid 1281] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1278] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1282] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1281] <... open resumed>) = -1 EFAULT (Bad address) [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1282] <... prctl resumed>) = 0 [pid 1281] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [ 46.473697][ T1280] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 46.480554][ T1260] EXT4-fs (loop4): This should not happen!! Data will be lost [ 46.480554][ T1260] [ 46.491335][ T1280] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 46.499760][ T1286] loop0: detected capacity change from 0 to 2048 [ 46.510517][ T1280] EXT4-fs (loop2): This should not happen!! Data will be lost [pid 301] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYexecuting program [pid 1282] setpgid(0, 0 [pid 1281] <... futex resumed>) = 1 [pid 1278] <... futex resumed>) = 0 [pid 301] <... openat resumed>) = 3 [pid 1282] <... setpgid resumed>) = 0 [pid 1279] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1278] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1282] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1278] <... futex resumed>) = 0 [pid 1282] <... openat resumed>) = 3 [pid 1278] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1282] write(3, "1000", 4) = 4 [pid 1282] close(3) = 0 [pid 1282] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1282] write(1, "executing program\n", 18) = 18 [pid 1282] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1282] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1282] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1282] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1282] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1282] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1282] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1291]}, 88) = 1291 [pid 1282] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1282] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1282] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1291 attached [pid 1291] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1291] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1291] memfd_create("syzkaller", 0) = 3 [pid 1291] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1291] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1291] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1291] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1291] ioctl(4, LOOP_SET_FD, 3 [pid 1286] close(3 [ 46.510517][ T1280] [ 46.521128][ T1281] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, [ 46.525462][ T1280] EXT4-fs (loop2): Total free blocks count 0 [ 46.525479][ T1280] EXT4-fs (loop2): Free/Dirty block details [ 46.525492][ T1280] EXT4-fs (loop2): free_blocks=2415919504 [ 46.533529][ T1281] block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 46.539286][ T1280] EXT4-fs (loop2): dirty_blocks=32 [ 46.558127][ T1291] loop3: detected capacity change from 0 to 2048 [pid 301] newfstatat(3, "", [pid 1286] <... close resumed>) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1291] <... ioctl resumed>) = 0 [pid 1291] close(3) = 0 [pid 1291] close(4 [pid 1286] close(4 [pid 301] getdents64(3, [pid 1286] <... close resumed>) = 0 [pid 1286] mkdir("./file1", 0777 [pid 1280] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 301] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1278] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1278] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1291] <... close resumed>) = 0 [pid 1291] mkdir("./file1", 0777 [pid 1286] <... mkdir resumed>) = 0 [pid 301] umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1286] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1291] <... mkdir resumed>) = 0 [pid 1291] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 1289] <... futex resumed>) = ? [pid 301] newfstatat(AT_FDCWD, "./36/binderfs", [pid 1280] +++ killed by SIGBUS +++ [pid 1289] +++ killed by SIGBUS +++ [ 46.559564][ T1280] EXT4-fs (loop2): Block reservation details [ 46.564674][ T1281] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 46.570594][ T1280] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 46.594299][ T1281] EXT4-fs (loop1): This should not happen!! Data will be lost [ 46.594299][ T1281] [ 46.604350][ T1281] EXT4-fs (loop1): Total free blocks count 0 [ 46.610985][ T1281] EXT4-fs (loop1): Free/Dirty block details [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./36/binderfs") = 0 [pid 301] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1279] +++ killed by SIGBUS +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1279, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=17} --- [pid 299] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 299] umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./39/binderfs" [pid 1291] <... mount resumed>) = 0 [pid 299] <... unlink resumed>) = 0 [pid 1291] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 299] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1291] <... openat resumed>) = 3 [pid 1291] chdir("./file1") = 0 [pid 1291] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1291] ioctl(4, LOOP_CLR_FD) = 0 [pid 1291] close(4) = 0 [pid 1291] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1282] <... futex resumed>) = 0 [pid 1291] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1282] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1282] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1291] <... open resumed>) = 4 [pid 1291] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1282] <... futex resumed>) = 0 [pid 1291] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1282] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1291] <... open resumed>) = 5 [pid 1282] <... futex resumed>) = 0 [pid 1281] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 301] <... umount2 resumed>) = 0 [pid 301] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./36/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./36/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./36/file1") = 0 [pid 301] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./36") = 0 [pid 301] mkdir("./37", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3 [pid 1282] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... close resumed>) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1296 [pid 1291] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1290] <... futex resumed>) = ? [pid 1286] <... mount resumed>) = 0 [pid 1291] <... futex resumed>) = 1 [pid 1290] +++ killed by SIGBUS +++ [pid 1282] <... futex resumed>) = 0 [pid 1291] creat("./bus", 000 [pid 1286] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [ 46.612167][ T1279] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 46.616809][ T1281] EXT4-fs (loop1): free_blocks=2415919504 [ 46.634748][ T1281] EXT4-fs (loop1): dirty_blocks=32 [ 46.638025][ T1279] EXT4-fs (loop2): This should not happen!! Data will be lost [ 46.638025][ T1279] [ 46.639850][ T1281] EXT4-fs (loop1): Block reservation details [ 46.655187][ T1281] EXT4-fs (loop1): i_reserved_data_blocks=2 [pid 1282] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1291] <... creat resumed>) = 6 [pid 1286] <... openat resumed>) = 3 [pid 1282] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1296 attached [pid 1296] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1296] chdir("./37") = 0 [pid 1296] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1296] setpgid(0, 0) = 0 [pid 1296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1296] write(3, "1000", 4) = 4 [pid 1296] close(3) = 0 executing program [pid 1296] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1296] write(1, "executing program\n", 18) = 18 [pid 1296] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1296] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1296] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1296] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1296] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1296] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1296] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1297]}, 88) = 1297 [pid 1296] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1296] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1296] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1297 attached [pid 1297] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1297] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1297] memfd_create("syzkaller", 0) = 3 [pid 1297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1291] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1282] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 1291] <... futex resumed>) = 0 [pid 1286] chdir("./file1" [pid 1282] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1291] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1286] <... chdir resumed>) = 0 [pid 1282] <... futex resumed>) = 0 [pid 1297] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1282] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1291] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1286] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1291] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1286] <... openat resumed>) = 4 [pid 1291] <... futex resumed>) = 1 [pid 1286] ioctl(4, LOOP_CLR_FD [pid 1282] <... futex resumed>) = 0 [pid 1291] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1286] <... ioctl resumed>) = 0 [pid 1282] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1291] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1286] close(4 [pid 1282] <... futex resumed>) = 0 [pid 1291] pwrite64(6, "+", 1, 0 [pid 1286] <... close resumed>) = 0 [pid 1282] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1291] <... pwrite64 resumed>) = 1 [pid 1286] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1291] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1286] <... futex resumed>) = 1 [pid 1291] <... futex resumed>) = 1 [pid 1286] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1282] <... futex resumed>) = 0 [pid 1291] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1282] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1291] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1282] <... futex resumed>) = 0 [pid 1291] open("./bus", O_RDONLY [pid 1282] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1291] <... open resumed>) = 7 [pid 1291] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1285] <... futex resumed>) = 0 [pid 1291] <... futex resumed>) = 1 [pid 1282] <... futex resumed>) = 0 [pid 1291] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1282] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1291] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1282] <... futex resumed>) = 0 [pid 1291] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1282] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1291] <... copy_file_range resumed>) = 1 [pid 1285] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1282] <... futex resumed>) = 0 [pid 1291] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1282] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1291] <... futex resumed>) = 0 [pid 1286] <... futex resumed>) = 0 [pid 1285] <... futex resumed>) = 1 [pid 1282] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1291] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1286] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1282] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1285] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1282] <... mprotect resumed>) = 0 [pid 1286] <... open resumed>) = 4 [pid 1282] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1286] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1282] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1286] <... futex resumed>) = 1 [pid 1282] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1286] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1285] <... futex resumed>) = 0 [pid 1285] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1282] <... clone3 resumed> => {parent_tid=[1298]}, 88) = 1298 [pid 1286] <... futex resumed>) = 0 [pid 1285] <... futex resumed>) = 1 [pid 1282] rt_sigprocmask(SIG_SETMASK, [], [pid 1285] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1282] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1282] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1286] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 1282] <... futex resumed>) = 0 [pid 1286] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1282] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1286] <... futex resumed>) = 1 [pid 1285] <... futex resumed>) = 0 [pid 299] <... umount2 resumed>) = 0 [pid 1286] creat("./bus", 000 [pid 1285] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1286] <... creat resumed>) = 6 [pid 1285] <... futex resumed>) = 0 [pid 299] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1286] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1285] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1286] <... futex resumed>) = 0 [pid 1285] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1286] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1285] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1286] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1285] <... futex resumed>) = 0 [pid 299] newfstatat(AT_FDCWD, "./39/file1", [pid 1286] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1285] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1286] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1286] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1285] <... futex resumed>) = 0 [pid 299] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1286] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1285] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1286] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1285] <... futex resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1286] pwrite64(6, "+", 1, 0 [pid 1285] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1286] <... pwrite64 resumed>) = 1 [pid 299] openat(AT_FDCWD, "./39/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1286] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1285] <... futex resumed>) = 0 [pid 299] <... openat resumed>) = 4 [pid 1286] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1285] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1286] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1285] <... futex resumed>) = 0 [pid 299] newfstatat(4, "", [pid 1285] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1286] open("./bus", O_RDONLY [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1286] <... open resumed>) = 7 [pid 299] getdents64(4, ./strace-static-x86_64: Process 1298 attached [pid 1286] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1298] set_robust_list(0x7f13c8cc39a0, 24 [pid 1285] <... futex resumed>) = 0 [pid 299] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1286] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1285] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1298] <... set_robust_list resumed>) = 0 [pid 1286] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1285] <... futex resumed>) = 0 [pid 299] getdents64(4, [pid 1298] rt_sigprocmask(SIG_SETMASK, [], [pid 1286] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1285] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1298] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1286] <... copy_file_range resumed>) = 1 [pid 1285] <... futex resumed>) = 0 [pid 299] close(4 [pid 1286] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1285] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1286] <... futex resumed>) = 0 [pid 1285] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1286] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1285] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 299] <... close resumed>) = 0 [pid 1298] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1285] rt_sigprocmask(SIG_BLOCK, ~[], [pid 299] rmdir("./39/file1" [pid 1285] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1285] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 299] <... rmdir resumed>) = 0 [pid 1285] <... clone3 resumed> => {parent_tid=[1299]}, 88) = 1299 [pid 299] getdents64(3, [pid 1285] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 299] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1297] <... write resumed>) = 1048576 [pid 1285] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] close(3 [pid 1285] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1297] munmap(0x7f13c08c4000, 138412032 [pid 299] <... close resumed>) = 0 [pid 1297] <... munmap resumed>) = 0 [pid 299] rmdir("./39" [pid 1297] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 46.673233][ T1281] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 1297] ioctl(4, LOOP_SET_FD, 3 [pid 299] <... rmdir resumed>) = 0 [pid 299] mkdir("./40", 0777./strace-static-x86_64: Process 1299 attached [pid 1298] <... mmap resumed>) = 0x20000000 [pid 1297] <... ioctl resumed>) = 0 [pid 1297] close(3) = 0 [pid 1297] close(4) = 0 [pid 1297] mkdir("./file1", 0777) = 0 [pid 1297] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 299] <... mkdir resumed>) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1300 ./strace-static-x86_64: Process 1300 attached [pid 1300] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1300] chdir("./40") = 0 [pid 1300] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1300] setpgid(0, 0) = 0 [pid 1300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1300] write(3, "1000", 4) = 4 [pid 1300] close(3) = 0 [pid 1300] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1300] write(1, "executing program\n", 18executing program ) = 18 [pid 1300] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1300] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1300] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1300] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1300] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1298] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1300] <... mprotect resumed>) = 0 [pid 1300] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1298] <... futex resumed>) = 1 [pid 1298] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1282] <... futex resumed>) = 0 [pid 1282] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1291] <... futex resumed>) = 0 [pid 1282] <... futex resumed>) = 1 [pid 1299] set_robust_list(0x7f13c8cc39a0, 24 [pid 1291] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1282] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1300] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1300] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1301]}, 88) = 1301 [pid 1300] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1300] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1300] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1301 attached [pid 1301] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1301] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1301] memfd_create("syzkaller", 0) = 3 [pid 1301] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1291] <... open resumed>) = -1 EFAULT (Bad address) [pid 1299] <... set_robust_list resumed>) = 0 [pid 1291] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1299] rt_sigprocmask(SIG_SETMASK, [], [pid 1291] <... futex resumed>) = 1 [pid 1299] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1282] <... futex resumed>) = 0 [pid 1291] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1282] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1299] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1291] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1282] <... futex resumed>) = 0 [pid 1299] <... mmap resumed>) = 0x20000000 [pid 1282] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1301] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1301] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1301] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1301] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1301] close(3 [pid 1299] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1285] <... futex resumed>) = 0 [pid 1299] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1285] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1286] <... futex resumed>) = 0 [pid 1285] <... futex resumed>) = 1 [pid 1286] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1285] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1286] <... open resumed>) = -1 EFAULT (Bad address) [pid 1286] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1285] <... futex resumed>) = 0 [pid 1286] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1285] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1286] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1285] <... futex resumed>) = 0 [pid 1301] <... close resumed>) = 0 [pid 1301] close(4) = 0 [ 46.714856][ T1297] loop4: detected capacity change from 0 to 2048 [ 46.721472][ T1281] EXT4-fs (loop1): This should not happen!! Data will be lost [ 46.721472][ T1281] [ 46.741146][ T1291] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 46.748550][ T1301] loop2: detected capacity change from 0 to 2048 [pid 1301] mkdir("./file1", 0777) = 0 [pid 1301] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 1281] +++ killed by SIGBUS +++ [pid 1278] +++ killed by SIGBUS +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1278, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 1285] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... restart_syscall resumed>) = 0 [pid 298] umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./39/binderfs") = 0 [ 46.764814][ T1286] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 46.767099][ T1291] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 46.795370][ T1286] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 298] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1282] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1297] <... mount resumed>) = 0 [pid 1297] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1297] chdir("./file1") = 0 [pid 1297] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1297] ioctl(4, LOOP_CLR_FD) = 0 [pid 1297] close(4) = 0 [pid 1297] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1296] <... futex resumed>) = 0 [pid 1297] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1296] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1297] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1296] <... futex resumed>) = 0 [pid 1297] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1296] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1297] <... open resumed>) = 4 [pid 1297] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1296] <... futex resumed>) = 0 [pid 1296] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1296] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1297] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 1297] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1296] <... futex resumed>) = 0 [pid 1296] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1296] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1297] creat("./bus", 000) = 6 [pid 1297] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1296] <... futex resumed>) = 0 [pid 1296] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1296] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1297] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 1297] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1296] <... futex resumed>) = 0 [pid 1296] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1296] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1297] pwrite64(6, "+", 1, 0) = 1 [pid 1297] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1296] <... futex resumed>) = 0 [pid 1296] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1296] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1297] open("./bus", O_RDONLY) = 7 [pid 1297] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1296] <... futex resumed>) = 0 [pid 1296] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1297] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1296] <... futex resumed>) = 0 [pid 1297] <... copy_file_range resumed>) = 1 [pid 1296] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1297] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1296] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1297] <... futex resumed>) = 0 [pid 1296] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1297] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1296] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1296] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1296] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1304]}, 88) = 1304 [pid 1296] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1296] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1296] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./39/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./39/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, ./strace-static-x86_64: Process 1304 attached [pid 1304] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1304] rt_sigprocmask(SIG_SETMASK, [], [pid 298] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1304] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1304] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 298] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./39/file1") = 0 [pid 1285] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 298] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./39") = 0 [pid 298] mkdir("./40", 0777 [pid 1304] <... mmap resumed>) = 0x20000000 [pid 298] <... mkdir resumed>) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1304] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1296] <... futex resumed>) = 0 [pid 1296] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1297] <... futex resumed>) = 0 [pid 1296] <... futex resumed>) = 1 [pid 1297] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1296] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1297] <... open resumed>) = -1 EFAULT (Bad address) [pid 1297] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1296] <... futex resumed>) = 0 [pid 1297] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1296] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1297] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 46.808219][ T1286] EXT4-fs (loop0): This should not happen!! Data will be lost [ 46.808219][ T1286] [ 46.818057][ T1286] EXT4-fs (loop0): Total free blocks count 0 [ 46.827074][ T1286] EXT4-fs (loop0): Free/Dirty block details [ 46.833753][ T1286] EXT4-fs (loop0): free_blocks=2415919504 [ 46.839809][ T1286] EXT4-fs (loop0): dirty_blocks=32 [ 46.845151][ T1286] EXT4-fs (loop0): Block reservation details [ 46.850716][ T1297] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 1296] <... futex resumed>) = 0 [pid 1296] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1304] <... futex resumed>) = 1 [pid 1304] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 298] <... clone resumed>, child_tidptr=0x55558909e690) = 1305 ./strace-static-x86_64: Process 1305 attached [pid 1305] set_robust_list(0x55558909e6a0, 24) = 0 executing program [pid 1305] chdir("./40" [pid 1286] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1305] <... chdir resumed>) = 0 [pid 1305] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1305] setpgid(0, 0) = 0 [pid 1305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1305] write(3, "1000", 4) = 4 [pid 1305] close(3) = 0 [pid 1305] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1305] write(1, "executing program\n", 18) = 18 [pid 1305] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1305] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1305] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1305] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1305] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1305] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1305] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1306]}, 88) = 1306 [pid 1305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1305] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1305] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1306 attached [pid 1306] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1306] memfd_create("syzkaller", 0) = 3 [pid 1306] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1299] <... futex resumed>) = ? [pid 1299] +++ killed by SIGBUS +++ [pid 1306] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1301] <... mount resumed>) = 0 [pid 1301] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1301] chdir("./file1") = 0 [pid 1301] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1301] ioctl(4, LOOP_CLR_FD) = 0 [pid 1301] close(4) = 0 [pid 1301] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1300] <... futex resumed>) = 0 [pid 1300] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1300] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1301] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 1301] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1300] <... futex resumed>) = 0 [pid 1300] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 46.851219][ T1286] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 46.871674][ T1291] EXT4-fs (loop3): This should not happen!! Data will be lost [ 46.871674][ T1291] [ 46.881675][ T1291] EXT4-fs (loop3): Total free blocks count 0 [ 46.884527][ T1297] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 46.888442][ T1286] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 1300] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1301] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 1301] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1300] <... futex resumed>) = 0 [pid 1301] creat("./bus", 000 [pid 1300] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1301] <... creat resumed>) = 6 [pid 1300] <... futex resumed>) = 0 [pid 1301] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1300] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1301] <... futex resumed>) = 0 [pid 1300] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1301] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1300] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1300] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1301] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1301] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1300] <... futex resumed>) = 0 [pid 1300] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1300] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1301] pwrite64(6, "+", 1, 0 [pid 1296] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1301] <... pwrite64 resumed>) = 1 [pid 1301] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1300] <... futex resumed>) = 0 [pid 1300] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1300] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1301] open("./bus", O_RDONLY) = 7 [pid 1301] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1300] <... futex resumed>) = 0 [pid 1300] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1300] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1300] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1300] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1300] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1300] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1310]}, 88) = 1310 [pid 1300] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1300] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1300] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1301] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 1301] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1301] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1310 attached [pid 1310] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1310] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1306] <... write resumed>) = 1048576 [pid 1306] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1306] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1306] ioctl(4, LOOP_SET_FD, 3 [pid 1310] <... mmap resumed>) = 0x20000000 [pid 1310] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1300] <... futex resumed>) = 0 [pid 1300] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1301] <... futex resumed>) = 0 [pid 1300] <... futex resumed>) = 1 [pid 1301] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1300] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1301] <... open resumed>) = -1 EFAULT (Bad address) [pid 1301] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1300] <... futex resumed>) = 0 [pid 1301] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1300] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1301] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1300] <... futex resumed>) = 0 [ 46.913095][ T1291] EXT4-fs (loop3): Free/Dirty block details [ 46.919053][ T1291] EXT4-fs (loop3): free_blocks=2415919504 [ 46.924997][ T1291] EXT4-fs (loop3): dirty_blocks=32 [ 46.929577][ T1306] loop1: detected capacity change from 0 to 2048 [ 46.930205][ T1291] EXT4-fs (loop3): Block reservation details [ 46.939004][ T1301] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 46.942275][ T1286] EXT4-fs (loop0): This should not happen!! Data will be lost [ 46.942275][ T1286] [pid 1300] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1310] <... futex resumed>) = 1 [pid 1310] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1306] <... ioctl resumed>) = 0 [pid 1306] close(3) = 0 [pid 1306] close(4) = 0 [pid 1306] mkdir("./file1", 0777) = 0 [pid 1306] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 1291] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1298] <... futex resumed>) = ? [pid 1298] +++ killed by SIGBUS +++ [ 46.956956][ T1301] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 46.967307][ T1291] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 46.978124][ T1301] EXT4-fs (loop2): This should not happen!! Data will be lost [ 46.978124][ T1301] [ 46.991797][ T1297] EXT4-fs (loop4): This should not happen!! Data will be lost [ 46.991797][ T1297] [ 46.999821][ T1301] EXT4-fs (loop2): Total free blocks count 0 [ 47.008818][ T1301] EXT4-fs (loop2): Free/Dirty block details [pid 1286] +++ killed by SIGBUS +++ [pid 1285] +++ killed by SIGBUS +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1285, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 297] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 297] umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./37/binderfs") = 0 [pid 297] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1300] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 297] <... umount2 resumed>) = 0 [pid 297] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./37/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./37/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./37/file1") = 0 [pid 297] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./37") = 0 [pid 297] mkdir("./38", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 47.011318][ T1291] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 47.014840][ T1301] EXT4-fs (loop2): free_blocks=2415919504 [ 47.028763][ T1297] EXT4-fs (loop4): Total free blocks count 0 [ 47.032482][ T1301] EXT4-fs (loop2): dirty_blocks=32 [ 47.042447][ T1297] EXT4-fs (loop4): Free/Dirty block details [ 47.043377][ T1301] EXT4-fs (loop2): Block reservation details [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1301] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 297] <... clone resumed>, child_tidptr=0x55558909e690) = 1312 ./strace-static-x86_64: Process 1312 attached [pid 1312] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1312] chdir("./38") = 0 [pid 1312] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1312] setpgid(0, 0) = 0 [pid 1312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1312] write(3, "1000", 4) = 4 [pid 1312] close(3) = 0 executing program [pid 1312] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1312] write(1, "executing program\n", 18) = 18 [pid 1312] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1312] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1312] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1312] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1312] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1312] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1312] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1313]}, 88) = 1313 [pid 1312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1312] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1312] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1313 attached [pid 1310] <... futex resumed>) = ? [pid 1306] <... mount resumed>) = 0 [pid 1291] +++ killed by SIGBUS +++ [pid 1282] +++ killed by SIGBUS +++ [pid 1310] +++ killed by SIGBUS +++ [pid 1306] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1306] chdir("./file1") = 0 [pid 1306] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1306] ioctl(4, LOOP_CLR_FD) = 0 [pid 1306] close(4) = 0 [pid 1306] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1305] <... futex resumed>) = 0 [pid 1306] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1305] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1306] <... open resumed>) = 4 [pid 1305] <... futex resumed>) = 0 [pid 1305] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1282, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 1306] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1305] <... futex resumed>) = 0 [pid 1306] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1305] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1306] <... open resumed>) = 5 [pid 1305] <... futex resumed>) = 0 [pid 1306] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1305] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1306] <... futex resumed>) = 0 [pid 1305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1306] creat("./bus", 000 [pid 1305] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1306] <... creat resumed>) = 6 [pid 1305] <... futex resumed>) = 0 [pid 1306] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1305] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1306] <... futex resumed>) = 0 [pid 1305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1306] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1305] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1306] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1305] <... futex resumed>) = 0 [pid 1306] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1305] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1306] <... futex resumed>) = 0 [pid 1305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1306] pwrite64(6, "+", 1, 0 [pid 1305] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1306] <... pwrite64 resumed>) = 1 [pid 1305] <... futex resumed>) = 0 [pid 1306] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1305] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1306] <... futex resumed>) = 0 [pid 1305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1306] open("./bus", O_RDONLY [pid 1305] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1306] <... open resumed>) = 7 [pid 1305] <... futex resumed>) = 0 [pid 1306] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1305] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1306] <... futex resumed>) = 0 [pid 1305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1306] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1305] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1306] <... copy_file_range resumed>) = 1 [pid 1305] <... futex resumed>) = 0 [pid 1306] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1305] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1306] <... futex resumed>) = 0 [pid 1305] <... futex resumed>) = 0 [pid 1306] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1305] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1305] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1305] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 300] umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1305] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1305] <... clone3 resumed> => {parent_tid=[1315]}, 88) = 1315 [pid 1313] set_robust_list(0x7f13c8ce49a0, 24 [pid 1305] rt_sigprocmask(SIG_SETMASK, [], [pid 1297] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 300] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1305] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1305] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1305] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1313] <... set_robust_list resumed>) = 0 [pid 1304] <... futex resumed>) = ? [ 47.063079][ T1301] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 47.069897][ T1297] EXT4-fs (loop4): free_blocks=2415919504 [ 47.071261][ T1291] EXT4-fs (loop3): This should not happen!! Data will be lost [ 47.071261][ T1291] [ 47.084992][ T1297] EXT4-fs (loop4): dirty_blocks=32 [ 47.088615][ T1301] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 47.090191][ T1297] EXT4-fs (loop4): Block reservation details [ 47.109184][ T1297] EXT4-fs (loop4): i_reserved_data_blocks=2 [pid 300] <... openat resumed>) = 3 [pid 1313] rt_sigprocmask(SIG_SETMASK, [], [pid 1304] +++ killed by SIGBUS +++ ./strace-static-x86_64: Process 1315 attached [pid 1315] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1315] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1315] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1305] <... futex resumed>) = 0 [pid 1305] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1306] <... futex resumed>) = 0 [pid 1305] <... futex resumed>) = 1 [pid 1306] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1305] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1306] <... open resumed>) = -1 EFAULT (Bad address) [pid 1306] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1305] <... futex resumed>) = 0 [pid 1315] <... futex resumed>) = 1 [pid 1313] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1305] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1301] +++ killed by SIGBUS +++ [pid 1300] +++ killed by SIGBUS +++ [pid 300] newfstatat(3, "", [pid 1313] memfd_create("syzkaller", 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1300, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 1313] <... memfd_create resumed>) = 3 [pid 300] getdents64(3, [pid 1313] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 300] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1313] <... mmap resumed>) = 0x7f13c08c4000 [pid 300] umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./38/binderfs", [pid 299] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 300] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] <... openat resumed>) = 3 [pid 300] unlink("./38/binderfs" [pid 299] newfstatat(3, "", [pid 300] <... unlink resumed>) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./40/binderfs") = 0 [pid 299] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1313] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1315] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1313] <... write resumed>) = 1048576 [pid 1313] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1313] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1313] ioctl(4, LOOP_SET_FD, 3 [pid 1305] <... futex resumed>) = 0 [pid 1313] <... ioctl resumed>) = 0 [pid 1313] close(3) = 0 [pid 1313] close(4) = 0 [ 47.116247][ T1301] EXT4-fs (loop2): This should not happen!! Data will be lost [ 47.116247][ T1301] [ 47.120148][ T1306] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 47.142986][ T1297] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 47.143317][ T1313] loop0: detected capacity change from 0 to 2048 [pid 1313] mkdir("./file1", 0777) = 0 [pid 1313] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 1305] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1297] +++ killed by SIGBUS +++ [pid 1296] +++ killed by SIGBUS +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1296, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 301] umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... umount2 resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./37/binderfs") = 0 [ 47.155767][ T1297] EXT4-fs (loop4): This should not happen!! Data will be lost [ 47.155767][ T1297] [ 47.164674][ T1306] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 47.183961][ T1306] EXT4-fs (loop1): This should not happen!! Data will be lost [ 47.183961][ T1306] [ 47.193878][ T1306] EXT4-fs (loop1): Total free blocks count 0 [ 47.201100][ T1306] EXT4-fs (loop1): Free/Dirty block details [ 47.207439][ T1306] EXT4-fs (loop1): free_blocks=2415919504 [pid 301] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] <... umount2 resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] newfstatat(AT_FDCWD, "./40/file1", [pid 1313] <... mount resumed>) = 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1313] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1313] chdir("./file1") = 0 [pid 1313] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1313] ioctl(4, LOOP_CLR_FD) = 0 [pid 1313] close(4) = 0 [pid 1313] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1312] <... futex resumed>) = 0 [pid 1312] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1312] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1313] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 301] <... umount2 resumed>) = 0 [pid 1313] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1312] <... futex resumed>) = 0 [pid 1312] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1312] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1313] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 1313] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1312] <... futex resumed>) = 0 [pid 1312] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1313] creat("./bus", 000 [pid 1312] <... futex resumed>) = 0 [pid 1313] <... creat resumed>) = 6 [pid 1312] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1313] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1312] <... futex resumed>) = 0 [pid 1313] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1312] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1313] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1312] <... futex resumed>) = 0 [pid 1313] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1312] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1313] <... futex resumed>) = 0 [pid 1312] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1313] pwrite64(6, "+", 1, 0 [pid 1312] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1313] <... pwrite64 resumed>) = 1 [pid 1312] <... futex resumed>) = 0 [pid 1313] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1312] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1313] <... futex resumed>) = 0 [pid 1312] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1313] open("./bus", O_RDONLY [pid 1312] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1313] <... open resumed>) = 7 [pid 1312] <... futex resumed>) = 0 [pid 1313] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1312] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1313] <... futex resumed>) = 0 [pid 1312] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1313] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1312] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1313] <... copy_file_range resumed>) = 1 [pid 1312] <... futex resumed>) = 0 [pid 1313] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1312] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1313] <... futex resumed>) = 0 [pid 1312] <... futex resumed>) = 0 [pid 1313] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1312] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1312] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1312] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1312] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1318]}, 88) = 1318 [pid 300] newfstatat(AT_FDCWD, "./38/file1", [pid 299] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1312] rt_sigprocmask(SIG_SETMASK, [], [pid 1305] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 301] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1312] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1312] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1312] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1318 attached [pid 1318] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1318] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1318] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 300] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] openat(AT_FDCWD, "./40/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... openat resumed>) = 4 [pid 300] openat(AT_FDCWD, "./38/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 299] newfstatat(4, "", [pid 300] <... openat resumed>) = 4 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] newfstatat(4, "", [pid 299] getdents64(4, [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, [pid 299] getdents64(4, [pid 300] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 299] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 300] getdents64(4, [pid 299] close(4 [pid 300] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 299] <... close resumed>) = 0 [pid 300] close(4 [pid 299] rmdir("./40/file1" [pid 300] <... close resumed>) = 0 [pid 1306] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 299] <... rmdir resumed>) = 0 [pid 300] rmdir("./38/file1" [pid 299] getdents64(3, [pid 300] <... rmdir resumed>) = 0 [pid 299] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 300] getdents64(3, [pid 299] close(3 [pid 300] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 299] <... close resumed>) = 0 [pid 1318] <... mmap resumed>) = 0x20000000 [pid 1318] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] close(3 [pid 299] rmdir("./40" [pid 301] newfstatat(AT_FDCWD, "./37/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] <... close resumed>) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 301] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] rmdir("./38" [pid 299] mkdir("./41", 0777 [pid 1318] <... futex resumed>) = 1 [pid 1315] <... futex resumed>) = ? [pid 1312] <... futex resumed>) = 0 [pid 301] openat(AT_FDCWD, "./37/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] <... rmdir resumed>) = 0 [pid 1312] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1315] +++ killed by SIGBUS +++ [pid 1313] <... futex resumed>) = 0 [pid 1312] <... futex resumed>) = 1 [pid 301] getdents64(4, [pid 1313] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1312] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 1313] <... open resumed>) = -1 EFAULT (Bad address) [pid 301] rmdir("./37/file1" [pid 1313] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] mkdir("./39", 0777 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1313] <... futex resumed>) = 1 [pid 1312] <... futex resumed>) = 0 [pid 1313] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 1312] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... rmdir resumed>) = 0 [pid 300] <... mkdir resumed>) = 0 [pid 299] <... openat resumed>) = 3 [pid 301] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./37") = 0 [pid 301] mkdir("./38", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1319 [ 47.214701][ T1306] EXT4-fs (loop1): dirty_blocks=32 [ 47.219719][ T1306] EXT4-fs (loop1): Block reservation details [ 47.226968][ T1306] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 47.249581][ T1313] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters ./strace-static-x86_64: Process 1319 attached [pid 1312] <... futex resumed>) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 299] ioctl(3, LOOP_CLR_FD [pid 1319] set_robust_list(0x55558909e6a0, 24 [pid 1312] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... openat resumed>) = 3 [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1319] <... set_robust_list resumed>) = 0 [pid 300] ioctl(3, LOOP_CLR_FD [pid 299] close(3 [pid 1319] chdir("./38" [pid 300] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 299] <... close resumed>) = 0 [pid 1319] <... chdir resumed>) = 0 [pid 300] close(3 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1319] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1306] +++ killed by SIGBUS +++ [pid 1305] +++ killed by SIGBUS +++ [pid 300] <... close resumed>) = 0 [pid 1319] <... prctl resumed>) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] <... clone resumed>, child_tidptr=0x55558909e690) = 1320 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1305, si_uid=0, si_status=SIGBUS, si_utime=1, si_stime=13} --- [pid 1319] setpgid(0, 0 [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 1319] <... setpgid resumed>) = 0 [pid 300] <... clone resumed>, child_tidptr=0x55558909e690) = 1321 [ 47.253786][ T1306] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 47.265340][ T1313] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 47.276539][ T1306] EXT4-fs (loop1): This should not happen!! Data will be lost [ 47.276539][ T1306] [ 47.298991][ T1313] EXT4-fs (loop0): This should not happen!! Data will be lost [ 47.298991][ T1313] [ 47.308957][ T1313] EXT4-fs (loop0): Total free blocks count 0 [pid 1319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 298] <... restart_syscall resumed>) = 0 [pid 1319] <... openat resumed>) = 3 [pid 1318] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1319] write(3, "1000", 4) = 4 [pid 298] umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1319] close(3 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1319] <... close resumed>) = 0 [pid 298] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1319] symlink("/dev/binderfs", "./binderfs" [pid 298] <... openat resumed>) = 3 executing program [pid 1319] <... symlink resumed>) = 0 [pid 298] newfstatat(3, "", [pid 1319] write(1, "executing program\n", 18 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1319] <... write resumed>) = 18 [pid 298] getdents64(3, [pid 1319] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1319] <... futex resumed>) = 0 [pid 298] umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1319] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1319] <... rt_sigaction resumed>NULL, 8) = 0 [pid 298] newfstatat(AT_FDCWD, "./40/binderfs", [pid 1319] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1319] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 298] unlink("./40/binderfs" [pid 1319] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 298] <... unlink resumed>) = 0 [pid 1319] <... mmap resumed>) = 0x7f13c8cc4000 [pid 298] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 1321 attached [pid 1319] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1321] set_robust_list(0x55558909e6a0, 24 [pid 1319] <... mprotect resumed>) = 0 [pid 1321] <... set_robust_list resumed>) = 0 [pid 1319] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1321] chdir("./39" [pid 1319] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 1320 attached [pid 1321] <... chdir resumed>) = 0 [pid 1319] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1321] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1320] set_robust_list(0x55558909e6a0, 24 [pid 1321] <... prctl resumed>) = 0 [pid 1320] <... set_robust_list resumed>) = 0 [pid 1319] <... clone3 resumed> => {parent_tid=[1322]}, 88) = 1322 [pid 1321] setpgid(0, 0 [pid 1320] chdir("./41" [pid 1319] rt_sigprocmask(SIG_SETMASK, [], [pid 1321] <... setpgid resumed>) = 0 [pid 1320] <... chdir resumed>) = 0 [pid 1319] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1320] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1319] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1321] <... openat resumed>) = 3 [pid 1320] <... prctl resumed>) = 0 [pid 1319] <... futex resumed>) = 0 [pid 1321] write(3, "1000", 4 [pid 1320] setpgid(0, 0 [pid 1319] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1321] <... write resumed>) = 4 [pid 1320] <... setpgid resumed>) = 0 [pid 1321] close(3 [pid 1320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1321] <... close resumed>) = 0 [pid 1320] <... openat resumed>) = 3 [pid 1312] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1321] symlink("/dev/binderfs", "./binderfs" [pid 1320] write(3, "1000", 4executing program [pid 1321] <... symlink resumed>) = 0 [pid 1320] <... write resumed>) = 4 [pid 1321] write(1, "executing program\n", 18 [pid 1320] close(3 [pid 1321] <... write resumed>) = 18 [pid 1320] <... close resumed>) = 0 executing program [pid 1321] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1320] symlink("/dev/binderfs", "./binderfs" [pid 1321] <... futex resumed>) = 0 [pid 1320] <... symlink resumed>) = 0 [pid 1321] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1320] write(1, "executing program\n", 18 [pid 1321] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1320] <... write resumed>) = 18 ./strace-static-x86_64: Process 1322 attached [pid 1321] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1320] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1313] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1322] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1322] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1322] memfd_create("syzkaller", 0) = 3 [pid 1322] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1322] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1318] <... futex resumed>) = ? [pid 1318] +++ killed by SIGBUS +++ [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./40/file1", [pid 1321] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./40/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 1322] <... write resumed>) = 1048576 [pid 1322] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1322] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 47.314924][ T1313] EXT4-fs (loop0): Free/Dirty block details [ 47.320589][ T1313] EXT4-fs (loop0): free_blocks=2415919504 [ 47.326216][ T1313] EXT4-fs (loop0): dirty_blocks=32 [ 47.331387][ T1313] EXT4-fs (loop0): Block reservation details [ 47.337659][ T1313] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 47.351549][ T1313] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 1322] ioctl(4, LOOP_SET_FD, 3 [pid 1321] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1320] <... futex resumed>) = 0 [pid 298] newfstatat(4, "", [pid 1322] <... ioctl resumed>) = 0 [pid 1322] close(3) = 0 [pid 1322] close(4) = 0 [pid 1322] mkdir("./file1", 0777) = 0 [pid 1322] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 1321] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1321] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1321] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1321] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1323]}, 88) = 1323 [pid 1321] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1321] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1321] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1320] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1320] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1320] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1320] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1320] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1320] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1324]}, 88) = 1324 [pid 1320] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1320] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1320] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./40/file1") = 0 [pid 298] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./40") = 0 [pid 298] mkdir("./41", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1325 [pid 1313] +++ killed by SIGBUS +++ [pid 1312] +++ killed by SIGBUS +++ ./strace-static-x86_64: Process 1323 attached [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1312, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 297] umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", [pid 1323] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1323] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1323] memfd_create("syzkaller", 0) = 3 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./38/binderfs") = 0 [pid 297] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1323] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1323] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 297] <... umount2 resumed>) = 0 [pid 1323] <... write resumed>) = 1048576 [pid 1323] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1323] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 297] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1323] <... openat resumed>) = 4 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1323] ioctl(4, LOOP_SET_FD, 3 [pid 297] newfstatat(AT_FDCWD, "./38/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./38/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 297] newfstatat(4, "", ./strace-static-x86_64: Process 1325 attached ./strace-static-x86_64: Process 1324 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1322] <... mount resumed>) = 0 [pid 1322] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1322] chdir("./file1") = 0 [pid 1322] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1322] ioctl(4, LOOP_CLR_FD) = 0 [pid 1322] close(4) = 0 [pid 1322] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1319] <... futex resumed>) = 0 [pid 1319] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1319] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1322] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 1322] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1319] <... futex resumed>) = 0 [pid 1319] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1319] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] getdents64(4, [pid 1322] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 1322] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1319] <... futex resumed>) = 0 [pid 1319] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1319] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1322] creat("./bus", 000) = 6 [pid 1322] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1319] <... futex resumed>) = 0 [pid 1319] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1319] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1322] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 1322] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1319] <... futex resumed>) = 0 [pid 1322] pwrite64(6, "+", 1, 0 [pid 1319] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1322] <... pwrite64 resumed>) = 1 [pid 1319] <... futex resumed>) = 0 [pid 1322] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1319] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1325] set_robust_list(0x55558909e6a0, 24 [pid 1324] set_robust_list(0x7f13c8ce49a0, 24 [pid 1323] <... ioctl resumed>) = 0 [pid 1319] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 297] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1324] <... set_robust_list resumed>) = 0 [pid 1322] <... futex resumed>) = 0 [pid 1319] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1325] <... set_robust_list resumed>) = 0 [pid 297] getdents64(4, [pid 1322] open("./bus", O_RDONLY [pid 1319] <... futex resumed>) = 0 [pid 297] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1325] chdir("./41" [pid 1324] rt_sigprocmask(SIG_SETMASK, [], [pid 1322] <... open resumed>) = 7 [pid 1319] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] close(4 [pid 1325] <... chdir resumed>) = 0 [pid 1324] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1323] close(3 [pid 1322] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1319] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1319] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... close resumed>) = 0 [pid 1319] <... futex resumed>) = 0 [pid 297] rmdir("./38/file1" [pid 1324] memfd_create("syzkaller", 0 [pid 1319] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1319] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1319] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1325] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1324] <... memfd_create resumed>) = 3 [pid 1322] <... futex resumed>) = 0 [pid 1319] <... mprotect resumed>) = 0 [pid 297] <... rmdir resumed>) = 0 [pid 1319] rt_sigprocmask(SIG_BLOCK, ~[], [pid 297] getdents64(3, [pid 1325] <... prctl resumed>) = 0 [pid 1324] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1322] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1319] <... rt_sigprocmask resumed>[], 8) = 0 [pid 297] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1319] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 297] close(3 [pid 1325] setpgid(0, 0 [pid 1324] <... mmap resumed>) = 0x7f13c08c4000 [pid 1322] <... copy_file_range resumed>) = 1 [ 47.353929][ T1322] loop4: detected capacity change from 0 to 2048 [ 47.367625][ T1313] EXT4-fs (loop0): This should not happen!! Data will be lost [ 47.367625][ T1313] [ 47.402943][ T1323] loop3: detected capacity change from 0 to 2048 [pid 1319] <... clone3 resumed> => {parent_tid=[1328]}, 88) = 1328 [pid 297] <... close resumed>) = 0 [pid 1319] rt_sigprocmask(SIG_SETMASK, [], [pid 1325] <... setpgid resumed>) = 0 [pid 297] rmdir("./38" [pid 1319] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1319] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1319] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1328 attached [pid 1328] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1328] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1328] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1319] <... futex resumed>) = 0 [pid 1319] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1319] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1328] <... futex resumed>) = 1 [pid 1328] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000) = -1 EFAULT (Bad address) [pid 1328] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1319] <... futex resumed>) = 0 [pid 1319] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1319] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1328] <... futex resumed>) = 1 executing program [pid 1325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1324] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1323] <... close resumed>) = 0 [pid 1322] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... rmdir resumed>) = 0 [pid 297] mkdir("./39", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1325] <... openat resumed>) = 3 [pid 1325] write(3, "1000", 4) = 4 [pid 1325] close(3) = 0 [pid 1325] symlink("/dev/binderfs", "./binderfs") = 0 [pid 297] <... clone resumed>, child_tidptr=0x55558909e690) = 1329 [pid 1322] <... futex resumed>) = 0 [pid 1322] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1325] write(1, "executing program\n", 18) = 18 [pid 1325] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1325] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1325] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1325] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1325] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1325] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1330]}, 88) = 1330 [pid 1325] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1325] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1325] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1323] close(4) = 0 ./strace-static-x86_64: Process 1329 attached ./strace-static-x86_64: Process 1330 attached [pid 1330] set_robust_list(0x7f13c8ce49a0, 24 [pid 1329] set_robust_list(0x55558909e6a0, 24 [pid 1323] mkdir("./file1", 0777) = 0 [pid 1323] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 1330] <... set_robust_list resumed>) = 0 [pid 1329] <... set_robust_list resumed>) = 0 [pid 1330] rt_sigprocmask(SIG_SETMASK, [], [pid 1329] chdir("./39" [pid 1330] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1329] <... chdir resumed>) = 0 [pid 1324] <... write resumed>) = 1048576 [pid 1324] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1324] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1324] ioctl(4, LOOP_SET_FD, 3 [pid 1330] memfd_create("syzkaller", 0 [ 47.421225][ T1328] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 47.442040][ T1328] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 47.454625][ T1328] EXT4-fs (loop4): This should not happen!! Data will be lost [ 47.454625][ T1328] [ 47.459692][ T1324] loop2: detected capacity change from 0 to 2048 [pid 1329] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1324] <... ioctl resumed>) = 0 [pid 1324] close(3) = 0 [pid 1324] close(4 [pid 1330] <... memfd_create resumed>) = 3 [pid 1329] <... prctl resumed>) = 0 [pid 1319] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1329] setpgid(0, 0 [pid 1330] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1329] <... setpgid resumed>) = 0 [pid 1330] <... mmap resumed>) = 0x7f13c08c4000 [pid 1329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1329] write(3, "1000", 4) = 4 [pid 1329] close(3) = 0 [pid 1329] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1330] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1329] write(1, "executing program\n", 18 [pid 1324] <... close resumed>) = 0 [pid 1324] mkdir("./file1", 0777) = 0 [pid 1324] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue"executing program [pid 1329] <... write resumed>) = 18 [pid 1323] <... mount resumed>) = 0 [pid 1329] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1329] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1329] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1329] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1323] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1329] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1329] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1330] <... write resumed>) = 1048576 [pid 1330] munmap(0x7f13c08c4000, 138412032 [pid 1323] <... openat resumed>) = 3 [pid 1323] chdir("./file1") = 0 [pid 1323] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1323] ioctl(4, LOOP_CLR_FD) = 0 [pid 1323] close(4) = 0 [pid 1323] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1323] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1330] <... munmap resumed>) = 0 [pid 1329] <... clone3 resumed> => {parent_tid=[1333]}, 88) = 1333 [pid 1321] <... futex resumed>) = 0 [pid 1330] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1329] rt_sigprocmask(SIG_SETMASK, [], [pid 1321] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1333 attached [pid 1333] set_robust_list(0x7f13c8ce49a0, 24 [pid 1330] <... openat resumed>) = 4 [pid 1329] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1321] <... futex resumed>) = 1 [pid 1323] <... futex resumed>) = 0 [pid 1329] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1321] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1323] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1330] ioctl(4, LOOP_SET_FD, 3 [pid 1329] <... futex resumed>) = 0 [pid 1333] <... set_robust_list resumed>) = 0 [pid 1333] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1333] memfd_create("syzkaller", 0) = 3 [pid 1333] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1323] <... open resumed>) = 4 [pid 1333] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1333] munmap(0x7f13c08c4000, 138412032) = 0 [ 47.465043][ T1328] EXT4-fs (loop4): Total free blocks count 0 [ 47.477012][ T1328] EXT4-fs (loop4): Free/Dirty block details [ 47.487988][ T1328] EXT4-fs (loop4): free_blocks=2415919504 [ 47.498518][ T1328] EXT4-fs (loop4): dirty_blocks=32 [ 47.504016][ T1328] EXT4-fs (loop4): Block reservation details [ 47.510473][ T1328] EXT4-fs (loop4): i_reserved_data_blocks=2 [pid 1333] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1333] ioctl(4, LOOP_SET_FD, 3 [pid 1330] <... ioctl resumed>) = 0 [pid 1329] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1328] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1323] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1321] <... futex resumed>) = 0 [pid 1323] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1321] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1323] <... open resumed>) = 5 [pid 1321] <... futex resumed>) = 0 [pid 1323] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1321] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1330] close(3 [pid 1323] <... futex resumed>) = 0 [pid 1321] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1330] <... close resumed>) = 0 [pid 1323] creat("./bus", 000 [pid 1321] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1330] close(4 [pid 1323] <... creat resumed>) = 6 [pid 1321] <... futex resumed>) = 0 [pid 1330] <... close resumed>) = 0 [pid 1323] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1321] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1330] mkdir("./file1", 0777 [pid 1323] <... futex resumed>) = 0 [pid 1321] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1330] <... mkdir resumed>) = 0 [pid 1323] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1321] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1330] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 1323] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1321] <... futex resumed>) = 0 [pid 1323] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1321] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1323] <... futex resumed>) = 0 [pid 1321] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1323] pwrite64(6, "+", 1, 0 [pid 1321] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1323] <... pwrite64 resumed>) = 1 [pid 1321] <... futex resumed>) = 0 [pid 1323] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1321] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1323] <... futex resumed>) = 0 [pid 1321] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1323] open("./bus", O_RDONLY [pid 1321] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1323] <... open resumed>) = 7 [pid 1321] <... futex resumed>) = 0 [pid 1323] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1321] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1323] <... futex resumed>) = 0 [pid 1321] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1323] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1321] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1323] <... copy_file_range resumed>) = 1 [pid 1321] <... futex resumed>) = 0 [pid 1323] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1321] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1323] <... futex resumed>) = 0 [pid 1321] <... futex resumed>) = 0 [pid 1323] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1321] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1321] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1321] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1321] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1336]}, 88) = 1336 [pid 1321] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1321] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1321] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1333] <... ioctl resumed>) = 0 [pid 1333] close(3) = 0 [pid 1333] close(4) = 0 [pid 1333] mkdir("./file1", 0777) = 0 [pid 1333] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue"./strace-static-x86_64: Process 1336 attached [pid 1336] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1336] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1336] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1321] <... futex resumed>) = 0 [pid 1321] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1323] <... futex resumed>) = 0 [pid 1321] <... futex resumed>) = 1 [pid 1323] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1321] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1323] <... open resumed>) = -1 EFAULT (Bad address) [pid 1323] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1321] <... futex resumed>) = 0 [pid 1328] +++ killed by SIGBUS +++ [pid 1322] <... futex resumed>) = ? [pid 1324] <... mount resumed>) = 0 [pid 1322] +++ killed by SIGBUS +++ [pid 1321] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1321] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1324] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1324] chdir("./file1") = 0 [pid 1324] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1324] ioctl(4, LOOP_CLR_FD) = 0 [pid 1324] close(4) = 0 [pid 1324] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1320] <... futex resumed>) = 0 [pid 1324] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1320] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1324] <... open resumed>) = 4 [pid 1320] <... futex resumed>) = 0 [pid 1324] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1320] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1324] <... futex resumed>) = 0 [pid 1320] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1324] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1320] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1324] <... open resumed>) = 5 [pid 1320] <... futex resumed>) = 0 [pid 1324] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1320] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1324] <... futex resumed>) = 0 [pid 1320] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1324] creat("./bus", 000 [pid 1320] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1320] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1324] <... creat resumed>) = 6 [pid 1324] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1320] <... futex resumed>) = 0 [pid 1320] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1320] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1324] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 1324] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1320] <... futex resumed>) = 0 [pid 1320] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1320] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1324] pwrite64(6, "+", 1, 0) = 1 [pid 1324] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1320] <... futex resumed>) = 0 [pid 1320] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1320] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1324] open("./bus", O_RDONLY) = 7 [pid 1324] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1320] <... futex resumed>) = 0 [pid 1320] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1320] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1320] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1320] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1320] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1320] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1337]}, 88) = 1337 [pid 1320] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1320] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 47.516641][ T1330] loop1: detected capacity change from 0 to 2048 [ 47.522590][ T1333] loop0: detected capacity change from 0 to 2048 [ 47.534020][ T1319] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 47.542570][ T1323] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 47.546265][ T1319] EXT4-fs (loop4): This should not happen!! Data will be lost [ 47.546265][ T1319] [pid 1320] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1336] <... futex resumed>) = 1 [pid 1324] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1319] +++ killed by SIGBUS +++ [pid 1324] <... copy_file_range resumed>) = 1 [pid 1324] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1324] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1337 attached [pid 1337] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1337] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1337] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1336] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1319, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 1337] <... mmap resumed>) = 0x20000000 [pid 1337] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1320] <... futex resumed>) = 0 [pid 1320] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1324] <... futex resumed>) = 0 [pid 1320] <... futex resumed>) = 1 [pid 1324] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1320] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1324] <... open resumed>) = -1 EFAULT (Bad address) [pid 1324] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1320] <... futex resumed>) = 0 [pid 1324] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1320] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1324] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1320] <... futex resumed>) = 0 [pid 1320] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1321] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1337] <... futex resumed>) = 1 [pid 1337] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1333] <... mount resumed>) = 0 [pid 1333] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1333] chdir("./file1") = 0 [pid 1333] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1333] ioctl(4, LOOP_CLR_FD) = 0 [pid 1333] close(4) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1333] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1329] <... futex resumed>) = 0 [pid 1329] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 47.574063][ T1323] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 47.587123][ T1323] EXT4-fs (loop3): This should not happen!! Data will be lost [ 47.587123][ T1323] [ 47.589411][ T1324] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 47.596831][ T1323] EXT4-fs (loop3): Total free blocks count 0 [ 47.617168][ T1323] EXT4-fs (loop3): Free/Dirty block details [pid 1329] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1333] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 1333] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1329] <... futex resumed>) = 0 [pid 1329] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1329] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1333] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 1333] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1329] <... futex resumed>) = 0 [pid 1329] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1329] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1333] creat("./bus", 000) = 6 [pid 1333] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1329] <... futex resumed>) = 0 [pid 1333] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1329] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1329] <... futex resumed>) = 0 [pid 1333] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1329] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1333] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1333] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1329] <... futex resumed>) = 0 [pid 1333] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1329] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1329] <... futex resumed>) = 0 [pid 1333] pwrite64(6, "+", 1, 0 [pid 1329] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1333] <... pwrite64 resumed>) = 1 [pid 1333] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1333] <... futex resumed>) = 1 [pid 1329] <... futex resumed>) = 0 [pid 1333] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1329] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1329] <... futex resumed>) = 0 [pid 1333] open("./bus", O_RDONLY [pid 1329] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1333] <... open resumed>) = 7 [pid 1333] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1329] <... futex resumed>) = 0 [pid 1333] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1329] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1329] <... futex resumed>) = 0 [pid 1333] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1329] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1333] <... copy_file_range resumed>) = 1 [pid 1329] <... futex resumed>) = 0 [pid 1333] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1333] <... futex resumed>) = 0 [pid 1329] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1333] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1329] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 301] <... openat resumed>) = 3 [pid 1329] <... mprotect resumed>) = 0 [pid 301] newfstatat(3, "", [pid 1329] rt_sigprocmask(SIG_BLOCK, ~[], [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1329] <... rt_sigprocmask resumed>[], 8) = 0 [pid 301] getdents64(3, [pid 1329] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 301] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1329] <... clone3 resumed> => {parent_tid=[1342]}, 88) = 1342 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1329] rt_sigprocmask(SIG_SETMASK, [], [pid 301] newfstatat(AT_FDCWD, "./38/binderfs", [pid 1329] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1329] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] unlink("./38/binderfs" [pid 1329] <... futex resumed>) = 0 [pid 301] <... unlink resumed>) = 0 [pid 1329] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 1342 attached [pid 1330] <... mount resumed>) = 0 [pid 1342] set_robust_list(0x7f13c8cc39a0, 24 [pid 1330] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1323] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1342] <... set_robust_list resumed>) = 0 [pid 1330] <... openat resumed>) = 3 [pid 1342] rt_sigprocmask(SIG_SETMASK, [], [pid 1330] chdir("./file1" [pid 1342] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1330] <... chdir resumed>) = 0 [pid 1342] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1330] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1342] <... mmap resumed>) = 0x20000000 [pid 1330] <... openat resumed>) = 4 [pid 1330] ioctl(4, LOOP_CLR_FD) = 0 [pid 1330] close(4) = 0 [pid 1330] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1325] <... futex resumed>) = 0 [pid 1330] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1325] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1330] <... open resumed>) = 4 [pid 1325] <... futex resumed>) = 0 [pid 1330] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1325] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1330] <... futex resumed>) = 0 [pid 1325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1330] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1325] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1330] <... open resumed>) = 5 [pid 1325] <... futex resumed>) = 0 [pid 1330] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1325] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1330] <... futex resumed>) = 0 [pid 1325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1330] creat("./bus", 000 [pid 1325] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1342] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1330] <... creat resumed>) = 6 [pid 1325] <... futex resumed>) = 0 [pid 1342] <... futex resumed>) = 1 [pid 1330] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1329] <... futex resumed>) = 0 [pid 1325] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1342] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1330] <... futex resumed>) = 0 [pid 1329] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1333] <... futex resumed>) = 0 [pid 1330] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1329] <... futex resumed>) = 1 [pid 1333] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1330] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1329] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1325] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1333] <... open resumed>) = -1 EFAULT (Bad address) [pid 1330] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1325] <... futex resumed>) = 0 [pid 1333] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1330] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1325] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1333] <... futex resumed>) = 1 [pid 1330] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1329] <... futex resumed>) = 0 [pid 1325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1320] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 47.623076][ T1323] EXT4-fs (loop3): free_blocks=2415919504 [ 47.629047][ T1323] EXT4-fs (loop3): dirty_blocks=32 [ 47.634236][ T1323] EXT4-fs (loop3): Block reservation details [ 47.636902][ T1324] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 47.641319][ T1323] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 47.653444][ T1324] EXT4-fs (loop2): This should not happen!! Data will be lost [ 47.653444][ T1324] [pid 1333] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1330] <... futex resumed>) = 0 [pid 1329] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1325] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1330] pwrite64(6, "+", 1, 0 [pid 1329] <... futex resumed>) = 0 [pid 1325] <... futex resumed>) = 0 [pid 1330] <... pwrite64 resumed>) = 1 [pid 1329] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1325] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... umount2 resumed>) = 0 [pid 1330] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1330] <... futex resumed>) = 0 [pid 1325] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1330] open("./bus", O_RDONLY [pid 1325] <... futex resumed>) = 0 [pid 1330] <... open resumed>) = 7 [pid 1325] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1330] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1330] <... futex resumed>) = 0 [pid 1325] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1330] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1325] <... futex resumed>) = 0 [pid 1330] <... copy_file_range resumed>) = 1 [pid 1325] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1330] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1325] <... futex resumed>) = 0 [pid 1330] <... futex resumed>) = 0 [pid 1325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1330] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1325] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1325] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 301] newfstatat(AT_FDCWD, "./38/file1", [pid 1325] <... mprotect resumed>) = 0 [pid 1325] rt_sigprocmask(SIG_BLOCK, ~[], [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1325] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1325] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 301] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1325] <... clone3 resumed> => {parent_tid=[1343]}, 88) = 1343 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1325] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 301] openat(AT_FDCWD, "./38/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1325] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 301] <... openat resumed>) = 4 [pid 1325] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./38/file1") = 0 [pid 301] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] close(3 [pid 1336] <... futex resumed>) = ? [pid 301] <... close resumed>) = 0 [pid 1336] +++ killed by SIGBUS +++ [pid 301] rmdir("./38") = 0 [pid 301] mkdir("./39", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 47.672491][ T1324] EXT4-fs (loop2): Total free blocks count 0 [ 47.673719][ T1333] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 47.678474][ T1324] EXT4-fs (loop2): Free/Dirty block details [ 47.702990][ T1324] EXT4-fs (loop2): free_blocks=2415919504 [ 47.707971][ T1323] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1344 ./strace-static-x86_64: Process 1343 attached [pid 1343] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1343] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1343] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1325] <... futex resumed>) = 0 [pid 1325] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1330] <... futex resumed>) = 0 [pid 1325] <... futex resumed>) = 1 [pid 1330] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1325] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1330] <... open resumed>) = -1 EFAULT (Bad address) [pid 1330] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1325] <... futex resumed>) = 0 [pid 1330] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1325] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1330] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1325] <... futex resumed>) = 0 [pid 1329] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1325] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1324] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- executing program [pid 1343] <... futex resumed>) = 1 [pid 1343] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1344] write(1, "executing program\n", 18) = 18 [pid 1344] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1344] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1344] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1344] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1344] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1344] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1344] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1345]}, 88) = 1345 [pid 1344] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1344] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1344] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1345 attached [pid 1345] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1345] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1345] memfd_create("syzkaller", 0) = 3 [pid 1345] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1337] <... futex resumed>) = ? [pid 1324] +++ killed by SIGBUS +++ [pid 1337] +++ killed by SIGBUS +++ [ 47.710828][ T1324] EXT4-fs (loop2): dirty_blocks=32 [ 47.725775][ T1324] EXT4-fs (loop2): Block reservation details [ 47.733415][ T1324] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 47.736749][ T1330] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 47.740200][ T1333] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 47.766259][ T1333] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 1345] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1333] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1345] <... write resumed>) = 1048576 [pid 1342] <... futex resumed>) = ? [pid 1323] +++ killed by SIGBUS +++ [pid 1321] +++ killed by SIGBUS +++ [pid 1320] +++ killed by SIGBUS +++ [pid 1342] +++ killed by SIGBUS +++ [pid 1345] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1345] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 47.766259][ T1333] [ 47.767216][ T1320] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 47.770675][ T1323] EXT4-fs (loop3): This should not happen!! Data will be lost [ 47.770675][ T1323] [ 47.776731][ T1333] EXT4-fs (loop0): Total free blocks count 0 [ 47.776747][ T1333] EXT4-fs (loop0): Free/Dirty block details [ 47.776758][ T1333] EXT4-fs (loop0): free_blocks=2415919504 [ 47.776771][ T1333] EXT4-fs (loop0): dirty_blocks=32 [pid 1345] ioctl(4, LOOP_SET_FD, 3 [pid 1325] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1321, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1320, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 1345] <... ioctl resumed>) = 0 [pid 1345] close(3) = 0 [pid 1345] close(4) = 0 [pid 1345] mkdir("./file1", 0777) = 0 [pid 1345] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 1333] +++ killed by SIGBUS +++ [pid 1329] +++ killed by SIGBUS +++ [pid 300] umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./39/binderfs") = 0 [pid 300] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./41/binderfs") = 0 [pid 299] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1329, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5} --- [pid 297] umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./39/binderfs") = 0 [ 47.776782][ T1333] EXT4-fs (loop0): Block reservation details [ 47.776793][ T1333] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 47.776893][ T1320] EXT4-fs (loop2): This should not happen!! Data will be lost [ 47.776893][ T1320] [ 47.791182][ T1330] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 47.800933][ T1333] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 47.804359][ T1330] EXT4-fs (loop1): This should not happen!! Data will be lost [pid 297] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1345] <... mount resumed>) = 0 [pid 1345] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1345] chdir("./file1") = 0 [pid 1345] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1345] ioctl(4, LOOP_CLR_FD) = 0 [pid 1345] close(4) = 0 [pid 1345] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1345] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1344] <... futex resumed>) = 0 [pid 1344] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1345] <... futex resumed>) = 0 [pid 1344] <... futex resumed>) = 1 [pid 1345] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1344] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1345] <... open resumed>) = 4 [pid 1345] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1344] <... futex resumed>) = 0 [pid 1345] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1344] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1345] <... open resumed>) = 5 [pid 1344] <... futex resumed>) = 0 [pid 1345] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1344] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1345] <... futex resumed>) = 0 [pid 1344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1345] creat("./bus", 000 [pid 1344] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1345] <... creat resumed>) = 6 [pid 1344] <... futex resumed>) = 0 [pid 1345] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1344] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1345] <... futex resumed>) = 0 [pid 1344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1345] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1344] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1345] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1344] <... futex resumed>) = 0 [pid 1345] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1344] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1345] <... futex resumed>) = 0 [pid 1344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1345] pwrite64(6, "+", 1, 0 [pid 1344] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1345] <... pwrite64 resumed>) = 1 [pid 1344] <... futex resumed>) = 0 [pid 1345] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1344] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1345] <... futex resumed>) = 0 [pid 1344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1345] open("./bus", O_RDONLY [pid 1344] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1345] <... open resumed>) = 7 [pid 1344] <... futex resumed>) = 0 [pid 1345] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1344] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1345] <... futex resumed>) = 0 [pid 1344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1345] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1344] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1345] <... copy_file_range resumed>) = 1 [pid 1344] <... futex resumed>) = 0 [pid 1345] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1344] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1345] <... futex resumed>) = 0 [pid 1344] <... futex resumed>) = 0 [pid 1345] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1344] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1344] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1344] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1344] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1348]}, 88) = 1348 [pid 1344] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1344] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1344] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1348 attached [pid 1348] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1348] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1348] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1344] <... futex resumed>) = 0 [pid 1344] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1345] <... futex resumed>) = 0 [pid 1344] <... futex resumed>) = 1 [pid 1345] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1344] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1345] <... open resumed>) = -1 EFAULT (Bad address) [pid 1345] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1344] <... futex resumed>) = 0 [ 47.804359][ T1330] [ 47.810533][ T1345] loop4: detected capacity change from 0 to 2048 [ 47.815810][ T1330] EXT4-fs (loop1): Total free blocks count 0 [ 47.821060][ T1333] EXT4-fs (loop0): This should not happen!! Data will be lost [ 47.821060][ T1333] [ 47.826566][ T1330] EXT4-fs (loop1): Free/Dirty block details [ 47.901797][ T1345] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 47.904506][ T1330] EXT4-fs (loop1): free_blocks=2415919504 [pid 1344] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1348] <... futex resumed>) = 1 [pid 1348] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1344] <... futex resumed>) = 0 [pid 1344] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./41/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./41/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 297] <... umount2 resumed>) = 0 [pid 297] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./39/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./39/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./39/file1" [pid 299] close(4) = 0 [pid 299] rmdir("./41/file1") = 0 [pid 297] <... rmdir resumed>) = 0 [pid 297] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./39") = 0 [pid 299] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./41") = 0 [pid 297] mkdir("./40", 0777) = 0 [pid 299] mkdir("./42", 0777 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [ 47.919240][ T1345] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 47.927425][ T1330] EXT4-fs (loop1): dirty_blocks=32 [ 47.936746][ T1345] EXT4-fs (loop4): This should not happen!! Data will be lost [ 47.936746][ T1345] [ 47.951885][ T1345] EXT4-fs (loop4): Total free blocks count 0 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] <... clone resumed>, child_tidptr=0x55558909e690) = 1350 [pid 299] <... clone resumed>, child_tidptr=0x55558909e690) = 1351 ./strace-static-x86_64: Process 1350 attached ./strace-static-x86_64: Process 1351 attached [pid 1351] set_robust_list(0x55558909e6a0, 24 [pid 1350] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1351] <... set_robust_list resumed>) = 0 [pid 1350] chdir("./40" [pid 1351] chdir("./42" [pid 1350] <... chdir resumed>) = 0 [pid 1351] <... chdir resumed>) = 0 [pid 1350] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1350] setpgid(0, 0) = 0 [pid 1350] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1351] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1351] setpgid(0, 0) = 0 [pid 1351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1350] <... openat resumed>) = 3 [pid 1351] <... openat resumed>) = 3 [pid 1350] write(3, "1000", 4) = 4 [pid 300] <... umount2 resumed>) = 0 [pid 1350] close(3) = 0 [pid 1350] symlink("/dev/binderfs", "./binderfs" [pid 1351] write(3, "1000", 4 [pid 1350] <... symlink resumed>) = 0 [pid 1351] <... write resumed>) = 4 [pid 1351] close(3) = 0 [pid 1351] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 1350] write(1, "executing program\n", 18) = 18 [pid 1350] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000executing program [pid 1351] write(1, "executing program\n", 18 [pid 1350] <... futex resumed>) = 0 [pid 300] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1351] <... write resumed>) = 18 [pid 1350] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1351] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] newfstatat(AT_FDCWD, "./39/file1", [pid 1350] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1351] <... futex resumed>) = 0 [pid 1351] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1350] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1350] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1350] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 300] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1351] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1351] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1351] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1351] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 300] openat(AT_FDCWD, "./39/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 1350] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1351] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1350] <... mprotect resumed>) = 0 [pid 300] newfstatat(4, "", [pid 1351] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1351] <... mprotect resumed>) = 0 [pid 1350] rt_sigprocmask(SIG_BLOCK, ~[], [pid 300] getdents64(4, [pid 1351] rt_sigprocmask(SIG_BLOCK, ~[], [pid 300] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1350] <... rt_sigprocmask resumed>[], 8) = 0 [pid 300] getdents64(4, [pid 1351] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1350] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 300] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1351] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 300] close(4 [pid 1350] <... clone3 resumed> => {parent_tid=[1352]}, 88) = 1352 [pid 300] <... close resumed>) = 0 [pid 1351] <... clone3 resumed> => {parent_tid=[1353]}, 88) = 1353 [pid 1350] rt_sigprocmask(SIG_SETMASK, [], [pid 1351] rt_sigprocmask(SIG_SETMASK, [], [pid 1350] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 300] rmdir("./39/file1"./strace-static-x86_64: Process 1353 attached [pid 1351] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1350] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... rmdir resumed>) = 0 [pid 1353] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1353] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1353] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1344] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 1352 attached [pid 1352] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1352] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1352] memfd_create("syzkaller", 0) = 3 [pid 1352] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1350] <... futex resumed>) = 0 [pid 1351] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] getdents64(3, [pid 1350] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1353] <... futex resumed>) = 0 [pid 1351] <... futex resumed>) = 1 [pid 300] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1353] memfd_create("syzkaller", 0 [pid 1351] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 300] close(3 [pid 1353] <... memfd_create resumed>) = 3 [pid 1353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1352] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1353] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 300] <... close resumed>) = 0 [pid 300] rmdir("./39" [pid 1352] <... write resumed>) = 1048576 [pid 300] <... rmdir resumed>) = 0 [pid 1352] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1352] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 47.971636][ T1345] EXT4-fs (loop4): Free/Dirty block details [ 47.992768][ T1345] EXT4-fs (loop4): free_blocks=2415919504 [ 47.998443][ T1345] EXT4-fs (loop4): dirty_blocks=32 [ 48.000224][ T1330] EXT4-fs (loop1): Block reservation details [ 48.016116][ T1352] loop0: detected capacity change from 0 to 2048 [pid 1352] ioctl(4, LOOP_SET_FD, 3 [pid 1353] <... write resumed>) = 1048576 [pid 300] mkdir("./40", 0777 [pid 1352] <... ioctl resumed>) = 0 [pid 1352] close(3) = 0 [pid 1352] close(4) = 0 [pid 1352] mkdir("./file1", 0777 [pid 300] <... mkdir resumed>) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 1352] <... mkdir resumed>) = 0 [pid 300] ioctl(3, LOOP_CLR_FD [pid 1352] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 300] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1354 [pid 1353] munmap(0x7f13c08c4000, 138412032./strace-static-x86_64: Process 1354 attached ) = 0 [pid 1330] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1354] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1354] chdir("./40") = 0 [pid 1354] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1354] setpgid(0, 0) = 0 [pid 1354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1354] write(3, "1000", 4 [pid 1353] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1354] <... write resumed>) = 4 [pid 1354] close(3) = 0 [pid 1354] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1353] <... openat resumed>) = 4 [pid 1345] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1343] <... futex resumed>) = ? [pid 1353] ioctl(4, LOOP_SET_FD, 3 [pid 1343] +++ killed by SIGBUS +++ [pid 1354] write(1, "executing program\n", 18 [pid 1353] <... ioctl resumed>) = 0 [pid 1352] <... mount resumed>) = 0 [pid 1330] +++ killed by SIGBUS +++ executing program [pid 1354] <... write resumed>) = 18 [pid 1353] close(3 [pid 1352] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1354] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1353] <... close resumed>) = 0 [pid 1352] <... openat resumed>) = 3 [pid 1354] <... futex resumed>) = 0 [pid 1353] close(4 [pid 1352] chdir("./file1" [pid 1354] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1353] <... close resumed>) = 0 [pid 1352] <... chdir resumed>) = 0 [pid 1354] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1353] mkdir("./file1", 0777 [pid 1352] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1354] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1353] <... mkdir resumed>) = 0 [pid 1352] <... openat resumed>) = 4 [pid 1354] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1354] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1353] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 1352] ioctl(4, LOOP_CLR_FD [pid 1354] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1354] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1352] <... ioctl resumed>) = 0 [pid 1354] <... mprotect resumed>) = 0 [pid 1352] close(4 [pid 1354] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1352] <... close resumed>) = 0 [pid 1354] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1352] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1348] <... futex resumed>) = ? [pid 1354] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1352] <... futex resumed>) = 1 [pid 1350] <... futex resumed>) = 0 [pid 1348] +++ killed by SIGBUS +++ [pid 1345] +++ killed by SIGBUS +++ [pid 1352] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1350] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1354] <... clone3 resumed> => {parent_tid=[1357]}, 88) = 1357 [pid 1352] <... open resumed>) = 4 [pid 1350] <... futex resumed>) = 0 [pid 1354] rt_sigprocmask(SIG_SETMASK, [], [pid 1352] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1350] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1354] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1352] <... futex resumed>) = 0 [pid 1350] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1354] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1352] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1350] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1354] <... futex resumed>) = 0 [pid 1352] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1350] <... futex resumed>) = 0 [pid 1354] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1352] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1350] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1352] <... open resumed>) = 5 [pid 1352] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1350] <... futex resumed>) = 0 [pid 1352] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [ 48.019056][ T1345] EXT4-fs (loop4): Block reservation details [ 48.034323][ T1330] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 48.034714][ T1345] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 48.047165][ T1353] loop2: detected capacity change from 0 to 2048 [ 48.047906][ T1325] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 48.067220][ T1325] EXT4-fs (loop1): This should not happen!! Data will be lost [pid 1350] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1352] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1350] <... futex resumed>) = 0 [pid 1352] creat("./bus", 000 [pid 1350] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1357 attached [pid 1352] <... creat resumed>) = 6 [pid 1325] +++ killed by SIGBUS +++ [pid 1352] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1350] <... futex resumed>) = 0 [pid 1352] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1350] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1352] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1350] <... futex resumed>) = 0 [pid 1352] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1350] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1352] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1352] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1350] <... futex resumed>) = 0 [pid 1352] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1350] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1352] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1350] <... futex resumed>) = 0 [pid 1352] pwrite64(6, "+", 1, 0 [pid 1350] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1352] <... pwrite64 resumed>) = 1 [pid 1352] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1350] <... futex resumed>) = 0 [pid 1352] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1350] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1352] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1350] <... futex resumed>) = 0 [pid 1352] open("./bus", O_RDONLY [pid 1350] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1352] <... open resumed>) = 7 [pid 1352] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1350] <... futex resumed>) = 0 [pid 1352] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1350] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1352] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1350] <... futex resumed>) = 0 [pid 1352] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1350] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1357] set_robust_list(0x7f13c8ce49a0, 24 [pid 1352] <... copy_file_range resumed>) = 1 [pid 1350] <... futex resumed>) = 0 [pid 1357] <... set_robust_list resumed>) = 0 [pid 1352] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1350] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1357] rt_sigprocmask(SIG_SETMASK, [], [pid 1352] <... futex resumed>) = 0 [pid 1350] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1357] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1352] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1350] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1357] memfd_create("syzkaller", 0 [pid 1350] <... mprotect resumed>) = 0 [pid 1357] <... memfd_create resumed>) = 3 [pid 1350] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1357] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1350] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1357] <... mmap resumed>) = 0x7f13c08c4000 [pid 1350] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1357] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1350] <... clone3 resumed> => {parent_tid=[1359]}, 88) = 1359 [pid 1350] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1350] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1350] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1325, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=20} --- ./strace-static-x86_64: Process 1359 attached [pid 1359] set_robust_list(0x7f13c8cc39a0, 24 [pid 1357] <... write resumed>) = 1048576 [pid 1357] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1357] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1357] ioctl(4, LOOP_SET_FD, 3 [pid 1359] <... set_robust_list resumed>) = 0 [pid 1344] +++ killed by SIGBUS +++ [pid 1359] rt_sigprocmask(SIG_SETMASK, [], [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1344, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 1359] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1359] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 298] umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1359] <... mmap resumed>) = 0x20000000 [pid 301] umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] <... openat resumed>) = 3 [pid 301] <... openat resumed>) = 3 [pid 298] newfstatat(3, "", [pid 301] newfstatat(3, "", [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, [pid 301] getdents64(3, [pid 298] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 301] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./41/binderfs", [pid 301] newfstatat(AT_FDCWD, "./39/binderfs", [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./41/binderfs" [pid 1359] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] unlink("./39/binderfs" [pid 298] <... unlink resumed>) = 0 [pid 1359] <... futex resumed>) = 1 [pid 1357] <... ioctl resumed>) = 0 [pid 1353] <... mount resumed>) = 0 [pid 1350] <... futex resumed>) = 0 [pid 301] <... unlink resumed>) = 0 [pid 298] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1353] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1350] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1359] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1353] <... openat resumed>) = 3 [pid 1353] chdir("./file1" [pid 1352] <... futex resumed>) = 0 [pid 1350] <... futex resumed>) = 1 [pid 1357] close(3) = 0 [pid 1357] close(4) = 0 [pid 1357] mkdir("./file1", 0777) = 0 [pid 1357] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 1353] <... chdir resumed>) = 0 [pid 1353] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1353] ioctl(4, LOOP_CLR_FD) = 0 [pid 1353] close(4) = 0 [pid 1353] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1353] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1352] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000) = -1 EFAULT (Bad address) [pid 1352] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 48.067220][ T1325] [ 48.077742][ T1344] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 48.094343][ T1344] EXT4-fs (loop4): This should not happen!! Data will be lost [ 48.094343][ T1344] [ 48.096330][ T1357] loop3: detected capacity change from 0 to 2048 [pid 1352] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1350] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 1350] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1352] <... futex resumed>) = 0 [pid 1350] <... futex resumed>) = 1 [pid 1351] <... futex resumed>) = 0 [pid 1351] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1353] <... futex resumed>) = 0 [pid 1351] <... futex resumed>) = 1 [pid 1350] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... umount2 resumed>) = 0 [pid 298] <... umount2 resumed>) = 0 [pid 1353] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1351] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1353] <... open resumed>) = 4 [pid 301] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1353] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1353] <... futex resumed>) = 1 [pid 1351] <... futex resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1353] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1351] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1353] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1351] <... futex resumed>) = 0 [pid 301] newfstatat(AT_FDCWD, "./39/file1", [pid 1353] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1351] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] newfstatat(AT_FDCWD, "./41/file1", [pid 1353] <... open resumed>) = 5 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1353] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1353] <... futex resumed>) = 1 [pid 1351] <... futex resumed>) = 0 [pid 301] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1353] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1351] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1353] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1351] <... futex resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1353] creat("./bus", 000 [pid 1351] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1353] <... creat resumed>) = 6 [pid 301] openat(AT_FDCWD, "./39/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1353] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] openat(AT_FDCWD, "./41/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1353] <... futex resumed>) = 1 [pid 1351] <... futex resumed>) = 0 [pid 301] <... openat resumed>) = 4 [pid 1353] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1351] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... openat resumed>) = 4 [pid 1353] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1351] <... futex resumed>) = 0 [pid 301] newfstatat(4, "", [pid 1353] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1351] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] newfstatat(4, "", [pid 1353] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1353] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1353] <... futex resumed>) = 1 [pid 1351] <... futex resumed>) = 0 [pid 301] getdents64(4, [pid 1353] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1351] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, [pid 1353] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1351] <... futex resumed>) = 0 [pid 301] getdents64(4, [pid 298] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1353] pwrite64(6, "+", 1, 0 [pid 1351] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 298] getdents64(4, [pid 1353] <... pwrite64 resumed>) = 1 [pid 301] close(4 [pid 298] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1353] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... close resumed>) = 0 [pid 298] close(4 [pid 1353] <... futex resumed>) = 1 [pid 1351] <... futex resumed>) = 0 [pid 301] rmdir("./39/file1" [pid 298] <... close resumed>) = 0 [pid 1353] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1351] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... rmdir resumed>) = 0 [pid 298] rmdir("./41/file1" [pid 1353] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1351] <... futex resumed>) = 0 [pid 301] getdents64(3, [pid 298] <... rmdir resumed>) = 0 [pid 1353] open("./bus", O_RDONLY [pid 1351] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 298] getdents64(3, [pid 1353] <... open resumed>) = 7 [pid 301] close(3 [pid 298] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1353] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... close resumed>) = 0 [pid 298] close(3 [pid 1353] <... futex resumed>) = 1 [pid 1351] <... futex resumed>) = 0 [pid 301] rmdir("./39" [pid 298] <... close resumed>) = 0 [pid 1353] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1351] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... rmdir resumed>) = 0 [pid 298] rmdir("./41" [pid 1353] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1351] <... futex resumed>) = 0 [pid 301] mkdir("./40", 0777 [pid 298] <... rmdir resumed>) = 0 [pid 1353] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1351] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... mkdir resumed>) = 0 [pid 298] mkdir("./42", 0777 [pid 1353] <... copy_file_range resumed>) = 1 [pid 1351] <... futex resumed>) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 298] <... mkdir resumed>) = 0 [pid 1353] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1351] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 301] <... openat resumed>) = 3 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1353] <... futex resumed>) = 0 [pid 1351] <... mmap resumed>) = 0x7f13c8ca3000 [pid 301] ioctl(3, LOOP_CLR_FD [pid 298] <... openat resumed>) = 3 [pid 1353] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [ 48.115374][ T1352] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 48.131497][ T1352] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 48.146036][ T1352] EXT4-fs (loop0): This should not happen!! Data will be lost [ 48.146036][ T1352] [ 48.156589][ T1352] EXT4-fs (loop0): Total free blocks count 0 [ 48.162809][ T1352] EXT4-fs (loop0): Free/Dirty block details [ 48.168569][ T1352] EXT4-fs (loop0): free_blocks=2415919504 [pid 1351] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 301] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 298] ioctl(3, LOOP_CLR_FD [pid 1351] <... mprotect resumed>) = 0 [pid 301] close(3 [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1351] rt_sigprocmask(SIG_BLOCK, ~[], [pid 301] <... close resumed>) = 0 [pid 298] close(3 [pid 1351] <... rt_sigprocmask resumed>[], 8) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] <... close resumed>) = 0 [pid 1351] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] <... clone resumed>, child_tidptr=0x55558909e690) = 1363 ./strace-static-x86_64: Process 1363 attached [pid 1351] <... clone3 resumed> => {parent_tid=[1364]}, 88) = 1364 [pid 298] <... clone resumed>, child_tidptr=0x55558909e690) = 1365 [pid 1351] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1351] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1351] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1357] <... mount resumed>) = 0 [pid 1357] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1357] chdir("./file1") = 0 [pid 1357] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1357] ioctl(4, LOOP_CLR_FD) = 0 [pid 1357] close(4) = 0 [pid 1357] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1354] <... futex resumed>) = 0 [pid 1357] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1354] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1357] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1354] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1365 attached ./strace-static-x86_64: Process 1364 attached [ 48.174694][ T1352] EXT4-fs (loop0): dirty_blocks=32 [ 48.179630][ T1352] EXT4-fs (loop0): Block reservation details [ 48.185778][ T1352] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 48.193858][ T1352] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 48.199789][ T1357] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, [ 48.206014][ T1352] EXT4-fs (loop0): This should not happen!! Data will be lost [ 48.206014][ T1352] [pid 1363] set_robust_list(0x55558909e6a0, 24 [pid 1357] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1354] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1352] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1365] set_robust_list(0x55558909e6a0, 24 [pid 1364] set_robust_list(0x7f13c8cc39a0, 24 [pid 1363] <... set_robust_list resumed>) = 0 executing program executing program [pid 1359] <... futex resumed>) = ? [pid 1357] <... open resumed>) = 4 [pid 1350] <... futex resumed>) = ? [pid 1359] +++ killed by SIGBUS +++ [pid 1357] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1354] <... futex resumed>) = 0 [pid 1357] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1354] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1363] chdir("./40" [pid 1357] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1354] <... futex resumed>) = 0 [pid 1363] <... chdir resumed>) = 0 [pid 1357] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1354] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1357] <... open resumed>) = 5 [pid 1357] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1354] <... futex resumed>) = 0 [pid 1357] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1354] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1357] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1354] <... futex resumed>) = 0 [pid 1357] creat("./bus", 000 [pid 1354] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1357] <... creat resumed>) = 6 [pid 1357] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1354] <... futex resumed>) = 0 [pid 1357] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1354] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1357] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1354] <... futex resumed>) = 0 [pid 1357] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1354] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1357] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1357] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1354] <... futex resumed>) = 0 [pid 1357] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1354] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1357] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1354] <... futex resumed>) = 0 [pid 1357] pwrite64(6, "+", 1, 0 [pid 1354] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1357] <... pwrite64 resumed>) = 1 [pid 1357] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1354] <... futex resumed>) = 0 [pid 1357] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1354] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1357] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1354] <... futex resumed>) = 0 [pid 1357] open("./bus", O_RDONLY [pid 1354] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1357] <... open resumed>) = 7 [pid 1357] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1354] <... futex resumed>) = 0 [pid 1357] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1354] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1357] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1354] <... futex resumed>) = 0 [pid 1357] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1354] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1357] <... copy_file_range resumed>) = 1 [pid 1354] <... futex resumed>) = 0 [pid 1357] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1354] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1357] <... futex resumed>) = 0 [pid 1354] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1357] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1354] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1354] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1354] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1366]}, 88) = 1366 [pid 1354] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1354] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1354] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1366 attached [pid 1366] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1366] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1366] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1354] <... futex resumed>) = 0 [pid 1354] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1357] <... futex resumed>) = 0 [pid 1354] <... futex resumed>) = 1 [pid 1357] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1354] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1357] <... open resumed>) = -1 EFAULT (Bad address) [pid 1357] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1354] <... futex resumed>) = 0 [pid 1366] <... futex resumed>) = 1 [pid 1354] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1352] +++ killed by SIGBUS +++ [pid 1350] +++ killed by SIGBUS +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1350, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=10} --- [pid 297] umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./40/binderfs") = 0 [pid 297] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1366] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1363] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1363] setpgid(0, 0) = 0 [pid 1363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1363] write(3, "1000", 4) = 4 [pid 1363] close(3) = 0 [pid 1363] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1363] write(1, "executing program\n", 18) = 18 [pid 1363] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1363] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1363] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1363] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1363] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1363] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1363] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1367]}, 88) = 1367 [pid 1363] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1363] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1363] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1367 attached [pid 1367] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1367] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1367] memfd_create("syzkaller", 0) = 3 [pid 1367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1367] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1367] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1367] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1367] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1367] close(3) = 0 [pid 1367] close(4) = 0 [pid 1367] mkdir("./file1", 0777) = 0 [pid 1367] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 1351] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1354] <... futex resumed>) = 0 [pid 1351] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1353] <... futex resumed>) = 0 [pid 1354] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1353] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1351] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1353] <... open resumed>) = -1 EFAULT (Bad address) [pid 1353] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1364] <... set_robust_list resumed>) = 0 [pid 1364] rt_sigprocmask(SIG_SETMASK, [], [pid 1353] <... futex resumed>) = 1 [pid 1351] <... futex resumed>) = 0 [pid 1364] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1351] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1353] write(-1, "\x30\x78\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65983 [pid 1351] <... futex resumed>) = 0 [pid 1353] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 1351] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1353] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1351] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1353] <... futex resumed>) = 0 [pid 1353] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1364] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1365] <... set_robust_list resumed>) = 0 [pid 1351] exit_group(0 [pid 1353] <... futex resumed>) = ? [pid 1351] <... exit_group resumed>) = ? [pid 1365] chdir("./42" [pid 1353] +++ exited with 0 +++ [pid 1365] <... chdir resumed>) = 0 [pid 1365] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1365] setpgid(0, 0) = 0 [pid 1365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1365] write(3, "1000", 4) = 4 [pid 1365] close(3) = 0 [pid 1365] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1365] write(1, "executing program\n", 18) = 18 [pid 1365] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1365] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1365] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 297] <... umount2 resumed>) = 0 [pid 1365] <... mmap resumed>) = 0x7f13c8cc4000 [pid 297] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1364] <... futex resumed>) = ? [pid 1365] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1365] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1365] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1369]}, 88) = 1369 [pid 1365] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1365] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1365] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 48.221022][ T1367] loop4: detected capacity change from 0 to 2048 [ 48.223558][ T1357] block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 48.245271][ T1357] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 48.246716][ T1364] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 1367] <... mount resumed>) = 0 [pid 297] newfstatat(AT_FDCWD, "./40/file1", [pid 1367] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1367] <... openat resumed>) = 3 [pid 297] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1367] chdir("./file1" [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1367] <... chdir resumed>) = 0 [pid 297] openat(AT_FDCWD, "./40/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 1367] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 297] newfstatat(4, "", ./strace-static-x86_64: Process 1369 attached [pid 1367] <... openat resumed>) = 4 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1369] set_robust_list(0x7f13c8ce49a0, 24 [pid 1367] ioctl(4, LOOP_CLR_FD [pid 1354] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 297] getdents64(4, [pid 1369] <... set_robust_list resumed>) = 0 [pid 1367] <... ioctl resumed>) = 0 [pid 297] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [ 48.257932][ T1357] EXT4-fs (loop3): This should not happen!! Data will be lost [ 48.257932][ T1357] [ 48.282503][ T1357] EXT4-fs (loop3): Total free blocks count 0 [ 48.288470][ T1357] EXT4-fs (loop3): Free/Dirty block details [ 48.294463][ T1364] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 48.294898][ T1357] EXT4-fs (loop3): free_blocks=2415919504 [ 48.307604][ T1364] EXT4-fs (loop2): This should not happen!! Data will be lost [ 48.307604][ T1364] [ 48.312838][ T1357] EXT4-fs (loop3): dirty_blocks=32 [pid 1369] rt_sigprocmask(SIG_SETMASK, [], [pid 1367] close(4 [pid 297] getdents64(4, [pid 1369] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1367] <... close resumed>) = 0 [pid 297] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1369] memfd_create("syzkaller", 0 [pid 1367] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] close(4 [pid 1357] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1369] <... memfd_create resumed>) = 3 [pid 1369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1369] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1367] <... futex resumed>) = 1 [pid 1363] <... futex resumed>) = 0 [pid 1367] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 297] <... close resumed>) = 0 [pid 1363] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1363] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 297] rmdir("./40/file1" [pid 1367] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 297] <... rmdir resumed>) = 0 [pid 1367] <... open resumed>) = 4 [pid 297] getdents64(3, [pid 1367] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1367] <... futex resumed>) = 1 [pid 1363] <... futex resumed>) = 0 [pid 297] close(3 [pid 1367] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1363] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... close resumed>) = 0 [pid 1367] <... open resumed>) = 5 [pid 1363] <... futex resumed>) = 0 [pid 297] rmdir("./40" [pid 1367] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1363] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... rmdir resumed>) = 0 [pid 1367] <... futex resumed>) = 0 [pid 1363] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 297] mkdir("./41", 0777 [pid 1367] creat("./bus", 000 [pid 1363] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... mkdir resumed>) = 0 [pid 1367] <... creat resumed>) = 6 [pid 1363] <... futex resumed>) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1367] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1363] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... openat resumed>) = 3 [pid 1367] <... futex resumed>) = 0 [pid 1363] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 297] ioctl(3, LOOP_CLR_FD [pid 1367] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1363] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1367] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1363] <... futex resumed>) = 0 [pid 1367] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1363] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] close(3 [pid 1367] <... futex resumed>) = 0 [pid 1363] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1367] pwrite64(6, "+", 1, 0 [pid 1363] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... close resumed>) = 0 [pid 1367] <... pwrite64 resumed>) = 1 [pid 1363] <... futex resumed>) = 0 [pid 1367] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1363] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1367] <... futex resumed>) = 0 [pid 1363] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1367] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1363] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1363] <... futex resumed>) = 0 [pid 1367] open("./bus", O_RDONLY [pid 1363] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... clone resumed>, child_tidptr=0x55558909e690) = 1371 [pid 1367] <... open resumed>) = 7 [pid 1367] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1363] <... futex resumed>) = 0 [pid 1367] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1363] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1363] <... futex resumed>) = 0 [pid 1367] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1363] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1367] <... copy_file_range resumed>) = 1 [pid 1363] <... futex resumed>) = 0 [pid 1367] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1363] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1367] <... futex resumed>) = 0 [pid 1363] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1367] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1363] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1363] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1363] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1372]}, 88) = 1372 [pid 1363] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1363] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1363] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1369] <... write resumed>) = 1048576 [pid 1366] <... futex resumed>) = ? [pid 1366] +++ killed by SIGBUS +++ [ 48.322644][ T1364] EXT4-fs (loop2): Total free blocks count 0 [ 48.327119][ T1357] EXT4-fs (loop3): Block reservation details [ 48.338660][ T1357] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 48.340190][ T1364] EXT4-fs (loop2): Free/Dirty block details [ 48.351350][ T1364] EXT4-fs (loop2): free_blocks=2415919504 [ 48.357310][ T1364] EXT4-fs (loop2): dirty_blocks=32 ./strace-static-x86_64: Process 1372 attached [pid 1372] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1372] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1372] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1369] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1372] <... mmap resumed>) = 0x20000000 ./strace-static-x86_64: Process 1371 attached [pid 1371] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1371] chdir("./41" [pid 1369] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1371] <... chdir resumed>) = 0 [pid 1369] ioctl(4, LOOP_SET_FD, 3 [pid 1371] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1364] +++ exited with 0 +++ [pid 1351] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1351, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- [pid 299] umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./42/binderfs") = 0 [pid 299] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1371] setpgid(0, 0) = 0 [pid 1371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1371] write(3, "1000", 4) = 4 [pid 1371] close(3) = 0 [pid 1371] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1371] write(1, "executing program\n", 18executing program ) = 18 [pid 1371] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1371] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1371] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1371] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1371] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1371] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1371] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1372] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1363] <... futex resumed>) = 0 [pid 1363] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1367] <... futex resumed>) = 0 [pid 1363] <... futex resumed>) = 1 [pid 1367] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1363] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1367] <... open resumed>) = -1 EFAULT (Bad address) [pid 1367] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1363] <... futex resumed>) = 0 [pid 1367] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1363] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1363] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1373 attached [pid 1372] <... futex resumed>) = 1 [pid 1371] <... clone3 resumed> => {parent_tid=[1373]}, 88) = 1373 [pid 1369] <... ioctl resumed>) = 0 [pid 1357] +++ killed by SIGBUS +++ [pid 1354] +++ killed by SIGBUS +++ [pid 1369] close(3) = 0 [pid 1369] close(4) = 0 [pid 1369] mkdir("./file1", 0777) = 0 [pid 1369] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 1373] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1372] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1371] rt_sigprocmask(SIG_SETMASK, [], [pid 1373] rt_sigprocmask(SIG_SETMASK, [], [pid 1371] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1354, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 1363] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1373] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1371] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1373] memfd_create("syzkaller", 0 [pid 1371] <... futex resumed>) = 0 [pid 1373] <... memfd_create resumed>) = 3 [pid 1371] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1373] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [ 48.367845][ T1357] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 48.367881][ T1364] EXT4-fs (loop2): Block reservation details [ 48.386207][ T1364] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 48.390031][ T1369] loop1: detected capacity change from 0 to 2048 [ 48.392648][ T1357] EXT4-fs (loop3): This should not happen!! Data will be lost [ 48.392648][ T1357] [ 48.406401][ T1367] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 1373] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1373] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1373] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1373] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1373] close(3) = 0 [pid 1373] close(4) = 0 [pid 1373] mkdir("./file1", 0777) = 0 [pid 1373] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 300] umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./40/binderfs") = 0 [pid 300] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... umount2 resumed>) = 0 [ 48.422636][ T567] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 48.434994][ T1373] loop0: detected capacity change from 0 to 2048 [ 48.436052][ T567] EXT4-fs (loop2): This should not happen!! Data will be lost [ 48.436052][ T567] [ 48.450857][ T1367] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 48.463614][ T1367] EXT4-fs (loop4): This should not happen!! Data will be lost [ 48.463614][ T1367] [pid 1369] <... mount resumed>) = 0 [pid 1369] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1369] chdir("./file1") = 0 [pid 1369] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1369] ioctl(4, LOOP_CLR_FD) = 0 [pid 1369] close(4) = 0 [pid 1369] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1365] <... futex resumed>) = 0 [pid 1369] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1365] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1369] <... open resumed>) = 4 [pid 1365] <... futex resumed>) = 0 [pid 1369] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1365] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1369] <... futex resumed>) = 0 [pid 1365] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1369] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1365] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1369] <... open resumed>) = 5 [pid 1365] <... futex resumed>) = 0 [pid 1369] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1365] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1369] <... futex resumed>) = 0 [pid 1365] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1369] creat("./bus", 000 [pid 1365] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1369] <... creat resumed>) = 6 [pid 1365] <... futex resumed>) = 0 [pid 1369] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1365] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1369] <... futex resumed>) = 0 [pid 1365] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1369] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1365] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1369] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1365] <... futex resumed>) = 0 [pid 1369] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1365] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1369] <... futex resumed>) = 0 [pid 1365] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1369] pwrite64(6, "+", 1, 0 [pid 1365] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1369] <... pwrite64 resumed>) = 1 [pid 1365] <... futex resumed>) = 0 [pid 1369] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1365] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1369] <... futex resumed>) = 0 [pid 1365] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1369] open("./bus", O_RDONLY [pid 1365] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1369] <... open resumed>) = 7 [pid 1365] <... futex resumed>) = 0 [pid 1369] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1365] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1369] <... futex resumed>) = 0 [pid 1365] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1369] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1365] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1369] <... copy_file_range resumed>) = 1 [pid 1365] <... futex resumed>) = 0 [pid 1369] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1365] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1369] <... futex resumed>) = 0 [pid 1365] <... futex resumed>) = 0 [pid 1369] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1365] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1365] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1365] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1378]}, 88) = 1378 [pid 1365] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1365] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1365] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1363] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 300] <... umount2 resumed>) = 0 [pid 299] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./42/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./42/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] getdents64(4, [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 300] newfstatat(AT_FDCWD, "./40/file1", [pid 299] getdents64(4, [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 300] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] close(4 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... close resumed>) = 0 [pid 300] openat(AT_FDCWD, "./40/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 299] rmdir("./42/file1" [pid 300] <... openat resumed>) = 4 [pid 299] <... rmdir resumed>) = 0 [pid 300] newfstatat(4, "", [pid 299] getdents64(3, [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 300] getdents64(4, [pid 299] close(3 [pid 300] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 299] <... close resumed>) = 0 [pid 300] getdents64(4, [pid 299] rmdir("./42" [pid 300] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 300] close(4 [pid 299] mkdir("./43", 0777 [pid 300] <... close resumed>) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 300] rmdir("./40/file1" [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 300] <... rmdir resumed>) = 0 [pid 299] <... openat resumed>) = 3 [pid 300] getdents64(3, [pid 299] ioctl(3, LOOP_CLR_FD [pid 300] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 300] close(3 [pid 299] close(3 [pid 300] <... close resumed>) = 0 [pid 299] <... close resumed>) = 0 ./strace-static-x86_64: Process 1378 attached [pid 1367] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 300] rmdir("./40" [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1378] set_robust_list(0x7f13c8cc39a0, 24 [pid 1373] <... mount resumed>) = 0 [pid 1378] <... set_robust_list resumed>) = 0 [pid 1373] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1378] rt_sigprocmask(SIG_SETMASK, [], [pid 1373] <... openat resumed>) = 3 [pid 1378] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1373] chdir("./file1" [pid 1372] <... futex resumed>) = ? [pid 300] <... rmdir resumed>) = 0 [pid 1378] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1373] <... chdir resumed>) = 0 [pid 1372] +++ killed by SIGBUS +++ [pid 1378] <... mmap resumed>) = 0x20000000 [pid 1378] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1378] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1379 attached [pid 1379] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1379] chdir("./43") = 0 [pid 1379] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1379] setpgid(0, 0) = 0 [pid 1379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1379] write(3, "1000", 4) = 4 [pid 1379] close(3) = 0 [pid 1379] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1379] write(1, "executing program\n", 18executing program ) = 18 [pid 1379] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1379] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1379] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1379] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1379] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1379] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1379] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1380]}, 88) = 1380 [pid 1373] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1365] <... futex resumed>) = 0 [pid 300] mkdir("./41", 0777 [pid 299] <... clone resumed>, child_tidptr=0x55558909e690) = 1379 [pid 1373] <... openat resumed>) = 4 [pid 1365] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1373] ioctl(4, LOOP_CLR_FD [pid 1369] <... futex resumed>) = 0 [pid 1365] <... futex resumed>) = 1 [pid 1373] <... ioctl resumed>) = 0 [pid 1369] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1365] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1373] close(4 [pid 1369] <... open resumed>) = -1 EFAULT (Bad address) [pid 1373] <... close resumed>) = 0 [pid 1369] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1373] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1369] <... futex resumed>) = 1 [pid 1365] <... futex resumed>) = 0 [pid 1373] <... futex resumed>) = 1 [pid 1371] <... futex resumed>) = 0 [pid 1369] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1365] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1373] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1371] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1365] <... futex resumed>) = 0 [pid 300] <... mkdir resumed>) = 0 [pid 1373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1371] <... futex resumed>) = 0 [pid 1379] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 48.473956][ T1367] EXT4-fs (loop4): Total free blocks count 0 [ 48.480907][ T1367] EXT4-fs (loop4): Free/Dirty block details [ 48.486872][ T1367] EXT4-fs (loop4): free_blocks=2415919504 [ 48.492506][ T1367] EXT4-fs (loop4): dirty_blocks=32 [ 48.497769][ T1367] EXT4-fs (loop4): Block reservation details [ 48.503952][ T1367] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 48.515313][ T1367] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 1379] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1379] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1380 attached [pid 1380] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1380] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1380] memfd_create("syzkaller", 0) = 3 [pid 1380] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1380] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1380] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1380] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1380] ioctl(4, LOOP_SET_FD, 3 [pid 1373] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1371] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1365] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1373] <... open resumed>) = 4 [pid 1373] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... openat resumed>) = 3 [pid 1373] <... futex resumed>) = 1 [pid 1371] <... futex resumed>) = 0 [pid 300] ioctl(3, LOOP_CLR_FD [pid 1380] <... ioctl resumed>) = 0 [pid 1373] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1371] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1380] close(3) = 0 [pid 1380] close(4) = 0 [pid 1380] mkdir("./file1", 0777) = 0 [pid 1380] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 1373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1371] <... futex resumed>) = 0 [pid 300] close(3 [pid 1373] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1371] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... close resumed>) = 0 [pid 1373] <... open resumed>) = 5 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1373] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1367] +++ killed by SIGBUS +++ [pid 1363] +++ killed by SIGBUS +++ [pid 1373] <... futex resumed>) = 1 [pid 1371] <... futex resumed>) = 0 [pid 1373] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1371] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1363, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11} --- [pid 300] <... clone resumed>, child_tidptr=0x55558909e690) = 1381 [pid 1373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1371] <... futex resumed>) = 0 [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 1373] creat("./bus", 000 [pid 1371] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1373] <... creat resumed>) = 6 [pid 1373] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1371] <... futex resumed>) = 0 [pid 1373] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1371] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1371] <... futex resumed>) = 0 [pid 1373] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1371] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1373] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1373] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1371] <... futex resumed>) = 0 [pid 1373] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1371] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1371] <... futex resumed>) = 0 [pid 1373] pwrite64(6, "+", 1, 0 [pid 1371] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1373] <... pwrite64 resumed>) = 1 [pid 1373] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1371] <... futex resumed>) = 0 [pid 1373] open("./bus", O_RDONLY [pid 1371] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1373] <... open resumed>) = 7 [pid 1371] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1381 attached [pid 1381] set_robust_list(0x55558909e6a0, 24 [pid 1373] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1371] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1373] <... futex resumed>) = 0 [pid 1371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1373] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1371] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1371] <... futex resumed>) = 0 [pid 1373] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1371] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1381] <... set_robust_list resumed>) = 0 [pid 1373] <... copy_file_range resumed>) = 1 [pid 1371] <... futex resumed>) = 0 [pid 1373] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1371] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1373] <... futex resumed>) = 0 [pid 1373] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1371] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1371] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1371] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1371] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1382]}, 88) = 1382 [pid 1371] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1371] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1371] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1381] chdir("./41") = 0 [pid 1381] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1381] setpgid(0, 0) = 0 [pid 301] <... restart_syscall resumed>) = 0 [pid 1381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 301] umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./40/binderfs") = 0 ./strace-static-x86_64: Process 1382 attached [ 48.530187][ T1369] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 48.544106][ T1380] loop2: detected capacity change from 0 to 2048 [ 48.554918][ T1369] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 48.558647][ T1367] EXT4-fs (loop4): This should not happen!! Data will be lost [ 48.558647][ T1367] [pid 301] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1381] <... openat resumed>) = 3 [pid 1381] write(3, "1000", 4) = 4 [pid 1381] close(3) = 0 [pid 1381] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1381] write(1, "executing program\n", 18executing program ) = 18 [pid 1381] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1381] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1381] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1381] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1381] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1381] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1381] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1383]}, 88) = 1383 [pid 1381] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1381] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1381] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1383 attached [pid 1383] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1383] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1383] memfd_create("syzkaller", 0 [pid 1382] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1382] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1382] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1383] <... memfd_create resumed>) = 3 [pid 1383] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1365] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1382] <... mmap resumed>) = 0x20000000 [pid 1382] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1371] <... futex resumed>) = 0 [pid 1382] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1371] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1383] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 301] <... umount2 resumed>) = 0 [pid 1373] <... futex resumed>) = 0 [pid 1371] <... futex resumed>) = 1 [pid 1373] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1371] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1373] <... open resumed>) = -1 EFAULT (Bad address) [pid 1373] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1373] <... futex resumed>) = 1 [pid 1371] <... futex resumed>) = 0 [pid 1371] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1383] <... write resumed>) = 1048576 [pid 1383] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1383] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1383] ioctl(4, LOOP_SET_FD, 3 [pid 1371] <... futex resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1383] <... ioctl resumed>) = 0 [pid 1383] close(3) = 0 [pid 1383] close(4) = 0 [pid 1383] mkdir("./file1", 0777) = 0 [pid 1383] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 1371] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 48.590552][ T1369] EXT4-fs (loop1): This should not happen!! Data will be lost [ 48.590552][ T1369] [ 48.612161][ T1373] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 48.614663][ T1383] loop3: detected capacity change from 0 to 2048 [ 48.630728][ T1369] EXT4-fs (loop1): Total free blocks count 0 [pid 301] newfstatat(AT_FDCWD, "./40/file1", [pid 1380] <... mount resumed>) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1380] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 301] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1380] <... openat resumed>) = 3 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1383] <... mount resumed>) = 0 [ 48.640050][ T1373] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 48.649678][ T1369] EXT4-fs (loop1): Free/Dirty block details [ 48.652678][ T1373] EXT4-fs (loop0): This should not happen!! Data will be lost [ 48.652678][ T1373] [ 48.658270][ T1369] EXT4-fs (loop1): free_blocks=2415919504 [ 48.668037][ T1373] EXT4-fs (loop0): Total free blocks count 0 [ 48.674472][ T1369] EXT4-fs (loop1): dirty_blocks=32 [ 48.679962][ T1373] EXT4-fs (loop0): Free/Dirty block details [pid 1380] chdir("./file1" [pid 301] openat(AT_FDCWD, "./40/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1383] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1380] <... chdir resumed>) = 0 [pid 1371] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1369] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 301] <... openat resumed>) = 4 [pid 1383] <... openat resumed>) = 3 [pid 1380] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 301] newfstatat(4, "", [pid 1383] chdir("./file1" [pid 1380] <... openat resumed>) = 4 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1383] <... chdir resumed>) = 0 [pid 1380] ioctl(4, LOOP_CLR_FD [pid 301] getdents64(4, [pid 1383] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1380] <... ioctl resumed>) = 0 [pid 301] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1383] <... openat resumed>) = 4 [pid 1380] close(4 [pid 301] getdents64(4, [pid 1383] ioctl(4, LOOP_CLR_FD [pid 1380] <... close resumed>) = 0 [pid 301] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1383] <... ioctl resumed>) = 0 [pid 1380] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1369] +++ killed by SIGBUS +++ [pid 301] close(4 [pid 1383] close(4 [pid 1380] <... futex resumed>) = 1 [pid 1378] <... futex resumed>) = ? [pid 301] <... close resumed>) = 0 [pid 1383] <... close resumed>) = 0 [pid 1380] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1379] <... futex resumed>) = 0 [pid 1373] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 301] rmdir("./40/file1" [pid 1383] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1382] <... futex resumed>) = ? [ 48.685411][ T1369] EXT4-fs (loop1): Block reservation details [ 48.690053][ T1373] EXT4-fs (loop0): free_blocks=2415919504 [ 48.695790][ T1369] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 48.701063][ T1373] EXT4-fs (loop0): dirty_blocks=32 [ 48.711991][ T1373] EXT4-fs (loop0): Block reservation details [ 48.718660][ T1373] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 48.726413][ T1378] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 301] <... rmdir resumed>) = 0 [pid 1383] <... futex resumed>) = 1 [pid 1382] +++ killed by SIGBUS +++ [pid 1381] <... futex resumed>) = 0 [pid 1379] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] getdents64(3, [pid 1383] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./40") = 0 [pid 301] mkdir("./41", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1388 ./strace-static-x86_64: Process 1388 attached [pid 1381] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1380] <... futex resumed>) = 0 [pid 1379] <... futex resumed>) = 1 [pid 1378] +++ killed by SIGBUS +++ [pid 1365] +++ killed by SIGBUS +++ [pid 1388] set_robust_list(0x55558909e6a0, 24 [pid 1383] <... futex resumed>) = 0 [pid 1381] <... futex resumed>) = 1 [pid 1380] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1379] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1388] <... set_robust_list resumed>) = 0 [pid 1383] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1381] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1380] <... open resumed>) = 4 [pid 1388] chdir("./41" [pid 1383] <... open resumed>) = 4 [pid 1380] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1388] <... chdir resumed>) = 0 [pid 1383] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1380] <... futex resumed>) = 1 [pid 1379] <... futex resumed>) = 0 [pid 1388] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1383] <... futex resumed>) = 1 [pid 1381] <... futex resumed>) = 0 [pid 1380] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1379] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1388] <... prctl resumed>) = 0 [pid 1383] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1381] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1380] <... open resumed>) = 5 [pid 1379] <... futex resumed>) = 0 [pid 1388] setpgid(0, 0 [pid 1383] <... open resumed>) = 5 [pid 1381] <... futex resumed>) = 0 [pid 1380] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1379] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1388] <... setpgid resumed>) = 0 [pid 1383] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1381] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1380] <... futex resumed>) = 0 [pid 1379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1388] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1383] <... futex resumed>) = 0 [pid 1381] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1380] creat("./bus", 000 [pid 1379] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1388] <... openat resumed>) = 3 [pid 1383] creat("./bus", 000 [pid 1381] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1380] <... creat resumed>) = 6 [pid 1379] <... futex resumed>) = 0 [pid 1388] write(3, "1000", 4 [pid 1383] <... creat resumed>) = 6 [pid 1381] <... futex resumed>) = 0 [pid 1380] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1379] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1388] <... write resumed>) = 4 [pid 1383] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1381] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1380] <... futex resumed>) = 0 [pid 1379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1388] close(3 [pid 1383] <... futex resumed>) = 0 [pid 1381] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1380] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1379] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1388] <... close resumed>) = 0 [pid 1383] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1381] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1380] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1379] <... futex resumed>) = 0 [pid 1388] symlink("/dev/binderfs", "./binderfs" [pid 1383] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1381] <... futex resumed>) = 0 [pid 1380] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1379] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1373] +++ killed by SIGBUS +++ [pid 1371] +++ killed by SIGBUS +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1365, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 1388] <... symlink resumed>) = 0 [pid 1383] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1381] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1380] <... futex resumed>) = 0 [pid 1379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1371, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- executing program [pid 1388] write(1, "executing program\n", 18 [pid 1383] <... futex resumed>) = 0 [pid 1381] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1380] pwrite64(6, "+", 1, 0 [pid 1379] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1388] <... write resumed>) = 18 [pid 1383] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1381] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1380] <... pwrite64 resumed>) = 1 [pid 1379] <... futex resumed>) = 0 [pid 298] umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1388] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1381] <... futex resumed>) = 0 [pid 1380] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1379] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1388] <... futex resumed>) = 0 [pid 1383] pwrite64(6, "+", 1, 0 [pid 1381] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1380] <... futex resumed>) = 0 [pid 1379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 298] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1388] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1383] <... pwrite64 resumed>) = 1 [pid 1379] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... openat resumed>) = 3 [pid 1380] open("./bus", O_RDONLY [pid 297] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1388] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1383] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1380] <... open resumed>) = 7 [pid 1379] <... futex resumed>) = 0 [pid 298] newfstatat(3, "", [pid 297] <... openat resumed>) = 3 [pid 1388] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1383] <... futex resumed>) = 1 [pid 1381] <... futex resumed>) = 0 [pid 1380] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1379] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] newfstatat(3, "", [pid 1388] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1383] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1381] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1380] <... futex resumed>) = 0 [pid 1379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 298] getdents64(3, [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1388] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1381] <... futex resumed>) = 0 [pid 1380] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1379] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] getdents64(3, [pid 1388] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1383] open("./bus", O_RDONLY [pid 1381] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1379] <... futex resumed>) = 0 [pid 298] umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1388] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1383] <... open resumed>) = 7 [pid 1380] <... copy_file_range resumed>) = 1 [pid 1379] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1388] <... mprotect resumed>) = 0 [pid 1379] <... futex resumed>) = 0 [pid 298] newfstatat(AT_FDCWD, "./42/binderfs", [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1383] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1380] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1379] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1388] rt_sigprocmask(SIG_BLOCK, ~[], [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] newfstatat(AT_FDCWD, "./41/binderfs", [pid 1388] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1383] <... futex resumed>) = 1 [pid 1381] <... futex resumed>) = 0 [pid 1380] <... futex resumed>) = 0 [pid 1379] <... mmap resumed>) = 0x7f13c8ca3000 [pid 298] unlink("./42/binderfs" [pid 297] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1388] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1383] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1381] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1380] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1379] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 298] <... unlink resumed>) = 0 [pid 297] unlink("./41/binderfs" [pid 1381] <... futex resumed>) = 0 [pid 298] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] <... unlink resumed>) = 0 [pid 1388] <... clone3 resumed> => {parent_tid=[1389]}, 88) = 1389 [pid 1383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1381] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1379] <... mprotect resumed>) = 0 [pid 297] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 1389 attached [pid 1388] rt_sigprocmask(SIG_SETMASK, [], [pid 1383] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1381] <... futex resumed>) = 0 [pid 1379] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1389] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1389] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1388] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1389] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1388] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1383] <... copy_file_range resumed>) = 1 [pid 1381] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1379] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1388] <... futex resumed>) = 1 [pid 298] <... umount2 resumed>) = 0 [pid 1388] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1383] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1381] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1379] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 298] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1383] <... futex resumed>) = 0 [pid 1381] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1383] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1381] <... mprotect resumed>) = 0 [pid 1379] <... clone3 resumed> => {parent_tid=[1390]}, 88) = 1390 [pid 298] newfstatat(AT_FDCWD, "./42/file1", [pid 1381] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1379] rt_sigprocmask(SIG_SETMASK, [], [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./42/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./42/file1") = 0 [pid 298] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./42" [pid 1381] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1379] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 298] <... rmdir resumed>) = 0 [pid 297] <... umount2 resumed>) = 0 [pid 298] mkdir("./43", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1391 [pid 1381] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1379] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1381] <... clone3 resumed> => {parent_tid=[1392]}, 88) = 1392 [pid 1379] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1381] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 297] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1381] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1381] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] newfstatat(AT_FDCWD, "./41/file1", ./strace-static-x86_64: Process 1392 attached ./strace-static-x86_64: Process 1390 attached ./strace-static-x86_64: Process 1391 attached [pid 1389] <... futex resumed>) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1392] set_robust_list(0x7f13c8cc39a0, 24 [pid 1390] set_robust_list(0x7f13c8cc39a0, 24 [pid 1391] set_robust_list(0x55558909e6a0, 24 [pid 1390] <... set_robust_list resumed>) = 0 [pid 1389] memfd_create("syzkaller", 0 [pid 1392] <... set_robust_list resumed>) = 0 [pid 297] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1391] <... set_robust_list resumed>) = 0 [pid 1391] chdir("./43" [pid 1390] rt_sigprocmask(SIG_SETMASK, [], executing program [pid 1389] <... memfd_create resumed>) = 3 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1390] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 297] openat(AT_FDCWD, "./41/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1391] <... chdir resumed>) = 0 [pid 1391] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1389] <... mmap resumed>) = 0x7f13c08c4000 [pid 1391] <... prctl resumed>) = 0 [pid 297] <... openat resumed>) = 4 [pid 1391] setpgid(0, 0) = 0 [pid 1391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1391] write(3, "1000", 4) = 4 [pid 1391] close(3) = 0 [pid 1391] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1391] write(1, "executing program\n", 18) = 18 [pid 1391] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1391] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1391] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1391] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1391] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1391] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1391] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1393]}, 88) = 1393 [pid 1391] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1391] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 297] newfstatat(4, "", [pid 1391] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, [pid 1390] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 297] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1393] set_robust_list(0x7f13c8ce49a0, 24 [pid 297] getdents64(4, [pid 1393] <... set_robust_list resumed>) = 0 [pid 297] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1393] rt_sigprocmask(SIG_SETMASK, [], [pid 297] close(4 [pid 1393] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 297] <... close resumed>) = 0 [pid 297] rmdir("./41/file1" [pid 1393] memfd_create("syzkaller", 0) = 3 [pid 1393] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 297] <... rmdir resumed>) = 0 [pid 297] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./41" [pid 1393] <... mmap resumed>) = 0x7f13c08c4000 [pid 297] <... rmdir resumed>) = 0 [pid 297] mkdir("./42", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3 [pid 1390] <... mmap resumed>) = 0x20000000 [pid 297] <... close resumed>) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1394 [pid 1393] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1389] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1392] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1390] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1392] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1394] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1394] chdir("./42") = 0 [pid 1394] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1394] setpgid(0, 0) = 0 [pid 1392] <... mmap resumed>) = 0x20000000 [ 48.727862][ T1373] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 48.739300][ T1378] EXT4-fs (loop1): This should not happen!! Data will be lost [ 48.739300][ T1378] [ 48.754552][ T1373] EXT4-fs (loop0): This should not happen!! Data will be lost [ 48.754552][ T1373] [pid 1390] <... futex resumed>) = 1 [pid 1379] <... futex resumed>) = 0 [pid 1379] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1390] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1380] <... futex resumed>) = 0 [pid 1379] <... futex resumed>) = 1 [pid 1380] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1379] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1380] <... open resumed>) = -1 EFAULT (Bad address) [pid 1380] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1379] <... futex resumed>) = 0 [pid 1380] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1379] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1379] <... futex resumed>) = 0 [pid 1394] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1394] write(3, "1000", 4) = 4 [pid 1394] close(3) = 0 [pid 1394] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1393] <... write resumed>) = 1048576 [pid 1394] write(1, "executing program\n", 18) = 18 [pid 1394] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1394] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1394] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1394] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1394] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1394] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1394] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1395]}, 88) = 1395 [pid 1394] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1394] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1394] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1393] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1393] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1393] ioctl(4, LOOP_SET_FD, 3executing program ./strace-static-x86_64: Process 1395 attached [pid 1392] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1389] <... write resumed>) = 1048576 [pid 1379] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1393] <... ioctl resumed>) = 0 [pid 1393] close(3) = 0 [pid 1393] close(4) = 0 [pid 1393] mkdir("./file1", 0777) = 0 [pid 1393] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 1395] set_robust_list(0x7f13c8ce49a0, 24 [pid 1392] <... futex resumed>) = 1 [pid 1389] munmap(0x7f13c08c4000, 138412032 [pid 1395] <... set_robust_list resumed>) = 0 [pid 1392] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1389] <... munmap resumed>) = 0 [pid 1381] <... futex resumed>) = 0 [pid 1395] rt_sigprocmask(SIG_SETMASK, [], [pid 1381] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1395] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1389] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1383] <... futex resumed>) = 0 [pid 1381] <... futex resumed>) = 1 [pid 1395] memfd_create("syzkaller", 0 [pid 1389] <... openat resumed>) = 4 [pid 1383] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1381] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1395] <... memfd_create resumed>) = 3 [pid 1389] ioctl(4, LOOP_SET_FD, 3 [pid 1383] <... open resumed>) = -1 EFAULT (Bad address) [pid 1395] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 48.815114][ T1380] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 48.820074][ T1393] loop1: detected capacity change from 0 to 2048 [ 48.834395][ T1380] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 48.849087][ T1380] EXT4-fs (loop2): This should not happen!! Data will be lost [ 48.849087][ T1380] [ 48.855345][ T1389] loop4: detected capacity change from 0 to 2048 [pid 1383] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1395] <... mmap resumed>) = 0x7f13c08c4000 [pid 1389] <... ioctl resumed>) = 0 [pid 1383] <... futex resumed>) = 1 [pid 1381] <... futex resumed>) = 0 [pid 1383] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1381] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1381] <... futex resumed>) = 0 [pid 1393] <... mount resumed>) = 0 [pid 1381] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1395] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1389] close(3) = 0 [pid 1389] close(4 [pid 1393] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1379] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1393] <... openat resumed>) = 3 [pid 1389] <... close resumed>) = 0 [pid 1389] mkdir("./file1", 0777 [pid 1393] chdir("./file1") = 0 [pid 1389] <... mkdir resumed>) = 0 [pid 1393] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1380] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1393] <... openat resumed>) = 4 [pid 1393] ioctl(4, LOOP_CLR_FD [pid 1390] <... futex resumed>) = ? [ 48.859678][ T1380] EXT4-fs (loop2): Total free blocks count 0 [ 48.870920][ T1380] EXT4-fs (loop2): Free/Dirty block details [ 48.873122][ T1383] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 48.878084][ T1380] EXT4-fs (loop2): free_blocks=2415919504 [ 48.897354][ T1380] EXT4-fs (loop2): dirty_blocks=32 [ 48.902703][ T1380] EXT4-fs (loop2): Block reservation details [ 48.908520][ T1380] EXT4-fs (loop2): i_reserved_data_blocks=2 [pid 1393] <... ioctl resumed>) = 0 [pid 1390] +++ killed by SIGBUS +++ [pid 1389] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 1381] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1393] close(4 [pid 1395] <... write resumed>) = 1048576 [pid 1393] <... close resumed>) = 0 [pid 1393] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1393] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1391] <... futex resumed>) = 0 [pid 1391] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1393] <... futex resumed>) = 0 [pid 1391] <... futex resumed>) = 1 [pid 1393] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 1393] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1393] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1395] munmap(0x7f13c08c4000, 138412032 [pid 1391] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1395] <... munmap resumed>) = 0 [ 48.915532][ T1383] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 48.916870][ T1380] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 48.927931][ T1383] EXT4-fs (loop3): This should not happen!! Data will be lost [ 48.927931][ T1383] [ 48.949826][ T1383] EXT4-fs (loop3): Total free blocks count 0 [ 48.956334][ T1383] EXT4-fs (loop3): Free/Dirty block details [pid 1391] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1395] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1395] ioctl(4, LOOP_SET_FD, 3 [pid 1391] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1395] <... ioctl resumed>) = 0 [pid 1393] <... futex resumed>) = 0 [pid 1391] <... futex resumed>) = 1 [pid 1380] +++ killed by SIGBUS +++ [pid 1379] +++ killed by SIGBUS +++ [pid 1393] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1391] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1393] <... open resumed>) = 5 [pid 1393] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1391] <... futex resumed>) = 0 [pid 1393] creat("./bus", 000 [pid 1391] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1393] <... creat resumed>) = 6 [pid 1391] <... futex resumed>) = 0 [pid 1393] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1391] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1393] <... futex resumed>) = 0 [pid 1391] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1393] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1391] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1393] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1391] <... futex resumed>) = 0 [pid 1393] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1391] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1393] <... futex resumed>) = 0 [pid 1391] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1393] pwrite64(6, "+", 1, 0 [pid 1391] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1393] <... pwrite64 resumed>) = 1 [pid 1391] <... futex resumed>) = 0 [pid 1393] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1391] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1393] <... futex resumed>) = 0 [pid 1391] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1393] open("./bus", O_RDONLY [pid 1391] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1393] <... open resumed>) = 7 [pid 1391] <... futex resumed>) = 0 [pid 1393] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1391] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1393] <... futex resumed>) = 0 [pid 1391] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1393] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1391] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1393] <... copy_file_range resumed>) = 1 [pid 1391] <... futex resumed>) = 0 [pid 1393] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1391] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1393] <... futex resumed>) = 0 [pid 1391] <... futex resumed>) = 0 [pid 1393] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1391] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1391] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1391] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1391] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1399]}, 88) = 1399 [pid 1391] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1391] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1391] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1395] close(3) = 0 [pid 1395] close(4) = 0 [pid 1395] mkdir("./file1", 0777) = 0 [pid 1395] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1379, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- ./strace-static-x86_64: Process 1399 attached [pid 1383] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1389] <... mount resumed>) = 0 [pid 1389] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1389] chdir("./file1") = 0 [pid 1389] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1389] ioctl(4, LOOP_CLR_FD) = 0 [pid 1389] close(4) = 0 [pid 1389] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1389] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1399] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1399] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 48.962095][ T1383] EXT4-fs (loop3): free_blocks=2415919504 [ 48.967694][ T1383] EXT4-fs (loop3): dirty_blocks=32 [ 48.970172][ T1395] loop0: detected capacity change from 0 to 2048 [ 48.972632][ T1380] EXT4-fs (loop2): This should not happen!! Data will be lost [ 48.972632][ T1380] [ 48.980206][ T1383] EXT4-fs (loop3): Block reservation details [ 48.995674][ T1383] EXT4-fs (loop3): i_reserved_data_blocks=2 [pid 1399] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = ? [pid 1388] <... futex resumed>) = 0 [pid 1392] +++ killed by SIGBUS +++ [pid 1399] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1388] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1391] <... futex resumed>) = 0 [pid 1388] <... futex resumed>) = 1 [pid 1391] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1393] <... futex resumed>) = 0 [pid 1391] <... futex resumed>) = 1 [pid 1393] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1391] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1393] <... open resumed>) = -1 EFAULT (Bad address) [pid 1393] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1391] <... futex resumed>) = 0 [pid 1391] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1391] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1399] <... futex resumed>) = 1 [pid 1399] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1389] <... futex resumed>) = 0 [pid 1388] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1395] <... mount resumed>) = 0 [pid 1389] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1383] +++ killed by SIGBUS +++ [pid 1381] +++ killed by SIGBUS +++ [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 49.015865][ T1393] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 49.016046][ T1383] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 49.031169][ T1393] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 49.045263][ T1383] EXT4-fs (loop3): This should not happen!! Data will be lost [ 49.045263][ T1383] [pid 1395] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1389] <... open resumed>) = 4 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1381, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=17} --- [pid 299] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1395] <... openat resumed>) = 3 [pid 1389] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... openat resumed>) = 3 [pid 1395] chdir("./file1" [pid 1389] <... futex resumed>) = 1 [pid 1388] <... futex resumed>) = 0 [pid 299] newfstatat(3, "", [pid 1395] <... chdir resumed>) = 0 [pid 1389] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1388] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1395] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1389] <... open resumed>) = 5 [pid 1388] <... futex resumed>) = 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] getdents64(3, [pid 1395] <... openat resumed>) = 4 [pid 1389] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1388] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 299] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1395] ioctl(4, LOOP_CLR_FD [pid 1389] <... futex resumed>) = 0 [pid 1388] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] <... openat resumed>) = 3 [pid 299] umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1395] <... ioctl resumed>) = 0 [pid 1389] creat("./bus", 000 [pid 1388] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] newfstatat(3, "", [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1395] close(4 [pid 1389] <... creat resumed>) = 6 [pid 1388] <... futex resumed>) = 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] newfstatat(AT_FDCWD, "./43/binderfs", [pid 1395] <... close resumed>) = 0 [pid 1389] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1388] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] getdents64(3, [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1395] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1389] <... futex resumed>) = 0 [pid 1388] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] unlink("./43/binderfs" [pid 1395] <... futex resumed>) = 1 [pid 1394] <... futex resumed>) = 0 [pid 1389] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1388] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... unlink resumed>) = 0 [pid 1395] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1394] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1389] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1388] <... futex resumed>) = 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1394] <... futex resumed>) = 0 [pid 1389] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1388] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] newfstatat(AT_FDCWD, "./41/binderfs", [pid 1395] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1394] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1391] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1389] <... futex resumed>) = 0 [pid 1388] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1395] <... open resumed>) = 4 [pid 1389] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1388] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] unlink("./41/binderfs" [pid 1395] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1389] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1388] <... futex resumed>) = 0 [pid 300] <... unlink resumed>) = 0 [pid 1395] <... futex resumed>) = 1 [pid 1394] <... futex resumed>) = 0 [pid 1389] pwrite64(6, "+", 1, 0 [pid 1388] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1395] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1394] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1389] <... pwrite64 resumed>) = 1 [pid 1395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1394] <... futex resumed>) = 0 [pid 1389] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1395] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1394] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1389] <... futex resumed>) = 1 [pid 1388] <... futex resumed>) = 0 [pid 1395] <... open resumed>) = 5 [pid 1389] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1388] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1395] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1389] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1388] <... futex resumed>) = 0 [pid 1395] <... futex resumed>) = 1 [pid 1394] <... futex resumed>) = 0 [pid 1389] open("./bus", O_RDONLY [pid 1388] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1395] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1394] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1389] <... open resumed>) = 7 [pid 1395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1394] <... futex resumed>) = 0 [pid 1389] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1395] creat("./bus", 000 [pid 1394] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1389] <... futex resumed>) = 1 [pid 1388] <... futex resumed>) = 0 [pid 1395] <... creat resumed>) = 6 [pid 1389] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1388] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1395] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1389] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1388] <... futex resumed>) = 0 [pid 1395] <... futex resumed>) = 1 [pid 1394] <... futex resumed>) = 0 [pid 1389] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1388] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1395] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1394] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1389] <... copy_file_range resumed>) = 1 [pid 1388] <... futex resumed>) = 0 [pid 1395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1394] <... futex resumed>) = 0 [pid 1389] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1388] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1395] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1394] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1389] <... futex resumed>) = 0 [pid 1388] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1395] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1393] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1399] <... futex resumed>) = ? [ 49.056224][ T1393] EXT4-fs (loop1): This should not happen!! Data will be lost [ 49.056224][ T1393] [ 49.073722][ T1393] EXT4-fs (loop1): Total free blocks count 0 [ 49.079699][ T1393] EXT4-fs (loop1): Free/Dirty block details [ 49.085412][ T1393] EXT4-fs (loop1): free_blocks=2415919504 [ 49.090915][ T1393] EXT4-fs (loop1): dirty_blocks=32 [ 49.095935][ T1393] EXT4-fs (loop1): Block reservation details [ 49.101915][ T1393] EXT4-fs (loop1): i_reserved_data_blocks=2 [pid 1395] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1389] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1388] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1399] +++ killed by SIGBUS +++ [pid 1395] <... futex resumed>) = 1 [pid 1394] <... futex resumed>) = 0 [pid 1388] <... mprotect resumed>) = 0 [pid 300] <... umount2 resumed>) = 0 [pid 299] <... umount2 resumed>) = 0 [pid 1395] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1394] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1388] rt_sigprocmask(SIG_BLOCK, ~[], [pid 300] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1394] <... futex resumed>) = 0 [pid 1388] <... rt_sigprocmask resumed>[], 8) = 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1395] pwrite64(6, "+", 1, 0 [pid 1394] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1388] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 300] newfstatat(AT_FDCWD, "./41/file1", [pid 1395] <... pwrite64 resumed>) = 1 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1395] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1388] <... clone3 resumed> => {parent_tid=[1404]}, 88) = 1404 [pid 1395] <... futex resumed>) = 1 [pid 1394] <... futex resumed>) = 0 [pid 1388] rt_sigprocmask(SIG_SETMASK, [], [pid 300] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1395] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1394] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1388] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1394] <... futex resumed>) = 0 [pid 1388] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] openat(AT_FDCWD, "./41/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1395] open("./bus", O_RDONLY [pid 1394] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1388] <... futex resumed>) = 0 [pid 300] <... openat resumed>) = 4 [pid 1395] <... open resumed>) = 7 [pid 1388] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] newfstatat(4, "", [pid 1395] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1395] <... futex resumed>) = 1 [pid 1394] <... futex resumed>) = 0 [pid 300] getdents64(4, [pid 1395] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1394] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1394] <... futex resumed>) = 0 [pid 300] getdents64(4, [pid 1395] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1394] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 299] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1395] <... copy_file_range resumed>) = 1 [pid 1394] <... futex resumed>) = 0 [pid 300] close(4 [pid 1395] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1394] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 300] <... close resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1395] <... futex resumed>) = 0 [pid 1394] <... mmap resumed>) = 0x7f13c8ca3000 [pid 300] rmdir("./41/file1" [pid 1395] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1394] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 300] <... rmdir resumed>) = 0 [pid 299] newfstatat(AT_FDCWD, "./43/file1", [pid 1394] <... mprotect resumed>) = 0 [pid 300] getdents64(3, [pid 1394] rt_sigprocmask(SIG_BLOCK, ~[], [pid 300] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 1404 attached [pid 1394] <... rt_sigprocmask resumed>[], 8) = 0 [pid 300] close(3 [pid 1404] set_robust_list(0x7f13c8cc39a0, 24 [pid 1394] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 300] <... close resumed>) = 0 [pid 299] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1404] <... set_robust_list resumed>) = 0 [pid 1393] +++ killed by SIGBUS +++ [pid 1391] +++ killed by SIGBUS +++ [pid 1394] <... clone3 resumed> => {parent_tid=[1405]}, 88) = 1405 [pid 300] rmdir("./41" [pid 1404] rt_sigprocmask(SIG_SETMASK, [], [pid 1394] rt_sigprocmask(SIG_SETMASK, [], [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1391, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 1404] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1394] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 300] <... rmdir resumed>) = 0 [pid 1404] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1394] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] openat(AT_FDCWD, "./43/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 1394] <... futex resumed>) = 0 [pid 300] mkdir("./42", 0777 [pid 298] <... restart_syscall resumed>) = 0 [pid 1394] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... openat resumed>) = 4 ./strace-static-x86_64: Process 1405 attached [pid 1405] set_robust_list(0x7f13c8cc39a0, 24 [pid 298] umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1405] <... set_robust_list resumed>) = 0 [pid 300] <... mkdir resumed>) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 299] newfstatat(4, "", [pid 300] <... openat resumed>) = 3 [pid 298] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 300] ioctl(3, LOOP_CLR_FD [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 298] <... openat resumed>) = 3 [pid 1405] rt_sigprocmask(SIG_SETMASK, [], [pid 300] close(3 [pid 299] getdents64(4, [pid 298] newfstatat(3, "", [pid 1405] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 300] <... close resumed>) = 0 [pid 299] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1405] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1404] <... mmap resumed>) = 0x20000000 [pid 299] getdents64(4, ./strace-static-x86_64: Process 1406 attached 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 298] getdents64(3, [pid 1406] set_robust_list(0x55558909e6a0, 24 [pid 300] <... clone resumed>, child_tidptr=0x55558909e690) = 1406 [pid 299] close(4 [pid 298] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1406] <... set_robust_list resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 298] umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1406] chdir("./42" [pid 1405] <... mmap resumed>) = 0x20000000 [pid 299] rmdir("./43/file1" [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1405] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1404] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1406] <... chdir resumed>) = 0 [pid 1405] <... futex resumed>) = 1 [pid 1394] <... futex resumed>) = 0 [pid 1404] <... futex resumed>) = 1 [pid 1388] <... futex resumed>) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 298] newfstatat(AT_FDCWD, "./43/binderfs", [pid 1406] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1394] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1388] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] getdents64(3, [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1406] <... prctl resumed>) = 0 [pid 1405] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1404] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1395] <... futex resumed>) = 0 [pid 1394] <... futex resumed>) = 1 [pid 1389] <... futex resumed>) = 0 [pid 1388] <... futex resumed>) = 1 [pid 1395] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1394] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1389] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1388] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 298] unlink("./43/binderfs" [pid 1395] <... open resumed>) = -1 EFAULT (Bad address) [pid 1389] <... open resumed>) = -1 EFAULT (Bad address) [pid 299] close(3 [pid 1406] setpgid(0, 0) = 0 [pid 298] <... unlink resumed>) = 0 [pid 1395] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1389] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1395] <... futex resumed>) = 1 [pid 1394] <... futex resumed>) = 0 [pid 1389] <... futex resumed>) = 1 [pid 1388] <... futex resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 298] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1395] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1394] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1389] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1388] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] rmdir("./43" [pid 1406] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1406] <... openat resumed>) = 3 [pid 1394] <... futex resumed>) = 0 [pid 1389] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1388] <... futex resumed>) = 0 [pid 1406] write(3, "1000", 4 [pid 299] <... rmdir resumed>) = 0 [pid 1406] <... write resumed>) = 4 [pid 1406] close(3) = 0 [pid 1406] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 1406] write(1, "executing program\n", 18) = 18 [pid 1406] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1406] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1406] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1406] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1406] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1406] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1406] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1407]}, 88) = 1407 [pid 1406] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1406] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1406] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 49.110475][ T1393] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 49.123047][ T1393] EXT4-fs (loop1): This should not happen!! Data will be lost [ 49.123047][ T1393] [ 49.149370][ T1395] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 1394] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1407 attached [pid 1388] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 49.154656][ T1389] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 49.166757][ T1395] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 49.178606][ T1389] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 49.190959][ T1395] EXT4-fs (loop0): This should not happen!! Data will be lost [ 49.190959][ T1395] [pid 299] mkdir("./44", 0777 [pid 1407] set_robust_list(0x7f13c8ce49a0, 24 [pid 1394] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1407] <... set_robust_list resumed>) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 1407] rt_sigprocmask(SIG_SETMASK, [], [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1407] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 299] <... openat resumed>) = 3 [pid 1407] memfd_create("syzkaller", 0 [pid 299] ioctl(3, LOOP_CLR_FD [pid 1407] <... memfd_create resumed>) = 3 [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1407] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 299] close(3 [pid 1407] <... mmap resumed>) = 0x7f13c08c4000 [pid 299] <... close resumed>) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1407] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 1408 attached [pid 1408] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1408] chdir("./44") = 0 [pid 1408] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1408] setpgid(0, 0) = 0 [pid 1408] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1408] write(3, "1000", 4) = 4 [pid 1408] close(3) = 0 [pid 1408] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1408] write(1, "executing program\n", 18executing program ) = 18 [pid 1408] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1408] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 299] <... clone resumed>, child_tidptr=0x55558909e690) = 1408 [pid 1408] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1408] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1408] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1408] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1408] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1408] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1409]}, 88) = 1409 [pid 1408] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1408] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1408] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1407] <... write resumed>) = 1048576 [pid 298] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 1409 attached [pid 1409] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1409] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1409] memfd_create("syzkaller", 0) = 3 [pid 1409] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [ 49.203444][ T1389] EXT4-fs (loop4): This should not happen!! Data will be lost [ 49.203444][ T1389] [ 49.221764][ T1395] EXT4-fs (loop0): Total free blocks count 0 [ 49.222513][ T1389] EXT4-fs (loop4): Total free blocks count 0 [ 49.235178][ T1389] EXT4-fs (loop4): Free/Dirty block details [ 49.241280][ T1389] EXT4-fs (loop4): free_blocks=2415919504 [ 49.255929][ T1389] EXT4-fs (loop4): dirty_blocks=32 [ 49.259944][ T1395] EXT4-fs (loop0): Free/Dirty block details [pid 1407] munmap(0x7f13c08c4000, 138412032 [pid 298] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1388] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1409] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1407] <... munmap resumed>) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1407] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 298] newfstatat(AT_FDCWD, "./43/file1", [pid 1409] <... write resumed>) = 1048576 [pid 1409] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1409] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1409] ioctl(4, LOOP_SET_FD, 3 [pid 1407] <... openat resumed>) = 4 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1407] ioctl(4, LOOP_SET_FD, 3 [pid 298] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1409] <... ioctl resumed>) = 0 [pid 1409] close(3) = 0 [pid 1409] close(4) = 0 [pid 1409] mkdir("./file1", 0777) = 0 [pid 1409] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 1389] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1404] <... futex resumed>) = ? [pid 1404] +++ killed by SIGBUS +++ [ 49.266081][ T1389] EXT4-fs (loop4): Block reservation details [ 49.267024][ T1395] EXT4-fs (loop0): free_blocks=2415919504 [ 49.278919][ T1395] EXT4-fs (loop0): dirty_blocks=32 [ 49.283144][ T1409] loop2: detected capacity change from 0 to 2048 [ 49.284699][ T1395] EXT4-fs (loop0): Block reservation details [ 49.291415][ T1389] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 49.296261][ T1395] EXT4-fs (loop0): i_reserved_data_blocks=2 [pid 1407] <... ioctl resumed>) = 0 [pid 1395] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./43/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./43/file1") = 0 [pid 298] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 298] close(3 [pid 1405] <... futex resumed>) = ? [pid 298] <... close resumed>) = 0 [pid 1389] +++ killed by SIGBUS +++ [pid 1388] +++ killed by SIGBUS +++ [pid 1395] +++ killed by SIGBUS +++ [pid 298] rmdir("./43") = 0 [pid 298] mkdir("./44", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1410 [pid 1407] close(3) = 0 [pid 1407] close(4./strace-static-x86_64: Process 1410 attached [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1388, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 1407] <... close resumed>) = 0 [pid 1407] mkdir("./file1", 0777) = 0 [pid 1407] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 1405] +++ killed by SIGBUS +++ [pid 1394] +++ killed by SIGBUS +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1394, si_uid=0, si_status=SIGBUS, si_utime=1, si_stime=12} --- [pid 297] restart_syscall(<... resuming interrupted clone ...> [pid 1410] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1410] chdir("./44" [pid 301] umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1410] <... chdir resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1410] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 301] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1410] setpgid(0, 0) = 0 [pid 1410] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 301] <... openat resumed>) = 3 [pid 1410] <... openat resumed>) = 3 [pid 301] newfstatat(3, "", [pid 1410] write(3, "1000", 4 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1410] <... write resumed>) = 4 [pid 301] getdents64(3, [pid 1410] close(3) = 0 [pid 301] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1410] symlink("/dev/binderfs", "./binderfs") = 0 [pid 301] umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) executing program [pid 1410] write(1, "executing program\n", 18 [pid 301] newfstatat(AT_FDCWD, "./41/binderfs", [pid 1410] <... write resumed>) = 18 [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1410] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1410] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1410] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1410] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1410] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1410] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1410] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1413]}, 88) = 1413 [pid 1410] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1410] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1410] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 301] unlink("./41/binderfs") = 0 [pid 301] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 1413 attached [pid 1413] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1409] <... mount resumed>) = 0 [pid 1413] rt_sigprocmask(SIG_SETMASK, [], [pid 1409] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1413] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1409] chdir("./file1") = 0 [pid 1409] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1413] memfd_create("syzkaller", 0 [pid 1409] <... openat resumed>) = 4 [pid 1409] ioctl(4, LOOP_CLR_FD) = 0 [pid 1409] close(4) = 0 [pid 1409] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1408] <... futex resumed>) = 0 [pid 1408] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1408] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1409] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1413] <... memfd_create resumed>) = 3 [pid 1413] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 297] <... restart_syscall resumed>) = 0 [pid 1409] <... open resumed>) = 4 [pid 297] umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1409] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1409] <... futex resumed>) = 1 [pid 1408] <... futex resumed>) = 0 [pid 297] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1409] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1408] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1409] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 297] <... openat resumed>) = 3 [pid 1408] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1409] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1409] <... open resumed>) = 5 [pid 297] getdents64(3, [pid 1409] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1409] <... futex resumed>) = 1 [pid 1408] <... futex resumed>) = 0 [pid 1408] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1408] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1409] creat("./bus", 000 [pid 297] umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1409] <... creat resumed>) = 6 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1413] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1409] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1409] <... futex resumed>) = 1 [pid 1408] <... futex resumed>) = 0 [pid 1408] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1408] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1413] <... write resumed>) = 1048576 [pid 1409] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1407] <... mount resumed>) = 0 [pid 297] unlink("./42/binderfs" [pid 1409] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1409] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... umount2 resumed>) = 0 [pid 297] <... unlink resumed>) = 0 [pid 1409] <... futex resumed>) = 1 [pid 1408] <... futex resumed>) = 0 [pid 1408] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1408] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1407] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1407] chdir("./file1") = 0 [pid 1407] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1407] ioctl(4, LOOP_CLR_FD) = 0 [pid 1407] close(4) = 0 [pid 1407] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1406] <... futex resumed>) = 0 [pid 1407] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1406] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1407] <... open resumed>) = 4 [pid 1406] <... futex resumed>) = 0 [pid 1409] pwrite64(6, "+", 1, 0 [pid 1407] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1406] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1407] <... futex resumed>) = 0 [pid 1406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1409] <... pwrite64 resumed>) = 1 [pid 1409] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1407] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1406] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1409] <... futex resumed>) = 1 [pid 1409] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1408] <... futex resumed>) = 0 [pid 1407] <... open resumed>) = 5 [pid 1406] <... futex resumed>) = 0 [pid 301] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1408] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1407] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1406] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1409] <... futex resumed>) = 0 [pid 1408] <... futex resumed>) = 1 [pid 1407] <... futex resumed>) = 0 [pid 1406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1409] open("./bus", O_RDONLY [pid 1408] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1407] creat("./bus", 000 [pid 1406] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1409] <... open resumed>) = 7 [pid 1407] <... creat resumed>) = 6 [pid 1406] <... futex resumed>) = 0 [pid 1409] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1407] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1406] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1409] <... futex resumed>) = 1 [pid 1408] <... futex resumed>) = 0 [pid 1407] <... futex resumed>) = 0 [pid 1406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1409] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1408] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1407] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1406] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1408] <... futex resumed>) = 0 [pid 1407] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1406] <... futex resumed>) = 0 [pid 1409] <... copy_file_range resumed>) = 1 [pid 1408] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1407] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1406] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1409] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1408] <... futex resumed>) = 0 [pid 1407] <... futex resumed>) = 0 [pid 1406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1409] <... futex resumed>) = 0 [pid 1408] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1407] pwrite64(6, "+", 1, 0 [pid 1406] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1409] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1408] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1407] <... pwrite64 resumed>) = 1 [pid 1406] <... futex resumed>) = 0 [pid 1408] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1407] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1406] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1408] <... mprotect resumed>) = 0 [pid 1407] <... futex resumed>) = 0 [pid 1406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] newfstatat(AT_FDCWD, "./41/file1", [pid 1408] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1407] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1406] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1408] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1407] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1406] <... futex resumed>) = 0 [pid 1408] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1407] open("./bus", O_RDONLY [pid 1406] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1407] <... open resumed>) = 7 [pid 1408] <... clone3 resumed> => {parent_tid=[1416]}, 88) = 1416 [pid 1407] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1408] rt_sigprocmask(SIG_SETMASK, [], [pid 1407] <... futex resumed>) = 1 [pid 1406] <... futex resumed>) = 0 [pid 1408] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1407] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1406] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1408] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1407] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1406] <... futex resumed>) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1408] <... futex resumed>) = 0 [pid 1407] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1406] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1408] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1407] <... copy_file_range resumed>) = 1 [pid 1406] <... futex resumed>) = 0 [pid 1407] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1406] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1407] <... futex resumed>) = 0 [pid 1406] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1407] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1406] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1406] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1406] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1417]}, 88) = 1417 [pid 1406] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1406] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1406] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1413] munmap(0x7f13c08c4000, 138412032 [pid 301] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1413] <... munmap resumed>) = 0 [pid 1413] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1413] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 1416 attached [ 49.306967][ T1389] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 49.307510][ T1407] loop3: detected capacity change from 0 to 2048 [ 49.319994][ T1389] EXT4-fs (loop4): This should not happen!! Data will be lost [ 49.319994][ T1389] [ 49.337653][ T1405] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 49.350363][ T1405] EXT4-fs (loop0): This should not happen!! Data will be lost [ 49.350363][ T1405] ./strace-static-x86_64: Process 1417 attached [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./41/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./41/file1") = 0 [pid 301] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./41") = 0 [pid 301] mkdir("./42", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1418 [pid 1417] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1417] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1417] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 1406] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1417] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1418 attached [pid 1418] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1418] chdir("./42") = 0 [pid 1418] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1418] setpgid(0, 0) = 0 [pid 297] <... umount2 resumed>) = 0 [pid 1406] <... futex resumed>) = 1 [pid 1407] <... futex resumed>) = 0 [pid 1406] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1407] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 297] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1418] write(3, "1000", 4) = 4 [pid 1418] close(3) = 0 [pid 1418] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1418] write(1, "executing program\n", 18executing program ) = 18 [pid 1418] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1418] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1418] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1418] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1418] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1407] <... open resumed>) = -1 EFAULT (Bad address) [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1407] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 297] newfstatat(AT_FDCWD, "./42/file1", [pid 1413] <... ioctl resumed>) = 0 [pid 1407] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1413] close(3 [pid 1418] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1418] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1419]}, 88) = 1419 [pid 1418] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1418] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1418] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1419 attached [pid 1419] set_robust_list(0x7f13c8ce49a0, 24 [pid 1413] <... close resumed>) = 0 [pid 297] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1413] close(4) = 0 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1413] mkdir("./file1", 0777 [pid 297] openat(AT_FDCWD, "./42/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1419] <... set_robust_list resumed>) = 0 [pid 1419] rt_sigprocmask(SIG_SETMASK, [], [pid 1413] <... mkdir resumed>) = 0 [pid 297] <... openat resumed>) = 4 [pid 1419] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1419] memfd_create("syzkaller", 0) = 3 [pid 1419] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1413] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 297] newfstatat(4, "", [pid 1416] set_robust_list(0x7f13c8cc39a0, 24 [pid 1406] <... futex resumed>) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1416] <... set_robust_list resumed>) = 0 [pid 1406] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1416] rt_sigprocmask(SIG_SETMASK, [], [pid 1407] <... futex resumed>) = 0 [pid 1406] <... futex resumed>) = 1 [pid 297] close(4 [pid 1419] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1419] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1419] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1419] ioctl(4, LOOP_SET_FD, 3 [pid 1416] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1406] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... close resumed>) = 0 [pid 1419] <... ioctl resumed>) = 0 [pid 1419] close(3) = 0 [pid 1419] close(4) = 0 [pid 1416] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 297] rmdir("./42/file1" [pid 1419] mkdir("./file1", 0777) = 0 [ 49.405608][ T1413] loop1: detected capacity change from 0 to 2048 [ 49.420485][ T1407] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 49.431435][ T1419] loop4: detected capacity change from 0 to 2048 [ 49.439973][ T1407] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 1419] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 1416] <... mmap resumed>) = 0x20000000 [pid 1408] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 297] <... rmdir resumed>) = 0 [pid 1416] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1408] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] getdents64(3, [pid 1416] <... futex resumed>) = 0 [pid 1408] <... futex resumed>) = 1 [pid 1416] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 297] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1408] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] close(3 [pid 1409] <... futex resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 1409] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 297] rmdir("./42" [pid 1409] <... open resumed>) = -1 EFAULT (Bad address) [pid 297] <... rmdir resumed>) = 0 [pid 1409] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] mkdir("./43", 0777 [pid 1409] <... futex resumed>) = 1 [pid 1409] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1408] <... futex resumed>) = 0 [pid 297] <... mkdir resumed>) = 0 [pid 1408] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1408] <... futex resumed>) = 0 [pid 1409] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1408] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... openat resumed>) = 3 [pid 297] ioctl(3, LOOP_CLR_FD [pid 1419] <... mount resumed>) = 0 [pid 1419] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1419] chdir("./file1") = 0 [pid 1419] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1419] ioctl(4, LOOP_CLR_FD) = 0 [pid 1419] close(4) = 0 [pid 1419] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1418] <... futex resumed>) = 0 [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1418] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1418] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1419] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 1419] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1418] <... futex resumed>) = 0 [pid 1418] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1418] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1419] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 1419] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1418] <... futex resumed>) = 0 [pid 1418] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1418] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1419] creat("./bus", 000) = 6 [pid 1419] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1418] <... futex resumed>) = 0 [pid 1418] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1418] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1419] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 1419] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1418] <... futex resumed>) = 0 [pid 1419] pwrite64(6, "+", 1, 0 [pid 1418] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1419] <... pwrite64 resumed>) = 1 [pid 1418] <... futex resumed>) = 0 [pid 1419] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1418] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1419] <... futex resumed>) = 0 [pid 1418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1419] open("./bus", O_RDONLY [pid 1418] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1419] <... open resumed>) = 7 [pid 1418] <... futex resumed>) = 0 [pid 1419] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1418] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1419] <... futex resumed>) = 0 [pid 1418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1419] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1418] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1419] <... copy_file_range resumed>) = 1 [pid 1418] <... futex resumed>) = 0 [pid 1419] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1418] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1419] <... futex resumed>) = 0 [pid 1418] <... futex resumed>) = 0 [pid 1419] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1418] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1418] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 297] close(3 [pid 1418] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 297] <... close resumed>) = 0 [pid 1418] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1406] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1418] <... clone3 resumed> => {parent_tid=[1424]}, 88) = 1424 [pid 1418] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1418] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1418] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... clone resumed>, child_tidptr=0x55558909e690) = 1425 ./strace-static-x86_64: Process 1424 attached [pid 1424] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1424] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1424] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1418] <... futex resumed>) = 0 [pid 1418] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1419] <... futex resumed>) = 0 [pid 1418] <... futex resumed>) = 1 [pid 1419] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1418] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1419] <... open resumed>) = -1 EFAULT (Bad address) [pid 1419] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1418] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1425 attached [pid 1418] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1413] <... mount resumed>) = 0 [pid 1418] <... futex resumed>) = 0 [pid 1418] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1424] <... futex resumed>) = 1 [pid 1424] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1425] set_robust_list(0x55558909e6a0, 24 [pid 1413] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1408] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1425] <... set_robust_list resumed>) = 0 [pid 1413] <... openat resumed>) = 3 [ 49.509176][ T1419] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 49.509468][ T1407] EXT4-fs (loop3): free_blocks=2415919504 [ 49.525504][ T1409] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 49.529358][ T1407] EXT4-fs (loop3): dirty_blocks=32 [ 49.542432][ T1419] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 1425] chdir("./43" [pid 1413] chdir("./file1" [pid 1425] <... chdir resumed>) = 0 [pid 1418] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1413] <... chdir resumed>) = 0 [pid 1407] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1425] prctl(PR_SET_PDEATHSIG, SIGKILL [ 49.546312][ T1407] EXT4-fs (loop3): Block reservation details [ 49.559066][ T1409] EXT4-fs (loop2): This should not happen!! Data will be lost [ 49.559066][ T1409] [ 49.564412][ T1407] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 49.574360][ T1419] EXT4-fs (loop4): This should not happen!! Data will be lost [ 49.574360][ T1419] [ 49.579340][ T1409] EXT4-fs (loop2): Total free blocks count 0 [ 49.589690][ T1419] EXT4-fs (loop4): Total free blocks count 0 [ 49.594508][ T1409] EXT4-fs (loop2): Free/Dirty block details [pid 1413] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1425] <... prctl resumed>) = 0 [pid 1413] <... openat resumed>) = 4 [pid 1417] <... futex resumed>) = ? [pid 1417] +++ killed by SIGBUS +++ [pid 1425] setpgid(0, 0 [pid 1413] ioctl(4, LOOP_CLR_FD [pid 1407] +++ killed by SIGBUS +++ [pid 1425] <... setpgid resumed>) = 0 [pid 1413] <... ioctl resumed>) = 0 [pid 1425] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 49.601313][ T1419] EXT4-fs (loop4): Free/Dirty block details [ 49.606121][ T1409] EXT4-fs (loop2): free_blocks=2415919504 [ 49.613157][ T1419] EXT4-fs (loop4): free_blocks=2415919504 [ 49.618271][ T1406] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 49.624037][ T1419] EXT4-fs (loop4): dirty_blocks=32 [ 49.634935][ T1409] EXT4-fs (loop2): dirty_blocks=32 [ 49.641021][ T1419] EXT4-fs (loop4): Block reservation details [ 49.644925][ T1406] EXT4-fs (loop3): This should not happen!! Data will be lost [ 49.644925][ T1406] [pid 1413] close(4 [pid 1425] <... openat resumed>) = 3 [pid 1413] <... close resumed>) = 0 [pid 1425] write(3, "1000", 4 [pid 1413] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1425] <... write resumed>) = 4 [pid 1413] <... futex resumed>) = 1 [pid 1425] close(3 [pid 1413] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1425] <... close resumed>) = 0 [pid 1425] symlink("/dev/binderfs", "./binderfs" [pid 1410] <... futex resumed>) = 0 executing program [pid 1425] <... symlink resumed>) = 0 [pid 1410] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1425] write(1, "executing program\n", 18) = 18 [pid 1425] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1413] <... futex resumed>) = 0 [pid 1410] <... futex resumed>) = 1 [pid 1425] <... futex resumed>) = 0 [pid 1413] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1425] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1410] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1413] <... open resumed>) = 4 [pid 1425] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1425] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1413] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1425] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1413] <... futex resumed>) = 0 [pid 1425] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1413] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1425] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1410] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1410] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1410] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1419] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1424] <... futex resumed>) = ? [pid 1424] +++ killed by SIGBUS +++ [pid 1425] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1413] <... futex resumed>) = 0 [pid 1425] <... mprotect resumed>) = 0 [pid 1413] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1409] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1406] +++ killed by SIGBUS +++ [pid 1425] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1413] <... open resumed>) = 5 [pid 1425] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1413] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1425] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1413] <... futex resumed>) = 1 [pid 1413] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1425] <... clone3 resumed> => {parent_tid=[1426]}, 88) = 1426 [pid 1425] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1425] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1425] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1416] <... futex resumed>) = ? [pid 1416] +++ killed by SIGBUS +++ ./strace-static-x86_64: Process 1426 attached [pid 1419] +++ killed by SIGBUS +++ [pid 1418] +++ killed by SIGBUS +++ [pid 1410] <... futex resumed>) = 0 [pid 1426] set_robust_list(0x7f13c8ce49a0, 24 [pid 1410] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1418, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1406, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=19} --- [pid 1426] <... set_robust_list resumed>) = 0 [pid 1410] <... futex resumed>) = 1 [pid 1426] rt_sigprocmask(SIG_SETMASK, [], [pid 1410] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1426] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 301] umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1426] memfd_create("syzkaller", 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1426] <... memfd_create resumed>) = 3 [pid 301] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 300] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1426] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 301] <... openat resumed>) = 3 [pid 300] <... openat resumed>) = 3 [pid 1426] <... mmap resumed>) = 0x7f13c08c4000 [pid 301] newfstatat(3, "", [pid 300] newfstatat(3, "", [pid 1426] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, [ 49.651751][ T1419] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 49.668628][ T1409] EXT4-fs (loop2): Block reservation details [ 49.671802][ T1419] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 49.674560][ T1409] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 49.687817][ T1419] EXT4-fs (loop4): This should not happen!! Data will be lost [ 49.687817][ T1419] [pid 300] getdents64(3, [pid 301] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 300] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./42/binderfs", [pid 300] newfstatat(AT_FDCWD, "./42/binderfs", [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./42/binderfs" [pid 300] unlink("./42/binderfs" [pid 301] <... unlink resumed>) = 0 [pid 300] <... unlink resumed>) = 0 [pid 300] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1413] <... futex resumed>) = 0 [pid 1413] creat("./bus", 000 [pid 301] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1426] <... write resumed>) = 1048576 [pid 1426] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1426] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1426] ioctl(4, LOOP_SET_FD, 3 [pid 1413] <... creat resumed>) = 6 [pid 1409] +++ killed by SIGBUS +++ [pid 1408] +++ killed by SIGBUS +++ [pid 1413] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1408, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 1413] <... futex resumed>) = 1 [pid 1410] <... futex resumed>) = 0 [pid 1410] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1413] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1410] <... futex resumed>) = 0 [pid 1413] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1410] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1413] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1410] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1413] <... futex resumed>) = 0 [pid 1410] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1413] pwrite64(6, "+", 1, 0 [pid 1410] <... futex resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1413] <... pwrite64 resumed>) = 1 [pid 1410] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1413] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1410] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1413] <... futex resumed>) = 0 [pid 1410] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1413] open("./bus", O_RDONLY [pid 1410] <... futex resumed>) = 0 [pid 1413] <... open resumed>) = 7 [pid 1410] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... openat resumed>) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./44/binderfs" [pid 301] <... umount2 resumed>) = 0 [pid 299] <... unlink resumed>) = 0 [pid 299] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1413] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1410] <... futex resumed>) = 0 [pid 1413] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1410] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1413] <... copy_file_range resumed>) = 1 [pid 1410] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1413] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1410] <... futex resumed>) = 0 [pid 1413] <... futex resumed>) = 0 [pid 1410] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 301] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1413] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1410] <... mmap resumed>) = 0x7f13c8ca3000 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1410] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 301] newfstatat(AT_FDCWD, "./42/file1", [pid 299] <... umount2 resumed>) = 0 [pid 1410] <... mprotect resumed>) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1410] rt_sigprocmask(SIG_BLOCK, ~[], [pid 301] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1410] <... rt_sigprocmask resumed>[], 8) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1410] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 301] openat(AT_FDCWD, "./42/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 1410] <... clone3 resumed> => {parent_tid=[1427]}, 88) = 1427 [pid 301] newfstatat(4, "", [pid 1410] rt_sigprocmask(SIG_SETMASK, [], [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1410] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1410] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] getdents64(4, [pid 1410] <... futex resumed>) = 0 [pid 1410] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./42/file1" [pid 299] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... rmdir resumed>) = 0 [pid 301] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./42" [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... rmdir resumed>) = 0 [pid 301] mkdir("./43", 0777 [pid 299] newfstatat(AT_FDCWD, "./44/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] <... mkdir resumed>) = 0 [pid 299] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./44/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] <... openat resumed>) = 3 [pid 301] ioctl(3, LOOP_CLR_FD [pid 299] <... openat resumed>) = 4 [pid 301] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 301] close(3 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./44/file1") = 0 [pid 299] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./44") = 0 [pid 299] mkdir("./45", 0777 [pid 301] <... close resumed>) = 0 ./strace-static-x86_64: Process 1427 attached [pid 1426] <... ioctl resumed>) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 300] <... umount2 resumed>) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 1427] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1426] close(3 [pid 300] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1427] rt_sigprocmask(SIG_SETMASK, [], [pid 1426] <... close resumed>) = 0 [pid 301] <... clone resumed>, child_tidptr=0x55558909e690) = 1428 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1427] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1426] close(4 [pid 300] newfstatat(AT_FDCWD, "./42/file1", [pid 299] <... openat resumed>) = 3 [pid 1427] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1429 ./strace-static-x86_64: Process 1428 attached [pid 1428] set_robust_list(0x55558909e6a0, 24 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1428] <... set_robust_list resumed>) = 0 [pid 1428] chdir("./43" [pid 300] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1428] <... chdir resumed>) = 0 [pid 1428] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1428] setpgid(0, 0) = 0 [pid 1427] <... mmap resumed>) = 0x20000000 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1427] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [ 49.695683][ T1409] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 49.714256][ T1409] EXT4-fs (loop2): This should not happen!! Data will be lost [ 49.714256][ T1409] [ 49.722496][ T1426] loop0: detected capacity change from 0 to 2048 [pid 300] openat(AT_FDCWD, "./42/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 1429 attached [pid 1428] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1427] <... futex resumed>) = 1 [pid 1426] <... close resumed>) = 0 [pid 1410] <... futex resumed>) = 0 [pid 300] <... openat resumed>) = 4 [pid 1427] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1426] mkdir("./file1", 0777 [pid 1410] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] newfstatat(4, "", [pid 1429] set_robust_list(0x55558909e6a0, 24 [pid 1426] <... mkdir resumed>) = 0 [pid 1413] <... futex resumed>) = 0 [pid 1410] <... futex resumed>) = 1 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1426] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 1413] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1410] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] getdents64(4, [pid 1429] <... set_robust_list resumed>) = 0 [pid 1429] chdir("./45" [pid 1428] <... openat resumed>) = 3 [pid 1413] <... open resumed>) = -1 EFAULT (Bad address) [pid 300] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1429] <... chdir resumed>) = 0 [pid 1428] write(3, "1000", 4 [pid 1413] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] getdents64(4, [pid 1429] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1428] <... write resumed>) = 4 [pid 1413] <... futex resumed>) = 1 [pid 1410] <... futex resumed>) = 0 [pid 300] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1413] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1410] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000executing program executing program [pid 1413] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] close(4 [pid 1410] <... futex resumed>) = 0 [pid 1429] <... prctl resumed>) = 0 [pid 1428] close(3 [pid 1429] setpgid(0, 0 [pid 1428] <... close resumed>) = 0 [pid 1429] <... setpgid resumed>) = 0 [pid 1428] symlink("/dev/binderfs", "./binderfs" [pid 1429] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1428] <... symlink resumed>) = 0 [pid 1429] <... openat resumed>) = 3 [pid 1428] write(1, "executing program\n", 18 [pid 1429] write(3, "1000", 4 [pid 1428] <... write resumed>) = 18 [pid 1429] <... write resumed>) = 4 [pid 1428] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1429] close(3 [pid 1428] <... futex resumed>) = 0 [pid 1429] <... close resumed>) = 0 [pid 1428] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1429] symlink("/dev/binderfs", "./binderfs" [pid 1428] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1429] <... symlink resumed>) = 0 [pid 1428] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1429] write(1, "executing program\n", 18 [pid 1428] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1429] <... write resumed>) = 18 [pid 1428] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1429] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1428] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1429] <... futex resumed>) = 0 [pid 1428] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1429] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1428] <... mprotect resumed>) = 0 [pid 1429] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1428] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1429] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1428] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1429] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1428] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1429] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1428] <... clone3 resumed> => {parent_tid=[1430]}, 88) = 1430 [pid 1429] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1428] rt_sigprocmask(SIG_SETMASK, [], [pid 1429] <... mprotect resumed>) = 0 [pid 1428] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1429] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1428] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1429] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1428] <... futex resumed>) = 0 [pid 1429] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1428] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1429] <... clone3 resumed> => {parent_tid=[1431]}, 88) = 1431 [pid 1429] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1429] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1429] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1430 attached [pid 1430] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1430] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1430] memfd_create("syzkaller", 0) = 3 [pid 1430] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1430] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1430] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1430] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1430] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 1431 attached [pid 1410] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... close resumed>) = 0 [pid 1430] <... ioctl resumed>) = 0 [pid 1430] close(3) = 0 [pid 1430] close(4) = 0 [pid 1430] mkdir("./file1", 0777) = 0 [pid 1430] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 1431] set_robust_list(0x7f13c8ce49a0, 24 [pid 300] rmdir("./42/file1" [pid 1431] <... set_robust_list resumed>) = 0 [pid 1426] <... mount resumed>) = 0 [pid 300] <... rmdir resumed>) = 0 [pid 1431] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1431] memfd_create("syzkaller", 0) = 3 [pid 1431] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 300] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./42") = 0 [pid 300] mkdir("./43", 0777) = 0 [pid 1426] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1426] chdir("./file1") = 0 [pid 1426] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1426] ioctl(4, LOOP_CLR_FD) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1426] close(4 [pid 300] <... openat resumed>) = 3 [ 49.775397][ T1413] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 49.789717][ T1430] loop4: detected capacity change from 0 to 2048 [ 49.790923][ T1413] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 49.809824][ T1413] EXT4-fs (loop1): This should not happen!! Data will be lost [ 49.809824][ T1413] [pid 1426] <... close resumed>) = 0 [pid 300] ioctl(3, LOOP_CLR_FD [pid 1426] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1426] <... futex resumed>) = 1 [pid 1425] <... futex resumed>) = 0 [pid 300] close(3 [pid 1426] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1425] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... close resumed>) = 0 [pid 1426] <... open resumed>) = 4 [pid 1425] <... futex resumed>) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1426] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1425] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 1425] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1425] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1426] <... futex resumed>) = 1 [pid 1425] <... futex resumed>) = 0 [pid 300] <... clone resumed>, child_tidptr=0x55558909e690) = 1435 [pid 1425] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1426] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 1426] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1425] <... futex resumed>) = 0 [pid 1425] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1425] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1426] creat("./bus", 000) = 6 [pid 1426] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1425] <... futex resumed>) = 0 [pid 1425] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1425] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1426] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 1426] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1425] <... futex resumed>) = 0 [pid 1425] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1425] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1426] pwrite64(6, "+", 1, 0 [pid 1431] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1426] <... pwrite64 resumed>) = 1 [pid 1426] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1425] <... futex resumed>) = 0 [pid 1425] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1425] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1426] open("./bus", O_RDONLY) = 7 [pid 1426] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1425] <... futex resumed>) = 0 [pid 1425] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1425] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1425] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1425] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1425] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1425] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1426] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 1425] <... clone3 resumed> => {parent_tid=[1436]}, 88) = 1436 [pid 1425] rt_sigprocmask(SIG_SETMASK, [], [pid 1426] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1425] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1426] <... futex resumed>) = 0 [pid 1425] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1426] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1425] <... futex resumed>) = 0 [pid 1425] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1436 attached ./strace-static-x86_64: Process 1435 attached [pid 1435] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1435] chdir("./43") = 0 [pid 1435] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1436] set_robust_list(0x7f13c8cc39a0, 24 [pid 1435] setpgid(0, 0) = 0 [pid 1435] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1435] write(3, "1000", 4) = 4 [pid 1435] close(3) = 0 [pid 1435] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1431] <... write resumed>) = 1048576 [pid 1431] munmap(0x7f13c08c4000, 138412032 [pid 1435] write(1, "executing program\n", 18executing program ) = 18 [pid 1435] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1431] <... munmap resumed>) = 0 [pid 1435] <... futex resumed>) = 0 [pid 1435] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1435] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1435] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1435] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1431] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1436] <... set_robust_list resumed>) = 0 [pid 1436] rt_sigprocmask(SIG_SETMASK, [], [pid 1413] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1436] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1436] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1435] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1431] ioctl(4, LOOP_SET_FD, 3 [pid 1427] <... futex resumed>) = ? [pid 1427] +++ killed by SIGBUS +++ [pid 1410] <... futex resumed>) = ? [pid 1436] <... mmap resumed>) = 0x20000000 [pid 1436] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1435] <... rt_sigprocmask resumed>[], 8) = 0 [ 49.819923][ T1413] EXT4-fs (loop1): Total free blocks count 0 [ 49.826234][ T1413] EXT4-fs (loop1): Free/Dirty block details [ 49.832337][ T1413] EXT4-fs (loop1): free_blocks=2415919504 [ 49.838403][ T1413] EXT4-fs (loop1): dirty_blocks=32 [ 49.843479][ T1413] EXT4-fs (loop1): Block reservation details [ 49.849541][ T1413] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 49.858300][ T1431] loop2: detected capacity change from 0 to 2048 [pid 1436] <... futex resumed>) = 1 [pid 1435] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1431] <... ioctl resumed>) = 0 [pid 1436] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1431] close(3) = 0 [pid 1431] close(4) = 0 [pid 1431] mkdir("./file1", 0777) = 0 [pid 1435] <... clone3 resumed> => {parent_tid=[1438]}, 88) = 1438 [pid 1435] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1435] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1435] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1431] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 1425] <... futex resumed>) = 0 [pid 1425] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1426] <... futex resumed>) = 0 [pid 1425] <... futex resumed>) = 1 [pid 1426] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1425] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1430] <... mount resumed>) = 0 [pid 1426] <... open resumed>) = -1 EFAULT (Bad address) [pid 1430] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1426] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1430] <... openat resumed>) = 3 [pid 1426] <... futex resumed>) = 1 [pid 1425] <... futex resumed>) = 0 [pid 1430] chdir("./file1" [pid 1426] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1425] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1430] <... chdir resumed>) = 0 [pid 1426] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1425] <... futex resumed>) = 0 [pid 1430] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1413] +++ killed by SIGBUS +++ [pid 1410] +++ killed by SIGBUS +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1410, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 1438 attached [pid 1438] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1438] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1438] memfd_create("syzkaller", 0) = 3 [pid 1438] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1438] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 298] <... restart_syscall resumed>) = 0 [pid 298] umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./44/binderfs") = 0 [pid 298] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1425] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1430] <... openat resumed>) = 4 [pid 1430] ioctl(4, LOOP_CLR_FD) = 0 [pid 1430] close(4) = 0 [pid 1430] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... umount2 resumed>) = 0 [pid 1430] <... futex resumed>) = 1 [pid 1428] <... futex resumed>) = 0 [pid 1430] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1428] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1438] <... write resumed>) = 1048576 [pid 1438] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1438] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 49.858825][ T1413] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 49.877487][ T1413] EXT4-fs (loop1): This should not happen!! Data will be lost [ 49.877487][ T1413] [ 49.888198][ T1426] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 49.908637][ T1426] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 1438] ioctl(4, LOOP_SET_FD, 3 [pid 1431] <... mount resumed>) = 0 [pid 1430] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1428] <... futex resumed>) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1431] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1430] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1428] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] newfstatat(AT_FDCWD, "./44/file1", [pid 1431] <... openat resumed>) = 3 [pid 1438] <... ioctl resumed>) = 0 [pid 1430] <... open resumed>) = 4 [pid 1431] chdir("./file1" [pid 1425] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1438] close(3 [pid 1431] <... chdir resumed>) = 0 [pid 1430] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1438] <... close resumed>) = 0 [pid 1438] close(4) = 0 [pid 1438] mkdir("./file1", 0777) = 0 [pid 1438] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 1431] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1431] ioctl(4, LOOP_CLR_FD [pid 1430] <... futex resumed>) = 1 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1431] <... ioctl resumed>) = 0 [pid 1431] close(4) = 0 [pid 1431] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1429] <... futex resumed>) = 0 [pid 1431] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1429] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1431] <... open resumed>) = 4 [pid 1429] <... futex resumed>) = 0 [pid 1431] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1429] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1431] <... futex resumed>) = 0 [pid 1429] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1431] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1429] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1431] <... open resumed>) = 5 [pid 1429] <... futex resumed>) = 0 [pid 1431] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1429] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1428] <... futex resumed>) = 0 [pid 298] openat(AT_FDCWD, "./44/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1430] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1428] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] <... openat resumed>) = 4 [pid 1430] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1428] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] newfstatat(4, "", [pid 1430] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1430] <... open resumed>) = 5 [pid 298] getdents64(4, [pid 1430] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1431] <... futex resumed>) = 0 [pid 1430] <... futex resumed>) = 1 [pid 1429] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1428] <... futex resumed>) = 0 [pid 298] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1431] creat("./bus", 000 [pid 1429] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1431] <... creat resumed>) = 6 [pid 1429] <... futex resumed>) = 0 [pid 1431] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1429] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1431] <... futex resumed>) = 0 [pid 1429] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1428] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1431] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1430] creat("./bus", 000 [pid 1429] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1428] <... futex resumed>) = 0 [pid 298] getdents64(4, [pid 1431] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1430] <... creat resumed>) = 6 [pid 1429] <... futex resumed>) = 0 [pid 1428] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1431] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1430] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1429] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1428] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 298] close(4 [pid 1431] <... futex resumed>) = 0 [pid 1430] <... futex resumed>) = 0 [pid 1429] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1428] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... close resumed>) = 0 [pid 1431] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1430] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1429] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1428] <... futex resumed>) = 0 [pid 298] rmdir("./44/file1" [pid 1431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1430] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1429] <... futex resumed>) = 0 [pid 1428] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1431] pwrite64(6, "+", 1, 0 [pid 1430] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1429] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1428] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 298] <... rmdir resumed>) = 0 [pid 1431] <... pwrite64 resumed>) = 1 [pid 1430] <... futex resumed>) = 0 [pid 1428] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] getdents64(3, [pid 1431] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1430] pwrite64(6, "+", 1, 0 [pid 1428] <... futex resumed>) = 0 [pid 1431] <... futex resumed>) = 1 [pid 1429] <... futex resumed>) = 0 [pid 298] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1431] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1430] <... pwrite64 resumed>) = 1 [pid 1429] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1428] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] close(3 [pid 1431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1430] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1429] <... futex resumed>) = 0 [pid 1428] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1431] open("./bus", O_RDONLY [pid 1430] <... futex resumed>) = 0 [ 49.918878][ T1438] loop3: detected capacity change from 0 to 2048 [ 49.925899][ T1426] EXT4-fs (loop0): This should not happen!! Data will be lost [ 49.925899][ T1426] [ 49.936411][ T1426] EXT4-fs (loop0): Total free blocks count 0 [ 49.942757][ T1426] EXT4-fs (loop0): Free/Dirty block details [ 49.948630][ T1426] EXT4-fs (loop0): free_blocks=2415919504 [ 49.954698][ T1426] EXT4-fs (loop0): dirty_blocks=32 [pid 1429] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1428] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... close resumed>) = 0 [pid 1431] <... open resumed>) = 7 [pid 1430] open("./bus", O_RDONLY [pid 1431] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1429] <... futex resumed>) = 0 [pid 1431] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1429] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1429] <... futex resumed>) = 0 [pid 1431] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1429] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1431] <... copy_file_range resumed>) = 1 [pid 1429] <... futex resumed>) = 0 [pid 1431] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1429] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1431] <... futex resumed>) = 0 [pid 1429] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1431] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1429] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1429] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1430] <... open resumed>) = 7 [pid 1429] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1428] <... futex resumed>) = 0 [pid 298] rmdir("./44" [pid 1429] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1443]}, 88) = 1443 [pid 1429] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1429] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1429] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1430] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1430] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1428] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 1428] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1430] <... futex resumed>) = 0 [pid 1428] <... futex resumed>) = 1 [pid 1430] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1428] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1430] <... copy_file_range resumed>) = 1 [pid 1428] <... futex resumed>) = 0 [pid 1430] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1428] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1430] <... futex resumed>) = 0 [pid 1428] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1430] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1428] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1428] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1428] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1445]}, 88) = 1445 [pid 1428] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1428] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1428] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1445 attached [pid 1445] set_robust_list(0x7f13c8cc39a0, 24 [pid 298] <... rmdir resumed>) = 0 [pid 1445] <... set_robust_list resumed>) = 0 [pid 1445] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1445] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1438] <... mount resumed>) = 0 [pid 298] mkdir("./45", 0777) = 0 [pid 1438] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 1443 attached [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1443] set_robust_list(0x7f13c8cc39a0, 24 [pid 1438] <... openat resumed>) = 3 [pid 1443] <... set_robust_list resumed>) = 0 [pid 1438] chdir("./file1" [pid 298] <... openat resumed>) = 3 [pid 1443] rt_sigprocmask(SIG_SETMASK, [], [pid 1438] <... chdir resumed>) = 0 [pid 1426] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 298] ioctl(3, LOOP_CLR_FD [pid 1443] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1438] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1443] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1438] <... openat resumed>) = 4 [pid 298] close(3 [pid 1438] ioctl(4, LOOP_CLR_FD [pid 298] <... close resumed>) = 0 [pid 1445] <... mmap resumed>) = 0x20000000 [pid 1445] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1428] <... futex resumed>) = 0 [pid 1428] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1430] <... futex resumed>) = 0 [pid 1428] <... futex resumed>) = 1 [pid 1430] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1428] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1430] <... open resumed>) = -1 EFAULT (Bad address) [pid 1430] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1428] <... futex resumed>) = 0 [pid 1445] <... futex resumed>) = 1 [pid 1443] <... mmap resumed>) = 0x20000000 [pid 1438] <... ioctl resumed>) = 0 [pid 1428] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1438] close(4) = 0 [pid 298] <... clone resumed>, child_tidptr=0x55558909e690) = 1446 [pid 1438] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1435] <... futex resumed>) = 0 [pid 1438] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1435] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1438] <... open resumed>) = 4 [pid 1435] <... futex resumed>) = 0 [pid 1438] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1435] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1438] <... futex resumed>) = 0 [pid 1435] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1438] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1435] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1438] <... open resumed>) = 5 [pid 1435] <... futex resumed>) = 0 [pid 1438] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1435] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 1435] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1435] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1438] <... futex resumed>) = 1 [pid 1435] <... futex resumed>) = 0 [pid 1435] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1438] creat("./bus", 000) = 6 [pid 1438] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1435] <... futex resumed>) = 0 [pid 1435] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1435] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1438] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 1438] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1435] <... futex resumed>) = 0 [pid 1438] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1435] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1435] <... futex resumed>) = 0 [pid 1438] pwrite64(6, "+", 1, 0 [pid 1435] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1438] <... pwrite64 resumed>) = 1 [pid 1438] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1435] <... futex resumed>) = 0 [pid 1438] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1435] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1435] <... futex resumed>) = 0 [pid 1438] open("./bus", O_RDONLY [pid 1435] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1438] <... open resumed>) = 7 [pid 1438] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1435] <... futex resumed>) = 0 [pid 1438] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1435] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1435] <... futex resumed>) = 0 [pid 1438] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1435] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1438] <... copy_file_range resumed>) = 1 [pid 1435] <... futex resumed>) = 0 [pid 1438] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1435] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1438] <... futex resumed>) = 0 [pid 1435] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1438] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1435] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1435] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1435] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1447]}, 88) = 1447 [pid 1435] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1435] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1435] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1443] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1436] <... futex resumed>) = ? [pid 1428] <... futex resumed>) = 0 [pid 1443] <... futex resumed>) = 1 [pid 1429] <... futex resumed>) = 0 [pid 1429] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1431] <... futex resumed>) = 0 [pid 1429] <... futex resumed>) = 1 [pid 1431] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1429] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1431] <... open resumed>) = -1 EFAULT (Bad address) [pid 1431] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1429] <... futex resumed>) = 0 [ 49.973762][ T1426] EXT4-fs (loop0): Block reservation details [ 49.979793][ T1426] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 49.990421][ T1430] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 50.005396][ T1430] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 1431] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1429] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1429] <... futex resumed>) = 0 [pid 1443] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1436] +++ killed by SIGBUS +++ [pid 1429] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1428] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1435] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1435] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1438] <... futex resumed>) = 0 [pid 1435] <... futex resumed>) = 1 [pid 1438] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1435] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1438] <... open resumed>) = -1 EFAULT (Bad address) [pid 1438] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1435] <... futex resumed>) = 0 [pid 1438] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1435] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1435] <... futex resumed>) = 0 [pid 1438] write(-1, "\x30\x78\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65983 [pid 1435] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1438] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 1438] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1435] <... futex resumed>) = 0 [pid 1438] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1445] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1446 attached ./strace-static-x86_64: Process 1447 attached [pid 1447] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1447] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1446] set_robust_list(0x55558909e6a0, 24 [pid 1447] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1446] <... set_robust_list resumed>) = 0 [pid 1446] chdir("./45") = 0 [pid 1446] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1446] setpgid(0, 0) = 0 [pid 1446] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1446] write(3, "1000", 4) = 4 [pid 1446] close(3) = 0 [pid 1446] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1446] write(1, "executing program\n", 18executing program ) = 18 [pid 1446] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1446] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1447] <... mmap resumed>) = 0x20000000 [pid 1446] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1446] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1446] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1446] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1447] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1446] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1447] <... futex resumed>) = 0 [pid 1446] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1447] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1446] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1448]}, 88) = 1448 [pid 1446] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1435] exit_group(0 [pid 1447] <... futex resumed>) = ? [pid 1446] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1438] <... futex resumed>) = ? [ 50.008633][ T1431] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 50.017721][ T1430] EXT4-fs (loop4): This should not happen!! Data will be lost [ 50.017721][ T1430] [ 50.039836][ T1426] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 50.041658][ T1430] EXT4-fs (loop4): Total free blocks count 0 [ 50.059608][ T1430] EXT4-fs (loop4): Free/Dirty block details [ 50.065567][ T1430] EXT4-fs (loop4): free_blocks=2415919504 [pid 1435] <... exit_group resumed>) = ? [pid 1447] +++ exited with 0 +++ [pid 1446] <... futex resumed>) = 0 [pid 1438] +++ exited with 0 +++ [pid 1429] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1428] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1446] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1448 attached [ 50.070002][ T1435] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 50.071407][ T1430] EXT4-fs (loop4): dirty_blocks=32 [ 50.087747][ T1435] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 50.090594][ T1430] EXT4-fs (loop4): Block reservation details [ 50.103663][ T1426] EXT4-fs (loop0): This should not happen!! Data will be lost [ 50.103663][ T1426] [ 50.108384][ T1430] EXT4-fs (loop4): i_reserved_data_blocks=2 [pid 1448] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1430] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1426] +++ killed by SIGBUS +++ [pid 1425] +++ killed by SIGBUS +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1425, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8} --- [pid 297] restart_syscall(<... resuming interrupted clone ...> [pid 1448] rt_sigprocmask(SIG_SETMASK, [], [pid 297] <... restart_syscall resumed>) = 0 [pid 297] umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./43/binderfs") = 0 [pid 297] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1448] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1445] <... futex resumed>) = ? [pid 1445] +++ killed by SIGBUS +++ [ 50.119245][ T1431] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 50.123687][ T1435] EXT4-fs (loop3): This should not happen!! Data will be lost [ 50.123687][ T1435] [ 50.137827][ T1431] EXT4-fs (loop2): This should not happen!! Data will be lost [ 50.137827][ T1431] [ 50.145347][ T1435] EXT4-fs (loop3): Total free blocks count 0 [ 50.159010][ T1431] EXT4-fs (loop2): Total free blocks count 0 [ 50.160809][ T1435] EXT4-fs (loop3): Free/Dirty block details [pid 1448] memfd_create("syzkaller", 0) = 3 [pid 1448] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 297] <... umount2 resumed>) = 0 [pid 1448] <... mmap resumed>) = 0x7f13c08c4000 [pid 1430] +++ killed by SIGBUS +++ [pid 1428] +++ killed by SIGBUS +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1428, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 301] umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./43/binderfs") = 0 [pid 301] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./43/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./43/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./43/file1") = 0 [pid 297] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./43") = 0 [pid 297] mkdir("./44", 0777 [pid 1448] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 297] <... mkdir resumed>) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1449 ./strace-static-x86_64: Process 1449 attached [pid 1449] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1449] chdir("./44") = 0 [pid 1449] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1449] setpgid(0, 0) = 0 [pid 1449] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1449] write(3, "1000", 4) = 4 [pid 1449] close(3) = 0 [pid 1449] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1449] write(1, "executing program\n", 18executing program ) = 18 [pid 1449] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1449] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [ 50.169645][ T1431] EXT4-fs (loop2): Free/Dirty block details [ 50.173093][ T1430] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 50.189873][ T1430] EXT4-fs (loop4): This should not happen!! Data will be lost [ 50.189873][ T1430] [ 50.190574][ T1435] EXT4-fs (loop3): free_blocks=2415919504 [ 50.199839][ T1431] EXT4-fs (loop2): free_blocks=2415919504 [ 50.206131][ T1435] EXT4-fs (loop3): dirty_blocks=32 [ 50.211025][ T1431] EXT4-fs (loop2): dirty_blocks=32 [ 50.220951][ T1431] EXT4-fs (loop2): Block reservation details [pid 1449] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1449] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1449] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1449] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1449] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1450]}, 88) = 1450 [pid 1449] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1449] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1449] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1450 attached [pid 1450] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1450] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1450] memfd_create("syzkaller", 0) = 3 [pid 1450] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1448] <... write resumed>) = 1048576 [pid 301] <... umount2 resumed>) = 0 [pid 1450] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 301] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 1448] munmap(0x7f13c08c4000, 138412032 [pid 301] newfstatat(AT_FDCWD, "./43/file1", [pid 1448] <... munmap resumed>) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1448] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1431] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 301] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1448] <... openat resumed>) = 4 [pid 1435] +++ exited with 0 +++ [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1448] ioctl(4, LOOP_SET_FD, 3 [pid 1443] <... futex resumed>) = ? [pid 301] openat(AT_FDCWD, "./43/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1443] +++ killed by SIGBUS +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1435, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 1450] <... write resumed>) = 1048576 [pid 1450] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1450] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 300] <... restart_syscall resumed>) = 0 [pid 300] umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./43/binderfs") = 0 [pid 300] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... openat resumed>) = 4 [pid 1450] <... openat resumed>) = 4 [ 50.240383][ T1435] EXT4-fs (loop3): Block reservation details [ 50.253770][ T1435] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 50.258531][ T1431] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 50.266688][ T1448] loop1: detected capacity change from 0 to 2048 [ 50.273703][ T567] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 1450] ioctl(4, LOOP_SET_FD, 3 [pid 1448] <... ioctl resumed>) = 0 [pid 301] newfstatat(4, "", [pid 1450] <... ioctl resumed>) = 0 [pid 1448] close(3 [pid 1431] +++ killed by SIGBUS +++ [pid 1429] +++ killed by SIGBUS +++ [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1448] <... close resumed>) = 0 [pid 301] getdents64(4, [pid 1448] close(4 [pid 301] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1448] <... close resumed>) = 0 [pid 301] getdents64(4, [pid 1448] mkdir("./file1", 0777 [pid 301] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1448] <... mkdir resumed>) = 0 [pid 301] close(4 [pid 1448] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 301] <... close resumed>) = 0 [pid 301] rmdir("./43/file1" [pid 1450] close(3 [pid 301] <... rmdir resumed>) = 0 [pid 301] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./43" [pid 1450] <... close resumed>) = 0 [pid 301] <... rmdir resumed>) = 0 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1429, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=20} --- [pid 301] mkdir("./44", 0777 [pid 1450] close(4) = 0 [pid 301] <... mkdir resumed>) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 1450] mkdir("./file1", 0777 [pid 299] umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1450] <... mkdir resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... clone resumed>, child_tidptr=0x55558909e690) = 1451 [pid 1450] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 299] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./45/binderfs"./strace-static-x86_64: Process 1451 attached [pid 1451] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1451] chdir("./44" [pid 300] <... umount2 resumed>) = 0 [pid 299] <... unlink resumed>) = 0 [pid 299] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1451] <... chdir resumed>) = 0 [pid 1451] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1451] setpgid(0, 0) = 0 [pid 300] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 1451] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program [pid 300] newfstatat(AT_FDCWD, "./43/file1", [pid 1451] <... openat resumed>) = 3 [pid 1451] write(3, "1000", 4) = 4 [pid 1451] close(3) = 0 [pid 1451] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1451] write(1, "executing program\n", 18) = 18 [pid 1451] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1451] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1451] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1451] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1451] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1451] rt_sigprocmask(SIG_BLOCK, ~[], [pid 300] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1451] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1451] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1453]}, 88) = 1453 [pid 1451] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1451] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1451] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1453 attached [pid 1453] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1453] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1453] memfd_create("syzkaller", 0) = 3 [pid 1453] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 299] <... umount2 resumed>) = 0 [pid 1453] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1450] <... mount resumed>) = 0 [pid 1450] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1450] chdir("./file1") = 0 [pid 1450] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1450] ioctl(4, LOOP_CLR_FD) = 0 [pid 1450] close(4) = 0 [pid 1450] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1449] <... futex resumed>) = 0 [pid 1450] <... futex resumed>) = 1 [pid 1449] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1450] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1449] <... futex resumed>) = 0 [pid 1449] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1450] <... open resumed>) = 4 [pid 300] openat(AT_FDCWD, "./43/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1450] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... openat resumed>) = 4 [pid 299] newfstatat(AT_FDCWD, "./45/file1", [pid 1450] <... futex resumed>) = 1 [pid 1449] <... futex resumed>) = 0 [pid 300] newfstatat(4, "", [pid 1450] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1449] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1450] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1449] <... futex resumed>) = 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1450] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1449] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1450] <... open resumed>) = 5 [pid 300] getdents64(4, [pid 1450] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1450] <... futex resumed>) = 1 [pid 1449] <... futex resumed>) = 0 [pid 299] openat(AT_FDCWD, "./45/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1450] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1449] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] getdents64(4, [pid 1450] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1449] <... futex resumed>) = 0 [pid 1450] creat("./bus", 000 [pid 1449] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 299] <... openat resumed>) = 4 [pid 1450] <... creat resumed>) = 6 [pid 300] close(4 [pid 1450] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] newfstatat(4, "", [pid 1450] <... futex resumed>) = 1 [pid 1449] <... futex resumed>) = 0 [pid 300] <... close resumed>) = 0 [pid 1449] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1450] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1449] <... futex resumed>) = 0 [pid 300] rmdir("./43/file1" [pid 1450] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1449] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] getdents64(4, [pid 1450] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1449] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1449] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... rmdir resumed>) = 0 [pid 1450] <... futex resumed>) = 1 [pid 1449] <... futex resumed>) = 0 [pid 300] getdents64(3, [pid 1449] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1450] pwrite64(6, "+", 1, 0 [pid 299] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 300] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1450] <... pwrite64 resumed>) = 1 [pid 300] close(3 [pid 1450] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] getdents64(4, [pid 1449] <... futex resumed>) = 0 [pid 1450] <... futex resumed>) = 1 [pid 1449] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1450] open("./bus", O_RDONLY [pid 1449] <... futex resumed>) = 0 [pid 300] <... close resumed>) = 0 [pid 299] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1450] <... open resumed>) = 7 [pid 1449] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1450] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1450] <... futex resumed>) = 0 [pid 1449] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1450] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1449] <... futex resumed>) = 0 [pid 1449] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1449] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1450] <... copy_file_range resumed>) = 1 [pid 1453] <... write resumed>) = 1048576 [pid 1450] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1449] <... mmap resumed>) = 0x7f13c8ca3000 [pid 300] rmdir("./43" [pid 299] close(4 [pid 1450] <... futex resumed>) = 0 [pid 1449] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1450] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1449] <... mprotect resumed>) = 0 [pid 1449] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1449] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1453] munmap(0x7f13c08c4000, 138412032 [pid 1449] <... clone3 resumed> => {parent_tid=[1456]}, 88) = 1456 [pid 299] <... close resumed>) = 0 [pid 1449] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 299] rmdir("./45/file1" [pid 1449] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1449] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1453] <... munmap resumed>) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 1453] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 300] <... rmdir resumed>) = 0 [pid 299] getdents64(3, [pid 1453] <... openat resumed>) = 4 [ 50.274509][ T1431] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 50.286943][ T1450] loop0: detected capacity change from 0 to 2048 [ 50.298667][ T1431] EXT4-fs (loop2): This should not happen!! Data will be lost [ 50.298667][ T1431] [ 50.304800][ T567] EXT4-fs (loop3): This should not happen!! Data will be lost [ 50.304800][ T567] [pid 1453] ioctl(4, LOOP_SET_FD, 3 [pid 300] mkdir("./44", 0777 [pid 299] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 1456 attached [pid 300] <... mkdir resumed>) = 0 [pid 299] close(3 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 299] <... close resumed>) = 0 [pid 300] <... openat resumed>) = 3 [pid 299] rmdir("./45" [pid 300] ioctl(3, LOOP_CLR_FD [pid 299] <... rmdir resumed>) = 0 [pid 300] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 299] mkdir("./46", 0777 [pid 300] close(3 [pid 299] <... mkdir resumed>) = 0 [pid 300] <... close resumed>) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] <... openat resumed>) = 3 [pid 299] ioctl(3, LOOP_CLR_FD [pid 300] <... clone resumed>, child_tidptr=0x55558909e690) = 1457 [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1456] set_robust_list(0x7f13c8cc39a0, 24 [pid 1453] <... ioctl resumed>) = 0 [pid 299] <... clone resumed>, child_tidptr=0x55558909e690) = 1459 ./strace-static-x86_64: Process 1457 attached [pid 1457] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1457] chdir("./44") = 0 [pid 1457] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1457] setpgid(0, 0 [pid 1456] <... set_robust_list resumed>) = 0 [pid 1453] close(3 [pid 1456] rt_sigprocmask(SIG_SETMASK, [], [pid 1453] <... close resumed>) = 0 [pid 1456] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1453] close(4 [pid 1456] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1457] <... setpgid resumed>) = 0 [pid 1457] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1457] write(3, "1000", 4) = 4 [pid 1457] close(3) = 0 [pid 1457] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1456] <... mmap resumed>) = 0x20000000 [pid 1453] <... close resumed>) = 0 [pid 1457] write(1, "executing program\n", 18executing program ) = 18 [pid 1457] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1457] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1457] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1457] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1457] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1457] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1457] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1460]}, 88) = 1460 [pid 1457] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1457] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1457] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1460 attached ./strace-static-x86_64: Process 1459 attached [pid 1456] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1453] mkdir("./file1", 0777 [pid 1460] set_robust_list(0x7f13c8ce49a0, 24 [pid 1459] set_robust_list(0x55558909e6a0, 24 [pid 1456] <... futex resumed>) = 1 [pid 1456] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1453] <... mkdir resumed>) = 0 [pid 1459] <... set_robust_list resumed>) = 0 [pid 1449] <... futex resumed>) = 0 [pid 1460] <... set_robust_list resumed>) = 0 [pid 1448] <... mount resumed>) = 0 [pid 1453] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 1460] rt_sigprocmask(SIG_SETMASK, [], [pid 1459] chdir("./46" [pid 1449] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1448] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1459] <... chdir resumed>) = 0 [pid 1450] <... futex resumed>) = 0 [pid 1449] <... futex resumed>) = 1 [pid 1448] <... openat resumed>) = 3 [pid 1460] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1459] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1450] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1449] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1448] chdir("./file1" [pid 1450] <... open resumed>) = -1 EFAULT (Bad address) [pid 1460] memfd_create("syzkaller", 0 [pid 1459] <... prctl resumed>) = 0 [pid 1450] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1448] <... chdir resumed>) = 0 [pid 1460] <... memfd_create resumed>) = 3 [pid 1459] setpgid(0, 0 [pid 1450] <... futex resumed>) = 0 [pid 1449] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1448] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1460] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1459] <... setpgid resumed>) = 0 [pid 1460] <... mmap resumed>) = 0x7f13c08c4000 [pid 1460] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1460] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1460] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1460] ioctl(4, LOOP_SET_FD, 3 [pid 1459] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1449] <... futex resumed>) = 0 [pid 1448] <... openat resumed>) = 4 [pid 1460] <... ioctl resumed>) = 0 [pid 1460] close(3) = 0 [pid 1460] close(4) = 0 [pid 1460] mkdir("./file1", 0777) = 0 [pid 1460] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 1459] <... openat resumed>) = 3 [pid 1459] write(3, "1000", 4) = 4 [pid 1459] close(3) = 0 [pid 1459] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 1459] write(1, "executing program\n", 18) = 18 [pid 1459] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1459] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1459] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1459] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1459] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [ 50.363309][ T1453] loop4: detected capacity change from 0 to 2048 [ 50.385990][ T1450] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 50.398145][ T1460] loop3: detected capacity change from 0 to 2048 [pid 1459] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1459] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1462]}, 88) = 1462 [pid 1459] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1459] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1459] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1449] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1448] ioctl(4, LOOP_CLR_FD) = 0 [pid 1448] close(4) = 0 [pid 1448] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1448] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1462 attached [pid 1446] <... futex resumed>) = 0 [pid 1446] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1448] <... futex resumed>) = 0 [pid 1446] <... futex resumed>) = 1 [pid 1448] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1446] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1462] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1462] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1462] memfd_create("syzkaller", 0) = 3 [pid 1462] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1448] <... open resumed>) = 4 [pid 1448] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1446] <... futex resumed>) = 0 [pid 1448] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1446] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1448] <... open resumed>) = 5 [pid 1446] <... futex resumed>) = 0 [pid 1448] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1446] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1448] <... futex resumed>) = 0 [pid 1446] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1448] creat("./bus", 000 [pid 1446] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1448] <... creat resumed>) = 6 [pid 1446] <... futex resumed>) = 0 [pid 1448] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1446] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1448] <... futex resumed>) = 0 [pid 1446] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1448] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1446] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1448] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1446] <... futex resumed>) = 0 [pid 1448] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1446] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1448] <... futex resumed>) = 0 [pid 1446] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1448] pwrite64(6, "+", 1, 0 [pid 1446] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1448] <... pwrite64 resumed>) = 1 [pid 1446] <... futex resumed>) = 0 [pid 1448] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1446] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1448] <... futex resumed>) = 0 [pid 1446] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1448] open("./bus", O_RDONLY [pid 1446] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1448] <... open resumed>) = 7 [pid 1446] <... futex resumed>) = 0 [pid 1448] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1446] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1448] <... futex resumed>) = 0 [pid 1446] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1448] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1446] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1448] <... copy_file_range resumed>) = 1 [pid 1446] <... futex resumed>) = 0 [pid 1448] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1446] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1448] <... futex resumed>) = 0 [pid 1446] <... futex resumed>) = 0 [pid 1448] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1446] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1446] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1446] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1446] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1464]}, 88) = 1464 [pid 1446] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1446] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1446] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1464 attached [pid 1453] <... mount resumed>) = 0 [pid 1453] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1453] chdir("./file1") = 0 [pid 1453] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1453] ioctl(4, LOOP_CLR_FD) = 0 [pid 1453] close(4 [pid 1464] set_robust_list(0x7f13c8cc39a0, 24 [pid 1462] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1453] <... close resumed>) = 0 [pid 1453] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1451] <... futex resumed>) = 0 [pid 1453] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1451] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1453] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1451] <... futex resumed>) = 0 [pid 1453] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1451] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1464] <... set_robust_list resumed>) = 0 [pid 1453] <... open resumed>) = 4 [pid 1453] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1451] <... futex resumed>) = 0 [pid 1464] rt_sigprocmask(SIG_SETMASK, [], [pid 1453] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1451] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1464] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1453] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1451] <... futex resumed>) = 0 [pid 1464] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1453] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1451] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1453] <... open resumed>) = 5 [pid 1453] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1451] <... futex resumed>) = 0 [pid 1453] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1451] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1453] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1451] <... futex resumed>) = 0 [pid 1453] creat("./bus", 000 [pid 1451] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1453] <... creat resumed>) = 6 [pid 1453] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1451] <... futex resumed>) = 0 [pid 1453] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1451] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1453] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1451] <... futex resumed>) = 0 [pid 1453] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1451] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1453] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1453] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1451] <... futex resumed>) = 0 [pid 1453] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1451] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1453] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1451] <... futex resumed>) = 0 [pid 1453] pwrite64(6, "+", 1, 0 [pid 1464] <... mmap resumed>) = 0x20000000 [pid 1451] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1453] <... pwrite64 resumed>) = 1 [pid 1453] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1451] <... futex resumed>) = 0 [pid 1453] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1451] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1453] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1451] <... futex resumed>) = 0 [pid 1453] open("./bus", O_RDONLY [pid 1451] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1453] <... open resumed>) = 7 [pid 1453] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1451] <... futex resumed>) = 0 [pid 1453] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1451] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1453] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1451] <... futex resumed>) = 0 [pid 1453] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1451] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1464] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1453] <... copy_file_range resumed>) = 1 [pid 1451] <... futex resumed>) = 0 [pid 1453] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1451] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1453] <... futex resumed>) = 0 [pid 1451] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1453] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1451] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1451] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1451] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1466]}, 88) = 1466 [pid 1451] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1451] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1451] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1466 attached [pid 1466] set_robust_list(0x7f13c8cc39a0, 24 [pid 1464] <... futex resumed>) = 1 [pid 1446] <... futex resumed>) = 0 [pid 1464] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1446] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1448] <... futex resumed>) = 0 [pid 1446] <... futex resumed>) = 1 [pid 1448] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1446] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1448] <... open resumed>) = -1 EFAULT (Bad address) [pid 1448] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1446] <... futex resumed>) = 0 [pid 1448] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1446] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1448] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 50.405250][ T1450] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 50.418893][ T1450] EXT4-fs (loop0): This should not happen!! Data will be lost [ 50.418893][ T1450] [ 50.429785][ T1450] EXT4-fs (loop0): Total free blocks count 0 [ 50.436059][ T1450] EXT4-fs (loop0): Free/Dirty block details [ 50.446212][ T1450] EXT4-fs (loop0): free_blocks=2415919504 [pid 1446] <... futex resumed>) = 0 [pid 1466] <... set_robust_list resumed>) = 0 [pid 1462] <... write resumed>) = 1048576 [pid 1450] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1449] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1462] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1462] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1462] ioctl(4, LOOP_SET_FD, 3 [pid 1466] rt_sigprocmask(SIG_SETMASK, [], [pid 1460] <... mount resumed>) = 0 [pid 1446] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1462] <... ioctl resumed>) = 0 [pid 1462] close(3) = 0 [pid 1462] close(4) = 0 [pid 1462] mkdir("./file1", 0777) = 0 [pid 1462] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 1456] <... futex resumed>) = ? [pid 1456] +++ killed by SIGBUS +++ [pid 1450] +++ killed by SIGBUS +++ [pid 1466] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1466] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1460] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1460] chdir("./file1") = 0 [pid 1460] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1460] ioctl(4, LOOP_CLR_FD) = 0 [pid 1460] close(4) = 0 [pid 1460] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 50.459097][ T1450] EXT4-fs (loop0): dirty_blocks=32 [ 50.459171][ T1448] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 50.459246][ T1448] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 50.464223][ T1450] EXT4-fs (loop0): Block reservation details [ 50.464237][ T1450] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 50.468158][ T1462] loop2: detected capacity change from 0 to 2048 [pid 1460] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1457] <... futex resumed>) = 0 [pid 1451] <... futex resumed>) = 0 [pid 1457] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1451] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1449] +++ killed by SIGBUS +++ [pid 1460] <... futex resumed>) = 0 [pid 1457] <... futex resumed>) = 1 [pid 1460] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1457] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1460] <... open resumed>) = 4 [pid 1460] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1457] <... futex resumed>) = 0 [pid 1460] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1457] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1460] <... open resumed>) = 5 [pid 1457] <... futex resumed>) = 0 [pid 1460] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1457] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1460] <... futex resumed>) = 0 [pid 1457] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1460] creat("./bus", 000 [pid 1457] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1460] <... creat resumed>) = 6 [pid 1457] <... futex resumed>) = 0 [pid 1460] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1457] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1460] <... futex resumed>) = 0 [pid 1457] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1460] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1457] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1460] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1457] <... futex resumed>) = 0 [pid 1460] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1457] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1460] <... futex resumed>) = 0 [pid 1457] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1460] pwrite64(6, "+", 1, 0 [pid 1457] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1460] <... pwrite64 resumed>) = 1 [pid 1457] <... futex resumed>) = 0 [pid 1460] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1457] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1460] <... futex resumed>) = 0 [pid 1457] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1453] <... futex resumed>) = 0 [pid 1451] <... futex resumed>) = 1 [pid 1460] open("./bus", O_RDONLY [pid 1457] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1460] <... open resumed>) = 7 [pid 1457] <... futex resumed>) = 0 [pid 1446] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1460] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1457] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1460] <... futex resumed>) = 0 [pid 1457] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1460] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1457] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1460] <... copy_file_range resumed>) = 1 [pid 1457] <... futex resumed>) = 0 [pid 1460] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1457] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1460] <... futex resumed>) = 0 [pid 1457] <... futex resumed>) = 0 [pid 1460] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1457] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1457] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1457] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1457] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1469]}, 88) = 1469 [pid 1457] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1457] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1457] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1453] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000) = -1 EFAULT (Bad address) [pid 1453] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1453] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1449, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- ./strace-static-x86_64: Process 1469 attached [pid 1451] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./44/binderfs") = 0 [pid 297] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1469] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1469] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 50.481039][ T1448] EXT4-fs (loop1): This should not happen!! Data will be lost [ 50.481039][ T1448] [ 50.509093][ T1449] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 50.520552][ T1448] EXT4-fs (loop1): Total free blocks count 0 [ 50.531385][ T1449] EXT4-fs (loop0): This should not happen!! Data will be lost [ 50.531385][ T1449] [ 50.544678][ T1448] EXT4-fs (loop1): Free/Dirty block details [ 50.551234][ T1448] EXT4-fs (loop1): free_blocks=2415919504 [ 50.557042][ T1448] EXT4-fs (loop1): dirty_blocks=32 [pid 1462] <... mount resumed>) = 0 [pid 1451] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1462] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1451] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1462] <... openat resumed>) = 3 [pid 1453] <... futex resumed>) = 0 [pid 1451] <... futex resumed>) = 1 [pid 1462] chdir("./file1" [pid 1451] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1462] <... chdir resumed>) = 0 [pid 1462] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1462] ioctl(4, LOOP_CLR_FD) = 0 [pid 1462] close(4 [pid 1469] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1462] <... close resumed>) = 0 [pid 1448] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1462] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1459] <... futex resumed>) = 0 [pid 1462] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1459] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1462] <... open resumed>) = 4 [pid 1459] <... futex resumed>) = 0 [pid 1462] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1459] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1462] <... futex resumed>) = 0 [pid 1459] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1462] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1459] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1462] <... open resumed>) = 5 [pid 1459] <... futex resumed>) = 0 [pid 1462] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1459] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1462] <... futex resumed>) = 0 [pid 1459] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1462] creat("./bus", 000 [pid 1459] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1462] <... creat resumed>) = 6 [pid 1459] <... futex resumed>) = 0 [pid 1462] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1459] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1462] <... futex resumed>) = 0 [pid 1459] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1462] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1459] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1462] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1459] <... futex resumed>) = 0 [pid 1462] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1459] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1462] <... futex resumed>) = 0 [pid 1459] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1462] pwrite64(6, "+", 1, 0 [pid 1459] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1462] <... pwrite64 resumed>) = 1 [pid 1459] <... futex resumed>) = 0 [pid 1462] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1459] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1462] <... futex resumed>) = 0 [pid 1459] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1462] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1459] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1462] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1459] <... futex resumed>) = 0 [pid 1462] open("./bus", O_RDONLY [pid 1459] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1462] <... open resumed>) = 7 [pid 1462] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1459] <... futex resumed>) = 0 [pid 1462] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1459] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1462] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1459] <... futex resumed>) = 0 [pid 1462] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1459] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1462] <... copy_file_range resumed>) = 1 [pid 1459] <... futex resumed>) = 0 [pid 1462] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1459] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1462] <... futex resumed>) = 0 [pid 1459] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1462] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1459] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1459] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1459] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1471]}, 88) = 1471 [pid 1459] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1459] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1459] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1471 attached [pid 1471] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1471] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 50.562309][ T1448] EXT4-fs (loop1): Block reservation details [ 50.565711][ T1453] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 50.568678][ T1448] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 50.589927][ T1453] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 1471] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1459] <... futex resumed>) = 0 [pid 1459] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1462] <... futex resumed>) = 0 [pid 1459] <... futex resumed>) = 1 [pid 1469] <... mmap resumed>) = 0x20000000 [pid 1462] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1459] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1462] <... open resumed>) = -1 EFAULT (Bad address) [pid 1464] <... futex resumed>) = ? [pid 1464] +++ killed by SIGBUS +++ [pid 1462] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1459] <... futex resumed>) = 0 [pid 1459] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1459] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... umount2 resumed>) = 0 [pid 297] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./44/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./44/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1457] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 297] close(4 [pid 1457] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... close resumed>) = 0 [pid 297] rmdir("./44/file1" [pid 1460] <... futex resumed>) = 0 [pid 1457] <... futex resumed>) = 1 [pid 1460] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1457] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1460] <... open resumed>) = -1 EFAULT (Bad address) [pid 1471] <... futex resumed>) = 1 [pid 1471] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1460] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... rmdir resumed>) = 0 [pid 1457] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 297] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./44" [pid 1460] <... futex resumed>) = 0 [pid 1457] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... rmdir resumed>) = 0 [pid 297] mkdir("./45", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3 [pid 1451] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 297] <... close resumed>) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1472 ./strace-static-x86_64: Process 1472 attached [pid 1472] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1472] chdir("./45" [pid 1457] <... futex resumed>) = 0 [pid 1469] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1472] <... chdir resumed>) = 0 [pid 1472] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1472] setpgid(0, 0) = 0 [pid 1472] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1469] <... futex resumed>) = 0 [pid 1457] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1469] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1472] write(3, "1000", 4) = 4 [pid 1472] close(3) = 0 [pid 1472] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1472] write(1, "executing program\n", 18) = 18 executing program [pid 1472] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1472] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1472] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1472] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1472] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1472] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1472] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1473]}, 88) = 1473 [pid 1472] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1472] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 50.604857][ T1462] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 50.605536][ T1448] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 50.633887][ T1460] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 50.651700][ T1453] EXT4-fs (loop4): This should not happen!! Data will be lost [ 50.651700][ T1453] [pid 1472] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1459] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 1473 attached [pid 1473] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1473] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1473] memfd_create("syzkaller", 0) = 3 [pid 1473] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1473] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1473] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1473] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1473] ioctl(4, LOOP_SET_FD, 3 [pid 1457] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1473] <... ioctl resumed>) = 0 [pid 1473] close(3) = 0 [ 50.652170][ T1462] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 50.662016][ T1453] EXT4-fs (loop4): Total free blocks count 0 [ 50.679052][ T1460] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 50.679884][ T1453] EXT4-fs (loop4): Free/Dirty block details [ 50.697727][ T1453] EXT4-fs (loop4): free_blocks=2415919504 [ 50.698884][ T1473] loop0: detected capacity change from 0 to 2048 [ 50.703687][ T1453] EXT4-fs (loop4): dirty_blocks=32 [pid 1473] close(4 [pid 1453] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1466] <... futex resumed>) = ? [pid 1448] +++ killed by SIGBUS +++ [pid 1446] +++ killed by SIGBUS +++ [pid 1453] +++ killed by SIGBUS +++ [pid 1473] <... close resumed>) = 0 [pid 1473] mkdir("./file1", 0777) = 0 [ 50.714807][ T1453] EXT4-fs (loop4): Block reservation details [ 50.720802][ T1453] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 50.726935][ T1448] EXT4-fs (loop1): This should not happen!! Data will be lost [ 50.726935][ T1448] [ 50.737615][ T1460] EXT4-fs (loop3): This should not happen!! Data will be lost [ 50.737615][ T1460] [ 50.738555][ T1466] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 1473] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 1466] +++ killed by SIGBUS +++ [pid 1451] +++ killed by SIGBUS +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1446, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=18} --- [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1451, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 1473] <... mount resumed>) = 0 [pid 1473] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1473] chdir("./file1") = 0 [pid 1473] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1473] ioctl(4, LOOP_CLR_FD) = 0 [ 50.749495][ T1462] EXT4-fs (loop2): This should not happen!! Data will be lost [ 50.749495][ T1462] [ 50.759631][ T1466] EXT4-fs (loop4): This should not happen!! Data will be lost [ 50.759631][ T1466] [ 50.769563][ T1460] EXT4-fs (loop3): Total free blocks count 0 [ 50.778590][ T1462] EXT4-fs (loop2): Total free blocks count 0 [ 50.785061][ T1460] EXT4-fs (loop3): Free/Dirty block details [ 50.790271][ T1462] EXT4-fs (loop2): Free/Dirty block details [ 50.796226][ T1460] EXT4-fs (loop3): free_blocks=2415919504 [ 50.801509][ T1462] EXT4-fs (loop2): free_blocks=2415919504 [pid 1473] close(4) = 0 [pid 301] umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1473] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1472] <... futex resumed>) = 0 [pid 1472] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1472] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1473] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 1473] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1472] <... futex resumed>) = 0 [pid 1472] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1472] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1473] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 1473] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1472] <... futex resumed>) = 0 [pid 1472] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1472] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1473] creat("./bus", 000) = 6 [pid 1473] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1472] <... futex resumed>) = 0 [pid 1472] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1473] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1472] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1473] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1473] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1472] <... futex resumed>) = 0 [pid 1473] pwrite64(6, "+", 1, 0 [pid 1472] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1473] <... pwrite64 resumed>) = 1 [pid 1472] <... futex resumed>) = 0 [pid 1473] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1472] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1473] <... futex resumed>) = 0 [pid 1472] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1473] open("./bus", O_RDONLY [pid 1472] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1473] <... open resumed>) = 7 [pid 1472] <... futex resumed>) = 0 [pid 1473] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1472] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1473] <... futex resumed>) = 0 [pid 1472] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1473] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1472] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1473] <... copy_file_range resumed>) = 1 [pid 1472] <... futex resumed>) = 0 [pid 1473] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1472] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1473] <... futex resumed>) = 0 [pid 1472] <... futex resumed>) = 0 [pid 1473] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1472] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1472] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1472] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1472] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1476]}, 88) = 1476 [pid 1472] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1472] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1472] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1476 attached [pid 1476] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1476] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1476] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 301] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] <... openat resumed>) = 3 [pid 298] <... openat resumed>) = 3 [pid 1476] <... mmap resumed>) = 0x20000000 [pid 1476] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1472] <... futex resumed>) = 0 [pid 1472] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1473] <... futex resumed>) = 0 [pid 1472] <... futex resumed>) = 1 [pid 1473] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1472] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1473] <... open resumed>) = -1 EFAULT (Bad address) [pid 1473] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1472] <... futex resumed>) = 0 [pid 1472] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1462] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 301] newfstatat(3, "", [pid 298] newfstatat(3, "", [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, [pid 298] getdents64(3, [pid 301] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 298] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./44/binderfs", [pid 298] newfstatat(AT_FDCWD, "./45/binderfs", [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./44/binderfs" [pid 298] unlink("./45/binderfs" [pid 301] <... unlink resumed>) = 0 [pid 298] <... unlink resumed>) = 0 [pid 301] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1476] <... futex resumed>) = 1 [ 50.812905][ T1462] EXT4-fs (loop2): dirty_blocks=32 [ 50.819293][ T1462] EXT4-fs (loop2): Block reservation details [ 50.825570][ T1460] EXT4-fs (loop3): dirty_blocks=32 [ 50.825811][ T1462] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 50.832134][ T1473] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 50.836913][ T1460] EXT4-fs (loop3): Block reservation details [pid 1476] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1472] <... futex resumed>) = 0 [pid 1471] <... futex resumed>) = ? [pid 1471] +++ killed by SIGBUS +++ [pid 1462] +++ killed by SIGBUS +++ [pid 1460] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1469] <... futex resumed>) = ? [pid 1469] +++ killed by SIGBUS +++ [ 50.850861][ T1473] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 50.861920][ T1460] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 50.868831][ T1473] EXT4-fs (loop0): This should not happen!! Data will be lost [ 50.868831][ T1473] [ 50.877965][ T1460] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 50.883983][ T1473] EXT4-fs (loop0): Total free blocks count 0 [ 50.901789][ T1460] EXT4-fs (loop3): This should not happen!! Data will be lost [ 50.901789][ T1460] [pid 1472] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1459] +++ killed by SIGBUS +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1459, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 301] <... umount2 resumed>) = 0 [pid 299] umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./46/binderfs") = 0 [pid 299] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./44/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./44/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./44/file1") = 0 [pid 301] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./44") = 0 [pid 301] mkdir("./45", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./45/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./45/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./45/file1") = 0 [pid 298] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./45") = 0 [pid 298] mkdir("./46", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] <... clone resumed>, child_tidptr=0x55558909e690) = 1477 [pid 301] <... clone resumed>, child_tidptr=0x55558909e690) = 1478 ./strace-static-x86_64: Process 1478 attached [pid 1478] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1478] chdir("./45") = 0 [pid 1472] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1478] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1478] setpgid(0, 0) = 0 [pid 1478] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 1477 attached [pid 1477] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1477] chdir("./46" [pid 1478] <... openat resumed>) = 3 [pid 1477] <... chdir resumed>) = 0 [pid 1477] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1478] write(3, "1000", 4 [pid 1477] <... prctl resumed>) = 0 [pid 1478] <... write resumed>) = 4 [pid 1477] setpgid(0, 0 [pid 1478] close(3) = 0 [pid 1477] <... setpgid resumed>) = 0 [pid 1478] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1477] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1473] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1472] ????( [pid 1460] +++ killed by SIGBUS +++ [pid 1457] +++ killed by SIGBUS +++ [pid 1477] <... openat resumed>) = 3 [pid 1477] write(3, "1000", 4) = 4 [pid 1477] close(3) = 0 [pid 1477] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1478] write(1, "executing program\n", 18executing program ) = 18 [pid 1478] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 1478] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1477] write(1, "executing program\n", 18 [pid 1478] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1477] <... write resumed>) = 18 [pid 1478] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1478] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1477] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1478] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1477] <... futex resumed>) = 0 [ 50.902647][ T1459] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 50.912106][ T1459] EXT4-fs (loop2): This should not happen!! Data will be lost [ 50.912106][ T1459] [ 50.912413][ T1473] EXT4-fs (loop0): Free/Dirty block details [ 50.940658][ T1473] EXT4-fs (loop0): free_blocks=2415919504 [ 50.946297][ T1473] EXT4-fs (loop0): dirty_blocks=32 [ 50.951194][ T1473] EXT4-fs (loop0): Block reservation details [ 50.957207][ T1473] EXT4-fs (loop0): i_reserved_data_blocks=2 [pid 1477] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1472] <... ???? resumed>) = ? [pid 1473] +++ killed by SIGBUS +++ [pid 1478] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1477] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1476] <... futex resumed>) = ? [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1457, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 1478] <... mprotect resumed>) = 0 [pid 1477] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1477] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1478] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1477] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1477] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1478] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1478] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1477] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1477] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1478] <... clone3 resumed> => {parent_tid=[1480]}, 88) = 1480 [pid 1478] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1478] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1478] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1477] <... clone3 resumed> => {parent_tid=[1481]}, 88) = 1481 [pid 1477] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1477] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1477] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 300] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 300] umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./44/binderfs") = 0 [pid 300] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 1480 attached [pid 1480] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1480] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1480] memfd_create("syzkaller", 0) = 3 [pid 1480] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 ./strace-static-x86_64: Process 1481 attached [pid 299] <... umount2 resumed>) = 0 [pid 1480] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1481] set_robust_list(0x7f13c8ce49a0, 24 [pid 1480] munmap(0x7f13c08c4000, 138412032 [pid 1476] +++ killed by SIGBUS +++ [pid 1472] +++ killed by SIGBUS +++ [pid 300] <... umount2 resumed>) = 0 [pid 299] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1481] <... set_robust_list resumed>) = 0 [pid 300] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1472, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 1481] rt_sigprocmask(SIG_SETMASK, [], [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1481] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 299] newfstatat(AT_FDCWD, "./46/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] newfstatat(AT_FDCWD, "./44/file1", [pid 1481] memfd_create("syzkaller", 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1481] <... memfd_create resumed>) = 3 [pid 300] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./46/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1481] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 300] openat(AT_FDCWD, "./44/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 299] <... openat resumed>) = 4 [pid 297] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 300] <... openat resumed>) = 4 [pid 299] newfstatat(4, "", [pid 297] <... openat resumed>) = 3 [pid 1481] <... mmap resumed>) = 0x7f13c08c4000 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] newfstatat(4, "", [pid 297] newfstatat(3, "", [pid 299] getdents64(4, [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, [pid 297] getdents64(3, [pid 1480] <... munmap resumed>) = 0 [pid 1480] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1480] ioctl(4, LOOP_SET_FD, 3 [pid 1481] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 300] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, [pid 297] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./46/file1" [pid 300] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 297] umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] close(4 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] <... close resumed>) = 0 [pid 297] newfstatat(AT_FDCWD, "./45/binderfs", [pid 300] rmdir("./44/file1" [pid 297] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] <... rmdir resumed>) = 0 [pid 299] getdents64(3, [pid 297] unlink("./45/binderfs" [pid 300] getdents64(3, [pid 299] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 297] <... unlink resumed>) = 0 [pid 300] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 299] close(3 [pid 297] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] close(3 [pid 299] <... close resumed>) = 0 [pid 300] <... close resumed>) = 0 [pid 299] rmdir("./46" [pid 300] rmdir("./44" [pid 299] <... rmdir resumed>) = 0 [pid 1480] <... ioctl resumed>) = 0 [pid 300] <... rmdir resumed>) = 0 [pid 299] mkdir("./47", 0777 [pid 300] mkdir("./45", 0777 [pid 299] <... mkdir resumed>) = 0 [pid 300] <... mkdir resumed>) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1480] close(3 [pid 300] <... openat resumed>) = 3 [pid 299] <... openat resumed>) = 3 [pid 1480] <... close resumed>) = 0 [pid 300] ioctl(3, LOOP_CLR_FD [pid 299] ioctl(3, LOOP_CLR_FD [pid 1480] close(4 [pid 300] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1481] <... write resumed>) = 1048576 [pid 1480] <... close resumed>) = 0 [pid 300] close(3 [pid 299] close(3 [pid 1480] mkdir("./file1", 0777) = 0 [pid 1480] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 1481] munmap(0x7f13c08c4000, 138412032 [pid 300] <... close resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 1481] <... munmap resumed>) = 0 [pid 1481] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 50.969416][ T1476] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 50.989273][ T1476] EXT4-fs (loop0): This should not happen!! Data will be lost [ 50.989273][ T1476] [ 51.006911][ T1480] loop4: detected capacity change from 0 to 2048 [pid 1481] ioctl(4, LOOP_SET_FD, 3 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 1482 attached [pid 1481] <... ioctl resumed>) = 0 [pid 297] <... umount2 resumed>) = 0 [pid 300] <... clone resumed>, child_tidptr=0x55558909e690) = 1482 [pid 299] <... clone resumed>, child_tidptr=0x55558909e690) = 1483 [pid 297] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./45/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./45/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./45/file1" [pid 1482] set_robust_list(0x55558909e6a0, 24 [pid 297] <... rmdir resumed>) = 0 [pid 297] getdents64(3, [pid 1482] <... set_robust_list resumed>) = 0 [pid 297] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./45") = 0 [pid 297] mkdir("./46", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1482] chdir("./45" [pid 297] <... openat resumed>) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3 [pid 1482] <... chdir resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1485 [pid 1481] close(3) = 0 [pid 1481] close(4 [pid 1482] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 1485 attached ./strace-static-x86_64: Process 1483 attached ) = 0 [pid 1481] <... close resumed>) = 0 [pid 1480] <... mount resumed>) = 0 [pid 1480] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1480] chdir("./file1") = 0 [pid 1480] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1480] ioctl(4, LOOP_CLR_FD) = 0 [pid 1480] close(4) = 0 [pid 1480] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1485] set_robust_list(0x55558909e6a0, 24 [pid 1483] set_robust_list(0x55558909e6a0, 24 [pid 1482] setpgid(0, 0 [pid 1480] <... futex resumed>) = 1 [pid 1478] <... futex resumed>) = 0 [pid 1485] <... set_robust_list resumed>) = 0 [pid 1483] <... set_robust_list resumed>) = 0 [pid 1482] <... setpgid resumed>) = 0 [pid 1480] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1478] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1485] chdir("./46" [pid 1483] chdir("./47" [pid 1480] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1485] <... chdir resumed>) = 0 [pid 1483] <... chdir resumed>) = 0 [pid 1482] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1480] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1478] <... futex resumed>) = 0 [pid 1480] <... open resumed>) = 4 [pid 1480] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1485] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1483] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1482] <... openat resumed>) = 3 [pid 1480] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1478] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1485] <... prctl resumed>) = 0 [pid 1483] <... prctl resumed>) = 0 [pid 1482] write(3, "1000", 4 [pid 1485] setpgid(0, 0 [pid 1483] setpgid(0, 0 [pid 1482] <... write resumed>) = 4 [pid 1478] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1485] <... setpgid resumed>) = 0 [pid 1483] <... setpgid resumed>) = 0 [pid 1482] close(3 [pid 1478] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1485] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1480] <... futex resumed>) = 0 [pid 1478] <... futex resumed>) = 1 [pid 1485] <... openat resumed>) = 3 [pid 1483] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1482] <... close resumed>) = 0 [pid 1480] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1478] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1485] write(3, "1000", 4 [pid 1483] <... openat resumed>) = 3 [pid 1482] symlink("/dev/binderfs", "./binderfs" [pid 1480] <... open resumed>) = 5 [pid 1485] <... write resumed>) = 4 [pid 1483] write(3, "1000", 4 [pid 1482] <... symlink resumed>) = 0 [pid 1480] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1478] <... futex resumed>) = 0 [pid 1480] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1478] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1480] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1478] <... futex resumed>) = 0 [pid 1480] creat("./bus", 000 [pid 1478] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1480] <... creat resumed>) = 6 [pid 1480] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1478] <... futex resumed>) = 0 executing program [pid 1480] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1478] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1485] close(3 [pid 1483] <... write resumed>) = 4 [pid 1482] write(1, "executing program\n", 18 [pid 1480] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1478] <... futex resumed>) = 0 [pid 1485] <... close resumed>) = 0 [pid 1483] close(3 [pid 1482] <... write resumed>) = 18 [pid 1480] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1478] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1485] symlink("/dev/binderfs", "./binderfs" [pid 1483] <... close resumed>) = 0 [pid 1482] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1480] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1480] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1485] <... symlink resumed>) = 0 [pid 1483] symlink("/dev/binderfs", "./binderfs" [pid 1482] <... futex resumed>) = 0 [pid 1480] <... futex resumed>) = 1 [pid 1478] <... futex resumed>) = 0 executing program [pid 1485] write(1, "executing program\n", 18 [pid 1483] <... symlink resumed>) = 0 [pid 1482] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1480] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1478] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000executing program [pid 1485] <... write resumed>) = 18 [pid 1483] write(1, "executing program\n", 18 [pid 1482] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1480] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1478] <... futex resumed>) = 0 [pid 1485] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1483] <... write resumed>) = 18 [pid 1482] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1480] pwrite64(6, "+", 1, 0 [pid 1478] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1485] <... futex resumed>) = 0 [pid 1483] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1482] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1480] <... pwrite64 resumed>) = 1 [pid 1485] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1483] <... futex resumed>) = 0 [pid 1482] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1480] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1485] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1483] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1482] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1480] <... futex resumed>) = 1 [pid 1478] <... futex resumed>) = 0 [pid 1485] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1483] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1482] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1480] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1478] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1485] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1483] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1482] <... mprotect resumed>) = 0 [pid 1480] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1478] <... futex resumed>) = 0 [pid 1485] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1483] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1482] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1481] mkdir("./file1", 0777 [pid 1480] open("./bus", O_RDONLY [pid 1478] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1485] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1483] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1482] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1480] <... open resumed>) = 7 [pid 1485] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1483] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1482] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1480] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1485] <... mprotect resumed>) = 0 [pid 1483] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1480] <... futex resumed>) = 1 [pid 1478] <... futex resumed>) = 0 [pid 1481] <... mkdir resumed>) = 0 [pid 1485] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1483] <... mprotect resumed>) = 0 [pid 1482] <... clone3 resumed> => {parent_tid=[1487]}, 88) = 1487 [pid 1480] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1478] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1485] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1483] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1482] rt_sigprocmask(SIG_SETMASK, [], [pid 1481] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 1480] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1478] <... futex resumed>) = 0 [pid 1485] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1483] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1482] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1480] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1478] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1488 attached ./strace-static-x86_64: Process 1487 attached [pid 1483] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1482] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1480] <... copy_file_range resumed>) = 1 [pid 1478] <... futex resumed>) = 0 [pid 1488] set_robust_list(0x7f13c8ce49a0, 24 [pid 1487] set_robust_list(0x7f13c8ce49a0, 24 [pid 1485] <... clone3 resumed> => {parent_tid=[1488]}, 88) = 1488 [pid 1482] <... futex resumed>) = 0 [pid 1480] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1478] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1488] <... set_robust_list resumed>) = 0 [pid 1487] <... set_robust_list resumed>) = 0 [pid 1485] rt_sigprocmask(SIG_SETMASK, [], [pid 1483] <... clone3 resumed> => {parent_tid=[1489]}, 88) = 1489 [pid 1482] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1488] rt_sigprocmask(SIG_SETMASK, [], [pid 1487] rt_sigprocmask(SIG_SETMASK, [], [pid 1485] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1483] rt_sigprocmask(SIG_SETMASK, [], [pid 1480] <... futex resumed>) = 0 [pid 1478] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1488] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1487] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1485] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1483] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1480] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1478] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1488] memfd_create("syzkaller", 0 [pid 1487] memfd_create("syzkaller", 0 [pid 1485] <... futex resumed>) = 0 [pid 1483] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1488] <... memfd_create resumed>) = 3 [pid 1487] <... memfd_create resumed>) = 3 [pid 1485] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1483] <... futex resumed>) = 0 [pid 1478] <... mprotect resumed>) = 0 [pid 1488] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1487] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1483] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1489 attached [pid 1488] <... mmap resumed>) = 0x7f13c08c4000 [pid 1487] <... mmap resumed>) = 0x7f13c08c4000 [pid 1478] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1489] set_robust_list(0x7f13c8ce49a0, 24 [pid 1478] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1489] <... set_robust_list resumed>) = 0 [pid 1478] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1489] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1478] <... clone3 resumed> => {parent_tid=[1492]}, 88) = 1492 [pid 1489] memfd_create("syzkaller", 0 [pid 1478] rt_sigprocmask(SIG_SETMASK, [], [pid 1489] <... memfd_create resumed>) = 3 [pid 1478] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1489] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1478] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1489] <... mmap resumed>) = 0x7f13c08c4000 [pid 1488] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1478] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1492 attached [pid 1489] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1487] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1481] <... mount resumed>) = 0 [pid 1478] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1492] set_robust_list(0x7f13c8cc39a0, 24 [pid 1489] <... write resumed>) = 1048576 [pid 1488] <... write resumed>) = 1048576 [pid 1487] <... write resumed>) = 1048576 [pid 1481] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1481] chdir("./file1") = 0 [pid 1481] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1492] <... set_robust_list resumed>) = 0 [pid 1489] munmap(0x7f13c08c4000, 138412032 [pid 1488] munmap(0x7f13c08c4000, 138412032 [pid 1487] munmap(0x7f13c08c4000, 138412032 [pid 1481] <... openat resumed>) = 4 [pid 1481] ioctl(4, LOOP_CLR_FD) = 0 [pid 1481] close(4) = 0 [ 51.021131][ T1481] loop1: detected capacity change from 0 to 2048 [pid 1481] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1477] <... futex resumed>) = 0 [pid 1481] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1477] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1481] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1477] <... futex resumed>) = 0 [pid 1481] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1477] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1481] <... open resumed>) = 4 [pid 1481] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1477] <... futex resumed>) = 0 [pid 1481] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1477] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1481] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1477] <... futex resumed>) = 0 [pid 1481] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1477] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1481] <... open resumed>) = 5 [pid 1481] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1477] <... futex resumed>) = 0 [pid 1481] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1477] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1481] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1477] <... futex resumed>) = 0 [pid 1481] creat("./bus", 000 [pid 1477] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1481] <... creat resumed>) = 6 [pid 1481] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1477] <... futex resumed>) = 0 [pid 1481] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1477] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1481] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1477] <... futex resumed>) = 0 [pid 1481] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1477] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1481] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1481] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1477] <... futex resumed>) = 0 [pid 1481] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1477] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1481] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1477] <... futex resumed>) = 0 [pid 1481] pwrite64(6, "+", 1, 0 [pid 1477] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1481] <... pwrite64 resumed>) = 1 [pid 1481] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1477] <... futex resumed>) = 0 [pid 1481] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1477] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1481] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1477] <... futex resumed>) = 0 [pid 1481] open("./bus", O_RDONLY [pid 1477] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1481] <... open resumed>) = 7 [pid 1481] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1477] <... futex resumed>) = 0 [pid 1481] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1477] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1481] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1477] <... futex resumed>) = 0 [pid 1481] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1477] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1481] <... copy_file_range resumed>) = 1 [pid 1477] <... futex resumed>) = 0 [pid 1481] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1477] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1481] <... futex resumed>) = 0 [pid 1477] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1481] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1477] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1477] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1477] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1493]}, 88) = 1493 [pid 1477] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1477] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1477] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1493 attached [pid 1493] set_robust_list(0x7f13c8cc39a0, 24 [pid 1492] rt_sigprocmask(SIG_SETMASK, [], [pid 1493] <... set_robust_list resumed>) = 0 [pid 1493] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1493] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1492] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1492] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1493] <... mmap resumed>) = 0x20000000 [pid 1493] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1492] <... mmap resumed>) = 0x20000000 [pid 1477] <... futex resumed>) = 0 [pid 1477] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1481] <... futex resumed>) = 0 [pid 1477] <... futex resumed>) = 1 [pid 1481] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1477] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1481] <... open resumed>) = -1 EFAULT (Bad address) [pid 1481] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1477] <... futex resumed>) = 0 [pid 1493] <... futex resumed>) = 1 [pid 1492] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1489] <... munmap resumed>) = 0 [pid 1488] <... munmap resumed>) = 0 [pid 1487] <... munmap resumed>) = 0 [pid 1477] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1488] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1488] ioctl(4, LOOP_SET_FD, 3 [pid 1493] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1492] <... futex resumed>) = 1 [pid 1489] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1487] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1478] <... futex resumed>) = 0 [pid 1477] <... futex resumed>) = 0 [pid 1488] <... ioctl resumed>) = 0 [pid 1488] close(3) = 0 [pid 1488] close(4) = 0 [pid 1488] mkdir("./file1", 0777) = 0 [pid 1488] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 1492] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1489] <... openat resumed>) = 4 [pid 1487] <... openat resumed>) = 4 [pid 1478] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1477] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1489] ioctl(4, LOOP_SET_FD, 3 [pid 1487] ioctl(4, LOOP_SET_FD, 3 [pid 1480] <... futex resumed>) = 0 [pid 1478] <... futex resumed>) = 1 [ 51.088868][ T1481] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 51.090208][ T1488] loop0: detected capacity change from 0 to 2048 [ 51.104435][ T1481] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 51.122173][ T1481] EXT4-fs (loop1): This should not happen!! Data will be lost [ 51.122173][ T1481] [ 51.127041][ T1489] loop2: detected capacity change from 0 to 2048 [pid 1489] <... ioctl resumed>) = 0 [pid 1481] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1480] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1478] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1480] <... open resumed>) = -1 EFAULT (Bad address) [pid 1480] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1478] <... futex resumed>) = 0 [pid 1493] <... futex resumed>) = ? [pid 1489] close(3 [pid 1487] <... ioctl resumed>) = 0 [pid 1478] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1477] <... futex resumed>) = ? [pid 1493] +++ killed by SIGBUS +++ [pid 1489] <... close resumed>) = 0 [pid 1487] close(3 [pid 1478] <... futex resumed>) = 0 [pid 1478] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1481] +++ killed by SIGBUS +++ [pid 1477] +++ killed by SIGBUS +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1477, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8} --- [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 1488] <... mount resumed>) = 0 [pid 1488] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1488] chdir("./file1") = 0 [pid 1488] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1488] ioctl(4, LOOP_CLR_FD) = 0 [pid 1488] close(4) = 0 [pid 1488] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1485] <... futex resumed>) = 0 [pid 1485] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1485] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1488] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 298] <... restart_syscall resumed>) = 0 [pid 298] umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1488] <... open resumed>) = 4 [pid 298] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1488] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1488] <... futex resumed>) = 1 [pid 1485] <... futex resumed>) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1488] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1485] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [ 51.132047][ T1481] EXT4-fs (loop1): Total free blocks count 0 [ 51.138124][ T1487] loop3: detected capacity change from 0 to 2048 [ 51.143944][ T1481] EXT4-fs (loop1): Free/Dirty block details [ 51.143958][ T1481] EXT4-fs (loop1): free_blocks=2415919504 [ 51.143970][ T1481] EXT4-fs (loop1): dirty_blocks=32 [ 51.143980][ T1481] EXT4-fs (loop1): Block reservation details [ 51.143990][ T1481] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 51.146013][ T1480] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, [pid 298] newfstatat(AT_FDCWD, "./46/binderfs", [pid 1488] <... open resumed>) = 5 [pid 1485] <... futex resumed>) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1488] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1485] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] unlink("./46/binderfs" [pid 1488] <... futex resumed>) = 0 [pid 1485] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1488] creat("./bus", 000 [pid 1485] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... unlink resumed>) = 0 [pid 1488] <... creat resumed>) = 6 [pid 1485] <... futex resumed>) = 0 [pid 1488] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1485] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1488] <... futex resumed>) = 0 [pid 1485] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1488] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1485] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1488] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1485] <... futex resumed>) = 0 [pid 1488] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1485] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1488] <... futex resumed>) = 0 [pid 1485] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1488] pwrite64(6, "+", 1, 0 [pid 1485] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1488] <... pwrite64 resumed>) = 1 [pid 1485] <... futex resumed>) = 0 [pid 1488] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1485] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1488] <... futex resumed>) = 0 [pid 1485] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1488] open("./bus", O_RDONLY [pid 1485] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1488] <... open resumed>) = 7 [pid 1485] <... futex resumed>) = 0 [pid 1488] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1485] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1488] <... futex resumed>) = 0 [pid 1485] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1488] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1485] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1488] <... copy_file_range resumed>) = 1 [pid 1485] <... futex resumed>) = 0 [pid 1488] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1485] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1488] <... futex resumed>) = 0 [pid 1485] <... futex resumed>) = 0 [pid 1488] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1485] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1485] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1485] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1485] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1496]}, 88) = 1496 [pid 1485] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1485] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1485] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1496 attached [pid 1496] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1496] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1496] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1485] <... futex resumed>) = 0 [pid 1485] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1488] <... futex resumed>) = 0 [pid 1485] <... futex resumed>) = 1 [pid 1488] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1485] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1488] <... open resumed>) = -1 EFAULT (Bad address) [pid 1488] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1485] <... futex resumed>) = 0 [pid 1489] close(4 [pid 1487] <... close resumed>) = 0 [pid 1485] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1478] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1485] <... futex resumed>) = 0 [ 51.152317][ T1481] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 51.155938][ T1480] block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 51.161351][ T1481] EXT4-fs (loop1): This should not happen!! Data will be lost [ 51.161351][ T1481] [ 51.167926][ T1480] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 51.203032][ T1488] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, [pid 1485] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1496] <... futex resumed>) = 1 [pid 1496] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1489] <... close resumed>) = 0 [pid 1487] close(4 [pid 1489] mkdir("./file1", 0777 [pid 1487] <... close resumed>) = 0 [pid 1489] <... mkdir resumed>) = 0 [pid 1487] mkdir("./file1", 0777 [pid 1489] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 1487] <... mkdir resumed>) = 0 [ 51.207019][ T1480] EXT4-fs (loop4): This should not happen!! Data will be lost [ 51.207019][ T1480] [ 51.216420][ T1488] block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 51.228377][ T1480] EXT4-fs (loop4): Total free blocks count 0 [ 51.228392][ T1480] EXT4-fs (loop4): Free/Dirty block details [ 51.228403][ T1480] EXT4-fs (loop4): free_blocks=2415919504 [ 51.240452][ T1488] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 51.246105][ T1480] EXT4-fs (loop4): dirty_blocks=32 [pid 1487] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 1485] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./46/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./46/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./46/file1") = 0 [pid 298] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./46") = 0 [pid 298] mkdir("./47", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1501 [pid 1487] <... mount resumed>) = 0 [pid 1487] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1487] chdir("./file1") = 0 [pid 1487] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1487] ioctl(4, LOOP_CLR_FD) = 0 [pid 1487] close(4) = 0 [pid 1487] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1482] <... futex resumed>) = 0 [pid 1482] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1482] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1487] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 1487] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1482] <... futex resumed>) = 0 [pid 1487] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1482] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1487] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1482] <... futex resumed>) = 0 [pid 1487] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1482] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1487] <... open resumed>) = 5 [pid 1487] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1482] <... futex resumed>) = 0 [pid 1487] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1482] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1487] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1482] <... futex resumed>) = 0 [pid 1487] creat("./bus", 000 [pid 1482] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1487] <... creat resumed>) = 6 [pid 1487] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1482] <... futex resumed>) = 0 [pid 1487] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1482] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1487] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1482] <... futex resumed>) = 0 [pid 1487] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1482] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1487] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1487] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1482] <... futex resumed>) = 0 [pid 1487] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1482] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1487] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1482] <... futex resumed>) = 0 [pid 1487] pwrite64(6, "+", 1, 0 [pid 1482] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1487] <... pwrite64 resumed>) = 1 [pid 1487] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1482] <... futex resumed>) = 0 [pid 1487] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1482] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1487] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1482] <... futex resumed>) = 0 [pid 1487] open("./bus", O_RDONLY [pid 1482] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1487] <... open resumed>) = 7 [pid 1487] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1482] <... futex resumed>) = 0 [pid 1487] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1482] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1487] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1482] <... futex resumed>) = 0 [ 51.254919][ T1488] EXT4-fs (loop0): This should not happen!! Data will be lost [ 51.254919][ T1488] [ 51.278130][ T1480] EXT4-fs (loop4): Block reservation details [ 51.286235][ T1488] EXT4-fs (loop0): Total free blocks count 0 [ 51.294143][ T1480] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 51.298997][ T1488] EXT4-fs (loop0): Free/Dirty block details [ 51.321654][ T1488] EXT4-fs (loop0): free_blocks=2415919504 [ 51.327510][ T1488] EXT4-fs (loop0): dirty_blocks=32 [ 51.332698][ T1488] EXT4-fs (loop0): Block reservation details [pid 1487] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1482] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1487] <... copy_file_range resumed>) = 1 [pid 1482] <... futex resumed>) = 0 [pid 1487] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1482] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1487] <... futex resumed>) = 0 [pid 1482] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1487] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1482] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1482] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1482] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0}./strace-static-x86_64: Process 1501 attached [pid 1501] set_robust_list(0x55558909e6a0, 24 [pid 1482] <... clone3 resumed> => {parent_tid=[1502]}, 88) = 1502 ./strace-static-x86_64: Process 1502 attached [pid 1501] <... set_robust_list resumed>) = 0 [pid 1489] <... mount resumed>) = 0 [pid 1482] rt_sigprocmask(SIG_SETMASK, [], [pid 1488] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1502] set_robust_list(0x7f13c8cc39a0, 24 [pid 1501] chdir("./47" [pid 1496] <... futex resumed>) = ? [pid 1489] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1482] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1480] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1502] <... set_robust_list resumed>) = 0 [pid 1501] <... chdir resumed>) = 0 [pid 1496] +++ killed by SIGBUS +++ [pid 1489] <... openat resumed>) = 3 [pid 1488] +++ killed by SIGBUS +++ [pid 1502] rt_sigprocmask(SIG_SETMASK, [], [pid 1489] chdir("./file1" [pid 1502] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1489] <... chdir resumed>) = 0 [pid 1502] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1489] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1489] ioctl(4, LOOP_CLR_FD) = 0 [pid 1489] close(4) = 0 [pid 1489] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1489] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1482] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1502] <... futex resumed>) = 0 [pid 1482] <... futex resumed>) = 1 [pid 1502] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1482] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1502] <... mmap resumed>) = 0x20000000 [pid 1502] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1482] <... futex resumed>) = 0 [pid 1502] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1482] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1482] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1492] <... futex resumed>) = ? [pid 1501] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1492] +++ killed by SIGBUS +++ [pid 1487] <... futex resumed>) = 0 [pid 1483] <... futex resumed>) = 0 [pid 1480] +++ killed by SIGBUS +++ [ 51.338734][ T1488] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 51.347688][ T1485] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 51.353553][ T1478] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 51.367913][ T1485] EXT4-fs (loop0): This should not happen!! Data will be lost [ 51.367913][ T1485] [ 51.372580][ T1478] EXT4-fs (loop4): This should not happen!! Data will be lost [pid 1501] <... prctl resumed>) = 0 [pid 1487] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1485] +++ killed by SIGBUS +++ [pid 1483] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1501] setpgid(0, 0 [pid 1489] <... futex resumed>) = 0 [pid 1487] <... open resumed>) = -1 EFAULT (Bad address) [pid 1483] <... futex resumed>) = 1 [pid 1501] <... setpgid resumed>) = 0 [pid 1489] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1487] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1483] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1485, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=17} --- [pid 1501] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1489] <... open resumed>) = 4 [pid 1487] <... futex resumed>) = 1 [pid 1482] <... futex resumed>) = 0 [pid 297] umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1501] <... openat resumed>) = 3 [pid 1489] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1482] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1478] +++ killed by SIGBUS +++ [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1501] write(3, "1000", 4 [pid 1489] <... futex resumed>) = 1 [pid 297] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1501] <... write resumed>) = 4 [pid 1489] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 297] <... openat resumed>) = 3 [pid 1501] close(3 [pid 297] newfstatat(3, "", [pid 1501] <... close resumed>) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1501] symlink("/dev/binderfs", "./binderfs" [pid 297] getdents64(3, [pid 1501] <... symlink resumed>) = 0 [pid 297] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 executing program [pid 1501] write(1, "executing program\n", 18 [pid 297] umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1501] <... write resumed>) = 18 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1501] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] newfstatat(AT_FDCWD, "./46/binderfs", [pid 1501] <... futex resumed>) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1501] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 297] unlink("./46/binderfs" [pid 1501] <... rt_sigaction resumed>NULL, 8) = 0 [pid 297] <... unlink resumed>) = 0 [pid 1501] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 297] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1501] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1501] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1501] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1501] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1501] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1503]}, 88) = 1503 [pid 1501] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1501] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1501] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1478, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 301] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 301] umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./45/binderfs") = 0 [pid 301] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1482] <... futex resumed>) = 0 [pid 1482] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1483] <... futex resumed>) = 0 [pid 1483] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1489] <... futex resumed>) = 0 [pid 1483] <... futex resumed>) = 1 [pid 1489] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1483] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1489] <... open resumed>) = 5 [pid 1489] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1483] <... futex resumed>) = 0 [pid 1489] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1483] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1483] <... futex resumed>) = 0 [pid 1489] creat("./bus", 000 [pid 1483] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1489] <... creat resumed>) = 6 [pid 1489] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1483] <... futex resumed>) = 0 [pid 1489] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1483] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1483] <... futex resumed>) = 0 [pid 1489] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1483] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1503 attached [pid 1489] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1489] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1483] <... futex resumed>) = 0 [pid 1489] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1483] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1483] <... futex resumed>) = 0 [pid 1489] pwrite64(6, "+", 1, 0 [pid 1483] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1489] <... pwrite64 resumed>) = 1 [pid 1489] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1483] <... futex resumed>) = 0 [pid 1489] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1483] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1483] <... futex resumed>) = 0 [pid 1489] open("./bus", O_RDONLY [pid 1483] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1489] <... open resumed>) = 7 [pid 1489] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1483] <... futex resumed>) = 0 [pid 1489] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1483] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1483] <... futex resumed>) = 0 [pid 1489] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1483] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1489] <... copy_file_range resumed>) = 1 [pid 1483] <... futex resumed>) = 0 [pid 1489] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1483] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1489] <... futex resumed>) = 0 [pid 1483] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1489] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1483] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1483] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1483] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1504]}, 88) = 1504 [pid 1483] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1483] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1483] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1503] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1503] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1503] memfd_create("syzkaller", 0) = 3 [pid 1503] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 ./strace-static-x86_64: Process 1504 attached [pid 1503] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1504] set_robust_list(0x7f13c8cc39a0, 24 [pid 1503] <... write resumed>) = 1048576 [pid 301] <... umount2 resumed>) = 0 [pid 301] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./45/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./45/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./45/file1" [pid 1504] <... set_robust_list resumed>) = 0 [pid 301] <... rmdir resumed>) = 0 [pid 1504] rt_sigprocmask(SIG_SETMASK, [], [pid 301] getdents64(3, [pid 1504] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 301] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1504] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 301] close(3) = 0 [pid 301] rmdir("./45") = 0 [pid 301] mkdir("./46", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 1504] <... mmap resumed>) = 0x20000000 [pid 301] ioctl(3, LOOP_CLR_FD [pid 297] <... umount2 resumed>) = 0 [pid 1504] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1504] <... futex resumed>) = 1 [pid 1483] <... futex resumed>) = 0 [ 51.372580][ T1478] [ 51.384115][ T1487] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 51.405500][ T1487] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 51.417743][ T1487] EXT4-fs (loop3): This should not happen!! Data will be lost [ 51.417743][ T1487] [ 51.427311][ T1487] EXT4-fs (loop3): Total free blocks count 0 [ 51.433412][ T1487] EXT4-fs (loop3): Free/Dirty block details [pid 301] close(3) = 0 [pid 1503] munmap(0x7f13c08c4000, 138412032 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1503] <... munmap resumed>) = 0 [pid 301] <... clone resumed>, child_tidptr=0x55558909e690) = 1505 [pid 1503] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1503] ioctl(4, LOOP_SET_FD, 3 [pid 1504] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1483] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1482] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 297] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./46/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 1505 attached [pid 1489] <... futex resumed>) = 0 [pid 1483] <... futex resumed>) = 1 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1505] set_robust_list(0x55558909e6a0, 24 [pid 1489] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1483] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1505] <... set_robust_list resumed>) = 0 [pid 1489] <... open resumed>) = -1 EFAULT (Bad address) [pid 297] openat(AT_FDCWD, "./46/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1489] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1505] chdir("./46" [pid 1489] <... futex resumed>) = 1 [pid 1483] <... futex resumed>) = 0 [pid 297] <... openat resumed>) = 4 [pid 1489] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1483] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1505] <... chdir resumed>) = 0 [pid 1489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1483] <... futex resumed>) = 0 [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1483] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./46/file1") = 0 [pid 297] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./46") = 0 [pid 297] mkdir("./47", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1506 [pid 1503] <... ioctl resumed>) = 0 [pid 1503] close(3) = 0 [pid 1503] close(4) = 0 [pid 1503] mkdir("./file1", 0777) = 0 [pid 1503] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 1505] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1505] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 1506 attached [pid 1505] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1506] set_robust_list(0x55558909e6a0, 24 [pid 1505] <... openat resumed>) = 3 [pid 1506] <... set_robust_list resumed>) = 0 [pid 1506] chdir("./47" [pid 1505] write(3, "1000", 4 [pid 1506] <... chdir resumed>) = 0 [pid 1505] <... write resumed>) = 4 [pid 1506] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1505] close(3 [pid 1506] <... prctl resumed>) = 0 [pid 1505] <... close resumed>) = 0 [pid 1506] setpgid(0, 0 [ 51.446781][ T1487] EXT4-fs (loop3): free_blocks=2415919504 [ 51.448887][ T1503] loop1: detected capacity change from 0 to 2048 [ 51.462701][ T1489] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 51.479015][ T1487] EXT4-fs (loop3): dirty_blocks=32 [ 51.483609][ T1489] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 1505] symlink("/dev/binderfs", "./binderfs" [pid 1506] <... setpgid resumed>) = 0 [pid 1505] <... symlink resumed>) = 0 [pid 1506] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1505] write(1, "executing program\n", 18 [pid 1503] <... mount resumed>) = 0 [pid 1503] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1503] chdir("./file1") = 0 [pid 1503] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 executing program [pid 1503] ioctl(4, LOOP_CLR_FD) = 0 [pid 1503] close(4 [pid 1506] <... openat resumed>) = 3 [pid 1505] <... write resumed>) = 18 [pid 1503] <... close resumed>) = 0 [pid 1487] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1503] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1501] <... futex resumed>) = 0 [pid 1503] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1501] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1503] <... open resumed>) = 4 [pid 1501] <... futex resumed>) = 0 [pid 1506] write(3, "1000", 4 [ 51.498660][ T1489] EXT4-fs (loop2): This should not happen!! Data will be lost [ 51.498660][ T1489] [ 51.500768][ T1487] EXT4-fs (loop3): Block reservation details [ 51.509408][ T1489] EXT4-fs (loop2): Total free blocks count 0 [ 51.514678][ T1487] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 51.525999][ T1489] EXT4-fs (loop2): Free/Dirty block details [ 51.531911][ T1489] EXT4-fs (loop2): free_blocks=2415919504 [pid 1505] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1506] <... write resumed>) = 4 [pid 1505] <... futex resumed>) = 0 [pid 1503] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1502] <... futex resumed>) = ? [pid 1501] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1483] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1506] close(3 [pid 1505] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1503] <... futex resumed>) = 0 [pid 1502] +++ killed by SIGBUS +++ [pid 1501] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1487] +++ killed by SIGBUS +++ [pid 1503] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1501] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1503] <... open resumed>) = 5 [pid 1501] <... futex resumed>) = 0 [pid 1503] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1501] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1503] <... futex resumed>) = 0 [pid 1501] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1503] creat("./bus", 000 [pid 1501] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1503] <... creat resumed>) = 6 [pid 1501] <... futex resumed>) = 0 [pid 1503] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1501] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1503] <... futex resumed>) = 0 [pid 1501] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1503] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1501] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1503] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1501] <... futex resumed>) = 0 [pid 1503] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1501] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1503] <... futex resumed>) = 0 [pid 1501] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1503] pwrite64(6, "+", 1, 0 [pid 1501] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1503] <... pwrite64 resumed>) = 1 [pid 1501] <... futex resumed>) = 0 [pid 1506] <... close resumed>) = 0 [pid 1503] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1501] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1506] symlink("/dev/binderfs", "./binderfs" [pid 1505] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1503] <... futex resumed>) = 0 [pid 1501] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1503] open("./bus", O_RDONLY [pid 1501] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1503] <... open resumed>) = 7 [pid 1501] <... futex resumed>) = 0 [pid 1503] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1501] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1503] <... futex resumed>) = 0 [pid 1501] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1503] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1501] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1503] <... copy_file_range resumed>) = 1 [pid 1501] <... futex resumed>) = 0 [pid 1503] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1501] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1503] <... futex resumed>) = 0 [pid 1501] <... futex resumed>) = 0 [pid 1503] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1501] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1501] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1501] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1501] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1509]}, 88) = 1509 [pid 1501] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1501] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1501] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1509 attached [pid 1509] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1509] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1509] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1506] <... symlink resumed>) = 0 [pid 1505] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1509] <... mmap resumed>) = 0x20000000 [pid 1509] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1501] <... futex resumed>) = 0 [pid 1501] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1503] <... futex resumed>) = 0 [pid 1501] <... futex resumed>) = 1 [pid 1503] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1501] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1503] <... open resumed>) = -1 EFAULT (Bad address) [pid 1503] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1501] <... futex resumed>) = 0 [pid 1506] write(1, "executing program\n", 18 [pid 1505] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1501] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1489] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1501] <... futex resumed>) = 0 [pid 1501] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1509] <... futex resumed>) = 1 [ 51.533461][ T1482] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 51.537669][ T1489] EXT4-fs (loop2): dirty_blocks=32 [ 51.554628][ T1489] EXT4-fs (loop2): Block reservation details [ 51.560699][ T1489] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 51.563224][ T1503] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 51.566818][ T1482] EXT4-fs (loop3): This should not happen!! Data will be lost [ 51.566818][ T1482] [pid 1509] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULLexecuting program [pid 1506] <... write resumed>) = 18 [pid 1505] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1504] <... futex resumed>) = ? [pid 1482] +++ killed by SIGBUS +++ [pid 1506] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1505] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1504] +++ killed by SIGBUS +++ [pid 1489] +++ killed by SIGBUS +++ [pid 1506] <... futex resumed>) = 0 [pid 1505] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1482, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 1506] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1505] <... mprotect resumed>) = 0 [pid 300] umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1506] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1505] rt_sigprocmask(SIG_BLOCK, ~[], [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1506] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1505] <... rt_sigprocmask resumed>[], 8) = 0 [pid 300] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1506] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1505] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 300] <... openat resumed>) = 3 [pid 1506] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 300] newfstatat(3, "", [pid 1506] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1505] <... clone3 resumed> => {parent_tid=[1510]}, 88) = 1510 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1506] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1505] rt_sigprocmask(SIG_SETMASK, [], [pid 300] getdents64(3, [pid 1506] <... mprotect resumed>) = 0 [pid 1505] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 300] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1506] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1505] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1506] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1505] <... futex resumed>) = 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1506] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1505] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 300] newfstatat(AT_FDCWD, "./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1506] <... clone3 resumed> => {parent_tid=[1511]}, 88) = 1511 [pid 300] unlink("./45/binderfs" [pid 1506] rt_sigprocmask(SIG_SETMASK, [], [pid 300] <... unlink resumed>) = 0 [pid 1506] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 300] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1506] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1506] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1511 attached ./strace-static-x86_64: Process 1510 attached [pid 1501] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1483] +++ killed by SIGBUS +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1483, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 299] umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./47/binderfs") = 0 [pid 299] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1511] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1511] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1511] memfd_create("syzkaller", 0) = 3 [pid 1511] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1510] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1510] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1511] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1510] memfd_create("syzkaller", 0 [pid 300] <... umount2 resumed>) = 0 [pid 1511] <... write resumed>) = 1048576 [pid 1511] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1511] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 51.583102][ T1503] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 51.592150][ T1483] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 51.603117][ T1503] EXT4-fs (loop1): This should not happen!! Data will be lost [ 51.603117][ T1503] [ 51.620564][ T1483] EXT4-fs (loop2): This should not happen!! Data will be lost [ 51.620564][ T1483] [ 51.624829][ T1503] EXT4-fs (loop1): Total free blocks count 0 [pid 1511] ioctl(4, LOOP_SET_FD, 3 [pid 1510] <... memfd_create resumed>) = 3 [pid 300] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1511] <... ioctl resumed>) = 0 [pid 1511] close(3) = 0 [pid 1511] close(4) = 0 [pid 1511] mkdir("./file1", 0777) = 0 [pid 1511] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 1510] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1510] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 300] newfstatat(AT_FDCWD, "./45/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] <... umount2 resumed>) = 0 [pid 300] openat(AT_FDCWD, "./45/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, [pid 1510] <... write resumed>) = 1048576 [pid 1510] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1510] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1510] ioctl(4, LOOP_SET_FD, 3 [pid 300] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 299] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] close(4) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] rmdir("./45/file1" [pid 299] newfstatat(AT_FDCWD, "./47/file1", [pid 300] <... rmdir resumed>) = 0 [pid 300] getdents64(3, [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 299] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1510] <... ioctl resumed>) = 0 [pid 1510] close(3) = 0 [pid 300] close(3 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] <... close resumed>) = 0 [pid 299] openat(AT_FDCWD, "./47/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 300] rmdir("./45" [pid 299] <... openat resumed>) = 4 [pid 1510] close(4 [pid 300] <... rmdir resumed>) = 0 [pid 299] newfstatat(4, "", [pid 300] mkdir("./46", 0777 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1510] <... close resumed>) = 0 [pid 1510] mkdir("./file1", 0777 [pid 300] <... mkdir resumed>) = 0 [pid 299] getdents64(4, [pid 1510] <... mkdir resumed>) = 0 [pid 1510] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 299] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 300] <... openat resumed>) = 3 [pid 299] getdents64(4, [pid 300] ioctl(3, LOOP_CLR_FD [pid 299] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 300] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 299] close(4 [pid 300] close(3) = 0 [pid 299] <... close resumed>) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] rmdir("./47/file1") = 0 [pid 300] <... clone resumed>, child_tidptr=0x55558909e690) = 1512 [pid 299] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./47"./strace-static-x86_64: Process 1512 attached ) = 0 [pid 299] mkdir("./48", 0777 [pid 1512] set_robust_list(0x55558909e6a0, 24) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1512] chdir("./46") = 0 [pid 1512] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 299] <... clone resumed>, child_tidptr=0x55558909e690) = 1514 [pid 1512] setpgid(0, 0) = 0 [pid 1512] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1512] write(3, "1000", 4) = 4 [pid 1512] close(3) = 0 [pid 1512] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1512] write(1, "executing program\n", 18executing program ) = 18 [pid 1512] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1512] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1512] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1512] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1512] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1512] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1512] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1515]}, 88) = 1515 [pid 1512] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1512] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1512] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1514 attached [pid 1514] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1514] chdir("./48") = 0 [pid 1514] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1514] setpgid(0, 0) = 0 [pid 1511] <... mount resumed>) = 0 [ 51.649275][ T1511] loop0: detected capacity change from 0 to 2048 [ 51.653044][ T1503] EXT4-fs (loop1): Free/Dirty block details [ 51.671823][ T1510] loop4: detected capacity change from 0 to 2048 [ 51.682662][ T1503] EXT4-fs (loop1): free_blocks=2415919504 [ 51.689428][ T1503] EXT4-fs (loop1): dirty_blocks=32 [pid 1511] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1514] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1514] write(3, "1000", 4) = 4 [pid 1514] close(3) = 0 [pid 1514] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1514] write(1, "executing program\n", 18executing program ) = 18 [pid 1514] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1514] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1514] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1514] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1514] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1514] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1514] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1517]}, 88) = 1517 [pid 1514] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1514] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1514] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1511] <... openat resumed>) = 3 [pid 1511] chdir("./file1") = 0 [pid 1511] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 1515 attached [pid 1515] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1515] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1515] memfd_create("syzkaller", 0) = 3 [pid 1515] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 ./strace-static-x86_64: Process 1517 attached [pid 1511] <... openat resumed>) = 4 [pid 1517] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1511] ioctl(4, LOOP_CLR_FD) = 0 [pid 1511] close(4 [pid 1503] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1511] <... close resumed>) = 0 [pid 1517] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1517] memfd_create("syzkaller", 0) = 3 [pid 1517] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1515] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1511] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1506] <... futex resumed>) = 0 [pid 1511] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1506] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1511] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1511] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1506] <... futex resumed>) = 0 [pid 1506] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1511] <... open resumed>) = 4 [pid 1511] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1506] <... futex resumed>) = 0 [pid 1506] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1511] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1506] <... futex resumed>) = 0 [pid 1506] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1510] <... mount resumed>) = 0 [pid 1511] <... open resumed>) = 5 [pid 1510] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1511] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1510] <... openat resumed>) = 3 [pid 1511] <... futex resumed>) = 1 [pid 1510] chdir("./file1" [pid 1511] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1510] <... chdir resumed>) = 0 [pid 1510] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1506] <... futex resumed>) = 0 [pid 1510] <... openat resumed>) = 4 [pid 1506] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1510] ioctl(4, LOOP_CLR_FD [pid 1511] <... futex resumed>) = 0 [pid 1510] <... ioctl resumed>) = 0 [pid 1506] <... futex resumed>) = 1 [pid 1510] close(4 [pid 1511] creat("./bus", 000 [pid 1510] <... close resumed>) = 0 [pid 1506] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1510] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1511] <... creat resumed>) = 6 [pid 1510] <... futex resumed>) = 1 [pid 1505] <... futex resumed>) = 0 [pid 1510] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1511] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1505] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1511] <... futex resumed>) = 1 [pid 1510] <... futex resumed>) = 0 [pid 1506] <... futex resumed>) = 0 [pid 1505] <... futex resumed>) = 1 [pid 1510] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1511] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1506] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1505] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1511] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1506] <... futex resumed>) = 0 [pid 1511] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1506] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1510] <... open resumed>) = 4 [pid 1511] <... futex resumed>) = 0 [pid 1506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1511] pwrite64(6, "+", 1, 0 [pid 1506] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1511] <... pwrite64 resumed>) = 1 [pid 1506] <... futex resumed>) = 0 [pid 1511] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1510] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1506] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1511] <... futex resumed>) = 0 [pid 1506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1511] open("./bus", O_RDONLY [pid 1506] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1511] <... open resumed>) = 7 [pid 1506] <... futex resumed>) = 0 [pid 1511] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1506] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1511] <... futex resumed>) = 0 [pid 1506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1511] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1506] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1511] <... copy_file_range resumed>) = 1 [pid 1506] <... futex resumed>) = 0 [pid 1511] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1506] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1511] <... futex resumed>) = 0 [pid 1506] <... futex resumed>) = 0 [pid 1511] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1506] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1506] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1506] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1506] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1520]}, 88) = 1520 [pid 1506] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1506] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1510] <... futex resumed>) = 1 [pid 1505] <... futex resumed>) = 0 [pid 1510] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1506] <... futex resumed>) = 0 [pid 1505] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1510] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1506] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1505] <... futex resumed>) = 0 [pid 1510] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1505] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1510] <... open resumed>) = 5 [pid 1510] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1505] <... futex resumed>) = 0 [pid 1510] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1505] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1510] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1505] <... futex resumed>) = 0 [pid 1510] creat("./bus", 000 [pid 1505] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1510] <... creat resumed>) = 6 [pid 1510] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1505] <... futex resumed>) = 0 [pid 1510] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1505] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1510] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1505] <... futex resumed>) = 0 [pid 1510] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1505] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1510] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1510] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1505] <... futex resumed>) = 0 [pid 1510] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1505] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1510] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1509] <... futex resumed>) = ? [pid 1505] <... futex resumed>) = 0 [pid 1510] pwrite64(6, "+", 1, 0 [pid 1509] +++ killed by SIGBUS +++ [pid 1505] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1510] <... pwrite64 resumed>) = 1 [pid 1510] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1505] <... futex resumed>) = 0 [pid 1510] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1505] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1510] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1505] <... futex resumed>) = 0 [pid 1505] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1510] open("./bus", O_RDONLY) = 7 [pid 1510] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1505] <... futex resumed>) = 0 [pid 1510] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1505] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1510] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1505] <... futex resumed>) = 0 [pid 1510] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1505] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1505] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1510] <... copy_file_range resumed>) = 1 [pid 1505] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1510] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1505] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1510] <... futex resumed>) = 0 [pid 1505] <... mprotect resumed>) = 0 [pid 1505] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1517] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1505] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1505] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1521]}, 88) = 1521 [pid 1505] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1505] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1505] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1515] <... write resumed>) = 1048576 ./strace-static-x86_64: Process 1520 attached [pid 1520] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1520] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1520] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1510] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1515] <... munmap resumed>) = 0 [pid 1515] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 51.707634][ T1503] EXT4-fs (loop1): Block reservation details [ 51.714431][ T1503] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 51.741700][ T1503] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 1515] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 1521 attached [pid 1520] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1506] <... futex resumed>) = 0 [pid 1506] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1511] <... futex resumed>) = 0 [pid 1506] <... futex resumed>) = 1 [pid 1511] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1506] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1511] <... open resumed>) = -1 EFAULT (Bad address) [pid 1511] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1506] <... futex resumed>) = 0 [pid 1511] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1506] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1511] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1506] <... futex resumed>) = 0 [pid 1521] set_robust_list(0x7f13c8cc39a0, 24 [pid 1520] <... futex resumed>) = 1 [pid 1517] <... write resumed>) = 1048576 [pid 1515] <... ioctl resumed>) = 0 [pid 1503] +++ killed by SIGBUS +++ [pid 1501] +++ killed by SIGBUS +++ [pid 1521] <... set_robust_list resumed>) = 0 [pid 1517] munmap(0x7f13c08c4000, 138412032 [pid 1521] rt_sigprocmask(SIG_SETMASK, [], [pid 1517] <... munmap resumed>) = 0 [pid 1521] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1517] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1521] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1517] <... openat resumed>) = 4 [pid 1521] <... mmap resumed>) = 0x20000000 [pid 1520] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1517] ioctl(4, LOOP_SET_FD, 3 [pid 1515] close(3 [pid 1521] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1506] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1521] <... futex resumed>) = 1 [pid 1515] <... close resumed>) = 0 [pid 1505] <... futex resumed>) = 0 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1501, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [ 51.756029][ T1515] loop3: detected capacity change from 0 to 2048 [ 51.756489][ T1503] EXT4-fs (loop1): This should not happen!! Data will be lost [ 51.756489][ T1503] [ 51.763898][ T1511] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 51.776888][ T1517] loop2: detected capacity change from 0 to 2048 [ 51.786388][ T1511] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 1521] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1515] close(4 [pid 1505] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1510] <... futex resumed>) = 0 [pid 1505] <... futex resumed>) = 1 [pid 1510] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1505] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1510] <... open resumed>) = -1 EFAULT (Bad address) [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1510] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1510] <... futex resumed>) = 1 [pid 1505] <... futex resumed>) = 0 [pid 298] <... openat resumed>) = 3 [pid 1510] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1505] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] newfstatat(3, "", [pid 1510] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1505] <... futex resumed>) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1505] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./47/binderfs") = 0 [pid 298] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1515] <... close resumed>) = 0 [pid 1515] mkdir("./file1", 0777) = 0 [pid 1515] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 1517] <... ioctl resumed>) = 0 [pid 1517] close(3) = 0 [pid 1517] close(4 [pid 1506] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1517] <... close resumed>) = 0 [ 51.804387][ T1511] EXT4-fs (loop0): This should not happen!! Data will be lost [ 51.804387][ T1511] [ 51.813831][ T1511] EXT4-fs (loop0): Total free blocks count 0 [ 51.816741][ T1510] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, [ 51.819582][ T1511] EXT4-fs (loop0): Free/Dirty block details [ 51.819587][ T1510] block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 51.819646][ T1510] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 1517] mkdir("./file1", 0777) = 0 [pid 1517] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 1505] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1511] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 298] <... umount2 resumed>) = 0 [pid 1515] <... mount resumed>) = 0 [pid 1515] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1515] chdir("./file1") = 0 [pid 1515] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1515] ioctl(4, LOOP_CLR_FD) = 0 [ 51.827723][ T1511] EXT4-fs (loop0): free_blocks=2415919504 [ 51.859448][ T1511] EXT4-fs (loop0): dirty_blocks=32 [ 51.863960][ T1510] EXT4-fs (loop4): This should not happen!! Data will be lost [ 51.863960][ T1510] [ 51.864535][ T1511] EXT4-fs (loop0): Block reservation details [ 51.875642][ T1510] EXT4-fs (loop4): Total free blocks count 0 [ 51.879709][ T1511] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 51.891769][ T1510] EXT4-fs (loop4): Free/Dirty block details [ 51.897651][ T1510] EXT4-fs (loop4): free_blocks=2415919504 [pid 1515] close(4 [pid 1520] <... futex resumed>) = ? [pid 1515] <... close resumed>) = 0 [pid 1520] +++ killed by SIGBUS +++ [pid 1511] +++ killed by SIGBUS +++ [pid 1515] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1512] <... futex resumed>) = 0 [pid 1515] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1512] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1515] <... open resumed>) = 4 [pid 1512] <... futex resumed>) = 0 [pid 1515] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1512] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 1512] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1512] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1515] <... futex resumed>) = 1 [pid 1512] <... futex resumed>) = 0 [pid 1512] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1515] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 1515] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1512] <... futex resumed>) = 0 [pid 1512] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1512] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1515] creat("./bus", 000) = 6 [pid 1515] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1512] <... futex resumed>) = 0 [pid 1512] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1512] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1515] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 1515] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1515] <... futex resumed>) = 1 [pid 1512] <... futex resumed>) = 0 [pid 1512] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1512] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1515] pwrite64(6, "+", 1, 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1515] <... pwrite64 resumed>) = 1 [pid 298] newfstatat(AT_FDCWD, "./47/file1", [pid 1515] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1515] <... futex resumed>) = 1 [pid 1512] <... futex resumed>) = 0 [pid 298] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1512] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1512] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1515] open("./bus", O_RDONLY [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1515] <... open resumed>) = 7 [pid 298] openat(AT_FDCWD, "./47/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1515] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1512] <... futex resumed>) = 0 [pid 298] <... openat resumed>) = 4 [pid 1517] <... mount resumed>) = 0 [pid 1515] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1512] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1510] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 298] newfstatat(4, "", [pid 1517] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1515] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1512] <... futex resumed>) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1517] <... openat resumed>) = 3 [pid 1515] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1512] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] getdents64(4, [pid 1517] chdir("./file1" [pid 1515] <... copy_file_range resumed>) = 1 [pid 1512] <... futex resumed>) = 0 [pid 1517] <... chdir resumed>) = 0 [pid 1515] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1512] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 298] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1517] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1515] <... futex resumed>) = 0 [pid 1512] <... mmap resumed>) = 0x7f13c8ca3000 [pid 298] getdents64(4, [pid 1517] <... openat resumed>) = 4 [pid 1515] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1512] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 298] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1517] ioctl(4, LOOP_CLR_FD [pid 1512] <... mprotect resumed>) = 0 [pid 298] close(4 [pid 1517] <... ioctl resumed>) = 0 [pid 1512] rt_sigprocmask(SIG_BLOCK, ~[], [pid 298] <... close resumed>) = 0 [pid 1517] close(4 [pid 1512] <... rt_sigprocmask resumed>[], 8) = 0 [pid 298] rmdir("./47/file1" [pid 1521] <... futex resumed>) = ? [pid 1517] <... close resumed>) = 0 [pid 1512] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1506] +++ killed by SIGBUS +++ ./strace-static-x86_64: Process 1526 attached [pid 1521] +++ killed by SIGBUS +++ [pid 1517] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1510] +++ killed by SIGBUS +++ [pid 298] <... rmdir resumed>) = 0 [pid 1526] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1526] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1526] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1506, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 297] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 297] umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./47/binderfs") = 0 [pid 297] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1517] <... futex resumed>) = 1 [pid 1514] <... futex resumed>) = 0 [pid 1517] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1514] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1517] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1514] <... futex resumed>) = 0 [pid 1517] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1514] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1512] <... clone3 resumed> => {parent_tid=[1526]}, 88) = 1526 [pid 1512] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1512] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1526] <... futex resumed>) = 0 [pid 1512] <... futex resumed>) = 1 [pid 1526] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1512] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1526] <... mmap resumed>) = 0x20000000 [pid 1517] <... open resumed>) = 4 [pid 1526] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1517] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1514] <... futex resumed>) = 0 [pid 1514] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1517] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1526] <... futex resumed>) = 1 [pid 1517] <... open resumed>) = 5 [pid 1514] <... futex resumed>) = 0 [pid 1512] <... futex resumed>) = 0 [pid 1526] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1517] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1514] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1512] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1514] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1512] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1514] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1517] <... futex resumed>) = 0 [pid 1514] <... futex resumed>) = 0 [pid 1517] creat("./bus", 000 [pid 1514] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] getdents64(3, [pid 1517] <... creat resumed>) = 6 [pid 298] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./47") = 0 [pid 298] mkdir("./48", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1517] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... openat resumed>) = 3 [pid 1517] <... futex resumed>) = 1 [pid 1514] <... futex resumed>) = 0 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3 [pid 1517] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1515] <... futex resumed>) = 0 [pid 1514] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... close resumed>) = 0 [pid 1517] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1515] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1514] <... futex resumed>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] <... umount2 resumed>) = 0 [pid 1517] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1515] <... open resumed>) = -1 EFAULT (Bad address) [pid 1514] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1517] <... futex resumed>) = 0 [pid 1515] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1514] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 298] <... clone resumed>, child_tidptr=0x55558909e690) = 1527 [pid 297] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [ 51.902877][ T1506] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 51.903281][ T1510] EXT4-fs (loop4): dirty_blocks=32 [ 51.920229][ T1510] EXT4-fs (loop4): Block reservation details [ 51.926063][ T1510] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 51.931909][ T1506] EXT4-fs (loop0): This should not happen!! Data will be lost [ 51.931909][ T1506] [ 51.943396][ T1505] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 1517] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1527 attached ) = -1 EAGAIN (Resource temporarily unavailable) [pid 1515] <... futex resumed>) = 1 [pid 1514] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1517] pwrite64(6, "+", 1, 0 [pid 1515] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1514] <... futex resumed>) = 0 [pid 297] newfstatat(AT_FDCWD, "./47/file1", [pid 1512] <... futex resumed>) = 0 [pid 1517] <... pwrite64 resumed>) = 1 [pid 1514] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1512] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1505] +++ killed by SIGBUS +++ [pid 1517] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1512] <... futex resumed>) = 1 [pid 297] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1517] <... futex resumed>) = 1 [pid 1515] <... futex resumed>) = 0 [pid 1514] <... futex resumed>) = 0 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1505, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1527] set_robust_list(0x55558909e6a0, 24 [pid 1517] open("./bus", O_RDONLY [pid 1514] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1512] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 297] openat(AT_FDCWD, "./47/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1517] <... open resumed>) = 7 [pid 297] <... openat resumed>) = 4 [pid 1517] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] newfstatat(4, "", [pid 1517] <... futex resumed>) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1517] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 297] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./47/file1") = 0 [pid 297] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./47") = 0 [pid 297] mkdir("./48", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1529 [pid 1527] <... set_robust_list resumed>) = 0 [pid 1527] chdir("./48") = 0 [pid 1527] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1527] setpgid(0, 0) = 0 [pid 1527] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1527] write(3, "1000", 4) = 4 [pid 1527] close(3) = 0 [pid 1527] symlink("/dev/binderfs", "./binderfs" [pid 301] <... restart_syscall resumed>) = 0 [pid 301] umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./46/binderfs"executing program ) = 0 [pid 301] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1527] <... symlink resumed>) = 0 [pid 1527] write(1, "executing program\n", 18) = 18 [pid 1527] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1527] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1527] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1527] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1527] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1527] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1527] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1530]}, 88) = 1530 [pid 1527] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1527] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1527] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1517] <... futex resumed>) = 0 [pid 1514] <... futex resumed>) = 1 ./strace-static-x86_64: Process 1530 attached ./strace-static-x86_64: Process 1529 attached [pid 1517] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1514] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1530] set_robust_list(0x7f13c8ce49a0, 24 [pid 1529] set_robust_list(0x55558909e6a0, 24 [pid 1514] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 51.968805][ T1505] EXT4-fs (loop4): This should not happen!! Data will be lost [ 51.968805][ T1505] [ 51.980271][ T1515] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 51.995082][ T1515] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 52.007475][ T1515] EXT4-fs (loop3): This should not happen!! Data will be lost [ 52.007475][ T1515] [pid 1530] <... set_robust_list resumed>) = 0 [pid 1529] <... set_robust_list resumed>) = 0 [pid 1514] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... umount2 resumed>) = 0 [pid 1530] rt_sigprocmask(SIG_SETMASK, [], [pid 1529] chdir("./48" [pid 1517] <... futex resumed>) = 0 [pid 1514] <... futex resumed>) = 1 [pid 301] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./46/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1517] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1514] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1517] <... copy_file_range resumed>) = 1 [pid 1514] <... futex resumed>) = 0 [pid 1517] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1514] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1517] <... futex resumed>) = 0 [pid 1514] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1530] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1529] <... chdir resumed>) = 0 [pid 1517] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1514] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1512] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1514] <... mprotect resumed>) = 0 [pid 1514] rt_sigprocmask(SIG_BLOCK, ~[], [pid 301] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1514] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1514] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1514] <... clone3 resumed> => {parent_tid=[1531]}, 88) = 1531 [pid 301] openat(AT_FDCWD, "./46/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1514] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 301] <... openat resumed>) = 4 [pid 1514] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 301] newfstatat(4, "", [pid 1514] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1530] memfd_create("syzkaller", 0 [pid 1529] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./46/file1") = 0 [pid 301] getdents64(3, [pid 1530] <... memfd_create resumed>) = 3 [pid 1529] <... prctl resumed>) = 0 [pid 301] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./46") = 0 [pid 1530] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1529] setpgid(0, 0 [pid 301] mkdir("./47", 0777./strace-static-x86_64: Process 1531 attached [pid 1530] <... mmap resumed>) = 0x7f13c08c4000 [pid 1529] <... setpgid resumed>) = 0 [pid 1515] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1531] set_robust_list(0x7f13c8cc39a0, 24 [pid 301] <... mkdir resumed>) = 0 [pid 1531] <... set_robust_list resumed>) = 0 [pid 1529] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1526] <... futex resumed>) = ? [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1531] rt_sigprocmask(SIG_SETMASK, [], [pid 1529] <... openat resumed>) = 3 [pid 1526] +++ killed by SIGBUS +++ [pid 301] <... openat resumed>) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1532 ./strace-static-x86_64: Process 1532 attached [pid 1532] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1532] chdir("./47") = 0 [pid 1532] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1532] setpgid(0, 0) = 0 [pid 1532] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 52.017415][ T1515] EXT4-fs (loop3): Total free blocks count 0 [ 52.023558][ T1515] EXT4-fs (loop3): Free/Dirty block details [ 52.029461][ T1515] EXT4-fs (loop3): free_blocks=2415919504 [ 52.035261][ T1515] EXT4-fs (loop3): dirty_blocks=32 [ 52.040352][ T1515] EXT4-fs (loop3): Block reservation details [ 52.046453][ T1515] EXT4-fs (loop3): i_reserved_data_blocks=2 [pid 1531] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1529] write(3, "1000", 4 [pid 1531] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1529] <... write resumed>) = 4 [pid 1529] close(3 [pid 1532] write(3, "1000", 4) = 4 [pid 1532] close(3) = 0 [pid 1532] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1532] write(1, "executing program\n", 18 [pid 1531] <... mmap resumed>) = 0x20000000 [pid 1531] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1529] <... close resumed>) = 0 [pid 1531] <... futex resumed>) = 1 [pid 1530] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1529] symlink("/dev/binderfs", "./binderfs" [pid 1514] <... futex resumed>) = 0 [pid 1514] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1517] <... futex resumed>) = 0 [pid 1514] <... futex resumed>) = 1 [pid 1517] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1514] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1517] <... open resumed>) = -1 EFAULT (Bad address) [pid 1517] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1514] <... futex resumed>) = 0 [pid 1517] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1514] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1517] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1514] <... futex resumed>) = 0 [pid 1531] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1530] <... write resumed>) = 1048576 [pid 1529] <... symlink resumed>) = 0 [pid 1514] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}executing program [pid 1532] <... write resumed>) = 18 [pid 1532] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1532] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1532] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1532] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1532] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1532] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1532] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1533]}, 88) = 1533 [pid 1532] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1532] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1532] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1533 attached [pid 1533] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1533] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1533] memfd_create("syzkaller", 0) = 3 [pid 1533] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1530] munmap(0x7f13c08c4000, 138412032 [pid 1529] write(1, "executing program\n", 18executing program [pid 1530] <... munmap resumed>) = 0 [pid 1529] <... write resumed>) = 18 [pid 1530] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1529] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1530] <... openat resumed>) = 4 [pid 1529] <... futex resumed>) = 0 [pid 1530] ioctl(4, LOOP_SET_FD, 3 [pid 1529] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1533] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1529] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1529] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1529] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1515] +++ killed by SIGBUS +++ [pid 1512] +++ killed by SIGBUS +++ [pid 1529] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1529] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1512, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11} --- [pid 1529] <... mprotect resumed>) = 0 [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 1529] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1533] <... write resumed>) = 1048576 [pid 1530] <... ioctl resumed>) = 0 [pid 1529] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1529] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1534]}, 88) = 1534 [pid 1529] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1529] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1529] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1530] close(3) = 0 [pid 1530] close(4) = 0 [pid 1530] mkdir("./file1", 0777) = 0 [pid 1530] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 1533] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1533] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 52.057374][ T1515] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 52.075025][ T1517] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 52.083340][ T1515] EXT4-fs (loop3): This should not happen!! Data will be lost [ 52.083340][ T1515] [ 52.100035][ T1530] loop1: detected capacity change from 0 to 2048 [ 52.107210][ T1517] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 1533] ioctl(4, LOOP_SET_FD, 3 [pid 300] <... restart_syscall resumed>) = 0 [pid 1533] <... ioctl resumed>) = 0 [pid 1533] close(3) = 0 [pid 1533] close(4) = 0 [pid 1533] mkdir("./file1", 0777) = 0 [pid 1533] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 300] umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./46/binderfs") = 0 [pid 300] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 1534 attached [pid 1514] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1534] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1534] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1534] memfd_create("syzkaller", 0) = 3 [pid 1534] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 300] <... umount2 resumed>) = 0 [pid 300] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./46/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./46/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1530] <... mount resumed>) = 0 [pid 300] <... openat resumed>) = 4 [pid 300] newfstatat(4, "", [pid 1530] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(4, [pid 1530] <... openat resumed>) = 3 [pid 300] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1530] chdir("./file1" [pid 1534] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1530] <... chdir resumed>) = 0 [pid 300] getdents64(4, [pid 1530] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 300] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 300] close(4 [pid 1530] <... openat resumed>) = 4 [pid 300] <... close resumed>) = 0 [pid 1530] ioctl(4, LOOP_CLR_FD [pid 300] rmdir("./46/file1" [pid 1530] <... ioctl resumed>) = 0 [pid 300] <... rmdir resumed>) = 0 [pid 1530] close(4 [pid 1533] <... mount resumed>) = 0 [pid 1533] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1533] chdir("./file1") = 0 [pid 1533] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1533] ioctl(4, LOOP_CLR_FD) = 0 [pid 1533] close(4) = 0 [pid 1533] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1532] <... futex resumed>) = 0 [pid 1532] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1532] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1533] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 1533] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1532] <... futex resumed>) = 0 [pid 1532] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1532] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1533] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 1533] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1532] <... futex resumed>) = 0 [pid 1532] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1532] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1533] creat("./bus", 000) = 6 [pid 1533] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1532] <... futex resumed>) = 0 [pid 1533] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1532] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1533] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1532] <... futex resumed>) = 0 [pid 1533] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1532] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1533] <... futex resumed>) = 0 [pid 1532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1533] pwrite64(6, "+", 1, 0 [pid 1532] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1533] <... pwrite64 resumed>) = 1 [pid 1532] <... futex resumed>) = 0 [pid 1533] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1532] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1533] <... futex resumed>) = 0 [pid 1532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1533] open("./bus", O_RDONLY [pid 1532] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1533] <... open resumed>) = 7 [pid 1532] <... futex resumed>) = 0 [pid 1533] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1532] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1533] <... futex resumed>) = 0 [pid 1532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1530] <... close resumed>) = 0 [pid 300] getdents64(3, [pid 1533] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1532] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1533] <... copy_file_range resumed>) = 1 [pid 1532] <... futex resumed>) = 0 [pid 1533] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1532] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1533] <... futex resumed>) = 0 [pid 1532] <... futex resumed>) = 0 [pid 1533] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1532] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1532] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1532] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1532] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1539]}, 88) = 1539 [pid 1532] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1532] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 52.114010][ T1533] loop4: detected capacity change from 0 to 2048 [ 52.130572][ T1517] EXT4-fs (loop2): This should not happen!! Data will be lost [ 52.130572][ T1517] [ 52.147621][ T1517] EXT4-fs (loop2): Total free blocks count 0 [ 52.154480][ T1517] EXT4-fs (loop2): Free/Dirty block details [ 52.161100][ T1517] EXT4-fs (loop2): free_blocks=2415919504 [pid 1532] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1530] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1530] <... futex resumed>) = 1 [pid 1527] <... futex resumed>) = 0 [pid 300] close(3 [pid 1534] <... write resumed>) = 1048576 [pid 1534] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1534] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1534] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 1539 attached [pid 1530] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1527] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... close resumed>) = 0 [pid 1539] set_robust_list(0x7f13c8cc39a0, 24 [pid 1530] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1527] <... futex resumed>) = 0 [pid 300] rmdir("./46" [pid 1539] <... set_robust_list resumed>) = 0 [pid 1530] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1527] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... rmdir resumed>) = 0 [pid 1539] rt_sigprocmask(SIG_SETMASK, [], [pid 1534] <... ioctl resumed>) = 0 [pid 1530] <... open resumed>) = 4 [pid 1517] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 300] mkdir("./47", 0777 [pid 1539] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1531] <... futex resumed>) = ? [pid 1530] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... mkdir resumed>) = 0 [pid 1539] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1534] close(3 [pid 1531] +++ killed by SIGBUS +++ [pid 1530] <... futex resumed>) = 1 [pid 1527] <... futex resumed>) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1540 [pid 1534] <... close resumed>) = 0 [pid 1534] close(4) = 0 [pid 1534] mkdir("./file1", 0777) = 0 [pid 1534] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 1527] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1540 attached [pid 1540] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1540] chdir("./47") = 0 [pid 1540] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1540] setpgid(0, 0) = 0 [pid 1540] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1540] write(3, "1000", 4) = 4 [pid 1539] <... mmap resumed>) = 0x20000000 [pid 1530] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1527] <... futex resumed>) = 0 [pid 1540] close(3) = 0 [pid 1540] symlink("/dev/binderfs", "./binderfs" [pid 1539] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1530] <... open resumed>) = 5 [pid 1527] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1530] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1527] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1539] <... futex resumed>) = 1 [pid 1532] <... futex resumed>) = 0 [pid 1532] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1533] <... futex resumed>) = 0 [pid 1532] <... futex resumed>) = 1 [pid 1533] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1532] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1533] <... open resumed>) = -1 EFAULT (Bad address) [pid 1539] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1530] <... futex resumed>) = 0 [pid 1527] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1533] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1532] <... futex resumed>) = 0 [ 52.167078][ T1517] EXT4-fs (loop2): dirty_blocks=32 [ 52.172928][ T1517] EXT4-fs (loop2): Block reservation details [ 52.177800][ T1534] loop0: detected capacity change from 0 to 2048 [ 52.178976][ T1517] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 52.194185][ T1517] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 executing program [pid 1532] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1530] creat("./bus", 000 [pid 1527] <... futex resumed>) = 0 [pid 1532] <... futex resumed>) = 0 [pid 1532] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1540] <... symlink resumed>) = 0 [pid 1540] write(1, "executing program\n", 18) = 18 [pid 1540] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1540] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1540] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1540] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1540] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1530] <... creat resumed>) = 6 [pid 1527] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1540] <... mprotect resumed>) = 0 [pid 1530] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1527] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1540] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1530] <... futex resumed>) = 0 [pid 1527] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1517] +++ killed by SIGBUS +++ [pid 1514] +++ killed by SIGBUS +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1514, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 1540] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1530] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1527] <... futex resumed>) = 0 [pid 1530] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1527] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1540] <... clone3 resumed> => {parent_tid=[1541]}, 88) = 1541 [pid 1540] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1540] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1540] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1530] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1527] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) ./strace-static-x86_64: Process 1541 attached [pid 1541] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1541] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1530] <... futex resumed>) = 0 [pid 1527] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1530] pwrite64(6, "+", 1, 0 [pid 1527] <... futex resumed>) = 0 [pid 1541] memfd_create("syzkaller", 0 [pid 1527] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1530] <... pwrite64 resumed>) = 1 [pid 1530] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1527] <... futex resumed>) = 0 [pid 1541] <... memfd_create resumed>) = 3 [pid 1541] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 299] <... restart_syscall resumed>) = 0 [pid 299] umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./48/binderfs") = 0 [pid 299] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1541] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1541] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1541] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1541] ioctl(4, LOOP_SET_FD, 3 [pid 1530] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1527] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1534] <... mount resumed>) = 0 [pid 1534] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1534] chdir("./file1") = 0 [pid 1534] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1534] ioctl(4, LOOP_CLR_FD) = 0 [pid 1534] close(4) = 0 [pid 1534] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1529] <... futex resumed>) = 0 [pid 1529] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1529] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 52.210136][ T1533] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 52.215493][ T1517] EXT4-fs (loop2): This should not happen!! Data will be lost [ 52.215493][ T1517] [ 52.238255][ T1533] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 52.249817][ T1541] loop3: detected capacity change from 0 to 2048 [ 52.250736][ T1533] EXT4-fs (loop4): This should not happen!! Data will be lost [ 52.250736][ T1533] [pid 1534] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1530] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1527] <... futex resumed>) = 0 [pid 1534] <... open resumed>) = 4 [pid 1534] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1529] <... futex resumed>) = 0 [pid 1529] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1529] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1534] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 1534] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1529] <... futex resumed>) = 0 [pid 1529] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1529] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1534] creat("./bus", 000) = 6 [pid 1534] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1529] <... futex resumed>) = 0 [pid 1534] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1529] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1534] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1529] <... futex resumed>) = 0 [pid 1534] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1529] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1534] <... futex resumed>) = 0 [pid 1529] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1534] pwrite64(6, "+", 1, 0 [pid 1529] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1534] <... pwrite64 resumed>) = 1 [pid 1529] <... futex resumed>) = 0 [pid 1534] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1529] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1534] <... futex resumed>) = 0 [pid 1529] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1530] open("./bus", O_RDONLY [pid 1534] open("./bus", O_RDONLY [pid 1529] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1527] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1534] <... open resumed>) = 7 [pid 1529] <... futex resumed>) = 0 [pid 1534] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1529] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1534] <... futex resumed>) = 0 [pid 1529] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1534] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1529] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1534] <... copy_file_range resumed>) = 1 [pid 1532] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1529] <... futex resumed>) = 0 [pid 1534] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1529] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1534] <... futex resumed>) = 0 [pid 1529] <... futex resumed>) = 0 [pid 1534] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1529] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1534] <... mmap resumed>) = 0x20000000 [pid 1534] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1529] <... futex resumed>) = 0 [pid 1529] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1529] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1534] <... futex resumed>) = 1 [pid 1534] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000) = -1 EFAULT (Bad address) [pid 1534] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1529] <... futex resumed>) = 0 [pid 1529] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1529] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1534] <... futex resumed>) = 1 [pid 1530] <... open resumed>) = 7 [pid 1541] <... ioctl resumed>) = 0 [pid 1541] close(3) = 0 [ 52.266483][ T1533] EXT4-fs (loop4): Total free blocks count 0 [ 52.272550][ T1533] EXT4-fs (loop4): Free/Dirty block details [ 52.278961][ T1533] EXT4-fs (loop4): free_blocks=2415919504 [ 52.283882][ T1534] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 52.284906][ T1533] EXT4-fs (loop4): dirty_blocks=32 [ 52.303969][ T1533] EXT4-fs (loop4): Block reservation details [pid 1541] close(4) = 0 [pid 1530] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1541] mkdir("./file1", 0777 [pid 1530] <... futex resumed>) = 1 [pid 1527] <... futex resumed>) = 0 [pid 1533] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1541] <... mkdir resumed>) = 0 [pid 1541] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 1530] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1527] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1530] <... futex resumed>) = 0 [pid 1527] <... futex resumed>) = 1 [pid 1530] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1527] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1530] <... copy_file_range resumed>) = 1 [pid 1527] <... futex resumed>) = 0 [pid 1530] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1527] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1530] <... futex resumed>) = 0 [pid 1527] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1530] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1527] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1527] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1527] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1544]}, 88) = 1544 [pid 1529] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1527] rt_sigprocmask(SIG_SETMASK, [], [pid 1529] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 1527] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1529] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1527] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1529] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 1527] <... futex resumed>) = 0 [pid 1529] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1527] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./48/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./48/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./48/file1") = 0 [pid 299] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./48") = 0 [pid 299] mkdir("./49", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1546 [pid 1539] <... futex resumed>) = ? [pid 1539] +++ killed by SIGBUS +++ ./strace-static-x86_64: Process 1546 attached ./strace-static-x86_64: Process 1544 attached [pid 1546] set_robust_list(0x55558909e6a0, 24 [pid 1544] set_robust_list(0x7f13c8cc39a0, 24 [pid 1541] <... mount resumed>) = 0 [ 52.305747][ T1534] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 52.310991][ T1533] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 52.322401][ T1534] EXT4-fs (loop0): This should not happen!! Data will be lost [ 52.322401][ T1534] [ 52.349118][ T1533] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 52.349692][ T1534] EXT4-fs (loop0): Total free blocks count 0 [pid 1546] <... set_robust_list resumed>) = 0 [pid 1544] <... set_robust_list resumed>) = 0 [pid 1541] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1533] +++ killed by SIGBUS +++ [pid 1532] +++ killed by SIGBUS +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1532, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 1546] chdir("./49") = 0 [pid 1546] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1546] setpgid(0, 0) = 0 [pid 1546] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1546] write(3, "1000", 4) = 4 [pid 1546] close(3) = 0 [pid 1546] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 1546] write(1, "executing program\n", 18) = 18 [pid 1546] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1546] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1546] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1546] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1546] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1544] rt_sigprocmask(SIG_SETMASK, [], [pid 1541] <... openat resumed>) = 3 [pid 1546] <... mprotect resumed>) = 0 [pid 1546] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1546] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1548]}, 88) = 1548 [pid 1546] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1546] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1546] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1548 attached [pid 1527] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1527] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1527] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1530] <... futex resumed>) = 0 [pid 1527] <... futex resumed>) = 1 [pid 1530] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1527] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1530] <... open resumed>) = -1 EFAULT (Bad address) [pid 1530] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1527] <... futex resumed>) = 0 [pid 1530] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1527] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1530] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1527] <... futex resumed>) = 0 [pid 1530] write(-1, "\x30\x78\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65983 [pid 1527] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1530] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 1530] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1527] <... futex resumed>) = 0 [pid 1530] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1548] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1548] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1544] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1541] chdir("./file1" [pid 301] <... restart_syscall resumed>) = 0 [pid 301] umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./47/binderfs" [pid 1544] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1541] <... chdir resumed>) = 0 [pid 301] <... unlink resumed>) = 0 [pid 1544] <... mmap resumed>) = 0x20000000 [pid 1541] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1544] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1541] <... openat resumed>) = 4 [pid 1527] exit_group(0 [pid 301] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1544] <... futex resumed>) = ? [pid 1541] ioctl(4, LOOP_CLR_FD [pid 1530] <... futex resumed>) = ? [pid 1527] <... exit_group resumed>) = ? [pid 1548] memfd_create("syzkaller", 0 [pid 1544] +++ exited with 0 +++ [pid 1541] <... ioctl resumed>) = 0 [pid 1534] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1530] +++ exited with 0 +++ [pid 1548] <... memfd_create resumed>) = 3 [pid 1548] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1548] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1548] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1548] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1548] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1548] close(3) = 0 [ 52.362824][ T1533] EXT4-fs (loop4): This should not happen!! Data will be lost [ 52.362824][ T1533] [ 52.367184][ T1534] EXT4-fs (loop0): Free/Dirty block details [ 52.382942][ T1534] EXT4-fs (loop0): free_blocks=2415919504 [ 52.388535][ T1534] EXT4-fs (loop0): dirty_blocks=32 [ 52.393748][ T1534] EXT4-fs (loop0): Block reservation details [ 52.396963][ T1527] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, [ 52.399566][ T1534] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 52.410522][ T1548] loop2: detected capacity change from 0 to 2048 [pid 1548] close(4) = 0 [pid 1548] mkdir("./file1", 0777) = 0 [pid 1548] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 1541] close(4) = 0 [pid 1534] +++ killed by SIGBUS +++ [ 52.413669][ T1527] block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 52.429480][ T1527] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 52.437049][ T1529] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 52.442128][ T1527] EXT4-fs (loop1): This should not happen!! Data will be lost [ 52.442128][ T1527] [ 52.456834][ T1529] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 1541] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1548] <... mount resumed>) = 0 [pid 1541] <... futex resumed>) = 1 [pid 1540] <... futex resumed>) = 0 [pid 1529] +++ killed by SIGBUS +++ [pid 1548] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1541] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1540] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1548] <... openat resumed>) = 3 [pid 1541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1540] <... futex resumed>) = 0 [pid 1548] chdir("./file1" [pid 1541] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1540] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1529, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 1548] <... chdir resumed>) = 0 [pid 1548] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1541] <... open resumed>) = 4 [pid 297] umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1548] <... openat resumed>) = 4 [pid 1541] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1548] ioctl(4, LOOP_CLR_FD [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1548] <... ioctl resumed>) = 0 [pid 1541] <... futex resumed>) = 1 [pid 1540] <... futex resumed>) = 0 [pid 297] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1548] close(4 [pid 1541] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1540] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1548] <... close resumed>) = 0 [pid 297] <... openat resumed>) = 3 [pid 1548] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1540] <... futex resumed>) = 0 [pid 297] newfstatat(3, "", [pid 1548] <... futex resumed>) = 1 [pid 1546] <... futex resumed>) = 0 [pid 1541] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1540] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1548] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1546] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1541] <... open resumed>) = 5 [pid 1548] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1546] <... futex resumed>) = 0 [pid 297] getdents64(3, [pid 1541] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1548] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1546] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1548] <... open resumed>) = 4 [pid 301] <... umount2 resumed>) = 0 [pid 1548] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1541] <... futex resumed>) = 1 [pid 1540] <... futex resumed>) = 0 [pid 301] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1540] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1541] creat("./bus", 000 [pid 1540] <... futex resumed>) = 0 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1548] <... futex resumed>) = 1 [pid 1546] <... futex resumed>) = 0 [pid 1541] <... creat resumed>) = 6 [pid 1540] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] newfstatat(AT_FDCWD, "./48/binderfs", [pid 1548] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1546] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1541] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1548] <... open resumed>) = 5 [pid 1546] <... futex resumed>) = 0 [pid 1541] <... futex resumed>) = 1 [pid 1540] <... futex resumed>) = 0 [pid 297] unlink("./48/binderfs" [pid 1548] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1546] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1541] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1540] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... unlink resumed>) = 0 [pid 1548] <... futex resumed>) = 0 [pid 1546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1541] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1540] <... futex resumed>) = 0 [pid 297] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1548] creat("./bus", 000 [pid 1546] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1541] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1540] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1548] <... creat resumed>) = 6 [pid 1546] <... futex resumed>) = 0 [pid 1541] <... futex resumed>) = 0 [pid 1540] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1548] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1546] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1541] pwrite64(6, "+", 1, 0 [pid 1540] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1548] <... futex resumed>) = 0 [pid 1546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1541] <... pwrite64 resumed>) = 1 [pid 1540] <... futex resumed>) = 0 [pid 1548] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1546] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1541] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1540] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1548] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1546] <... futex resumed>) = 0 [pid 1541] <... futex resumed>) = 0 [pid 1540] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1548] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1546] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1541] open("./bus", O_RDONLY [pid 1540] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1548] <... futex resumed>) = 0 [pid 1546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1541] <... open resumed>) = 7 [pid 1540] <... futex resumed>) = 0 [pid 1548] pwrite64(6, "+", 1, 0 [pid 1546] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1541] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1540] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1548] <... pwrite64 resumed>) = 1 [pid 1546] <... futex resumed>) = 0 [pid 1541] <... futex resumed>) = 0 [pid 1540] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1548] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1546] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1541] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1540] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1548] <... futex resumed>) = 0 [pid 1546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1541] <... copy_file_range resumed>) = 1 [pid 1540] <... futex resumed>) = 0 [pid 1548] open("./bus", O_RDONLY [pid 1546] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1541] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1540] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1548] <... open resumed>) = 7 [pid 1546] <... futex resumed>) = 0 [pid 1541] <... futex resumed>) = 0 [pid 1540] <... futex resumed>) = 0 [pid 1548] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1546] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1541] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1540] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 301] newfstatat(AT_FDCWD, "./47/file1", [pid 1548] <... futex resumed>) = 0 [pid 1546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1540] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1548] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1546] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1540] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1548] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1546] <... futex resumed>) = 0 [pid 1540] <... mprotect resumed>) = 0 [pid 1548] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1546] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1540] rt_sigprocmask(SIG_BLOCK, ~[], [pid 301] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1548] <... copy_file_range resumed>) = 1 [pid 1546] <... futex resumed>) = 0 [pid 1540] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1548] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1546] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1540] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1548] <... futex resumed>) = 0 [pid 1546] <... mmap resumed>) = 0x7f13c8ca3000 [pid 301] openat(AT_FDCWD, "./47/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1548] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1546] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1540] <... clone3 resumed> => {parent_tid=[1551]}, 88) = 1551 [pid 301] <... openat resumed>) = 4 [pid 297] <... umount2 resumed>) = 0 [pid 1546] <... mprotect resumed>) = 0 [pid 1540] rt_sigprocmask(SIG_SETMASK, [], [pid 301] newfstatat(4, "", [pid 1546] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1540] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1546] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1540] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1527] +++ exited with 0 +++ [pid 301] getdents64(4, [pid 1546] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1540] <... futex resumed>) = 0 [pid 301] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1527, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- ./strace-static-x86_64: Process 1552 attached ./strace-static-x86_64: Process 1551 attached [pid 1540] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] getdents64(4, [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 297] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1546] <... clone3 resumed> => {parent_tid=[1552]}, 88) = 1552 [pid 301] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1546] rt_sigprocmask(SIG_SETMASK, [], [pid 301] close(4 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1546] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 301] <... close resumed>) = 0 [pid 1546] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] rmdir("./47/file1" [pid 297] newfstatat(AT_FDCWD, "./48/file1", [pid 1552] set_robust_list(0x7f13c8cc39a0, 24 [pid 1551] set_robust_list(0x7f13c8cc39a0, 24 [pid 1546] <... futex resumed>) = 0 [pid 301] <... rmdir resumed>) = 0 [pid 1546] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] getdents64(3, [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1551] <... set_robust_list resumed>) = 0 [pid 301] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] close(3 [pid 297] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... close resumed>) = 0 [pid 1552] <... set_robust_list resumed>) = 0 [pid 1551] rt_sigprocmask(SIG_SETMASK, [], [pid 301] rmdir("./47" [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1552] rt_sigprocmask(SIG_SETMASK, [], [pid 1551] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 301] <... rmdir resumed>) = 0 [pid 301] mkdir("./48", 0777 [pid 297] openat(AT_FDCWD, "./48/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1552] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1551] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 301] <... mkdir resumed>) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 297] <... openat resumed>) = 4 [pid 301] <... openat resumed>) = 3 [pid 301] ioctl(3, LOOP_CLR_FD [pid 297] newfstatat(4, "", [pid 301] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 301] close(3 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1552] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1551] <... mmap resumed>) = 0x20000000 [pid 301] <... close resumed>) = 0 [pid 1552] <... mmap resumed>) = 0x20000000 [pid 1551] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] getdents64(4, [pid 1552] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1551] <... futex resumed>) = 1 [pid 1540] <... futex resumed>) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] <... restart_syscall resumed>) = 0 [pid 1552] <... futex resumed>) = 1 [pid 1551] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1546] <... futex resumed>) = 0 [pid 1540] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 1553 attached [pid 1552] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1546] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1541] <... futex resumed>) = 0 [pid 1540] <... futex resumed>) = 1 [pid 297] getdents64(4, [pid 1553] set_robust_list(0x55558909e6a0, 24 [pid 1548] <... futex resumed>) = 0 [pid 1546] <... futex resumed>) = 1 [ 52.456834][ T1529] [ 52.463730][ T1527] EXT4-fs (loop1): Total free blocks count 0 [ 52.481181][ T1527] EXT4-fs (loop1): Free/Dirty block details [ 52.487294][ T1527] EXT4-fs (loop1): free_blocks=2415919504 [ 52.493170][ T1527] EXT4-fs (loop1): dirty_blocks=32 [ 52.498459][ T1527] EXT4-fs (loop1): Block reservation details [ 52.504852][ T1527] EXT4-fs (loop1): i_reserved_data_blocks=2 [pid 1541] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1540] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} executing program [pid 301] <... clone resumed>, child_tidptr=0x55558909e690) = 1553 [pid 297] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1548] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1546] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1541] <... open resumed>) = -1 EFAULT (Bad address) [pid 297] close(4 [pid 1548] <... open resumed>) = -1 EFAULT (Bad address) [pid 1541] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1548] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... close resumed>) = 0 [pid 1553] <... set_robust_list resumed>) = 0 [pid 1541] <... futex resumed>) = 1 [pid 1540] <... futex resumed>) = 0 [pid 297] rmdir("./48/file1" [pid 1548] <... futex resumed>) = 1 [pid 1546] <... futex resumed>) = 0 [pid 1541] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1540] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1553] chdir("./48") = 0 [pid 1546] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1540] <... futex resumed>) = 0 [pid 1541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 297] <... rmdir resumed>) = 0 [pid 1553] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1553] setpgid(0, 0) = 0 [pid 1553] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1553] write(3, "1000", 4) = 4 [pid 1553] close(3) = 0 [pid 1553] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1553] write(1, "executing program\n", 18) = 18 [pid 1553] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1553] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1553] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1553] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1553] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1553] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1553] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1554]}, 88) = 1554 [pid 1553] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1553] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1553] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1554 attached [pid 1554] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1554] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1554] memfd_create("syzkaller", 0) = 3 [pid 1554] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1554] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1554] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1554] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1554] ioctl(4, LOOP_SET_FD, 3 [pid 1546] <... futex resumed>) = 0 [pid 1540] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1554] <... ioctl resumed>) = 0 [pid 1554] close(3) = 0 [pid 1554] close(4) = 0 [pid 1554] mkdir("./file1", 0777) = 0 [pid 1554] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 298] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./48/binderfs") = 0 [pid 298] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1546] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 52.526203][ T1548] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 52.538130][ T1554] loop4: detected capacity change from 0 to 2048 [ 52.541515][ T1541] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 52.563124][ T327] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 297] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./48") = 0 [pid 297] mkdir("./49", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1555 ./strace-static-x86_64: Process 1555 attached [pid 1540] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 52.565870][ T1541] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 52.576145][ T327] EXT4-fs (loop1): This should not happen!! Data will be lost [ 52.576145][ T327] [ 52.587593][ T1541] EXT4-fs (loop3): This should not happen!! Data will be lost [ 52.587593][ T1541] [ 52.606549][ T1541] EXT4-fs (loop3): Total free blocks count 0 [ 52.607144][ T1548] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 1548] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1552] <... futex resumed>) = ? [pid 1552] +++ killed by SIGBUS +++ [pid 1546] <... futex resumed>) = ? [pid 1555] set_robust_list(0x55558909e6a0, 24 [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./48/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./48/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./48/file1") = 0 [pid 298] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./48") = 0 [pid 298] mkdir("./49", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1558 [pid 1554] <... mount resumed>) = 0 [pid 1554] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1554] chdir("./file1") = 0 [pid 1554] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1554] ioctl(4, LOOP_CLR_FD) = 0 [pid 1554] close(4) = 0 [pid 1555] <... set_robust_list resumed>) = 0 [pid 1555] chdir("./49") = 0 [pid 1555] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1555] setpgid(0, 0) = 0 [pid 1554] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1555] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1554] <... futex resumed>) = 1 [pid 1553] <... futex resumed>) = 0 [pid 1555] <... openat resumed>) = 3 [pid 1554] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1553] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1555] write(3, "1000", 4 [pid 1554] <... open resumed>) = 4 [pid 1553] <... futex resumed>) = 0 [pid 1555] <... write resumed>) = 4 [pid 1554] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1553] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1555] close(3 [pid 1554] <... futex resumed>) = 0 [pid 1553] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1555] <... close resumed>) = 0 [pid 1554] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1553] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1555] symlink("/dev/binderfs", "./binderfs" [pid 1554] <... open resumed>) = 5 [pid 1553] <... futex resumed>) = 0 [pid 1555] <... symlink resumed>) = 0 [pid 1554] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1553] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}executing program [pid 1555] write(1, "executing program\n", 18 [pid 1554] <... futex resumed>) = 0 [pid 1553] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1553] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1553] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1555] <... write resumed>) = 18 [pid 1554] creat("./bus", 000 [pid 1555] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1554] <... creat resumed>) = 6 [pid 1555] <... futex resumed>) = 0 [pid 1554] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1555] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1554] <... futex resumed>) = 1 [pid 1553] <... futex resumed>) = 0 [pid 1553] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 52.617090][ T1541] EXT4-fs (loop3): Free/Dirty block details [ 52.630077][ T1548] EXT4-fs (loop2): This should not happen!! Data will be lost [ 52.630077][ T1548] [ 52.630096][ T1548] EXT4-fs (loop2): Total free blocks count 0 [ 52.630108][ T1548] EXT4-fs (loop2): Free/Dirty block details [ 52.630118][ T1548] EXT4-fs (loop2): free_blocks=2415919504 [ 52.630132][ T1548] EXT4-fs (loop2): dirty_blocks=32 [ 52.630143][ T1548] EXT4-fs (loop2): Block reservation details [ 52.630153][ T1548] EXT4-fs (loop2): i_reserved_data_blocks=2 [pid 1553] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1555] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1554] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1555] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1554] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1555] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1555] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1555] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1555] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1554] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1555] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1559]}, 88) = 1559 [pid 1555] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1555] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1555] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1554] <... futex resumed>) = 1 [pid 1553] <... futex resumed>) = 0 [pid 1553] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1553] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1554] pwrite64(6, "+", 1, 0) = 1 [pid 1554] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1553] <... futex resumed>) = 0 [pid 1554] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1553] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1554] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1553] <... futex resumed>) = 0 [pid 1554] open("./bus", O_RDONLY [pid 1553] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1554] <... open resumed>) = 7 [pid 1554] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1553] <... futex resumed>) = 0 [pid 1554] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1553] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1554] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1553] <... futex resumed>) = 0 [pid 1554] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1553] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1554] <... copy_file_range resumed>) = 1 [pid 1553] <... futex resumed>) = 0 [pid 1554] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1553] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1554] <... futex resumed>) = 0 [pid 1553] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1554] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1553] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1553] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1553] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1560]}, 88) = 1560 [pid 1553] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1553] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1553] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1558 attached [pid 1558] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1558] chdir("./49") = 0 [pid 1558] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1558] setpgid(0, 0) = 0 [pid 1558] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1558] write(3, "1000", 4) = 4 [pid 1558] close(3) = 0 [pid 1558] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 1558] write(1, "executing program\n", 18) = 18 [pid 1558] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1558] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1558] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1558] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 1560 attached ./strace-static-x86_64: Process 1559 attached ) = 0x7f13c8cc4000 [pid 1559] set_robust_list(0x7f13c8ce49a0, 24 [pid 1560] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1559] <... set_robust_list resumed>) = 0 [pid 1560] rt_sigprocmask(SIG_SETMASK, [], [pid 1559] rt_sigprocmask(SIG_SETMASK, [], [pid 1560] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1559] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1560] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1559] memfd_create("syzkaller", 0 [pid 1558] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1560] <... mmap resumed>) = 0x20000000 [pid 1558] <... mprotect resumed>) = 0 [pid 1558] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1559] <... memfd_create resumed>) = 3 [pid 1558] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1558] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1559] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1559] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1558] <... clone3 resumed> => {parent_tid=[1561]}, 88) = 1561 [pid 1558] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1558] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1558] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1560] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1553] <... futex resumed>) = 0 [pid 1553] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1554] <... futex resumed>) = 0 [pid 1553] <... futex resumed>) = 1 [pid 1554] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1553] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1554] <... open resumed>) = -1 EFAULT (Bad address) [pid 1554] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1553] <... futex resumed>) = 0 [pid 1554] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1553] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1554] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 52.632034][ T1548] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 52.640908][ T1541] EXT4-fs (loop3): free_blocks=2415919504 [ 52.692321][ T1541] EXT4-fs (loop3): dirty_blocks=32 [ 52.697489][ T1541] EXT4-fs (loop3): Block reservation details [ 52.702807][ T1554] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 52.703964][ T1541] EXT4-fs (loop3): i_reserved_data_blocks=2 [pid 1553] <... futex resumed>) = 0 [pid 1553] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1560] <... futex resumed>) = 1 [pid 1560] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1561 attached [pid 1559] <... write resumed>) = 1048576 [pid 1541] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1548] +++ killed by SIGBUS +++ [pid 1546] +++ killed by SIGBUS +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1546, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8} --- [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 1561] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1561] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1561] memfd_create("syzkaller", 0) = 3 [pid 1561] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1561] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 299] <... restart_syscall resumed>) = 0 [pid 1559] munmap(0x7f13c08c4000, 138412032 [pid 299] umount2("./49", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1541] +++ killed by SIGBUS +++ [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./49/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./49/binderfs") = 0 [pid 299] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1561] <... write resumed>) = 1048576 [pid 1561] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1561] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1561] ioctl(4, LOOP_SET_FD, 3 [pid 1559] <... munmap resumed>) = 0 [pid 1551] <... futex resumed>) = ? [ 52.719110][ T1548] EXT4-fs (loop2): This should not happen!! Data will be lost [ 52.719110][ T1548] [ 52.727410][ T1554] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 52.746012][ T1554] EXT4-fs (loop4): This should not happen!! Data will be lost [ 52.746012][ T1554] [ 52.752691][ T1561] loop1: detected capacity change from 0 to 2048 [ 52.755794][ T1554] EXT4-fs (loop4): Total free blocks count 0 [pid 1559] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1553] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1559] <... openat resumed>) = 4 [pid 1559] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1559] close(3) = 0 [pid 1559] close(4 [pid 1554] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1561] <... ioctl resumed>) = 0 [pid 1559] <... close resumed>) = 0 [pid 1559] mkdir("./file1", 0777) = 0 [pid 1559] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 1561] close(3 [pid 1551] +++ killed by SIGBUS +++ [pid 1540] +++ killed by SIGBUS +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1540, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=19} --- [pid 1561] <... close resumed>) = 0 [pid 1561] close(4 [pid 1560] <... futex resumed>) = ? [pid 1554] +++ killed by SIGBUS +++ [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 1561] <... close resumed>) = 0 [ 52.763202][ T1551] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 52.767519][ T1554] EXT4-fs (loop4): Free/Dirty block details [ 52.782345][ T1559] loop0: detected capacity change from 0 to 2048 [ 52.785311][ T1554] EXT4-fs (loop4): free_blocks=2415919504 [ 52.797037][ T1554] EXT4-fs (loop4): dirty_blocks=32 [ 52.801910][ T1554] EXT4-fs (loop4): Block reservation details [ 52.807774][ T1554] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 52.813650][ T1551] EXT4-fs (loop3): This should not happen!! Data will be lost [ 52.813650][ T1551] [pid 1561] mkdir("./file1", 0777) = 0 [pid 300] <... restart_syscall resumed>) = 0 [pid 299] <... umount2 resumed>) = 0 [pid 1561] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 300] umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./47/binderfs") = 0 [pid 300] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1559] <... mount resumed>) = 0 [pid 1559] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1559] chdir("./file1") = 0 [pid 1559] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1559] ioctl(4, LOOP_CLR_FD) = 0 [pid 1559] close(4) = 0 [pid 1559] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1559] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./49/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./49/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1555] <... futex resumed>) = 0 [pid 299] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1555] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1560] +++ killed by SIGBUS +++ [pid 1559] <... futex resumed>) = 0 [pid 1555] <... futex resumed>) = 1 [pid 1553] +++ killed by SIGBUS +++ [pid 299] getdents64(4, [pid 1559] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1555] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1553, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 299] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 299] close(4 [pid 1559] <... open resumed>) = 4 [pid 1559] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1559] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1555] <... futex resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 1555] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1559] <... futex resumed>) = 0 [pid 1555] <... futex resumed>) = 1 [pid 299] rmdir("./49/file1" [pid 1559] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1555] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1559] <... open resumed>) = 5 [pid 299] <... rmdir resumed>) = 0 [pid 299] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./49") = 0 [pid 299] mkdir("./50", 0777 [pid 1559] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... umount2 resumed>) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1559] <... futex resumed>) = 1 [pid 1555] <... futex resumed>) = 0 [pid 300] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... openat resumed>) = 3 [pid 1559] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1555] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1559] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1555] <... futex resumed>) = 0 [pid 300] newfstatat(AT_FDCWD, "./47/file1", [pid 1559] creat("./bus", 000 [pid 1555] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1559] <... creat resumed>) = 6 [pid 300] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1566 [pid 301] umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1559] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1559] <... futex resumed>) = 1 [pid 1555] <... futex resumed>) = 0 [pid 301] umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] openat(AT_FDCWD, "./47/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1561] <... mount resumed>) = 0 [pid 1555] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1561] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1559] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1555] <... futex resumed>) = 0 [pid 300] <... openat resumed>) = 4 [pid 1559] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1561] <... openat resumed>) = 3 [pid 1555] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] newfstatat(4, "", [pid 1561] chdir("./file1" [pid 1559] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1555] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1561] <... chdir resumed>) = 0 [pid 1559] <... futex resumed>) = 0 [pid 1555] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1561] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1559] pwrite64(6, "+", 1, 0 [pid 1555] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1566 attached [pid 1561] <... openat resumed>) = 4 [pid 300] getdents64(4, [pid 1561] ioctl(4, LOOP_CLR_FD [pid 1559] <... pwrite64 resumed>) = 1 [pid 1555] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] unlink("./48/binderfs" [pid 1566] set_robust_list(0x55558909e6a0, 24 [pid 1561] <... ioctl resumed>) = 0 [pid 1559] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1555] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... unlink resumed>) = 0 [pid 300] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1561] close(4 [pid 1559] <... futex resumed>) = 0 [pid 1555] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] getdents64(4, [pid 1566] <... set_robust_list resumed>) = 0 [pid 1561] <... close resumed>) = 0 [pid 301] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1561] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1559] open("./bus", O_RDONLY [pid 1555] <... futex resumed>) = 0 [pid 300] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1561] <... futex resumed>) = 1 [pid 1559] <... open resumed>) = 7 [pid 1558] <... futex resumed>) = 0 [pid 1555] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] close(4 [pid 1561] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1559] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1558] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1555] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] <... close resumed>) = 0 [pid 1566] chdir("./50" [pid 1561] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1559] <... futex resumed>) = 0 [pid 1558] <... futex resumed>) = 0 [pid 1555] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1561] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1559] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1558] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1555] <... futex resumed>) = 0 [pid 300] rmdir("./47/file1" [pid 1555] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1566] <... chdir resumed>) = 0 [pid 1559] <... copy_file_range resumed>) = 1 [pid 1555] <... futex resumed>) = 0 [pid 1566] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1555] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 300] <... rmdir resumed>) = 0 [pid 1559] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1555] <... mmap resumed>) = 0x7f13c8ca3000 [pid 300] getdents64(3, [pid 1561] <... open resumed>) = 4 [pid 1559] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1555] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1561] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1566] <... prctl resumed>) = 0 [pid 1561] <... futex resumed>) = 1 [pid 1558] <... futex resumed>) = 0 [pid 1555] <... mprotect resumed>) = 0 [pid 300] close(3 [pid 1561] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1558] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1555] rt_sigprocmask(SIG_BLOCK, ~[], [pid 300] <... close resumed>) = 0 [pid 1561] <... open resumed>) = 5 [pid 1558] <... futex resumed>) = 0 [pid 1555] <... rt_sigprocmask resumed>[], 8) = 0 [pid 300] rmdir("./47" [pid 1566] setpgid(0, 0 [pid 1561] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1558] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1555] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1566] <... setpgid resumed>) = 0 [pid 1558] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] <... rmdir resumed>) = 0 [pid 1561] <... futex resumed>) = 0 [pid 1558] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1555] <... clone3 resumed> => {parent_tid=[1567]}, 88) = 1567 [pid 300] mkdir("./48", 0777 [pid 1561] creat("./bus", 000 [pid 1558] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1555] rt_sigprocmask(SIG_SETMASK, [], [pid 1566] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1561] <... creat resumed>) = 6 [pid 1555] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1566] <... openat resumed>) = 3 [pid 1561] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1555] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... mkdir resumed>) = 0 [pid 1561] <... futex resumed>) = 1 [pid 1558] <... futex resumed>) = 0 [pid 1555] <... futex resumed>) = 0 [pid 1561] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1558] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1555] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1561] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1558] <... futex resumed>) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1561] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1558] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1566] write(3, "1000", 4 [pid 300] <... openat resumed>) = 3 [pid 1558] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1561] <... futex resumed>) = 0 [pid 1558] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1561] pwrite64(6, "+", 1, 0 [pid 1558] <... futex resumed>) = 0 [pid 300] ioctl(3, LOOP_CLR_FD [pid 1566] <... write resumed>) = 4 [pid 1561] <... pwrite64 resumed>) = 1 [pid 1558] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1561] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1558] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1561] <... futex resumed>) = 0 [pid 1558] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] close(3 [pid 1561] open("./bus", O_RDONLY [pid 1558] <... futex resumed>) = 0 [pid 1566] close(3 [pid 1561] <... open resumed>) = 7 [pid 1558] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... close resumed>) = 0 [pid 1561] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1558] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1561] <... futex resumed>) = 0 [pid 1558] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1561] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1558] <... futex resumed>) = 0 executing program [pid 1566] <... close resumed>) = 0 [pid 1561] <... copy_file_range resumed>) = 1 [pid 1558] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1566] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1561] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1558] <... futex resumed>) = 0 [pid 1566] write(1, "executing program\n", 18 [pid 1561] <... futex resumed>) = 0 [pid 1558] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 300] <... clone resumed>, child_tidptr=0x55558909e690) = 1568 [pid 1566] <... write resumed>) = 18 [pid 1561] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1566] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1558] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1566] <... futex resumed>) = 0 [pid 1566] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1566] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1566] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1566] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1566] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 52.824953][ T1560] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 52.837282][ T1560] EXT4-fs (loop4): This should not happen!! Data will be lost [ 52.837282][ T1560] [pid 1566] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1558] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1566] <... clone3 resumed> => {parent_tid=[1569]}, 88) = 1569 [pid 1566] rt_sigprocmask(SIG_SETMASK, [], [pid 1558] <... mprotect resumed>) = 0 [pid 1566] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1566] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1558] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1566] <... futex resumed>) = 0 [pid 1558] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 1567 attached [pid 1566] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1558] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1567] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1567] rt_sigprocmask(SIG_SETMASK, [], [pid 1558] <... clone3 resumed> => {parent_tid=[1570]}, 88) = 1570 [pid 1567] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1558] rt_sigprocmask(SIG_SETMASK, [], [pid 1567] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1558] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1567] <... mmap resumed>) = 0x20000000 [pid 1558] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1558] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1567] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1555] <... futex resumed>) = 0 [pid 1555] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1559] <... futex resumed>) = 0 [pid 1555] <... futex resumed>) = 1 [pid 1559] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1555] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1559] <... open resumed>) = -1 EFAULT (Bad address) [pid 1559] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1555] <... futex resumed>) = 0 [pid 1559] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1555] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1559] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1555] <... futex resumed>) = 0 [pid 1567] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1568 attached [pid 1568] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1568] chdir("./48") = 0 [pid 1568] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1568] setpgid(0, 0) = 0 [pid 1568] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1568] write(3, "1000", 4) = 4 [pid 1568] close(3) = 0 [pid 1568] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1568] write(1, "executing program\n", 18executing program ) = 18 [pid 1568] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1568] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1568] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1568] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1568] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1568] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1568] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1571]}, 88) = 1571 [pid 1568] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1568] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1568] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1571 attached [pid 1571] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1571] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1571] memfd_create("syzkaller", 0) = 3 [pid 1571] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1555] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... umount2 resumed>) = 0 [pid 301] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 1570 attached ./strace-static-x86_64: Process 1569 attached [pid 301] newfstatat(AT_FDCWD, "./48/file1", [pid 1570] set_robust_list(0x7f13c8cc39a0, 24 [pid 1569] set_robust_list(0x7f13c8ce49a0, 24 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1571] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1571] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1571] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1571] ioctl(4, LOOP_SET_FD, 3 [pid 1570] <... set_robust_list resumed>) = 0 [pid 1569] <... set_robust_list resumed>) = 0 [pid 301] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1571] <... ioctl resumed>) = 0 [pid 1571] close(3) = 0 [pid 1571] close(4) = 0 [pid 1571] mkdir("./file1", 0777) = 0 [pid 1571] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 1570] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1570] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1569] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1569] memfd_create("syzkaller", 0) = 3 [pid 1569] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1569] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1558] <... futex resumed>) = 0 [ 52.894932][ T1559] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 52.914013][ T1559] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 52.923597][ T1571] loop3: detected capacity change from 0 to 2048 [ 52.926258][ T1559] EXT4-fs (loop0): This should not happen!! Data will be lost [ 52.926258][ T1559] [pid 301] openat(AT_FDCWD, "./48/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1569] <... write resumed>) = 1048576 [pid 1569] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1569] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1569] ioctl(4, LOOP_SET_FD, 3 [pid 1558] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... openat resumed>) = 4 [pid 1569] <... ioctl resumed>) = 0 [pid 1569] close(3) = 0 [pid 1569] close(4) = 0 [pid 1569] mkdir("./file1", 0777) = 0 [pid 1569] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 1558] <... futex resumed>) = 1 [pid 301] newfstatat(4, "", [pid 1561] <... futex resumed>) = 0 [pid 1558] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1555] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1561] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 301] getdents64(4, [pid 1561] <... open resumed>) = -1 EFAULT (Bad address) [pid 1561] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1561] <... futex resumed>) = 1 [pid 1558] <... futex resumed>) = 0 [pid 301] getdents64(4, [pid 1561] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1558] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1561] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1558] <... futex resumed>) = 0 [pid 301] close(4 [pid 1558] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... close resumed>) = 0 [pid 301] rmdir("./48/file1" [pid 1571] <... mount resumed>) = 0 [ 52.946064][ T1559] EXT4-fs (loop0): Total free blocks count 0 [ 52.951473][ T1569] loop2: detected capacity change from 0 to 2048 [ 52.952586][ T1559] EXT4-fs (loop0): Free/Dirty block details [ 52.965464][ T1559] EXT4-fs (loop0): free_blocks=2415919504 [ 52.972639][ T1561] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 52.972937][ T1559] EXT4-fs (loop0): dirty_blocks=32 [pid 1571] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 301] <... rmdir resumed>) = 0 [pid 1571] <... openat resumed>) = 3 [pid 301] getdents64(3, [pid 1559] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1571] chdir("./file1") = 0 [pid 1571] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1571] ioctl(4, LOOP_CLR_FD) = 0 [pid 1571] close(4) = 0 [pid 1571] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1568] <... futex resumed>) = 0 [pid 1571] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1568] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1571] <... open resumed>) = 4 [pid 1568] <... futex resumed>) = 0 [pid 1571] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1568] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1571] <... futex resumed>) = 0 [pid 1568] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1571] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1568] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1571] <... open resumed>) = 5 [pid 1568] <... futex resumed>) = 0 [pid 1571] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1568] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1571] <... futex resumed>) = 0 [pid 1568] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1571] creat("./bus", 000 [pid 1568] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] close(3 [pid 1571] <... creat resumed>) = 6 [pid 1568] <... futex resumed>) = 0 [pid 301] <... close resumed>) = 0 [pid 1571] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1568] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] rmdir("./48" [pid 1571] <... futex resumed>) = 0 [pid 1568] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... rmdir resumed>) = 0 [pid 1571] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1568] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] mkdir("./49", 0777 [pid 1571] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1569] <... mount resumed>) = 0 [pid 1568] <... futex resumed>) = 0 [pid 301] <... mkdir resumed>) = 0 [pid 1571] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1569] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1568] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1571] <... futex resumed>) = 0 [pid 1569] <... openat resumed>) = 3 [pid 1568] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1568] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1568] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1571] pwrite64(6, "+", 1, 0 [pid 1569] chdir("./file1" [pid 301] <... openat resumed>) = 3 [pid 1571] <... pwrite64 resumed>) = 1 [pid 1569] <... chdir resumed>) = 0 [pid 301] ioctl(3, LOOP_CLR_FD [pid 1571] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1569] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 301] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1571] <... futex resumed>) = 1 [pid 1569] <... openat resumed>) = 4 [pid 1568] <... futex resumed>) = 0 [pid 301] close(3 [pid 1571] open("./bus", O_RDONLY [pid 1569] ioctl(4, LOOP_CLR_FD [pid 1568] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... close resumed>) = 0 [pid 1571] <... open resumed>) = 7 [pid 1569] <... ioctl resumed>) = 0 [pid 1568] <... futex resumed>) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1571] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1569] close(4 [pid 1568] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1571] <... futex resumed>) = 0 [pid 1569] <... close resumed>) = 0 [pid 1568] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... clone resumed>, child_tidptr=0x55558909e690) = 1577 [pid 1571] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1569] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1568] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1571] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1569] <... futex resumed>) = 1 [pid 1568] <... futex resumed>) = 0 [pid 1566] <... futex resumed>) = 0 [pid 1558] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1571] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1569] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1568] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1566] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1571] <... copy_file_range resumed>) = 1 [pid 1569] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1568] <... futex resumed>) = 0 [pid 1566] <... futex resumed>) = 0 [pid 1571] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1569] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1568] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1566] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1571] <... futex resumed>) = 0 [pid 1569] <... open resumed>) = 4 [pid 1568] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1571] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1569] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1568] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1569] <... futex resumed>) = 1 [ 52.993697][ T1559] EXT4-fs (loop0): Block reservation details [ 52.994453][ T1561] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 53.001451][ T1559] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 53.011998][ T1561] EXT4-fs (loop1): This should not happen!! Data will be lost [ 53.011998][ T1561] [ 53.026817][ T1561] EXT4-fs (loop1): Total free blocks count 0 [ 53.032777][ T1561] EXT4-fs (loop1): Free/Dirty block details [ 53.038530][ T1561] EXT4-fs (loop1): free_blocks=2415919504 [pid 1568] <... mprotect resumed>) = 0 [pid 1566] <... futex resumed>) = 0 [pid 1569] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1568] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1566] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1569] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1568] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1566] <... futex resumed>) = 0 [pid 1569] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1568] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1566] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1569] <... open resumed>) = 5 [pid 1569] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1568] <... clone3 resumed> => {parent_tid=[1578]}, 88) = 1578 [pid 1569] <... futex resumed>) = 1 [pid 1568] rt_sigprocmask(SIG_SETMASK, [], [pid 1566] <... futex resumed>) = 0 [pid 1569] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1568] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1566] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1569] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1568] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1566] <... futex resumed>) = 0 [pid 1569] creat("./bus", 000 [pid 1568] <... futex resumed>) = 0 [pid 1566] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1569] <... creat resumed>) = 6 [pid 1568] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1569] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1566] <... futex resumed>) = 0 [pid 1569] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1567] <... futex resumed>) = ? [pid 1566] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1578 attached ./strace-static-x86_64: Process 1577 attached [pid 1569] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1567] +++ killed by SIGBUS +++ [pid 1566] <... futex resumed>) = 0 [pid 1561] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1578] set_robust_list(0x7f13c8cc39a0, 24 [pid 1577] set_robust_list(0x55558909e6a0, 24 [pid 1578] <... set_robust_list resumed>) = 0 [pid 1577] <... set_robust_list resumed>) = 0 [pid 1578] rt_sigprocmask(SIG_SETMASK, [], [pid 1577] chdir("./49" [pid 1578] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1577] <... chdir resumed>) = 0 [pid 1578] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1577] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1578] <... mmap resumed>) = 0x20000000 [pid 1577] <... prctl resumed>) = 0 [pid 1578] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1577] setpgid(0, 0 [pid 1578] <... futex resumed>) = 1 [pid 1577] <... setpgid resumed>) = 0 [pid 1578] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1577] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1577] write(3, "1000", 4) = 4 [pid 1577] close(3) = 0 [pid 1577] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 1577] write(1, "executing program\n", 18) = 18 [pid 1577] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1577] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1577] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1566] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1577] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1570] <... futex resumed>) = ? [pid 1569] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1568] <... futex resumed>) = 0 [pid 1577] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1570] +++ killed by SIGBUS +++ [pid 1569] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1568] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1561] +++ killed by SIGBUS +++ [pid 1577] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1571] <... futex resumed>) = 0 [pid 1569] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1568] <... futex resumed>) = 1 [pid 1577] <... mprotect resumed>) = 0 [pid 1571] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1577] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1577] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1579]}, 88) = 1579 [pid 1577] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1577] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1577] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1579 attached [pid 1579] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1579] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1579] memfd_create("syzkaller", 0) = 3 [pid 1579] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1579] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1569] <... futex resumed>) = 1 [pid 1568] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1571] <... open resumed>) = -1 EFAULT (Bad address) [pid 1569] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1566] <... futex resumed>) = 0 [pid 1571] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1566] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1571] <... futex resumed>) = 1 [pid 1568] <... futex resumed>) = 0 [pid 1566] <... futex resumed>) = 1 [pid 1569] <... futex resumed>) = 0 [pid 1571] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1569] pwrite64(6, "+", 1, 0 [pid 1568] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1566] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1571] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1569] <... pwrite64 resumed>) = 1 [pid 1568] <... futex resumed>) = 0 [ 53.044134][ T1561] EXT4-fs (loop1): dirty_blocks=32 [ 53.049026][ T1561] EXT4-fs (loop1): Block reservation details [ 53.054923][ T1561] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 53.056020][ T1559] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 53.077081][ T1558] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 1579] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1579] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1579] ioctl(4, LOOP_SET_FD, 3 [pid 1569] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1568] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1579] <... ioctl resumed>) = 0 [pid 1579] close(3) = 0 [pid 1579] close(4) = 0 [pid 1579] mkdir("./file1", 0777) = 0 [pid 1579] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 1569] <... futex resumed>) = 1 [pid 1569] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1566] <... futex resumed>) = 0 [pid 1566] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1558] +++ killed by SIGBUS +++ [pid 1559] +++ killed by SIGBUS +++ [pid 1555] +++ killed by SIGBUS +++ [pid 1566] <... futex resumed>) = 1 [pid 1566] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1558, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8} --- [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1555, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11} --- [ 53.090538][ T1571] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 53.091606][ T1579] loop4: detected capacity change from 0 to 2048 [ 53.110077][ T1571] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 53.123664][ T1558] EXT4-fs (loop1): This should not happen!! Data will be lost [ 53.123664][ T1558] [ 53.124233][ T1559] EXT4-fs (loop0): This should not happen!! Data will be lost [ 53.124233][ T1559] [pid 297] restart_syscall(<... resuming interrupted clone ...> [pid 1569] <... futex resumed>) = 0 [pid 1569] open("./bus", O_RDONLY) = 7 [pid 1569] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1566] <... futex resumed>) = 0 [pid 1569] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1566] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1569] <... copy_file_range resumed>) = 1 [pid 1566] <... futex resumed>) = 0 [pid 1569] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1566] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1569] <... futex resumed>) = 0 [pid 1566] <... futex resumed>) = 0 [pid 1569] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1566] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1566] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1566] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1566] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1581]}, 88) = 1581 [pid 1566] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1566] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1566] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1581 attached [pid 1581] set_robust_list(0x7f13c8cc39a0, 24 [pid 298] <... restart_syscall resumed>) = 0 [pid 297] <... restart_syscall resumed>) = 0 [pid 298] umount2("./49", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] umount2("./49", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... openat resumed>) = 3 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(3, "", [pid 297] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] <... openat resumed>) = 3 [pid 298] getdents64(3, [pid 297] newfstatat(3, "", [pid 298] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] umount2("./49/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] getdents64(3, [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 298] newfstatat(AT_FDCWD, "./49/binderfs", [pid 297] umount2("./49/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] unlink("./49/binderfs" [pid 297] newfstatat(AT_FDCWD, "./49/binderfs", [pid 298] <... unlink resumed>) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] unlink("./49/binderfs" [pid 1579] <... mount resumed>) = 0 [pid 297] <... unlink resumed>) = 0 [pid 1579] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 297] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1579] <... openat resumed>) = 3 [pid 1579] chdir("./file1") = 0 [pid 1579] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1579] ioctl(4, LOOP_CLR_FD) = 0 [pid 1579] close(4) = 0 [pid 1568] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 298] <... umount2 resumed>) = 0 [pid 1579] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1577] <... futex resumed>) = 0 [pid 1579] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1577] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1579] <... open resumed>) = 4 [pid 1577] <... futex resumed>) = 0 [pid 1579] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1577] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1579] <... futex resumed>) = 0 [pid 1577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1579] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1577] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1579] <... open resumed>) = 5 [pid 1577] <... futex resumed>) = 0 [pid 1579] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1577] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1579] <... futex resumed>) = 0 [pid 1577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1579] creat("./bus", 000 [pid 1577] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1579] <... creat resumed>) = 6 [pid 1577] <... futex resumed>) = 0 [pid 1579] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1577] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1579] <... futex resumed>) = 0 [pid 1577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1579] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1577] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1579] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1577] <... futex resumed>) = 0 [pid 1579] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1577] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1579] <... futex resumed>) = 0 [pid 1577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1579] pwrite64(6, "+", 1, 0 [pid 1577] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1579] <... pwrite64 resumed>) = 1 [pid 1577] <... futex resumed>) = 0 [pid 1579] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1577] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1579] <... futex resumed>) = 0 [pid 1577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1579] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1577] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1579] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1577] <... futex resumed>) = 0 [pid 1579] open("./bus", O_RDONLY [pid 1577] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1579] <... open resumed>) = 7 [pid 1581] <... set_robust_list resumed>) = 0 [pid 1579] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1571] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 298] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] <... umount2 resumed>) = 0 [pid 1581] rt_sigprocmask(SIG_SETMASK, [], [pid 1579] <... futex resumed>) = 1 [pid 1578] <... futex resumed>) = ? [pid 1577] <... futex resumed>) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1581] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1579] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1578] +++ killed by SIGBUS +++ [ 53.134412][ T1571] EXT4-fs (loop3): This should not happen!! Data will be lost [ 53.134412][ T1571] [ 53.153076][ T1571] EXT4-fs (loop3): Total free blocks count 0 [ 53.159370][ T1571] EXT4-fs (loop3): Free/Dirty block details [ 53.165720][ T1571] EXT4-fs (loop3): free_blocks=2415919504 [ 53.171369][ T1571] EXT4-fs (loop3): dirty_blocks=32 [ 53.176682][ T1571] EXT4-fs (loop3): Block reservation details [ 53.183067][ T1571] EXT4-fs (loop3): i_reserved_data_blocks=2 [pid 1577] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1579] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1577] <... futex resumed>) = 0 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1579] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1577] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] newfstatat(AT_FDCWD, "./49/file1", [pid 1579] <... copy_file_range resumed>) = 1 [pid 1577] <... futex resumed>) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1579] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1577] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 297] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1579] <... futex resumed>) = 0 [pid 1577] <... mmap resumed>) = 0x7f13c8ca3000 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1579] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1577] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 297] openat(AT_FDCWD, "./49/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1577] <... mprotect resumed>) = 0 [pid 297] <... openat resumed>) = 4 [pid 1577] rt_sigprocmask(SIG_BLOCK, ~[], [pid 297] newfstatat(4, "", [pid 1577] <... rt_sigprocmask resumed>[], 8) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1577] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 297] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1581] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1577] <... clone3 resumed> => {parent_tid=[1583]}, 88) = 1583 [pid 298] newfstatat(AT_FDCWD, "./49/file1", [pid 297] getdents64(4, [pid 1581] <... mmap resumed>) = 0x20000000 [pid 1577] rt_sigprocmask(SIG_SETMASK, [], [pid 1566] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1581] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1577] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1566] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] close(4 [pid 1581] <... futex resumed>) = 0 [pid 1577] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1569] <... futex resumed>) = 0 [pid 1566] <... futex resumed>) = 1 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... close resumed>) = 0 [pid 1581] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1577] <... futex resumed>) = 0 [pid 1569] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1566] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] openat(AT_FDCWD, "./49/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] rmdir("./49/file1" [pid 1577] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1569] <... open resumed>) = -1 EFAULT (Bad address) [pid 298] <... openat resumed>) = 4 [pid 297] <... rmdir resumed>) = 0 [pid 1569] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] newfstatat(4, "", [pid 297] getdents64(3, [pid 1569] <... futex resumed>) = 1 [pid 1566] <... futex resumed>) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1569] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1566] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] getdents64(4, [pid 297] close(3 [pid 1569] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1566] <... futex resumed>) = 0 [pid 298] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 297] <... close resumed>) = 0 ./strace-static-x86_64: Process 1583 attached [pid 1571] +++ killed by SIGBUS +++ [pid 1568] +++ killed by SIGBUS +++ [pid 1583] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1583] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1583] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1566] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./49/file1") = 0 [pid 298] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./49") = 0 [pid 298] mkdir("./50", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1584 [pid 297] rmdir("./49") = 0 [pid 297] mkdir("./50", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1585 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1568, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9} --- [pid 300] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 300] umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./48/binderfs") = 0 [pid 300] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1577] <... futex resumed>) = 0 [pid 1577] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1577] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1585 attached ./strace-static-x86_64: Process 1584 attached [pid 1579] <... futex resumed>) = 0 [pid 1579] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000) = -1 EFAULT (Bad address) [pid 1579] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1577] <... futex resumed>) = 0 [pid 1579] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1577] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1579] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 53.194010][ T1571] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 53.206709][ T1571] EXT4-fs (loop3): This should not happen!! Data will be lost [ 53.206709][ T1571] [ 53.210810][ T1569] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 53.232777][ T1569] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 1577] <... futex resumed>) = 0 [pid 1585] set_robust_list(0x55558909e6a0, 24 [pid 1584] set_robust_list(0x55558909e6a0, 24 [pid 1577] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1585] <... set_robust_list resumed>) = 0 [pid 1584] <... set_robust_list resumed>) = 0 [pid 1566] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 53.233699][ T1579] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 53.246843][ T1569] EXT4-fs (loop2): This should not happen!! Data will be lost [ 53.246843][ T1569] [ 53.268785][ T1569] EXT4-fs (loop2): Total free blocks count 0 [ 53.274095][ T1579] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 53.275258][ T1569] EXT4-fs (loop2): Free/Dirty block details [pid 1585] chdir("./50" [pid 1584] chdir("./50" [pid 300] <... umount2 resumed>) = 0 [pid 300] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./48/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./48/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./48/file1") = 0 [pid 300] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./48") = 0 [pid 1585] <... chdir resumed>) = 0 [pid 300] mkdir("./49", 0777 [pid 1584] <... chdir resumed>) = 0 [pid 1585] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1584] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 300] <... mkdir resumed>) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1586 ./strace-static-x86_64: Process 1586 attached [pid 1586] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1586] chdir("./49") = 0 [pid 1586] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1586] setpgid(0, 0) = 0 [pid 1586] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1586] write(3, "1000", 4) = 4 [pid 1586] close(3) = 0 [pid 1586] symlink("/dev/binderfs", "./binderfs"executing program [pid 1585] <... prctl resumed>) = 0 [pid 1584] <... prctl resumed>) = 0 [pid 1586] <... symlink resumed>) = 0 [pid 1586] write(1, "executing program\n", 18) = 18 [pid 1586] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1586] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1586] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1586] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1586] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1586] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1586] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1587]}, 88) = 1587 [pid 1586] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1586] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1586] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1587 attached [pid 1587] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1587] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1587] memfd_create("syzkaller", 0 [pid 1585] setpgid(0, 0 [pid 1584] setpgid(0, 0 [pid 1577] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1587] <... memfd_create resumed>) = 3 [pid 1587] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1585] <... setpgid resumed>) = 0 [pid 1584] <... setpgid resumed>) = 0 [pid 1585] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1584] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1585] <... openat resumed>) = 3 [pid 1585] write(3, "1000", 4 [pid 1584] <... openat resumed>) = 3 [pid 1585] <... write resumed>) = 4 [pid 1584] write(3, "1000", 4 [pid 1585] close(3 [pid 1569] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1584] <... write resumed>) = 4 [pid 1587] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1585] <... close resumed>) = 0 [pid 1584] close(3 [pid 1587] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1587] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 53.287431][ T1579] EXT4-fs (loop4): This should not happen!! Data will be lost [ 53.287431][ T1579] [ 53.293375][ T1569] EXT4-fs (loop2): free_blocks=2415919504 [ 53.308950][ T1569] EXT4-fs (loop2): dirty_blocks=32 [ 53.317280][ T1569] EXT4-fs (loop2): Block reservation details [ 53.321191][ T1579] EXT4-fs (loop4): Total free blocks count 0 [ 53.323298][ T1569] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 53.335845][ T1579] EXT4-fs (loop4): Free/Dirty block details [ 53.341856][ T1579] EXT4-fs (loop4): free_blocks=2415919504 [pid 1587] ioctl(4, LOOP_SET_FD, 3 [pid 1585] symlink("/dev/binderfs", "./binderfs" [pid 1584] <... close resumed>) = 0 [pid 1581] <... futex resumed>) = ? [pid 1581] +++ killed by SIGBUS +++ [pid 1587] <... ioctl resumed>) = 0 [pid 1587] close(3) = 0 [pid 1587] close(4 [pid 1585] <... symlink resumed>) = 0 [pid 1584] symlink("/dev/binderfs", "./binderfs" [pid 1569] +++ killed by SIGBUS +++ [pid 1587] <... close resumed>) = 0 [pid 1587] mkdir("./file1", 0777) = 0 [pid 1587] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 1584] <... symlink resumed>) = 0 [pid 1585] write(1, "executing program\n", 18executing program [pid 1584] write(1, "executing program\n", 18 [pid 1585] <... write resumed>) = 18 executing program [pid 1585] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1584] <... write resumed>) = 18 [pid 1579] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1585] <... futex resumed>) = 0 [pid 1584] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1585] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1584] <... futex resumed>) = 0 [pid 1585] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1584] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1585] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1584] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1585] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1584] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1585] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1584] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1585] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1584] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1585] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1584] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1585] <... mprotect resumed>) = 0 [pid 1584] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1585] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1584] <... mprotect resumed>) = 0 [pid 1585] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1584] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1585] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1584] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1584] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1585] <... clone3 resumed> => {parent_tid=[1588]}, 88) = 1588 [pid 1585] rt_sigprocmask(SIG_SETMASK, [], [pid 1584] <... clone3 resumed> => {parent_tid=[1589]}, 88) = 1589 [pid 1585] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1584] rt_sigprocmask(SIG_SETMASK, [], [pid 1585] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1584] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1585] <... futex resumed>) = 0 [pid 1584] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1585] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1584] <... futex resumed>) = 0 [pid 1584] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1583] <... futex resumed>) = ? [pid 1583] +++ killed by SIGBUS +++ ./strace-static-x86_64: Process 1589 attached ./strace-static-x86_64: Process 1588 attached [pid 1587] <... mount resumed>) = 0 [pid 1566] +++ killed by SIGBUS +++ [pid 1589] set_robust_list(0x7f13c8ce49a0, 24 [pid 1588] set_robust_list(0x7f13c8ce49a0, 24 [pid 1589] <... set_robust_list resumed>) = 0 [pid 1588] <... set_robust_list resumed>) = 0 [pid 1589] rt_sigprocmask(SIG_SETMASK, [], [pid 1588] rt_sigprocmask(SIG_SETMASK, [], [pid 1589] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1588] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1589] memfd_create("syzkaller", 0 [pid 1588] memfd_create("syzkaller", 0 [pid 1589] <... memfd_create resumed>) = 3 [pid 1588] <... memfd_create resumed>) = 3 [pid 1589] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 53.343842][ T1587] loop3: detected capacity change from 0 to 2048 [ 53.347772][ T1579] EXT4-fs (loop4): dirty_blocks=32 [ 53.359775][ T1566] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 53.372632][ T1579] EXT4-fs (loop4): Block reservation details [ 53.378635][ T1579] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 53.379334][ T1566] EXT4-fs (loop2): This should not happen!! Data will be lost [ 53.379334][ T1566] [pid 1588] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1589] <... mmap resumed>) = 0x7f13c08c4000 [pid 1588] <... mmap resumed>) = 0x7f13c08c4000 [pid 1588] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1587] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1566, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=17} --- [pid 1587] chdir("./file1") = 0 [pid 1587] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1587] ioctl(4, LOOP_CLR_FD) = 0 [pid 1587] close(4) = 0 [pid 1587] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1586] <... futex resumed>) = 0 [pid 1587] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1586] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1586] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1589] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 299] umount2("./50", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1587] <... open resumed>) = 4 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1587] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1587] <... futex resumed>) = 1 [pid 1586] <... futex resumed>) = 0 [pid 1579] +++ killed by SIGBUS +++ [pid 1577] +++ killed by SIGBUS +++ [pid 299] <... openat resumed>) = 3 [pid 1587] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1586] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1577, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 299] newfstatat(3, "", [pid 1587] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1586] <... futex resumed>) = 0 [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 1589] <... write resumed>) = 1048576 [pid 1587] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1586] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1587] <... open resumed>) = 5 [pid 1589] munmap(0x7f13c08c4000, 138412032 [pid 1587] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] getdents64(3, [pid 1587] <... futex resumed>) = 1 [pid 1586] <... futex resumed>) = 0 [pid 1587] creat("./bus", 000 [pid 1586] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1589] <... munmap resumed>) = 0 [pid 1587] <... creat resumed>) = 6 [pid 1586] <... futex resumed>) = 0 [pid 299] umount2("./50/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1589] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1587] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1586] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1587] <... futex resumed>) = 0 [pid 1586] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1587] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1586] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] newfstatat(AT_FDCWD, "./50/binderfs", [pid 1587] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1586] <... futex resumed>) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1587] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1586] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] unlink("./50/binderfs" [pid 1589] <... openat resumed>) = 4 [pid 1588] <... write resumed>) = 1048576 [pid 1587] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 299] <... unlink resumed>) = 0 [pid 1587] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1589] ioctl(4, LOOP_SET_FD, 3 [pid 1587] <... futex resumed>) = 1 [pid 1586] <... futex resumed>) = 0 [pid 1587] pwrite64(6, "+", 1, 0 [pid 1586] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1586] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1588] munmap(0x7f13c08c4000, 138412032 [pid 1587] <... pwrite64 resumed>) = 1 [pid 1587] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 301] <... restart_syscall resumed>) = 0 [pid 1587] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] umount2("./49", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./49/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./49/binderfs") = 0 [pid 301] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1588] <... munmap resumed>) = 0 [pid 1589] <... ioctl resumed>) = 0 [pid 1586] <... futex resumed>) = 0 [pid 1586] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1586] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1589] close(3) = 0 [pid 1589] close(4 [pid 1587] <... futex resumed>) = 0 [pid 1587] open("./bus", O_RDONLY [pid 1589] <... close resumed>) = 0 [pid 1589] mkdir("./file1", 0777) = 0 [pid 1589] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 1588] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1588] ioctl(4, LOOP_SET_FD, 3 [pid 1587] <... open resumed>) = 7 [pid 1587] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1586] <... futex resumed>) = 0 [pid 1587] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1586] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1586] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1587] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1586] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1587] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1586] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1586] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1586] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1586] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1592]}, 88) = 1592 [pid 1587] <... copy_file_range resumed>) = 1 [pid 1586] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1586] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1586] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1588] <... ioctl resumed>) = 0 [pid 1588] close(3) = 0 [pid 1588] close(4) = 0 [pid 1588] mkdir("./file1", 0777) = 0 [pid 1588] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 1587] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... umount2 resumed>) = 0 [pid 299] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 1592 attached [pid 1587] <... futex resumed>) = 0 [pid 301] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1587] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./49/file1", [pid 299] newfstatat(AT_FDCWD, "./50/file1", [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./49/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, [pid 1592] set_robust_list(0x7f13c8cc39a0, 24 [pid 301] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./49/file1") = 0 [pid 301] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./49" [pid 1592] <... set_robust_list resumed>) = 0 [pid 301] <... rmdir resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./50/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 301] mkdir("./50", 0777 [pid 299] rmdir("./50/file1") = 0 [pid 1592] rt_sigprocmask(SIG_SETMASK, [], [pid 301] <... mkdir resumed>) = 0 [pid 299] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 299] rmdir("./50" [pid 1592] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1592] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 301] <... openat resumed>) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 1592] <... mmap resumed>) = 0x20000000 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] <... rmdir resumed>) = 0 [pid 1592] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] mkdir("./51", 0777) = 0 [pid 1592] <... futex resumed>) = 1 [pid 1586] <... futex resumed>) = 0 [pid 1586] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1592] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] <... clone resumed>, child_tidptr=0x55558909e690) = 1595 [pid 1587] <... futex resumed>) = 0 [pid 1586] <... futex resumed>) = 1 [pid 1587] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1586] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1587] <... open resumed>) = -1 EFAULT (Bad address) [pid 1587] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 53.389334][ T1579] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 53.406473][ T1579] EXT4-fs (loop4): This should not happen!! Data will be lost [ 53.406473][ T1579] [ 53.424609][ T1589] loop1: detected capacity change from 0 to 2048 [ 53.433632][ T1588] loop0: detected capacity change from 0 to 2048 [pid 1586] <... futex resumed>) = 0 [pid 1587] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1586] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1587] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) ./strace-static-x86_64: Process 1595 attached [pid 1586] <... futex resumed>) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1586] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... openat resumed>) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1596 [pid 1595] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1595] chdir("./50") = 0 [pid 1595] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1595] setpgid(0, 0) = 0 [pid 1595] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1595] write(3, "1000", 4) = 4 [pid 1595] close(3) = 0 [pid 1595] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1595] write(1, "executing program\n", 18executing program ) = 18 [pid 1595] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1595] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1595] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], ./strace-static-x86_64: Process 1596 attached [pid 1589] <... mount resumed>) = 0 [pid 1595] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1595] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1595] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1595] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1595] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1599]}, 88) = 1599 [pid 1595] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1595] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1595] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1599 attached [pid 1599] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1599] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1599] memfd_create("syzkaller", 0) = 3 [pid 1599] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1599] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1596] set_robust_list(0x55558909e6a0, 24 [pid 1589] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1596] <... set_robust_list resumed>) = 0 [pid 1589] <... openat resumed>) = 3 [pid 1596] chdir("./51" [pid 1589] chdir("./file1" [pid 1599] <... write resumed>) = 1048576 [pid 1599] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1599] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1599] ioctl(4, LOOP_SET_FD, 3 [pid 1596] <... chdir resumed>) = 0 [pid 1589] <... chdir resumed>) = 0 [pid 1588] <... mount resumed>) = 0 [pid 1588] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1588] chdir("./file1") = 0 [pid 1588] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1588] ioctl(4, LOOP_CLR_FD) = 0 [ 53.468834][ T1587] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 53.485888][ T1587] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 53.498999][ T1587] EXT4-fs (loop3): This should not happen!! Data will be lost [ 53.498999][ T1587] [ 53.501853][ T1599] loop4: detected capacity change from 0 to 2048 [pid 1588] close(4 [pid 1596] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1589] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1588] <... close resumed>) = 0 [pid 1588] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1585] <... futex resumed>) = 0 [pid 1588] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1585] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1586] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1585] <... futex resumed>) = 0 [pid 1588] <... open resumed>) = 4 [pid 1585] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1588] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1585] <... futex resumed>) = 0 [pid 1588] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1585] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1588] <... open resumed>) = 5 [pid 1585] <... futex resumed>) = 0 [pid 1596] <... prctl resumed>) = 0 [pid 1589] <... openat resumed>) = 4 [pid 1588] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1585] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1588] <... futex resumed>) = 0 [pid 1585] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1588] creat("./bus", 000 [pid 1585] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1588] <... creat resumed>) = 6 [pid 1585] <... futex resumed>) = 0 [pid 1588] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1585] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1588] <... futex resumed>) = 0 [pid 1585] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1588] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1585] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1588] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1585] <... futex resumed>) = 0 [pid 1588] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1585] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1588] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1588] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1585] <... futex resumed>) = 0 [pid 1588] pwrite64(6, "+", 1, 0 [pid 1585] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1588] <... pwrite64 resumed>) = 1 [pid 1585] <... futex resumed>) = 0 [pid 1588] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1585] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1588] <... futex resumed>) = 0 [pid 1585] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1588] open("./bus", O_RDONLY [pid 1585] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1588] <... open resumed>) = 7 [pid 1585] <... futex resumed>) = 0 [pid 1596] setpgid(0, 0 [pid 1589] ioctl(4, LOOP_CLR_FD [pid 1588] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1585] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1596] <... setpgid resumed>) = 0 [pid 1589] <... ioctl resumed>) = 0 [pid 1588] <... futex resumed>) = 0 [pid 1585] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1588] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1585] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1588] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1585] <... futex resumed>) = 0 [pid 1588] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1585] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1588] <... copy_file_range resumed>) = 1 [pid 1585] <... futex resumed>) = 0 [pid 1588] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1585] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1588] <... futex resumed>) = 0 [pid 1585] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1588] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1585] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1585] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1585] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1600]}, 88) = 1600 [pid 1585] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1585] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1585] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1600 attached [pid 1600] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1600] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1600] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1596] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1589] close(4 [pid 1596] <... openat resumed>) = 3 [pid 1589] <... close resumed>) = 0 [pid 1596] write(3, "1000", 4 [pid 1589] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1596] <... write resumed>) = 4 [pid 1589] <... futex resumed>) = 1 [pid 1584] <... futex resumed>) = 0 [pid 1600] <... mmap resumed>) = 0x20000000 [pid 1600] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1585] <... futex resumed>) = 0 [pid 1585] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1588] <... futex resumed>) = 0 [pid 1585] <... futex resumed>) = 1 [pid 1588] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1585] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1588] <... open resumed>) = -1 EFAULT (Bad address) [pid 1588] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1585] <... futex resumed>) = 0 [pid 1588] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1585] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000executing program [pid 1588] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1585] <... futex resumed>) = 0 [pid 1600] <... futex resumed>) = 1 [pid 1599] <... ioctl resumed>) = 0 [pid 1596] close(3 [pid 1589] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1587] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1584] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1596] <... close resumed>) = 0 [pid 1589] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1584] <... futex resumed>) = 0 [pid 1596] symlink("/dev/binderfs", "./binderfs" [pid 1589] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1584] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1596] <... symlink resumed>) = 0 [pid 1589] <... open resumed>) = 4 [pid 1596] write(1, "executing program\n", 18 [pid 1589] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1596] <... write resumed>) = 18 [pid 1589] <... futex resumed>) = 1 [pid 1584] <... futex resumed>) = 0 [pid 1596] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1589] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1584] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1596] <... futex resumed>) = 0 [pid 1589] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1584] <... futex resumed>) = 0 [pid 1596] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1589] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1584] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1596] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1589] <... open resumed>) = 5 [pid 1596] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1589] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1596] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1589] <... futex resumed>) = 1 [pid 1584] <... futex resumed>) = 0 [pid 1596] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1589] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1584] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1596] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1589] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1584] <... futex resumed>) = 0 [pid 1596] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1589] creat("./bus", 000 [pid 1584] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1596] <... mprotect resumed>) = 0 [pid 1589] <... creat resumed>) = 6 [pid 1596] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1589] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1596] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1589] <... futex resumed>) = 1 [pid 1584] <... futex resumed>) = 0 [pid 1596] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1589] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1584] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1589] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1584] <... futex resumed>) = 0 [pid 1596] <... clone3 resumed> => {parent_tid=[1601]}, 88) = 1601 [pid 1589] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1584] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1596] rt_sigprocmask(SIG_SETMASK, [], [pid 1589] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1596] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1589] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1596] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1589] <... futex resumed>) = 1 [pid 1584] <... futex resumed>) = 0 [pid 1596] <... futex resumed>) = 0 [pid 1589] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1584] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1596] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1589] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1584] <... futex resumed>) = 0 [pid 1589] pwrite64(6, "+", 1, 0 [pid 1584] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1589] <... pwrite64 resumed>) = 1 [pid 1589] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1584] <... futex resumed>) = 0 [pid 1589] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1584] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1589] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1584] <... futex resumed>) = 0 [pid 1589] open("./bus", O_RDONLY [pid 1584] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1589] <... open resumed>) = 7 [pid 1589] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1584] <... futex resumed>) = 0 [pid 1589] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1584] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1589] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1584] <... futex resumed>) = 0 [pid 1589] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1584] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1589] <... copy_file_range resumed>) = 1 [pid 1584] <... futex resumed>) = 0 [pid 1589] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1584] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1589] <... futex resumed>) = 0 [pid 1584] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1589] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1584] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1584] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1600] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1584] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1584] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1602]}, 88) = 1602 [pid 1584] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1584] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1584] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1599] close(3) = 0 [pid 1599] close(4) = 0 [pid 1599] mkdir("./file1", 0777) = 0 [pid 1599] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 1585] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1601 attached [pid 1601] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1601] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1601] memfd_create("syzkaller", 0) = 3 [pid 1601] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1592] <... futex resumed>) = ? [ 53.509352][ T1587] EXT4-fs (loop3): Total free blocks count 0 [ 53.521163][ T1587] EXT4-fs (loop3): Free/Dirty block details [ 53.527326][ T1587] EXT4-fs (loop3): free_blocks=2415919504 [ 53.533449][ T1587] EXT4-fs (loop3): dirty_blocks=32 [ 53.538952][ T1587] EXT4-fs (loop3): Block reservation details [ 53.545403][ T1587] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 53.550831][ T1588] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters ./strace-static-x86_64: Process 1602 attached [pid 1592] +++ killed by SIGBUS +++ [pid 1601] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1601] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1601] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1601] ioctl(4, LOOP_SET_FD, 3 [pid 1602] set_robust_list(0x7f13c8cc39a0, 24 [pid 1585] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1584] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1602] <... set_robust_list resumed>) = 0 [pid 1602] rt_sigprocmask(SIG_SETMASK, [], [pid 1584] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1602] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1602] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1589] <... futex resumed>) = 0 [pid 1584] <... futex resumed>) = 1 [pid 1589] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1584] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1589] <... open resumed>) = -1 EFAULT (Bad address) [ 53.567187][ T1587] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 53.574921][ T1588] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 53.588317][ T1601] loop2: detected capacity change from 0 to 2048 [ 53.591555][ T1588] EXT4-fs (loop0): This should not happen!! Data will be lost [ 53.591555][ T1588] [ 53.598188][ T1587] EXT4-fs (loop3): This should not happen!! Data will be lost [ 53.598188][ T1587] [pid 1589] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1584] <... futex resumed>) = 0 [pid 1602] <... mmap resumed>) = 0x20000000 [pid 1599] <... mount resumed>) = 0 [pid 1584] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1584] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1602] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1601] <... ioctl resumed>) = 0 [ 53.619157][ T1589] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 53.620380][ T1588] EXT4-fs (loop0): Total free blocks count 0 [ 53.634354][ T1589] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 53.640156][ T1588] EXT4-fs (loop0): Free/Dirty block details [ 53.652006][ T1589] EXT4-fs (loop1): This should not happen!! Data will be lost [ 53.652006][ T1589] [pid 1599] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1602] <... futex resumed>) = 0 [pid 1601] close(3 [pid 1599] <... openat resumed>) = 3 [pid 1587] +++ killed by SIGBUS +++ [pid 1586] +++ killed by SIGBUS +++ [pid 1602] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1601] <... close resumed>) = 0 [pid 1599] chdir("./file1" [pid 1601] close(4 [pid 1599] <... chdir resumed>) = 0 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1586, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 1584] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1601] <... close resumed>) = 0 [pid 1599] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 300] umount2("./49", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1601] mkdir("./file1", 0777 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1599] <... openat resumed>) = 4 [pid 1601] <... mkdir resumed>) = 0 [pid 1599] ioctl(4, LOOP_CLR_FD [pid 300] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1601] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 300] <... openat resumed>) = 3 [pid 1599] <... ioctl resumed>) = 0 [pid 1599] close(4 [pid 300] newfstatat(3, "", [pid 1599] <... close resumed>) = 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, [pid 1599] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1599] <... futex resumed>) = 1 [pid 1595] <... futex resumed>) = 0 [pid 300] umount2("./49/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1595] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1595] <... futex resumed>) = 0 [pid 300] newfstatat(AT_FDCWD, "./49/binderfs", [pid 1595] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1599] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 300] unlink("./49/binderfs" [pid 1599] <... open resumed>) = 4 [pid 300] <... unlink resumed>) = 0 [pid 1599] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1599] <... futex resumed>) = 1 [pid 1595] <... futex resumed>) = 0 [pid 1599] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1595] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1599] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1595] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1599] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 1599] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1595] <... futex resumed>) = 0 [pid 1599] creat("./bus", 000 [pid 1595] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1599] <... creat resumed>) = 6 [pid 1595] <... futex resumed>) = 0 [pid 1599] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1595] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1599] <... futex resumed>) = 0 [pid 1595] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1599] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1595] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1599] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1599] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1595] <... futex resumed>) = 0 [pid 1599] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1599] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1595] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1599] <... futex resumed>) = 0 [pid 1599] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1595] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1595] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1599] <... futex resumed>) = 0 [pid 1595] <... futex resumed>) = 1 [pid 1599] pwrite64(6, "+", 1, 0 [pid 1595] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1599] <... pwrite64 resumed>) = 1 [pid 1599] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1595] <... futex resumed>) = 0 [pid 1599] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1595] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1599] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1595] <... futex resumed>) = 0 [pid 1599] open("./bus", O_RDONLY [pid 1595] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1599] <... open resumed>) = 7 [pid 1599] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... umount2 resumed>) = 0 [pid 1599] <... futex resumed>) = 1 [pid 1595] <... futex resumed>) = 0 [pid 1599] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1595] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1599] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1595] <... futex resumed>) = 0 [pid 1599] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1595] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1599] <... copy_file_range resumed>) = 1 [pid 1595] <... futex resumed>) = 0 [pid 1599] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1595] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1599] <... futex resumed>) = 0 [pid 1595] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1599] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1595] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1595] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1595] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 300] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1595] <... clone3 resumed> => {parent_tid=[1606]}, 88) = 1606 [pid 1595] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1595] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1595] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1606 attached [pid 1606] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1606] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1595] <... futex resumed>) = 0 [pid 1595] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1599] <... futex resumed>) = 0 [pid 1595] <... futex resumed>) = 1 [pid 1599] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1595] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1599] <... open resumed>) = -1 EFAULT (Bad address) [pid 300] newfstatat(AT_FDCWD, "./49/file1", [pid 1599] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1595] <... futex resumed>) = 0 [ 53.657970][ T1588] EXT4-fs (loop0): free_blocks=2415919504 [ 53.667394][ T1589] EXT4-fs (loop1): Total free blocks count 0 [ 53.673101][ T1588] EXT4-fs (loop0): dirty_blocks=32 [ 53.678715][ T1589] EXT4-fs (loop1): Free/Dirty block details [ 53.683885][ T1588] EXT4-fs (loop0): Block reservation details [ 53.689675][ T1589] EXT4-fs (loop1): free_blocks=2415919504 [pid 1599] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1595] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1599] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1595] <... futex resumed>) = 0 [pid 1601] <... mount resumed>) = 0 [pid 1595] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1601] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1601] chdir("./file1") = 0 [pid 1601] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1601] ioctl(4, LOOP_CLR_FD) = 0 [pid 1601] close(4) = 0 [pid 1588] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1601] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1596] <... futex resumed>) = 0 [pid 1601] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1596] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1601] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1596] <... futex resumed>) = 0 [pid 1601] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1596] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1601] <... open resumed>) = 4 [pid 1601] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1596] <... futex resumed>) = 0 [pid 1601] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1596] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1601] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1596] <... futex resumed>) = 0 [pid 1601] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1596] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1601] <... open resumed>) = 5 [pid 300] openat(AT_FDCWD, "./49/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1601] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1596] <... futex resumed>) = 0 [pid 1601] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1596] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1601] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1596] <... futex resumed>) = 0 [pid 1601] creat("./bus", 000 [pid 1596] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1601] <... creat resumed>) = 6 [pid 1601] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1596] <... futex resumed>) = 0 [pid 1601] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1596] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1601] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1596] <... futex resumed>) = 0 [pid 1601] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1596] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1601] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1601] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1596] <... futex resumed>) = 0 [pid 1606] <... futex resumed>) = 1 [pid 1601] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1596] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1606] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1601] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1596] <... futex resumed>) = 0 [pid 1601] pwrite64(6, "+", 1, 0 [pid 1596] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1601] <... pwrite64 resumed>) = 1 [pid 1600] <... futex resumed>) = ? [pid 300] <... openat resumed>) = 4 [pid 1601] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1600] +++ killed by SIGBUS +++ [pid 1601] <... futex resumed>) = 1 [pid 1596] <... futex resumed>) = 0 [pid 1601] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1596] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1601] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1596] <... futex resumed>) = 0 [pid 1601] open("./bus", O_RDONLY [pid 1596] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1601] <... open resumed>) = 7 [pid 1601] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1596] <... futex resumed>) = 0 [pid 1601] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1596] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1601] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1596] <... futex resumed>) = 0 [pid 1601] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1596] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1601] <... copy_file_range resumed>) = 1 [pid 1596] <... futex resumed>) = 0 [pid 1601] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1596] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1601] <... futex resumed>) = 0 [pid 1596] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1601] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1596] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1596] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1596] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1608]}, 88) = 1608 [pid 1596] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1596] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1596] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1608 attached [pid 1608] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1608] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1608] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1596] <... futex resumed>) = 0 [pid 1596] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1601] <... futex resumed>) = 0 [pid 1596] <... futex resumed>) = 1 [pid 1601] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1596] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1601] <... open resumed>) = -1 EFAULT (Bad address) [pid 1601] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 53.721227][ T1599] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 53.727607][ T1588] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 53.741799][ T1589] EXT4-fs (loop1): dirty_blocks=32 [ 53.746853][ T1589] EXT4-fs (loop1): Block reservation details [ 53.753187][ T1589] EXT4-fs (loop1): i_reserved_data_blocks=2 [pid 1596] <... futex resumed>) = 0 [pid 1601] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1596] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1601] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1596] <... futex resumed>) = 0 [pid 1596] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1589] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 300] newfstatat(4, "", [pid 1595] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1608] <... futex resumed>) = 1 [pid 1608] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1588] +++ killed by SIGBUS +++ [pid 1585] +++ killed by SIGBUS +++ [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1585, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 297] umount2("./50", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./50/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./50/binderfs") = 0 [ 53.759828][ T1588] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 53.768702][ T1601] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 53.772086][ T1588] EXT4-fs (loop0): This should not happen!! Data will be lost [ 53.772086][ T1588] [ 53.789315][ T1599] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 53.796639][ T1601] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 297] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1602] <... futex resumed>) = ? [pid 300] getdents64(4, [pid 1596] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1602] +++ killed by SIGBUS +++ [pid 300] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./49/file1") = 0 [pid 300] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./49") = 0 [pid 300] mkdir("./50", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 1609 attached [pid 297] <... umount2 resumed>) = 0 [pid 300] <... clone resumed>, child_tidptr=0x55558909e690) = 1609 [pid 297] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./50/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./50/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1609] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1589] +++ killed by SIGBUS +++ [pid 1584] +++ killed by SIGBUS +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1584, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 297] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./50/file1") = 0 [pid 298] <... restart_syscall resumed>) = 0 [pid 298] umount2("./50", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 53.812817][ T1599] EXT4-fs (loop4): This should not happen!! Data will be lost [ 53.812817][ T1599] [ 53.819866][ T1601] EXT4-fs (loop2): This should not happen!! Data will be lost [ 53.819866][ T1601] [ 53.839174][ T1599] EXT4-fs (loop4): Total free blocks count 0 [ 53.839701][ T1589] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 53.857181][ T1589] EXT4-fs (loop1): This should not happen!! Data will be lost [ 53.857181][ T1589] [pid 297] getdents64(3, [pid 298] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1609] chdir("./50" [pid 298] <... openat resumed>) = 3 [pid 297] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] close(3 [pid 298] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] <... close resumed>) = 0 [pid 298] umount2("./50/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] rmdir("./50" [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./50/binderfs", [pid 297] <... rmdir resumed>) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./50/binderfs" [pid 297] mkdir("./51", 0777 [pid 298] <... unlink resumed>) = 0 [pid 298] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] <... mkdir resumed>) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3 [pid 1609] <... chdir resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 1609] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1609] setpgid(0, 0) = 0 [pid 1609] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 297] <... clone resumed>, child_tidptr=0x55558909e690) = 1610 [pid 1609] write(3, "1000", 4) = 4 [pid 1609] close(3) = 0 [pid 1609] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 1609] write(1, "executing program\n", 18) = 18 [pid 1609] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1609] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1609] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1609] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1609] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1609] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1611]}, 88) = 1611 [pid 1609] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1609] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1609] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1610 attached [pid 1599] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./50/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./50/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, [pid 1610] set_robust_list(0x55558909e6a0, 24 [pid 1606] <... futex resumed>) = ? [pid 298] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1610] <... set_robust_list resumed>) = 0 [pid 1606] +++ killed by SIGBUS +++ [pid 1599] +++ killed by SIGBUS +++ [pid 298] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 298] close(4./strace-static-x86_64: Process 1611 attached ) = 0 [pid 1611] set_robust_list(0x7f13c8ce49a0, 24 [pid 298] rmdir("./50/file1" [pid 1611] <... set_robust_list resumed>) = 0 [pid 298] <... rmdir resumed>) = 0 [pid 1611] rt_sigprocmask(SIG_SETMASK, [], [pid 298] getdents64(3, [pid 1611] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 298] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1611] memfd_create("syzkaller", 0 [pid 298] close(3 [pid 1611] <... memfd_create resumed>) = 3 [pid 298] <... close resumed>) = 0 [pid 1611] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 298] rmdir("./50" [pid 1611] <... mmap resumed>) = 0x7f13c08c4000 [pid 298] <... rmdir resumed>) = 0 [pid 1610] chdir("./51" [ 53.867012][ T1599] EXT4-fs (loop4): Free/Dirty block details [ 53.872923][ T1599] EXT4-fs (loop4): free_blocks=2415919504 [ 53.878573][ T1599] EXT4-fs (loop4): dirty_blocks=32 [ 53.883754][ T1599] EXT4-fs (loop4): Block reservation details [ 53.889608][ T1599] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 53.895862][ T1601] EXT4-fs (loop2): Total free blocks count 0 [ 53.904098][ T1595] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 53.905263][ T1601] EXT4-fs (loop2): Free/Dirty block details [pid 298] mkdir("./51", 0777 [pid 1610] <... chdir resumed>) = 0 [pid 298] <... mkdir resumed>) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1610] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1611] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1610] <... prctl resumed>) = 0 [pid 298] <... clone resumed>, child_tidptr=0x55558909e690) = 1612 ./strace-static-x86_64: Process 1612 attached [pid 1612] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1612] chdir("./51") = 0 [pid 1612] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1612] setpgid(0, 0) = 0 [pid 1612] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1612] write(3, "1000", 4) = 4 [pid 1612] close(3) = 0 [pid 1612] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1612] write(1, "executing program\n", 18executing program ) = 18 [pid 1612] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1612] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1612] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1612] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1612] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1612] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1613]}, 88) = 1613 [pid 1612] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1612] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1610] setpgid(0, 0 [pid 1612] <... futex resumed>) = 0 [pid 1612] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1610] <... setpgid resumed>) = 0 [pid 1610] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 1613 attached [pid 1613] set_robust_list(0x7f13c8ce49a0, 24 [pid 1610] <... openat resumed>) = 3 [pid 1611] <... write resumed>) = 1048576 [pid 1611] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1611] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1611] ioctl(4, LOOP_SET_FD, 3 [pid 1610] write(3, "1000", 4 [pid 1613] <... set_robust_list resumed>) = 0 executing program [pid 1613] rt_sigprocmask(SIG_SETMASK, [], [pid 1610] <... write resumed>) = 4 [pid 1601] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1595] +++ killed by SIGBUS +++ [pid 1613] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1610] close(3 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1595, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 1613] memfd_create("syzkaller", 0 [pid 1610] <... close resumed>) = 0 [pid 1613] <... memfd_create resumed>) = 3 [pid 1610] symlink("/dev/binderfs", "./binderfs" [pid 1613] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1610] <... symlink resumed>) = 0 [pid 301] umount2("./50", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1613] <... mmap resumed>) = 0x7f13c08c4000 [pid 1610] write(1, "executing program\n", 18 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1610] <... write resumed>) = 18 [pid 301] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1610] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... openat resumed>) = 3 [pid 1610] <... futex resumed>) = 0 [pid 301] newfstatat(3, "", [pid 1610] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1610] <... rt_sigaction resumed>NULL, 8) = 0 [pid 301] getdents64(3, [pid 1610] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 301] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1610] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 301] umount2("./50/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1610] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1610] <... mmap resumed>) = 0x7f13c8cc4000 [pid 301] newfstatat(AT_FDCWD, "./50/binderfs", [pid 1610] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1610] <... mprotect resumed>) = 0 [pid 1610] rt_sigprocmask(SIG_BLOCK, ~[], [pid 301] unlink("./50/binderfs" [pid 1611] <... ioctl resumed>) = 0 [pid 1610] <... rt_sigprocmask resumed>[], 8) = 0 [pid 301] <... unlink resumed>) = 0 [pid 1610] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 301] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1610] <... clone3 resumed> => {parent_tid=[1614]}, 88) = 1614 [pid 1610] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1610] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 53.924170][ T1601] EXT4-fs (loop2): free_blocks=2415919504 [ 53.929777][ T1601] EXT4-fs (loop2): dirty_blocks=32 [ 53.935135][ T1595] EXT4-fs (loop4): This should not happen!! Data will be lost [ 53.935135][ T1595] [ 53.945641][ T1601] EXT4-fs (loop2): Block reservation details [ 53.951638][ T1601] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 53.952066][ T1611] loop3: detected capacity change from 0 to 2048 [pid 1610] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1601] +++ killed by SIGBUS +++ [pid 1608] <... futex resumed>) = ? ./strace-static-x86_64: Process 1614 attached [pid 1614] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1614] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1614] memfd_create("syzkaller", 0) = 3 [pid 1614] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1614] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1614] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1614] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1614] ioctl(4, LOOP_SET_FD, 3 [pid 1613] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1611] close(3 [pid 1614] <... ioctl resumed>) = 0 [pid 1614] close(3) = 0 [pid 1614] close(4) = 0 [pid 1614] mkdir("./file1", 0777) = 0 [pid 1614] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 1611] <... close resumed>) = 0 [pid 1613] <... write resumed>) = 1048576 [pid 1613] munmap(0x7f13c08c4000, 138412032 [pid 1611] close(4) = 0 [pid 1611] mkdir("./file1", 0777) = 0 [pid 1613] <... munmap resumed>) = 0 [pid 1613] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1613] ioctl(4, LOOP_SET_FD, 3 [pid 1611] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 301] <... umount2 resumed>) = 0 [pid 301] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./50/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./50/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./50/file1") = 0 [pid 301] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./50") = 0 [pid 301] mkdir("./51", 0777 [pid 1613] <... ioctl resumed>) = 0 [pid 1613] close(3) = 0 [pid 301] <... mkdir resumed>) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 1613] close(4) = 0 [pid 1613] mkdir("./file1", 0777) = 0 [pid 1613] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 1608] +++ killed by SIGBUS +++ [pid 1596] +++ killed by SIGBUS +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1596, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] <... restart_syscall resumed>) = 0 [pid 299] umount2("./51", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./51/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./51/binderfs") = 0 [pid 299] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 1618 attached [pid 1618] set_robust_list(0x55558909e6a0, 24) = 0 [pid 301] <... clone resumed>, child_tidptr=0x55558909e690) = 1618 [pid 1618] chdir("./51" [pid 1611] <... mount resumed>) = 0 [pid 1611] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1611] chdir("./file1") = 0 [pid 1611] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1611] ioctl(4, LOOP_CLR_FD) = 0 [pid 1611] close(4) = 0 [pid 1611] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1609] <... futex resumed>) = 0 [pid 1609] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1609] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1611] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 1611] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1609] <... futex resumed>) = 0 [pid 1609] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1609] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1611] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 1611] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1609] <... futex resumed>) = 0 [pid 1609] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1609] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1611] creat("./bus", 000) = 6 [pid 1611] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1609] <... futex resumed>) = 0 [pid 1609] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1611] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1609] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1611] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1611] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1609] <... futex resumed>) = 0 [pid 1611] pwrite64(6, "+", 1, 0 [pid 1609] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1611] <... pwrite64 resumed>) = 1 [pid 1609] <... futex resumed>) = 0 [pid 1611] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1609] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1611] <... futex resumed>) = 0 [pid 1609] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1611] open("./bus", O_RDONLY [pid 1609] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1611] <... open resumed>) = 7 [pid 1609] <... futex resumed>) = 0 [pid 1611] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1609] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1611] <... futex resumed>) = 0 [pid 1609] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1611] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1609] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1611] <... copy_file_range resumed>) = 1 [pid 1609] <... futex resumed>) = 0 [pid 1611] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1609] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1611] <... futex resumed>) = 0 [pid 1609] <... futex resumed>) = 0 [pid 1611] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1609] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1609] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 299] <... umount2 resumed>) = 0 [pid 1609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1609] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1623]}, 88) = 1623 [pid 1609] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1609] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1609] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./51/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./51/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, [pid 1618] <... chdir resumed>) = 0 [pid 1618] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 299] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./51/file1") = 0 [pid 299] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./51" [pid 1618] <... prctl resumed>) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 299] mkdir("./52", 0777 [pid 1618] setpgid(0, 0 [pid 299] <... mkdir resumed>) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1624 ./strace-static-x86_64: Process 1624 attached ./strace-static-x86_64: Process 1623 attached [pid 1618] <... setpgid resumed>) = 0 [pid 1618] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1624] set_robust_list(0x55558909e6a0, 24 [pid 1623] set_robust_list(0x7f13c8cc39a0, 24 [pid 1614] <... mount resumed>) = 0 [pid 1618] <... openat resumed>) = 3 [pid 1614] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1614] chdir("./file1") = 0 [pid 1614] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1614] ioctl(4, LOOP_CLR_FD) = 0 [pid 1614] close(4) = 0 [pid 1614] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1610] <... futex resumed>) = 0 [pid 1614] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1610] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1610] <... futex resumed>) = 0 [pid 1614] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1610] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1618] write(3, "1000", 4 [pid 1614] <... open resumed>) = 4 [pid 1614] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1610] <... futex resumed>) = 0 [pid 1614] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1610] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1610] <... futex resumed>) = 0 [pid 1618] <... write resumed>) = 4 [pid 1623] <... set_robust_list resumed>) = 0 [pid 1614] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1610] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1623] rt_sigprocmask(SIG_SETMASK, [], [pid 1618] close(3 [pid 1614] <... open resumed>) = 5 [pid 1623] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1618] <... close resumed>) = 0 [pid 1614] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1623] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1618] symlink("/dev/binderfs", "./binderfs" [pid 1614] <... futex resumed>) = 1 [pid 1610] <... futex resumed>) = 0 [pid 1624] <... set_robust_list resumed>) = 0 [pid 1618] <... symlink resumed>) = 0 [ 53.966179][ T1608] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 53.975206][ T1614] loop0: detected capacity change from 0 to 2048 [ 53.981902][ T1608] EXT4-fs (loop2): This should not happen!! Data will be lost [ 53.981902][ T1608] [ 53.997546][ T1613] loop1: detected capacity change from 0 to 2048 [pid 1614] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1613] <... mount resumed>) = 0 [pid 1610] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1624] chdir("./52" [pid 1623] <... mmap resumed>) = 0x20000000 [pid 1618] write(1, "executing program\n", 18 [pid 1614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1613] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1610] <... futex resumed>) = 0 executing program [pid 1614] creat("./bus", 000 [pid 1613] <... openat resumed>) = 3 [pid 1610] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1624] <... chdir resumed>) = 0 [pid 1618] <... write resumed>) = 18 [pid 1614] <... creat resumed>) = 6 [pid 1613] chdir("./file1" [pid 1623] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1614] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1613] <... chdir resumed>) = 0 [pid 1624] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1618] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1614] <... futex resumed>) = 1 [pid 1613] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1610] <... futex resumed>) = 0 [pid 1614] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1613] <... openat resumed>) = 4 [pid 1610] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1613] ioctl(4, LOOP_CLR_FD [pid 1610] <... futex resumed>) = 0 [pid 1614] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1613] <... ioctl resumed>) = 0 [pid 1610] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1614] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1613] close(4 [pid 1614] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1613] <... close resumed>) = 0 [pid 1614] <... futex resumed>) = 1 [pid 1613] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1610] <... futex resumed>) = 0 [pid 1614] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1613] <... futex resumed>) = 1 [pid 1612] <... futex resumed>) = 0 [pid 1610] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1613] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1612] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1610] <... futex resumed>) = 0 [pid 1614] pwrite64(6, "+", 1, 0 [pid 1613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1612] <... futex resumed>) = 0 [pid 1610] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1624] <... prctl resumed>) = 0 [pid 1623] <... futex resumed>) = 1 [pid 1618] <... futex resumed>) = 0 [pid 1614] <... pwrite64 resumed>) = 1 [pid 1613] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1612] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1609] <... futex resumed>) = 0 [pid 1624] setpgid(0, 0 [pid 1623] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1618] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1614] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1613] <... open resumed>) = 4 [pid 1609] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1624] <... setpgid resumed>) = 0 [pid 1618] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1614] <... futex resumed>) = 1 [pid 1613] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1611] <... futex resumed>) = 0 [pid 1610] <... futex resumed>) = 0 [pid 1609] <... futex resumed>) = 1 [pid 1624] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1618] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1614] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1613] <... futex resumed>) = 1 [pid 1612] <... futex resumed>) = 0 [pid 1611] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1610] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1609] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1624] <... openat resumed>) = 3 [pid 1618] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1613] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1612] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1611] <... open resumed>) = -1 EFAULT (Bad address) [pid 1610] <... futex resumed>) = 0 [pid 1624] write(3, "1000", 4 [pid 1618] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1614] open("./bus", O_RDONLY [pid 1613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1612] <... futex resumed>) = 0 [pid 1611] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1610] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1624] <... write resumed>) = 4 [pid 1618] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1614] <... open resumed>) = 7 [pid 1613] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1612] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1611] <... futex resumed>) = 1 [pid 1609] <... futex resumed>) = 0 [pid 1624] close(3 [pid 1618] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1614] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1613] <... open resumed>) = 5 [pid 1611] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1609] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1624] <... close resumed>) = 0 [pid 1618] <... mprotect resumed>) = 0 [pid 1614] <... futex resumed>) = 1 [pid 1613] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1611] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1610] <... futex resumed>) = 0 [pid 1609] <... futex resumed>) = 0 [pid 1624] symlink("/dev/binderfs", "./binderfs" [pid 1618] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1614] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1613] <... futex resumed>) = 1 [pid 1612] <... futex resumed>) = 0 [pid 1624] <... symlink resumed>) = 0 [pid 1618] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1624] write(1, "executing program\n", 18executing program [pid 1618] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1624] <... write resumed>) = 18 [pid 1624] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1618] <... clone3 resumed> => {parent_tid=[1625]}, 88) = 1625 [pid 1624] <... futex resumed>) = 0 [pid 1618] rt_sigprocmask(SIG_SETMASK, [], [pid 1624] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1618] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1624] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1618] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1624] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1618] <... futex resumed>) = 0 [pid 1624] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1618] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1624] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1624] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1624] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1624] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1626]}, 88) = 1626 [pid 1624] rt_sigprocmask(SIG_SETMASK, [], [pid 1614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1610] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1613] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1609] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1612] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1624] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1614] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1612] <... futex resumed>) = 0 [pid 1610] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1626 attached ./strace-static-x86_64: Process 1625 attached [pid 1624] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1624] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1614] <... copy_file_range resumed>) = 1 [pid 1614] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1614] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1613] creat("./bus", 000) = 6 [pid 1613] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1613] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1612] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 1612] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1613] <... futex resumed>) = 0 [pid 1612] <... futex resumed>) = 1 [pid 1613] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1612] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1613] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1613] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1612] <... futex resumed>) = 0 [pid 1613] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1612] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1612] <... futex resumed>) = 0 [pid 1613] pwrite64(6, "+", 1, 0 [pid 1612] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1613] <... pwrite64 resumed>) = 1 [pid 1613] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1612] <... futex resumed>) = 0 [pid 1613] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1612] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1612] <... futex resumed>) = 0 [pid 1613] open("./bus", O_RDONLY [pid 1612] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1613] <... open resumed>) = 7 [pid 1613] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1612] <... futex resumed>) = 0 [pid 1613] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1612] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1612] <... futex resumed>) = 0 [pid 1613] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1612] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1613] <... copy_file_range resumed>) = 1 [pid 1612] <... futex resumed>) = 0 [pid 1613] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1613] <... futex resumed>) = 0 [pid 1612] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1613] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1612] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1612] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1612] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1627]}, 88) = 1627 [pid 1612] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1612] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1612] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1610] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1614] <... futex resumed>) = 0 [pid 1610] <... futex resumed>) = 1 [pid 1614] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1610] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1626] set_robust_list(0x7f13c8ce49a0, 24 [pid 1625] set_robust_list(0x7f13c8ce49a0, 24 [pid 1614] <... mmap resumed>) = 0x20000000 ./strace-static-x86_64: Process 1627 attached [pid 1627] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1627] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1627] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1612] <... futex resumed>) = 0 [pid 1612] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1613] <... futex resumed>) = 0 [pid 1612] <... futex resumed>) = 1 [pid 1613] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1612] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1613] <... open resumed>) = -1 EFAULT (Bad address) [pid 1613] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1612] <... futex resumed>) = 0 [pid 1613] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [ 54.062893][ T1611] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 54.078275][ T1611] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 54.090902][ T1611] EXT4-fs (loop3): This should not happen!! Data will be lost [ 54.090902][ T1611] [pid 1612] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1612] <... futex resumed>) = 0 [pid 1626] <... set_robust_list resumed>) = 0 [pid 1625] <... set_robust_list resumed>) = 0 [pid 1614] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1612] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1627] <... futex resumed>) = 1 [pid 1627] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1626] rt_sigprocmask(SIG_SETMASK, [], [pid 1625] rt_sigprocmask(SIG_SETMASK, [], [pid 1614] <... futex resumed>) = 1 [pid 1610] <... futex resumed>) = 0 [pid 1626] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1625] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1614] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1610] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1609] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1625] memfd_create("syzkaller", 0 [pid 1614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1610] <... futex resumed>) = 0 [pid 1626] memfd_create("syzkaller", 0 [pid 1625] <... memfd_create resumed>) = 3 [pid 1614] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1610] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1626] <... memfd_create resumed>) = 3 [pid 1614] <... open resumed>) = -1 EFAULT (Bad address) [pid 1625] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1626] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1614] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1625] <... mmap resumed>) = 0x7f13c08c4000 [pid 1614] <... futex resumed>) = 1 [pid 1610] <... futex resumed>) = 0 [ 54.095733][ T1613] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 54.100883][ T1611] EXT4-fs (loop3): Total free blocks count 0 [ 54.116765][ T1613] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 54.120864][ T1611] EXT4-fs (loop3): Free/Dirty block details [ 54.139586][ T1611] EXT4-fs (loop3): free_blocks=2415919504 [ 54.145458][ T1611] EXT4-fs (loop3): dirty_blocks=32 [ 54.150966][ T1613] EXT4-fs (loop1): This should not happen!! Data will be lost [ 54.150966][ T1613] [pid 1610] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1612] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1610] <... futex resumed>) = 0 [pid 1610] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1625] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1626] <... mmap resumed>) = 0x7f13c08c4000 [ 54.152462][ T1614] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 54.161447][ T1613] EXT4-fs (loop1): Total free blocks count 0 [ 54.175053][ T1614] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 54.190443][ T1613] EXT4-fs (loop1): Free/Dirty block details [ 54.192731][ T1614] EXT4-fs (loop0): This should not happen!! Data will be lost [ 54.192731][ T1614] [pid 1625] <... write resumed>) = 1048576 [pid 1625] munmap(0x7f13c08c4000, 138412032 [pid 1610] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1625] <... munmap resumed>) = 0 [pid 1625] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1625] ioctl(4, LOOP_SET_FD, 3 [pid 1626] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1626] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1626] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1611] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [ 54.199436][ T1611] EXT4-fs (loop3): Block reservation details [ 54.207922][ T1614] EXT4-fs (loop0): Total free blocks count 0 [ 54.207937][ T1614] EXT4-fs (loop0): Free/Dirty block details [ 54.220322][ T1613] EXT4-fs (loop1): free_blocks=2415919504 [ 54.225585][ T1614] EXT4-fs (loop0): free_blocks=2415919504 [ 54.234436][ T1625] loop4: detected capacity change from 0 to 2048 [ 54.236751][ T1614] EXT4-fs (loop0): dirty_blocks=32 [ 54.247800][ T1614] EXT4-fs (loop0): Block reservation details [ 54.250539][ T1613] EXT4-fs (loop1): dirty_blocks=32 [pid 1626] ioctl(4, LOOP_SET_FD, 3 [pid 1625] <... ioctl resumed>) = 0 [pid 1623] <... futex resumed>) = ? [pid 1614] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1626] <... ioctl resumed>) = 0 [pid 1626] close(3) = 0 [pid 1626] close(4) = 0 [pid 1626] mkdir("./file1", 0777) = 0 [pid 1626] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 1625] close(3) = 0 [pid 1625] close(4) = 0 [pid 1625] mkdir("./file1", 0777) = 0 [pid 1625] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 1623] +++ killed by SIGBUS +++ [pid 1611] +++ killed by SIGBUS +++ [ 54.253602][ T1611] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 54.253720][ T1614] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 54.260160][ T1626] loop2: detected capacity change from 0 to 2048 [ 54.264553][ T1613] EXT4-fs (loop1): Block reservation details [ 54.281057][ T1614] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 54.283250][ T1609] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 54.295052][ T1614] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 1613] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1627] <... futex resumed>) = ? [pid 1625] <... mount resumed>) = 0 [pid 1614] +++ killed by SIGBUS +++ [pid 1610] +++ killed by SIGBUS +++ [pid 1627] +++ killed by SIGBUS +++ [pid 1613] +++ killed by SIGBUS +++ [pid 1625] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1625] chdir("./file1") = 0 [pid 1625] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1625] ioctl(4, LOOP_CLR_FD) = 0 [pid 1625] close(4) = 0 [pid 1609] +++ killed by SIGBUS +++ [pid 1626] <... mount resumed>) = 0 [pid 1625] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1609, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1610, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 1626] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1626] chdir("./file1" [pid 1625] <... futex resumed>) = 1 [pid 300] umount2("./50", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] umount2("./51", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1626] <... chdir resumed>) = 0 [pid 1625] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1626] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 300] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1626] <... openat resumed>) = 4 [pid 300] <... openat resumed>) = 3 [pid 297] <... openat resumed>) = 3 [pid 1626] ioctl(4, LOOP_CLR_FD [pid 300] newfstatat(3, "", [pid 297] newfstatat(3, "", [pid 1626] <... ioctl resumed>) = 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1626] close(4 [pid 300] getdents64(3, [pid 297] getdents64(3, [pid 1626] <... close resumed>) = 0 [pid 300] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1626] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] umount2("./50/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] umount2("./51/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1626] <... futex resumed>) = 1 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1626] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] newfstatat(AT_FDCWD, "./50/binderfs", [pid 297] newfstatat(AT_FDCWD, "./51/binderfs", [pid 300] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1624] <... futex resumed>) = 0 [pid 1618] <... futex resumed>) = 0 [pid 300] unlink("./50/binderfs" [pid 297] unlink("./51/binderfs" [pid 300] <... unlink resumed>) = 0 [pid 297] <... unlink resumed>) = 0 [pid 300] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1624] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1618] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1612] +++ killed by SIGBUS +++ [pid 1626] <... futex resumed>) = 0 [pid 1625] <... futex resumed>) = 0 [pid 1624] <... futex resumed>) = 1 [pid 1618] <... futex resumed>) = 1 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1612, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 1625] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1626] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 1624] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1618] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1625] <... open resumed>) = 4 [pid 1626] <... open resumed>) = 4 [pid 1625] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1626] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1625] <... futex resumed>) = 1 [pid 1618] <... futex resumed>) = 0 [pid 1625] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1618] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1625] <... open resumed>) = 5 [pid 1618] <... futex resumed>) = 0 [pid 1625] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1618] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1625] <... futex resumed>) = 0 [pid 1618] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1625] creat("./bus", 000 [pid 1618] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1625] <... creat resumed>) = 6 [pid 1618] <... futex resumed>) = 0 [pid 1625] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1618] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1625] <... futex resumed>) = 0 [pid 1618] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1625] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1618] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1625] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1618] <... futex resumed>) = 0 [pid 1625] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1618] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1625] <... futex resumed>) = 0 [pid 1618] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1625] pwrite64(6, "+", 1, 0 [pid 1618] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1625] <... pwrite64 resumed>) = 1 [pid 1618] <... futex resumed>) = 0 [pid 1625] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1618] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1625] <... futex resumed>) = 0 [pid 1618] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1625] open("./bus", O_RDONLY [pid 1618] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1625] <... open resumed>) = 7 [pid 1618] <... futex resumed>) = 0 [pid 1625] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1618] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1625] <... futex resumed>) = 0 [pid 1618] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1625] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1618] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1626] <... futex resumed>) = 1 [pid 1625] <... copy_file_range resumed>) = 1 [pid 1624] <... futex resumed>) = 0 [pid 1618] <... futex resumed>) = 0 [pid 1626] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1625] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1624] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1618] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1625] <... futex resumed>) = 0 [pid 1624] <... futex resumed>) = 0 [pid 1618] <... futex resumed>) = 0 [pid 1626] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1625] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1624] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1618] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1626] <... open resumed>) = 5 [pid 1626] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1624] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1626] <... futex resumed>) = 0 [pid 1626] creat("./bus", 000 [pid 1624] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... restart_syscall resumed>) = 0 [pid 1626] <... creat resumed>) = 6 [pid 1625] <... mmap resumed>) = 0x20000000 [pid 1624] <... futex resumed>) = 0 [pid 1625] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1625] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1626] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1624] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1618] <... futex resumed>) = 0 [pid 300] <... umount2 resumed>) = 0 [pid 297] <... umount2 resumed>) = 0 [pid 1626] <... futex resumed>) = 0 [pid 1624] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1618] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] umount2("./51", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1626] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1624] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./50/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./50/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./50/file1") = 0 [pid 300] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./50") = 0 [pid 300] mkdir("./51", 0777 [pid 1625] <... futex resumed>) = 0 [pid 1624] <... futex resumed>) = 0 [pid 1618] <... futex resumed>) = 1 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1625] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1624] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1618] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1626] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1625] <... open resumed>) = -1 EFAULT (Bad address) [pid 300] <... mkdir resumed>) = 0 [pid 1626] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1625] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... openat resumed>) = 3 [pid 1625] <... futex resumed>) = 1 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1625] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1626] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1618] <... futex resumed>) = 0 [pid 300] <... openat resumed>) = 3 [pid 298] newfstatat(3, "", [pid 297] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1626] <... futex resumed>) = 1 [pid 1624] <... futex resumed>) = 0 [pid 1618] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [ 54.295052][ T1614] [ 54.315338][ T1613] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 54.322542][ T1609] EXT4-fs (loop3): This should not happen!! Data will be lost [ 54.322542][ T1609] [ 54.333567][ T1612] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 54.345757][ T1612] EXT4-fs (loop1): This should not happen!! Data will be lost [ 54.345757][ T1612] executing program [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1626] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1625] <... futex resumed>) = 0 [pid 1624] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1618] <... futex resumed>) = 1 [pid 300] ioctl(3, LOOP_CLR_FD [pid 298] getdents64(3, [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1624] <... futex resumed>) = 0 [pid 1618] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1626] pwrite64(6, "+", 1, 0 [pid 1624] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] umount2("./51/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] newfstatat(AT_FDCWD, "./51/file1", [pid 1626] <... pwrite64 resumed>) = 1 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1626] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] newfstatat(AT_FDCWD, "./51/binderfs", [pid 297] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1626] <... futex resumed>) = 1 [pid 1624] <... futex resumed>) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1626] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1624] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] unlink("./51/binderfs" [pid 297] openat(AT_FDCWD, "./51/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1624] <... futex resumed>) = 0 [pid 298] <... unlink resumed>) = 0 [pid 297] <... openat resumed>) = 4 [pid 1626] open("./bus", O_RDONLY [pid 1624] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] newfstatat(4, "", [pid 1626] <... open resumed>) = 7 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1626] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] getdents64(4, [pid 1626] <... futex resumed>) = 1 [pid 1624] <... futex resumed>) = 0 [pid 297] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1626] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1624] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] getdents64(4, [pid 1626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1624] <... futex resumed>) = 0 [pid 297] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1626] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1624] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] close(4 [pid 1626] <... copy_file_range resumed>) = 1 [pid 1624] <... futex resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 1626] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1624] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 297] rmdir("./51/file1" [pid 1626] <... futex resumed>) = 0 [pid 1624] <... mmap resumed>) = 0x7f13c8ca3000 [pid 297] <... rmdir resumed>) = 0 [pid 1626] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1624] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 297] getdents64(3, [pid 1624] <... mprotect resumed>) = 0 [pid 297] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1624] rt_sigprocmask(SIG_BLOCK, ~[], [pid 297] close(3 [pid 1624] <... rt_sigprocmask resumed>[], 8) = 0 [pid 297] <... close resumed>) = 0 [pid 1624] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 297] rmdir("./51") = 0 [pid 1624] <... clone3 resumed> => {parent_tid=[1632]}, 88) = 1632 [pid 297] mkdir("./52", 0777 [pid 1624] rt_sigprocmask(SIG_SETMASK, [], [pid 297] <... mkdir resumed>) = 0 [pid 1624] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1624] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... openat resumed>) = 3 [pid 1624] <... futex resumed>) = 0 [pid 297] ioctl(3, LOOP_CLR_FD [pid 1624] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1633 ./strace-static-x86_64: Process 1633 attached [pid 1633] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1633] chdir("./52") = 0 [pid 1633] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1633] setpgid(0, 0) = 0 [pid 1633] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 1632 attached [pid 1632] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1632] rt_sigprocmask(SIG_SETMASK, [], [pid 1633] <... openat resumed>) = 3 [pid 1632] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1632] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< {parent_tid=[1634]}, 88) = 1634 [pid 1633] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1633] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1633] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1632] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1624] <... futex resumed>) = 0 [pid 1624] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1626] <... futex resumed>) = 0 [pid 1624] <... futex resumed>) = 1 [pid 1626] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1624] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1626] <... open resumed>) = -1 EFAULT (Bad address) [pid 1626] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1624] <... futex resumed>) = 0 [pid 1626] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1624] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1624] <... futex resumed>) = 0 [pid 1624] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1632] <... futex resumed>) = 1 [pid 1632] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1634 attached [pid 1634] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1634] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1634] memfd_create("syzkaller", 0) = 3 [pid 1634] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1634] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [ 54.375158][ T1625] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 54.388338][ T1626] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 54.392358][ T1625] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 300] close(3 [pid 1618] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1634] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1634] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1634] ioctl(4, LOOP_SET_FD, 3 [pid 300] <... close resumed>) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1624] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1634] <... ioctl resumed>) = 0 [pid 1634] close(3) = 0 [ 54.414776][ T1626] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 54.418776][ T1625] EXT4-fs (loop4): This should not happen!! Data will be lost [ 54.418776][ T1625] [ 54.431990][ T1634] loop0: detected capacity change from 0 to 2048 [ 54.438449][ T1625] EXT4-fs (loop4): Total free blocks count 0 [ 54.449857][ T1626] EXT4-fs (loop2): This should not happen!! Data will be lost [ 54.449857][ T1626] [ 54.452518][ T1625] EXT4-fs (loop4): Free/Dirty block details [ 54.465759][ T1625] EXT4-fs (loop4): free_blocks=2415919504 [pid 1634] close(4 [pid 298] <... umount2 resumed>) = 0 [pid 300] <... clone resumed>, child_tidptr=0x55558909e690) = 1635 [pid 298] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./51/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./51/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./51/file1") = 0 [pid 298] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./51") = 0 [pid 298] mkdir("./52", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 1636 attached [pid 1625] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 298] <... clone resumed>, child_tidptr=0x55558909e690) = 1636 [pid 1634] <... close resumed>) = 0 [pid 1634] mkdir("./file1", 0777) = 0 [pid 1634] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 1636] set_robust_list(0x55558909e6a0, 24executing program ) = 0 ./strace-static-x86_64: Process 1635 attached [pid 1635] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1635] chdir("./51") = 0 [pid 1635] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1635] setpgid(0, 0) = 0 [pid 1635] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1635] write(3, "1000", 4) = 4 [pid 1635] close(3) = 0 [pid 1635] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1635] write(1, "executing program\n", 18) = 18 [pid 1635] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1635] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1635] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1635] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1635] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1635] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1635] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1638]}, 88) = 1638 [pid 1635] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1635] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1635] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1638 attached [pid 1638] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1638] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1638] memfd_create("syzkaller", 0) = 3 [pid 1638] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1634] <... mount resumed>) = 0 [pid 1634] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1634] chdir("./file1") = 0 [pid 1634] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1634] ioctl(4, LOOP_CLR_FD) = 0 [pid 1634] close(4 [pid 1636] chdir("./52" [pid 1634] <... close resumed>) = 0 [pid 1634] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1633] <... futex resumed>) = 0 [pid 1633] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1633] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1634] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 1634] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1633] <... futex resumed>) = 0 [pid 1633] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1633] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1634] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 1634] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1633] <... futex resumed>) = 0 [pid 1633] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1633] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1634] creat("./bus", 000) = 6 [pid 1634] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1633] <... futex resumed>) = 0 [pid 1633] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1634] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1633] <... futex resumed>) = 0 [pid 1634] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1633] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1634] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1633] <... futex resumed>) = 0 [pid 1634] pwrite64(6, "+", 1, 0 [pid 1633] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1634] <... pwrite64 resumed>) = 1 [pid 1633] <... futex resumed>) = 0 [pid 1634] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1633] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1634] <... futex resumed>) = 0 [pid 1633] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1634] open("./bus", O_RDONLY [pid 1633] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1634] <... open resumed>) = 7 [pid 1633] <... futex resumed>) = 0 [pid 1634] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1633] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1634] <... futex resumed>) = 0 [pid 1633] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1634] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1633] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1634] <... copy_file_range resumed>) = 1 [pid 1633] <... futex resumed>) = 0 [pid 1634] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1633] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1634] <... futex resumed>) = 0 [pid 1633] <... futex resumed>) = 0 [pid 1634] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1633] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1636] <... chdir resumed>) = 0 [pid 1634] <... mmap resumed>) = 0x20000000 [pid 1634] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1633] <... futex resumed>) = 0 [pid 1633] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1633] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1634] <... futex resumed>) = 1 [pid 1634] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000) = -1 EFAULT (Bad address) [pid 1634] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1633] <... futex resumed>) = 0 [pid 1633] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1634] <... futex resumed>) = 1 [ 54.471417][ T1625] EXT4-fs (loop4): dirty_blocks=32 [ 54.476619][ T1625] EXT4-fs (loop4): Block reservation details [ 54.482986][ T1625] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 54.489095][ T1626] EXT4-fs (loop2): Total free blocks count 0 [ 54.495548][ T1626] EXT4-fs (loop2): Free/Dirty block details [ 54.502084][ T1625] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 54.514800][ T1626] EXT4-fs (loop2): free_blocks=2415919504 [ 54.520611][ T1626] EXT4-fs (loop2): dirty_blocks=32 [pid 1633] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1636] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1636] setpgid(0, 0) = 0 [pid 1638] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1638] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1638] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1638] ioctl(4, LOOP_SET_FD, 3 [pid 1636] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1636] write(3, "1000", 4 [pid 1638] <... ioctl resumed>) = 0 [pid 1638] close(3) = 0 [ 54.523153][ T1634] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 54.526145][ T1625] EXT4-fs (loop4): This should not happen!! Data will be lost [ 54.526145][ T1625] [ 54.549954][ T1626] EXT4-fs (loop2): Block reservation details [ 54.556670][ T1638] loop3: detected capacity change from 0 to 2048 [ 54.556905][ T1626] EXT4-fs (loop2): i_reserved_data_blocks=2 [pid 1638] close(4 [pid 1636] <... write resumed>) = 4 [pid 1633] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1636] close(3) = 0 [pid 1636] symlink("/dev/binderfs", "./binderfs" [pid 1626] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1636] <... symlink resumed>) = 0 [pid 1632] <... futex resumed>) = ? [pid 1636] write(1, "executing program\n", 18executing program [pid 1632] +++ killed by SIGBUS +++ [pid 1638] <... close resumed>) = 0 [pid 1636] <... write resumed>) = 18 [pid 1625] +++ killed by SIGBUS +++ [pid 1618] +++ killed by SIGBUS +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1618, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 301] umount2("./51", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./51/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./51/binderfs") = 0 [pid 301] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1638] mkdir("./file1", 0777 [pid 1636] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1626] +++ killed by SIGBUS +++ [pid 1624] +++ killed by SIGBUS +++ [pid 1638] <... mkdir resumed>) = 0 [pid 1636] <... futex resumed>) = 0 [pid 1636] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1636] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1638] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 1636] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1636] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1636] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1636] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1636] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1640]}, 88) = 1640 [pid 1636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1636] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1636] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1640 attached [pid 1640] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1640] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1640] memfd_create("syzkaller", 0) = 3 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1624, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11} --- [pid 1640] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 299] umount2("./52", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 54.569051][ T1634] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 54.582464][ T1634] EXT4-fs (loop0): This should not happen!! Data will be lost [ 54.582464][ T1634] [ 54.583576][ T1626] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 54.593078][ T1634] EXT4-fs (loop0): Total free blocks count 0 [ 54.610422][ T1626] EXT4-fs (loop2): This should not happen!! Data will be lost [ 54.610422][ T1626] [ 54.612771][ T1634] EXT4-fs (loop0): Free/Dirty block details [pid 299] getdents64(3, [pid 1640] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 299] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 301] <... umount2 resumed>) = 0 [pid 299] umount2("./52/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./51/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./51/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] close(4 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... close resumed>) = 0 [pid 301] rmdir("./51/file1") = 0 [pid 299] newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./52/binderfs") = 0 [pid 299] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./51") = 0 [pid 301] mkdir("./52", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1640] <... write resumed>) = 1048576 [pid 1640] munmap(0x7f13c08c4000, 138412032) = 0 [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./52/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./52/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./52/file1") = 0 [pid 301] <... clone resumed>, child_tidptr=0x55558909e690) = 1642 [pid 299] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./52") = 0 [pid 299] mkdir("./53", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1640] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1640] ioctl(4, LOOP_SET_FD, 3 [pid 299] <... clone resumed>, child_tidptr=0x55558909e690) = 1644 [pid 1638] <... mount resumed>) = 0 [pid 1638] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1638] chdir("./file1") = 0 [pid 1638] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1638] ioctl(4, LOOP_CLR_FD) = 0 [pid 1638] close(4) = 0 [pid 1638] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1635] <... futex resumed>) = 0 [pid 1638] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1635] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1635] <... futex resumed>) = 0 [pid 1638] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1635] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1638] <... open resumed>) = 4 [pid 1638] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1635] <... futex resumed>) = 0 [pid 1638] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1635] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1635] <... futex resumed>) = 0 [pid 1638] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1635] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1638] <... open resumed>) = 5 [pid 1638] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1635] <... futex resumed>) = 0 [pid 1638] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1635] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1635] <... futex resumed>) = 0 [pid 1638] creat("./bus", 000 [pid 1635] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1638] <... creat resumed>) = 6 [pid 1638] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1635] <... futex resumed>) = 0 [pid 1638] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1635] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1635] <... futex resumed>) = 0 [pid 1638] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1635] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1638] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1638] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1635] <... futex resumed>) = 0 [pid 1638] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1635] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1635] <... futex resumed>) = 0 [pid 1638] pwrite64(6, "+", 1, 0 [pid 1635] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1638] <... pwrite64 resumed>) = 1 [pid 1638] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1635] <... futex resumed>) = 0 [pid 1638] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1635] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1635] <... futex resumed>) = 0 [pid 1638] open("./bus", O_RDONLY [pid 1635] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1638] <... open resumed>) = 7 [pid 1638] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1635] <... futex resumed>) = 0 [pid 1638] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1635] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1635] <... futex resumed>) = 0 [pid 1638] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1635] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1638] <... copy_file_range resumed>) = 1 [pid 1635] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1644 attached [pid 1638] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1635] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1644] set_robust_list(0x55558909e6a0, 24 [pid 1640] <... ioctl resumed>) = 0 [pid 1638] <... futex resumed>) = 0 [pid 1635] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1644] <... set_robust_list resumed>) = 0 [pid 1638] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1635] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1644] chdir("./53" [pid 1635] <... mprotect resumed>) = 0 [pid 1644] <... chdir resumed>) = 0 [pid 1635] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1644] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1635] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1644] <... prctl resumed>) = 0 [pid 1635] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1644] setpgid(0, 0) = 0 [pid 1635] <... clone3 resumed> => {parent_tid=[1645]}, 88) = 1645 [pid 1644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1635] rt_sigprocmask(SIG_SETMASK, [], [pid 1644] <... openat resumed>) = 3 [pid 1635] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1644] write(3, "1000", 4 [ 54.628994][ T1634] EXT4-fs (loop0): free_blocks=2415919504 [ 54.635371][ T1634] EXT4-fs (loop0): dirty_blocks=32 [ 54.651970][ T1634] EXT4-fs (loop0): Block reservation details [ 54.663042][ T1640] loop1: detected capacity change from 0 to 2048 [pid 1635] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1644] <... write resumed>) = 4 [pid 1635] <... futex resumed>) = 0 [pid 1644] close(3 [pid 1635] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1642 attached [pid 1644] <... close resumed>) = 0 [pid 1644] symlink("/dev/binderfs", "./binderfs" [pid 1642] set_robust_list(0x55558909e6a0, 24executing program [pid 1644] <... symlink resumed>) = 0 [pid 1642] <... set_robust_list resumed>) = 0 [pid 1644] write(1, "executing program\n", 18 [pid 1642] chdir("./52" [pid 1644] <... write resumed>) = 18 [pid 1644] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1642] <... chdir resumed>) = 0 [pid 1644] <... futex resumed>) = 0 [pid 1642] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1644] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1642] <... prctl resumed>) = 0 [pid 1644] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1642] setpgid(0, 0./strace-static-x86_64: Process 1645 attached [pid 1644] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1642] <... setpgid resumed>) = 0 [pid 1640] close(3 [pid 1634] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1645] set_robust_list(0x7f13c8cc39a0, 24 [pid 1640] <... close resumed>) = 0 [pid 1645] <... set_robust_list resumed>) = 0 [pid 1644] <... rt_sigprocmask resumed>NULL, 8) = 0 executing program [pid 1642] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1640] close(4 [pid 1645] rt_sigprocmask(SIG_SETMASK, [], [pid 1644] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1642] <... openat resumed>) = 3 [pid 1640] <... close resumed>) = 0 [pid 1644] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1642] write(3, "1000", 4 [pid 1644] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1642] <... write resumed>) = 4 [pid 1644] <... mprotect resumed>) = 0 [pid 1642] close(3 [pid 1644] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1642] <... close resumed>) = 0 [pid 1644] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1642] symlink("/dev/binderfs", "./binderfs" [pid 1644] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1642] <... symlink resumed>) = 0 [pid 1642] write(1, "executing program\n", 18 [pid 1644] <... clone3 resumed> => {parent_tid=[1646]}, 88) = 1646 [pid 1642] <... write resumed>) = 18 [pid 1644] rt_sigprocmask(SIG_SETMASK, [], [pid 1642] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1644] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1642] <... futex resumed>) = 0 [pid 1644] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1642] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1644] <... futex resumed>) = 0 [pid 1642] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1644] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1642] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1642] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1642] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1642] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1642] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1647]}, 88) = 1647 [pid 1642] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1642] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1642] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1647 attached [pid 1647] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1647] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1647] memfd_create("syzkaller", 0) = 3 [pid 1647] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1640] mkdir("./file1", 0777) = 0 [pid 1640] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 1647] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1645] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1645] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1647] <... write resumed>) = 1048576 [pid 1647] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1647] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1647] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 1646 attached [pid 1645] <... futex resumed>) = 1 [pid 1635] <... futex resumed>) = 0 [pid 1647] <... ioctl resumed>) = 0 [pid 1647] close(3) = 0 [pid 1647] close(4) = 0 [pid 1647] mkdir("./file1", 0777) = 0 [pid 1647] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 1646] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1646] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1646] memfd_create("syzkaller", 0) = 3 [pid 1646] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1646] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1645] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1635] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1646] <... write resumed>) = 1048576 [pid 1646] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1646] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 54.676133][ T1634] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 54.694747][ T1634] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 54.696102][ T1647] loop4: detected capacity change from 0 to 2048 [ 54.707271][ T1634] EXT4-fs (loop0): This should not happen!! Data will be lost [ 54.707271][ T1634] [pid 1646] ioctl(4, LOOP_SET_FD, 3 [pid 1638] <... futex resumed>) = 0 [pid 1635] <... futex resumed>) = 1 [pid 1638] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1635] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1638] <... open resumed>) = -1 EFAULT (Bad address) [pid 1638] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1635] <... futex resumed>) = 0 [pid 1638] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1635] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1635] <... futex resumed>) = 0 [pid 1646] <... ioctl resumed>) = 0 [pid 1640] <... mount resumed>) = 0 [pid 1635] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1634] +++ killed by SIGBUS +++ [pid 1633] +++ killed by SIGBUS +++ [pid 1640] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1640] chdir("./file1") = 0 [pid 1640] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1640] ioctl(4, LOOP_CLR_FD) = 0 [pid 1640] close(4) = 0 [pid 1640] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1640] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1646] close(3) = 0 [pid 1646] close(4) = 0 [pid 1636] <... futex resumed>) = 0 [pid 1636] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1633, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 1640] <... futex resumed>) = 0 [pid 1636] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1640] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1646] mkdir("./file1", 0777) = 0 [pid 1646] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 1640] <... open resumed>) = 4 [pid 297] umount2("./52", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1640] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1640] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", [pid 1636] <... futex resumed>) = 0 [pid 1636] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./52/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./52/binderfs") = 0 [pid 297] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1640] <... futex resumed>) = 0 [pid 1636] <... futex resumed>) = 1 [pid 1640] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1636] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1640] <... open resumed>) = 5 [pid 1640] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1636] <... futex resumed>) = 0 [pid 1640] creat("./bus", 000 [pid 1636] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1640] <... creat resumed>) = 6 [pid 1636] <... futex resumed>) = 0 [pid 1640] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1636] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1640] <... futex resumed>) = 0 [pid 1636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1640] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1636] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1640] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1636] <... futex resumed>) = 0 [pid 1640] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1636] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1640] <... futex resumed>) = 0 [pid 1636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1640] pwrite64(6, "+", 1, 0 [pid 1636] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1640] <... pwrite64 resumed>) = 1 [pid 1636] <... futex resumed>) = 0 [pid 1640] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1636] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1640] <... futex resumed>) = 0 [pid 1636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1640] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1636] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1636] <... futex resumed>) = 0 [pid 1640] open("./bus", O_RDONLY [pid 1636] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1640] <... open resumed>) = 7 [pid 1640] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1636] <... futex resumed>) = 0 [pid 1640] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1636] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1636] <... futex resumed>) = 0 [ 54.726623][ T1646] loop2: detected capacity change from 0 to 2048 [ 54.734196][ T1638] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 54.749358][ T1638] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 54.761893][ T1638] EXT4-fs (loop3): This should not happen!! Data will be lost [ 54.761893][ T1638] [ 54.771863][ T1638] EXT4-fs (loop3): Total free blocks count 0 [pid 1640] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1636] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1640] <... copy_file_range resumed>) = 1 [pid 1636] <... futex resumed>) = 0 [pid 1640] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1636] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1640] <... futex resumed>) = 0 [pid 1636] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1640] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1636] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1636] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1636] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1654]}, 88) = 1654 [pid 1636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1636] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1636] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1635] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1647] <... mount resumed>) = 0 [pid 1647] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1647] chdir("./file1"./strace-static-x86_64: Process 1654 attached [pid 297] <... umount2 resumed>) = 0 [pid 1647] <... chdir resumed>) = 0 [pid 1647] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1647] ioctl(4, LOOP_CLR_FD) = 0 [pid 1647] close(4 [pid 1654] set_robust_list(0x7f13c8cc39a0, 24 [pid 297] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1654] <... set_robust_list resumed>) = 0 [pid 1646] <... mount resumed>) = 0 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1654] rt_sigprocmask(SIG_SETMASK, [], [pid 1646] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 297] newfstatat(AT_FDCWD, "./52/file1", [pid 1654] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1646] <... openat resumed>) = 3 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1654] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1646] chdir("./file1" [pid 297] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1654] <... mmap resumed>) = 0x20000000 [pid 1646] <... chdir resumed>) = 0 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1654] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1646] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 297] openat(AT_FDCWD, "./52/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1654] <... futex resumed>) = 1 [pid 1646] <... openat resumed>) = 4 [pid 1636] <... futex resumed>) = 0 [pid 297] <... openat resumed>) = 4 [pid 1654] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1646] ioctl(4, LOOP_CLR_FD [pid 1636] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] newfstatat(4, "", [pid 1646] <... ioctl resumed>) = 0 [pid 1640] <... futex resumed>) = 0 [pid 1636] <... futex resumed>) = 1 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1646] close(4 [pid 1640] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1638] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1636] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1635] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] getdents64(4, [pid 1647] <... close resumed>) = 0 [pid 1646] <... close resumed>) = 0 [pid 1645] <... futex resumed>) = ? [pid 1640] <... open resumed>) = -1 EFAULT (Bad address) [pid 297] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1646] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1645] +++ killed by SIGBUS +++ [pid 1640] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] getdents64(4, [pid 1646] <... futex resumed>) = 1 [pid 1644] <... futex resumed>) = 0 [pid 1640] <... futex resumed>) = 1 [pid 1636] <... futex resumed>) = 0 [pid 297] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1646] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1644] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1640] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1636] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] close(4 [pid 1646] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1644] <... futex resumed>) = 0 [ 54.780195][ T1638] EXT4-fs (loop3): Free/Dirty block details [ 54.788830][ T1638] EXT4-fs (loop3): free_blocks=2415919504 [ 54.794740][ T1638] EXT4-fs (loop3): dirty_blocks=32 [ 54.799666][ T1638] EXT4-fs (loop3): Block reservation details [ 54.805777][ T1638] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 54.816840][ T1638] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 1640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1636] <... futex resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 1647] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1646] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1644] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1636] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] rmdir("./52/file1" [pid 1647] <... futex resumed>) = 1 [pid 1646] <... open resumed>) = 4 [pid 1642] <... futex resumed>) = 0 [pid 297] <... rmdir resumed>) = 0 [pid 1647] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1646] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1642] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] getdents64(3, [pid 1647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1646] <... futex resumed>) = 1 [pid 1644] <... futex resumed>) = 0 [pid 1642] <... futex resumed>) = 0 [pid 297] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1647] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1646] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1644] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1642] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] close(3 [pid 1647] <... open resumed>) = 4 [pid 1646] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1644] <... futex resumed>) = 0 [pid 1638] +++ killed by SIGBUS +++ [pid 1635] +++ killed by SIGBUS +++ [pid 297] <... close resumed>) = 0 [pid 1647] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1646] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1644] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1635, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 297] rmdir("./52" [pid 1647] <... futex resumed>) = 1 [pid 1646] <... open resumed>) = 5 [pid 1642] <... futex resumed>) = 0 [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 297] <... rmdir resumed>) = 0 [pid 1647] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1646] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1642] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] mkdir("./53", 0777 [pid 1647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1646] <... futex resumed>) = 1 [pid 1644] <... futex resumed>) = 0 [pid 1642] <... futex resumed>) = 0 [pid 297] <... mkdir resumed>) = 0 [pid 1647] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1646] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1644] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1642] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1647] <... open resumed>) = 5 [pid 1646] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1644] <... futex resumed>) = 0 [pid 297] <... openat resumed>) = 3 [pid 1647] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1646] creat("./bus", 000 [pid 1644] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] ioctl(3, LOOP_CLR_FD [pid 1647] <... futex resumed>) = 1 [pid 1646] <... creat resumed>) = 6 [pid 1642] <... futex resumed>) = 0 [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1647] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1646] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1642] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] close(3 [pid 1647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1646] <... futex resumed>) = 1 [pid 1644] <... futex resumed>) = 0 [pid 1642] <... futex resumed>) = 0 [pid 300] <... restart_syscall resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 1647] creat("./bus", 000 [pid 1646] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1644] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1642] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1647] <... creat resumed>) = 6 [pid 1646] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1644] <... futex resumed>) = 0 [pid 1647] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1646] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1644] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] umount2("./51", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] <... clone resumed>, child_tidptr=0x55558909e690) = 1655 [pid 1647] <... futex resumed>) = 1 [pid 1646] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1642] <... futex resumed>) = 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1647] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1646] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1642] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1646] <... futex resumed>) = 1 [pid 1644] <... futex resumed>) = 0 [pid 1642] <... futex resumed>) = 0 [pid 300] <... openat resumed>) = 3 [pid 1647] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1646] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1644] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1642] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] newfstatat(3, "", [pid 1647] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1646] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1644] <... futex resumed>) = 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 1655 attached [pid 1647] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1646] pwrite64(6, "+", 1, 0 [pid 1644] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] getdents64(3, [pid 1647] <... futex resumed>) = 1 [pid 1646] <... pwrite64 resumed>) = 1 [pid 1642] <... futex resumed>) = 0 [pid 300] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1647] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1646] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1642] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] umount2("./51/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1646] <... futex resumed>) = 1 [pid 1644] <... futex resumed>) = 0 [pid 1642] <... futex resumed>) = 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1647] pwrite64(6, "+", 1, 0 [pid 1646] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1644] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1642] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] newfstatat(AT_FDCWD, "./51/binderfs", [pid 1647] <... pwrite64 resumed>) = 1 [pid 1646] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1644] <... futex resumed>) = 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1647] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1646] open("./bus", O_RDONLY [pid 1644] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] unlink("./51/binderfs" [pid 1647] <... futex resumed>) = 1 [pid 1646] <... open resumed>) = 7 [pid 1642] <... futex resumed>) = 0 [pid 300] <... unlink resumed>) = 0 [pid 1647] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1646] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1642] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1646] <... futex resumed>) = 1 [pid 1644] <... futex resumed>) = 0 [pid 1642] <... futex resumed>) = 0 [ 54.819006][ T1640] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 54.829115][ T1638] EXT4-fs (loop3): This should not happen!! Data will be lost [ 54.829115][ T1638] [ 54.853526][ T1640] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 54.865746][ T1640] EXT4-fs (loop1): This should not happen!! Data will be lost [ 54.865746][ T1640] [pid 1647] open("./bus", O_RDONLY [pid 1646] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1644] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1642] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1655] set_robust_list(0x55558909e6a0, 24 [pid 1647] <... open resumed>) = 7 [pid 1646] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1644] <... futex resumed>) = 0 [pid 1647] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1646] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1644] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1647] <... futex resumed>) = 1 [pid 1646] <... copy_file_range resumed>) = 1 [pid 1644] <... futex resumed>) = 0 [pid 1642] <... futex resumed>) = 0 [pid 1647] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1646] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1644] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1642] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1646] <... futex resumed>) = 0 [pid 1644] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1642] <... futex resumed>) = 0 [pid 1647] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1646] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1644] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1642] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1655] <... set_robust_list resumed>) = 0 [pid 1647] <... copy_file_range resumed>) = 1 [pid 1644] <... mprotect resumed>) = 0 [pid 1642] <... futex resumed>) = 0 [pid 1647] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1644] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1642] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1647] <... futex resumed>) = 0 [pid 1644] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1642] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1647] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1644] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1642] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1644] <... clone3 resumed> => {parent_tid=[1656]}, 88) = 1656 [pid 1642] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1644] rt_sigprocmask(SIG_SETMASK, [], [pid 1642] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1644] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1642] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1644] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1642] <... clone3 resumed> => {parent_tid=[1657]}, 88) = 1657 [pid 1644] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1642] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1642] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1642] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1657 attached [pid 1657] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1657] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1657] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1655] chdir("./53" [pid 1636] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 300] <... umount2 resumed>) = 0 [pid 300] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./51/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./51/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1655] <... chdir resumed>) = 0 [pid 300] getdents64(4, [pid 1655] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 300] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./51/file1") = 0 [pid 300] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./51") = 0 ./strace-static-x86_64: Process 1656 attached [pid 1655] <... prctl resumed>) = 0 [pid 1640] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 300] mkdir("./52", 0777 [pid 1657] <... mmap resumed>) = 0x20000000 [pid 1656] set_robust_list(0x7f13c8cc39a0, 24 [pid 1655] setpgid(0, 0 [pid 1654] <... futex resumed>) = ? [pid 300] <... mkdir resumed>) = 0 [pid 1657] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1656] <... set_robust_list resumed>) = 0 [pid 1655] <... setpgid resumed>) = 0 [pid 1654] +++ killed by SIGBUS +++ [pid 1657] <... futex resumed>) = 1 [pid 1656] rt_sigprocmask(SIG_SETMASK, [], [pid 1655] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1642] <... futex resumed>) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1657] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1656] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1655] <... openat resumed>) = 3 [pid 1642] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1656] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1655] write(3, "1000", 4 [pid 1642] <... futex resumed>) = 1 [pid 1656] <... mmap resumed>) = 0x20000000 [pid 1655] <... write resumed>) = 4 [pid 1647] <... futex resumed>) = 0 [pid 300] <... openat resumed>) = 3 [pid 1656] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1655] close(3 [pid 1656] <... futex resumed>) = 1 [pid 1655] <... close resumed>) = 0 [pid 1656] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1655] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1655] write(1, "executing program\n", 18) = 18 [pid 1655] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1655] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1655] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1655] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1655] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1655] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1655] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1658]}, 88) = 1658 [pid 1655] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1655] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1655] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}executing program [ 54.875597][ T1640] EXT4-fs (loop1): Total free blocks count 0 [ 54.881482][ T1640] EXT4-fs (loop1): Free/Dirty block details [ 54.887516][ T1640] EXT4-fs (loop1): free_blocks=2415919504 [ 54.893384][ T1640] EXT4-fs (loop1): dirty_blocks=32 [ 54.898327][ T1640] EXT4-fs (loop1): Block reservation details [ 54.904428][ T1640] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 54.913064][ T1640] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 1642] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1647] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000) = -1 EFAULT (Bad address) [pid 1647] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1642] <... futex resumed>) = 0 [pid 1647] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1642] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1642] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1658 attached [pid 1644] <... futex resumed>) = 0 [pid 1642] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] ioctl(3, LOOP_CLR_FD [pid 1658] set_robust_list(0x7f13c8ce49a0, 24 [pid 1644] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1640] +++ killed by SIGBUS +++ [pid 1636] +++ killed by SIGBUS +++ [pid 300] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1658] <... set_robust_list resumed>) = 0 [pid 1646] <... futex resumed>) = 0 [pid 1644] <... futex resumed>) = 1 [pid 300] close(3 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1636, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11} --- [pid 1658] rt_sigprocmask(SIG_SETMASK, [], [pid 1646] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1644] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... close resumed>) = 0 [pid 1658] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1646] <... open resumed>) = -1 EFAULT (Bad address) [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1658] memfd_create("syzkaller", 0 [pid 1646] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1658] <... memfd_create resumed>) = 3 [pid 1646] <... futex resumed>) = 1 [pid 1644] <... futex resumed>) = 0 [pid 300] <... clone resumed>, child_tidptr=0x55558909e690) = 1659 [ 54.917614][ T1647] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 54.925824][ T1640] EXT4-fs (loop1): This should not happen!! Data will be lost [ 54.925824][ T1640] [ 54.941251][ T1647] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 54.955504][ T1646] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 1658] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1644] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1658] <... mmap resumed>) = 0x7f13c08c4000 [pid 1644] <... futex resumed>) = 0 [pid 1658] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1644] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] umount2("./52", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./52/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./52/binderfs") = 0 [pid 298] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1658] <... write resumed>) = 1048576 [pid 1658] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1658] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1658] ioctl(4, LOOP_SET_FD, 3executing program ./strace-static-x86_64: Process 1659 attached [pid 1659] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1659] chdir("./52") = 0 [pid 1659] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1659] setpgid(0, 0) = 0 [pid 1659] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1659] write(3, "1000", 4) = 4 [pid 1659] close(3) = 0 [pid 1659] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1659] write(1, "executing program\n", 18) = 18 [pid 1659] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1659] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1659] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1659] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1659] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1659] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1659] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1660]}, 88) = 1660 [pid 1659] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1659] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1659] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1660 attached [pid 1660] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1660] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1660] memfd_create("syzkaller", 0) = 3 [pid 1660] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1642] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1658] <... ioctl resumed>) = 0 [pid 1658] close(3) = 0 [pid 1658] close(4) = 0 [pid 1658] mkdir("./file1", 0777) = 0 [pid 1658] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [ 54.964511][ T1647] EXT4-fs (loop4): This should not happen!! Data will be lost [ 54.964511][ T1647] [ 54.987705][ T1658] loop0: detected capacity change from 0 to 2048 [ 54.988234][ T1647] EXT4-fs (loop4): Total free blocks count 0 [ 55.007517][ T1646] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 55.008318][ T1647] EXT4-fs (loop4): Free/Dirty block details [pid 1660] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 298] <... umount2 resumed>) = 0 [pid 1660] <... write resumed>) = 1048576 [pid 1660] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1660] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1660] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1660] close(3) = 0 [pid 1660] close(4) = 0 [pid 1660] mkdir("./file1", 0777) = 0 [pid 1660] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 1644] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 298] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./52/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./52/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1658] <... mount resumed>) = 0 [pid 1658] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1658] chdir("./file1") = 0 [pid 1658] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1658] ioctl(4, LOOP_CLR_FD) = 0 [pid 1658] close(4) = 0 [pid 1658] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 55.025377][ T1660] loop3: detected capacity change from 0 to 2048 [ 55.026580][ T1646] EXT4-fs (loop2): This should not happen!! Data will be lost [ 55.026580][ T1646] [ 55.044946][ T1646] EXT4-fs (loop2): Total free blocks count 0 [ 55.047128][ T1647] EXT4-fs (loop4): free_blocks=2415919504 [ 55.051619][ T1646] EXT4-fs (loop2): Free/Dirty block details [ 55.057327][ T1647] EXT4-fs (loop4): dirty_blocks=32 [ 55.063275][ T1646] EXT4-fs (loop2): free_blocks=2415919504 [ 55.067593][ T1647] EXT4-fs (loop4): Block reservation details [pid 1658] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1655] <... futex resumed>) = 0 [pid 298] <... openat resumed>) = 4 [pid 1655] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] newfstatat(4, "", [pid 1658] <... futex resumed>) = 0 [pid 1655] <... futex resumed>) = 1 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1658] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1655] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] getdents64(4, [pid 1660] <... mount resumed>) = 0 [pid 1660] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1660] chdir("./file1") = 0 [pid 1660] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1660] ioctl(4, LOOP_CLR_FD) = 0 [pid 1660] close(4) = 0 [pid 1660] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1659] <... futex resumed>) = 0 [pid 1660] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1659] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1660] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1659] <... futex resumed>) = 0 [pid 1660] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1659] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1660] <... open resumed>) = 4 [pid 1660] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1659] <... futex resumed>) = 0 [pid 1660] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1659] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1660] <... open resumed>) = 5 [pid 1659] <... futex resumed>) = 0 [pid 1660] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1659] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1660] <... futex resumed>) = 0 [pid 1659] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1660] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1659] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1660] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1659] <... futex resumed>) = 0 [pid 1660] creat("./bus", 000 [pid 1659] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1660] <... creat resumed>) = 6 [pid 1660] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1659] <... futex resumed>) = 0 [pid 1660] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1659] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1660] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1659] <... futex resumed>) = 0 [pid 1660] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1659] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1660] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1660] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1659] <... futex resumed>) = 0 [pid 1660] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1659] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1660] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1659] <... futex resumed>) = 0 [pid 1660] pwrite64(6, "+", 1, 0 [pid 1659] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1660] <... pwrite64 resumed>) = 1 [pid 1660] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1659] <... futex resumed>) = 0 [pid 1660] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1659] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1660] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1659] <... futex resumed>) = 0 [pid 1660] open("./bus", O_RDONLY [pid 1659] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1660] <... open resumed>) = 7 [pid 1660] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1659] <... futex resumed>) = 0 [pid 1660] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1659] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1660] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1659] <... futex resumed>) = 0 [pid 1660] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1659] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1660] <... copy_file_range resumed>) = 1 [pid 1659] <... futex resumed>) = 0 [pid 1660] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1659] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1658] <... open resumed>) = 4 [pid 1660] <... futex resumed>) = 0 [pid 1659] <... mmap resumed>) = 0x7f13c8ca3000 [pid 298] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1660] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1659] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1659] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1659] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1666]}, 88) = 1666 [pid 1659] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1659] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1659] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1647] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- ./strace-static-x86_64: Process 1666 attached [pid 1658] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] getdents64(4, [pid 1647] +++ killed by SIGBUS +++ [pid 1658] <... futex resumed>) = 1 [pid 1657] <... futex resumed>) = ? [pid 1658] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1655] <... futex resumed>) = 0 [pid 298] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1646] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1666] set_robust_list(0x7f13c8cc39a0, 24 [pid 1657] +++ killed by SIGBUS +++ [pid 1666] <... set_robust_list resumed>) = 0 [pid 1666] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1666] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1659] <... futex resumed>) = 0 [pid 1659] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1660] <... futex resumed>) = 0 [pid 1659] <... futex resumed>) = 1 [pid 1660] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1659] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1660] <... open resumed>) = -1 EFAULT (Bad address) [pid 1660] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1659] <... futex resumed>) = 0 [ 55.076216][ T1646] EXT4-fs (loop2): dirty_blocks=32 [ 55.084869][ T1646] EXT4-fs (loop2): Block reservation details [ 55.087998][ T1647] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 55.098769][ T1646] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 55.106629][ T1642] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 1659] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1658] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1655] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] close(4 [pid 1658] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1655] <... futex resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 1658] <... open resumed>) = 5 [pid 1655] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] rmdir("./52/file1" [pid 1658] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... rmdir resumed>) = 0 [pid 1658] <... futex resumed>) = 1 [pid 1655] <... futex resumed>) = 0 [pid 298] getdents64(3, [pid 1658] creat("./bus", 000 [pid 1655] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1658] <... creat resumed>) = 6 [pid 1655] <... futex resumed>) = 0 [pid 298] close(3 [pid 1658] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1655] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... close resumed>) = 0 [pid 1658] <... futex resumed>) = 0 [pid 1655] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 298] rmdir("./52" [pid 1658] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1655] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... rmdir resumed>) = 0 [pid 1658] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1655] <... futex resumed>) = 0 [pid 298] mkdir("./53", 0777 [pid 1658] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1655] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... mkdir resumed>) = 0 [pid 1658] <... futex resumed>) = 0 [pid 1655] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1658] pwrite64(6, "+", 1, 0 [pid 1655] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1658] <... pwrite64 resumed>) = 1 [pid 1655] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1658] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1655] <... futex resumed>) = 0 [pid 298] <... openat resumed>) = 3 [pid 1658] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1655] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1658] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1655] <... futex resumed>) = 0 [pid 298] ioctl(3, LOOP_CLR_FD [pid 1658] open("./bus", O_RDONLY [pid 1655] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1658] <... open resumed>) = 7 [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1658] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1655] <... futex resumed>) = 0 [pid 298] close(3 [pid 1658] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1655] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1659] <... futex resumed>) = 0 [pid 1658] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1655] <... futex resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 1658] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1655] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1658] <... copy_file_range resumed>) = 1 [pid 1655] <... futex resumed>) = 0 [pid 1658] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1655] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 298] <... clone resumed>, child_tidptr=0x55558909e690) = 1667 [pid 1658] <... futex resumed>) = 0 [pid 1655] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1658] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1655] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1655] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1655] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1668]}, 88) = 1668 [pid 1655] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1655] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1655] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1656] <... futex resumed>) = ? [pid 1659] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1656] +++ killed by SIGBUS +++ [pid 1666] <... futex resumed>) = 1 [pid 1666] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1668 attached [pid 1668] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1668] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1668] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1668] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1655] <... futex resumed>) = 0 [pid 1655] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1658] <... futex resumed>) = 0 [pid 1655] <... futex resumed>) = 1 [pid 1658] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1655] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1658] <... open resumed>) = -1 EFAULT (Bad address) [pid 1658] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1655] <... futex resumed>) = 0 [pid 1658] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1655] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1658] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1655] <... futex resumed>) = 0 [pid 1655] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1642] +++ killed by SIGBUS +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1642, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=19} --- [pid 301] umount2("./52", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./52/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./52/binderfs") = 0 [pid 301] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1668] <... futex resumed>) = 1 [pid 1667] <... clone3 resumed> => {parent_tid=[1669]}, 88) = 1669 [pid 1668] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1667] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1667] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1667] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1669 attached [pid 1669] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1669] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1669] memfd_create("syzkaller", 0) = 3 [pid 1669] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [ 55.165093][ T1660] EXT4-fs (loop3): Total free blocks count 0 [ 55.183242][ T1660] EXT4-fs (loop3): Free/Dirty block details [ 55.188970][ T1660] EXT4-fs (loop3): free_blocks=2415919504 [ 55.194729][ T1660] EXT4-fs (loop3): dirty_blocks=32 [ 55.200128][ T1660] EXT4-fs (loop3): Block reservation details [ 55.201294][ T1658] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 55.206235][ T1660] EXT4-fs (loop3): i_reserved_data_blocks=2 [pid 1660] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1659] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1666] <... futex resumed>) = ? [pid 1666] +++ killed by SIGBUS +++ [pid 1669] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 301] <... umount2 resumed>) = 0 [pid 301] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./52/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./52/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./52/file1") = 0 [pid 301] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./52") = 0 [pid 301] mkdir("./53", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3 [pid 1646] +++ killed by SIGBUS +++ [pid 1644] +++ killed by SIGBUS +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1644, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 1655] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 299] <... restart_syscall resumed>) = 0 [pid 299] umount2("./53", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./53/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./53/binderfs") = 0 [pid 299] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... close resumed>) = 0 [ 55.226448][ T1646] EXT4-fs (loop2): This should not happen!! Data will be lost [ 55.226448][ T1646] [ 55.236039][ T1658] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 55.253166][ T1660] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 55.266012][ T1660] EXT4-fs (loop3): This should not happen!! Data will be lost [ 55.266012][ T1660] [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1670 ./strace-static-x86_64: Process 1670 attached [pid 1660] +++ killed by SIGBUS +++ [pid 1659] +++ killed by SIGBUS +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1659, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 300] umount2("./52", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./52/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./52/binderfs") = 0 [pid 300] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1669] <... write resumed>) = 1048576 [pid 1670] set_robust_list(0x55558909e6a0, 24 [pid 1669] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1669] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1669] ioctl(4, LOOP_SET_FD, 3 [pid 1670] <... set_robust_list resumed>) = 0 [pid 1670] chdir("./53" [pid 300] <... umount2 resumed>) = 0 [pid 1670] <... chdir resumed>) = 0 [pid 300] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1670] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1670] <... prctl resumed>) = 0 [pid 300] newfstatat(AT_FDCWD, "./52/file1", [pid 1670] setpgid(0, 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1670] <... setpgid resumed>) = 0 [pid 300] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1670] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1669] <... ioctl resumed>) = 0 [pid 1670] <... openat resumed>) = 3 [pid 300] openat(AT_FDCWD, "./52/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1669] close(3) = 0 [pid 1669] close(4) = 0 [pid 1669] mkdir("./file1", 0777) = 0 [pid 1669] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 1670] write(3, "1000", 4 [pid 300] <... openat resumed>) = 4 [pid 1670] <... write resumed>) = 4 [pid 1670] close(3 [pid 300] newfstatat(4, "", [pid 1670] <... close resumed>) = 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] <... umount2 resumed>) = 0 [pid 1670] symlink("/dev/binderfs", "./binderfs") = 0 [pid 300] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./52/file1"executing program [pid 1670] write(1, "executing program\n", 18) = 18 [pid 1670] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1670] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 300] <... rmdir resumed>) = 0 [pid 1670] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1670] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1670] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1670] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 300] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 1670] rt_sigprocmask(SIG_BLOCK, ~[], [pid 300] rmdir("./52") = 0 [pid 1670] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1670] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1671]}, 88) = 1671 [pid 1670] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1670] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1670] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 300] mkdir("./53", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1672 [ 55.275753][ T1658] EXT4-fs (loop0): This should not happen!! Data will be lost [ 55.275753][ T1658] [ 55.285964][ T1658] EXT4-fs (loop0): Total free blocks count 0 [ 55.292242][ T1658] EXT4-fs (loop0): Free/Dirty block details [ 55.295825][ T1669] loop1: detected capacity change from 0 to 2048 [ 55.314602][ T1658] EXT4-fs (loop0): free_blocks=2415919504 [ 55.321395][ T1658] EXT4-fs (loop0): dirty_blocks=32 ./strace-static-x86_64: Process 1671 attached [pid 299] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./53/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./53/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./53/file1"./strace-static-x86_64: Process 1672 attached [pid 1671] set_robust_list(0x7f13c8ce49a0, 24 [pid 1658] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 299] <... rmdir resumed>) = 0 [pid 1671] <... set_robust_list resumed>) = 0 [pid 1671] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1671] memfd_create("syzkaller", 0) = 3 [pid 1669] <... mount resumed>) = 0 [pid 1671] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1669] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1672] set_robust_list(0x55558909e6a0, 24 [pid 1671] <... mmap resumed>) = 0x7f13c08c4000 [pid 299] getdents64(3, [pid 1669] <... openat resumed>) = 3 [pid 1672] <... set_robust_list resumed>) = 0 [pid 1668] <... futex resumed>) = ? [pid 299] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1668] +++ killed by SIGBUS +++ [pid 1658] +++ killed by SIGBUS +++ [pid 1672] chdir("./53") = 0 [pid 1672] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1672] setpgid(0, 0) = 0 [pid 1672] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1672] write(3, "1000", 4) = 4 [pid 299] close(3) = 0 [pid 1672] close(3) = 0 [pid 1672] symlink("/dev/binderfs", "./binderfs" [pid 299] rmdir("./53" [pid 1672] <... symlink resumed>) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 1672] write(1, "executing program\n", 18executing program ) = 18 [pid 1672] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1672] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 299] mkdir("./54", 0777 [pid 1671] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1669] chdir("./file1") = 0 [pid 1672] <... rt_sigaction resumed>NULL, 8) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 1672] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1672] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1672] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1672] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1672] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 1672] <... clone3 resumed> => {parent_tid=[1675]}, 88) = 1675 [pid 1672] rt_sigprocmask(SIG_SETMASK, [], [pid 299] ioctl(3, LOOP_CLR_FD [pid 1672] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1672] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] close(3 [pid 1672] <... futex resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 1672] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1676 ./strace-static-x86_64: Process 1676 attached [pid 1676] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1676] chdir("./54") = 0 [pid 1676] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1676] setpgid(0, 0) = 0 [pid 1676] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1676] write(3, "1000", 4) = 4 [pid 1676] close(3) = 0 [pid 1676] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1676] write(1, "executing program\n", 18executing program ) = 18 [pid 1676] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1676] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1676] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1676] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1676] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1676] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1676] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1677]}, 88) = 1677 [pid 1676] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1676] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1676] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1677 attached [pid 1677] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1677] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1677] memfd_create("syzkaller", 0) = 3 [pid 1677] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1669] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1669] ioctl(4, LOOP_CLR_FD) = 0 [pid 1669] close(4) = 0 [pid 1669] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1667] <... futex resumed>) = 0 [pid 1669] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1667] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1667] <... futex resumed>) = 0 [pid 1669] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1667] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1669] <... open resumed>) = 4 [pid 1669] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1667] <... futex resumed>) = 0 [pid 1669] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1667] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1667] <... futex resumed>) = 0 [pid 1669] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1667] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1669] <... open resumed>) = 5 [pid 1669] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1667] <... futex resumed>) = 0 [pid 1669] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1667] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1669] creat("./bus", 000 [pid 1667] <... futex resumed>) = 0 [pid 1669] <... creat resumed>) = 6 [pid 1667] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1669] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1667] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1669] <... futex resumed>) = 0 [pid 1667] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1669] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1667] <... futex resumed>) = 0 [pid 1669] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1667] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1669] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1667] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1669] <... futex resumed>) = 0 [pid 1667] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1669] pwrite64(6, "+", 1, 0 [pid 1667] <... futex resumed>) = 0 [pid 1669] <... pwrite64 resumed>) = 1 [pid 1667] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1669] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1667] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1669] <... futex resumed>) = 0 [pid 1667] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1669] open("./bus", O_RDONLY [pid 1667] <... futex resumed>) = 0 [pid 1669] <... open resumed>) = 7 [pid 1667] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1669] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1667] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1669] <... futex resumed>) = 0 [pid 1669] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1667] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1669] <... copy_file_range resumed>) = 1 [pid 1667] <... futex resumed>) = 0 [pid 1669] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1667] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1669] <... futex resumed>) = 0 [pid 1667] <... futex resumed>) = 0 [pid 1669] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1667] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1669] <... mmap resumed>) = 0x20000000 [pid 1669] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1667] <... futex resumed>) = 0 [ 55.327171][ T1658] EXT4-fs (loop0): Block reservation details [ 55.333670][ T1658] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 55.349780][ T1655] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 55.375397][ T1655] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 1669] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1675 attached [pid 1677] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1671] <... write resumed>) = 1048576 [pid 1667] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1667] <... futex resumed>) = 0 [pid 1669] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1667] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1669] <... open resumed>) = -1 EFAULT (Bad address) [pid 1669] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1667] <... futex resumed>) = 0 [pid 1677] <... write resumed>) = 1048576 [pid 1675] set_robust_list(0x7f13c8ce49a0, 24 [pid 1671] munmap(0x7f13c08c4000, 138412032 [pid 1667] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1655] +++ killed by SIGBUS +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1655, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8} --- [pid 297] umount2("./53", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./53/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./53/binderfs") = 0 [pid 297] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1677] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1677] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1677] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1667] <... futex resumed>) = 0 [pid 1677] close(3) = 0 [pid 1677] close(4) = 0 [pid 1677] mkdir("./file1", 0777) = 0 [pid 1677] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 1671] <... munmap resumed>) = 0 [pid 1671] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1671] ioctl(4, LOOP_SET_FD, 3 [pid 1667] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1671] <... ioctl resumed>) = 0 [pid 1671] close(3) = 0 [pid 1671] close(4) = 0 [pid 1671] mkdir("./file1", 0777) = 0 [pid 1671] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 1675] <... set_robust_list resumed>) = 0 [pid 1675] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1675] memfd_create("syzkaller", 0) = 3 [pid 1675] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 297] <... umount2 resumed>) = 0 [pid 1675] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1675] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1675] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1675] ioctl(4, LOOP_SET_FD, 3 [ 55.375397][ T1655] [ 55.386167][ T1669] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 55.394379][ T1677] loop2: detected capacity change from 0 to 2048 [ 55.401663][ T1669] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 55.411067][ T1671] loop4: detected capacity change from 0 to 2048 [pid 297] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./53/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1675] <... ioctl resumed>) = 0 [pid 297] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1677] <... mount resumed>) = 0 [pid 1677] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1675] close(3 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1677] <... openat resumed>) = 3 [pid 1675] <... close resumed>) = 0 [pid 297] openat(AT_FDCWD, "./53/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1677] chdir("./file1" [pid 1675] close(4 [pid 297] <... openat resumed>) = 4 [pid 1677] <... chdir resumed>) = 0 [pid 297] newfstatat(4, "", [pid 1677] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1675] <... close resumed>) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1677] <... openat resumed>) = 4 [pid 1675] mkdir("./file1", 0777 [pid 1677] ioctl(4, LOOP_CLR_FD [pid 297] getdents64(4, [pid 1677] <... ioctl resumed>) = 0 [pid 1677] close(4 [pid 297] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1677] <... close resumed>) = 0 [pid 297] getdents64(4, [pid 1677] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1677] <... futex resumed>) = 1 [pid 297] close(4 [pid 1677] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1676] <... futex resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 1676] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1675] <... mkdir resumed>) = 0 [pid 297] rmdir("./53/file1" [pid 1676] <... futex resumed>) = 1 [pid 1676] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1675] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 297] <... rmdir resumed>) = 0 [pid 297] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 297] close(3 [pid 1677] <... futex resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 297] rmdir("./53" [pid 1677] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 297] <... rmdir resumed>) = 0 [pid 297] mkdir("./54", 0777 [pid 1677] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... mkdir resumed>) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD [pid 1677] <... futex resumed>) = 1 [pid 1676] <... futex resumed>) = 0 [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1677] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1676] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] close(3 [pid 1677] <... open resumed>) = 5 [pid 1676] <... futex resumed>) = 0 [pid 1677] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1676] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... close resumed>) = 0 [pid 1677] <... futex resumed>) = 0 [pid 1676] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1677] creat("./bus", 000 [pid 1676] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1677] <... creat resumed>) = 6 [pid 1676] <... futex resumed>) = 0 [pid 1677] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1676] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1677] <... futex resumed>) = 0 [pid 1676] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1677] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1676] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1677] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1676] <... futex resumed>) = 0 [pid 297] <... clone resumed>, child_tidptr=0x55558909e690) = 1681 [pid 1677] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1676] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1667] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1677] <... futex resumed>) = 0 [pid 1676] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1677] pwrite64(6, "+", 1, 0 [pid 1676] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1677] <... pwrite64 resumed>) = 1 [pid 1676] <... futex resumed>) = 0 [pid 1677] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1676] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1677] <... futex resumed>) = 0 [pid 1676] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1677] open("./bus", O_RDONLY [pid 1676] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1677] <... open resumed>) = 7 [pid 1676] <... futex resumed>) = 0 [pid 1677] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1676] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1677] <... futex resumed>) = 0 [pid 1676] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1677] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1676] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1677] <... copy_file_range resumed>) = 1 [pid 1676] <... futex resumed>) = 0 [pid 1677] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1676] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1677] <... futex resumed>) = 0 [pid 1676] <... futex resumed>) = 0 [pid 1677] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1676] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1676] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1676] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1676] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1683]}, 88) = 1683 [pid 1676] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1676] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1676] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1681 attached [ 55.439541][ T1669] EXT4-fs (loop1): This should not happen!! Data will be lost [ 55.439541][ T1669] [ 55.449258][ T1675] loop3: detected capacity change from 0 to 2048 [ 55.450029][ T1669] EXT4-fs (loop1): Total free blocks count 0 [ 55.461992][ T1669] EXT4-fs (loop1): Free/Dirty block details [ 55.480379][ T1669] EXT4-fs (loop1): free_blocks=2415919504 [pid 1681] set_robust_list(0x55558909e6a0, 24 [pid 1675] <... mount resumed>) = 0 [pid 1681] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 1683 attached [pid 1681] chdir("./54" [pid 1675] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1683] set_robust_list(0x7f13c8cc39a0, 24 [pid 1681] <... chdir resumed>) = 0 [pid 1675] <... openat resumed>) = 3 [pid 1683] <... set_robust_list resumed>) = 0 [pid 1681] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1675] chdir("./file1" [pid 1683] rt_sigprocmask(SIG_SETMASK, [], [pid 1681] <... prctl resumed>) = 0 [pid 1675] <... chdir resumed>) = 0 [pid 1683] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1681] setpgid(0, 0 [pid 1675] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1683] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1681] <... setpgid resumed>) = 0 [pid 1675] <... openat resumed>) = 4 [pid 1683] <... mmap resumed>) = 0x20000000 [pid 1681] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1675] ioctl(4, LOOP_CLR_FD [pid 1681] <... openat resumed>) = 3 [pid 1675] <... ioctl resumed>) = 0 [pid 1681] write(3, "1000", 4 [pid 1675] close(4executing program [pid 1681] <... write resumed>) = 4 [pid 1675] <... close resumed>) = 0 [pid 1681] close(3 [pid 1675] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1681] <... close resumed>) = 0 [pid 1675] <... futex resumed>) = 1 [pid 1681] symlink("/dev/binderfs", "./binderfs" [pid 1675] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1683] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1681] <... symlink resumed>) = 0 [pid 1683] <... futex resumed>) = 1 [pid 1681] write(1, "executing program\n", 18 [pid 1683] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1681] <... write resumed>) = 18 [pid 1681] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1681] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1681] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1681] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1681] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1681] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1681] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1684]}, 88) = 1684 [pid 1681] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1681] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1681] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1684 attached [pid 1676] <... futex resumed>) = 0 [pid 1672] <... futex resumed>) = 0 [pid 1669] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1684] set_robust_list(0x7f13c8ce49a0, 24 [pid 1676] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1672] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1684] <... set_robust_list resumed>) = 0 [pid 1677] <... futex resumed>) = 0 [pid 1676] <... futex resumed>) = 1 [pid 1675] <... futex resumed>) = 0 [pid 1672] <... futex resumed>) = 1 [pid 1684] rt_sigprocmask(SIG_SETMASK, [], [pid 1677] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1676] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1675] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1672] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1684] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1677] <... open resumed>) = -1 EFAULT (Bad address) [pid 1675] <... open resumed>) = 4 [pid 1684] memfd_create("syzkaller", 0 [pid 1677] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1675] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1684] <... memfd_create resumed>) = 3 [pid 1677] <... futex resumed>) = 1 [pid 1676] <... futex resumed>) = 0 [pid 1675] <... futex resumed>) = 1 [pid 1672] <... futex resumed>) = 0 [pid 1669] +++ killed by SIGBUS +++ [pid 1684] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1677] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1676] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1675] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1672] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1684] <... mmap resumed>) = 0x7f13c08c4000 [pid 1677] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1676] <... futex resumed>) = 0 [pid 1675] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1672] <... futex resumed>) = 0 [pid 1684] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [ 55.486686][ T1669] EXT4-fs (loop1): dirty_blocks=32 [ 55.492636][ T1669] EXT4-fs (loop1): Block reservation details [ 55.498723][ T1669] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 55.512059][ T1667] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 55.518009][ T1677] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 1676] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1675] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1672] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1675] <... open resumed>) = 5 [pid 1675] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1672] <... futex resumed>) = 0 [pid 1675] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1672] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1675] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1672] <... futex resumed>) = 0 [pid 1675] creat("./bus", 000 [pid 1672] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1675] <... creat resumed>) = 6 [pid 1675] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1672] <... futex resumed>) = 0 [pid 1684] <... write resumed>) = 1048576 [pid 1675] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1672] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1675] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1672] <... futex resumed>) = 0 [pid 1675] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1672] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1675] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1675] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1672] <... futex resumed>) = 0 [pid 1675] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1672] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1675] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1672] <... futex resumed>) = 0 [pid 1667] +++ killed by SIGBUS +++ [pid 1675] pwrite64(6, "+", 1, 0 [pid 1672] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1667, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11} --- [pid 1675] <... pwrite64 resumed>) = 1 [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 1675] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1672] <... futex resumed>) = 0 [pid 1675] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1672] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1675] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1672] <... futex resumed>) = 0 [pid 1675] open("./bus", O_RDONLY [pid 1672] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1675] <... open resumed>) = 7 [pid 1675] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1672] <... futex resumed>) = 0 [pid 298] <... restart_syscall resumed>) = 0 [pid 1675] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1672] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1675] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1672] <... futex resumed>) = 0 [pid 1675] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1672] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] umount2("./53", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1675] <... copy_file_range resumed>) = 1 [pid 1672] <... futex resumed>) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1675] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1672] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 298] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1675] <... futex resumed>) = 0 [pid 1672] <... mmap resumed>) = 0x7f13c8ca3000 [pid 298] <... openat resumed>) = 3 [pid 1675] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1672] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 298] newfstatat(3, "", [pid 1672] <... mprotect resumed>) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1672] rt_sigprocmask(SIG_BLOCK, ~[], [pid 298] getdents64(3, [pid 1672] <... rt_sigprocmask resumed>[], 8) = 0 [pid 298] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1672] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 298] umount2("./53/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 1672] <... clone3 resumed> => {parent_tid=[1687]}, 88) = 1687 [pid 298] newfstatat(AT_FDCWD, "./53/binderfs", [pid 1672] rt_sigprocmask(SIG_SETMASK, [], [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1672] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 298] unlink("./53/binderfs" [pid 1672] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... unlink resumed>) = 0 [pid 1672] <... futex resumed>) = 0 [pid 298] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1672] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1684] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1684] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1684] ioctl(4, LOOP_SET_FD, 3 [pid 1671] <... mount resumed>) = 0 [pid 1671] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1671] chdir("./file1") = 0 [pid 1671] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1671] ioctl(4, LOOP_CLR_FD) = 0 [pid 1671] close(4) = 0 [pid 298] <... umount2 resumed>) = 0 [pid 1671] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1671] <... futex resumed>) = 1 [pid 1670] <... futex resumed>) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1676] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 55.525061][ T1667] EXT4-fs (loop1): This should not happen!! Data will be lost [ 55.525061][ T1667] [ 55.549234][ T1677] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 55.558859][ T1684] loop0: detected capacity change from 0 to 2048 [ 55.562080][ T1677] EXT4-fs (loop2): This should not happen!! Data will be lost [ 55.562080][ T1677] [ 55.577232][ T1677] EXT4-fs (loop2): Total free blocks count 0 [ 55.583099][ T1677] EXT4-fs (loop2): Free/Dirty block details [pid 1671] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 298] newfstatat(AT_FDCWD, "./53/file1", ./strace-static-x86_64: Process 1687 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1687] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 298] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1687] rt_sigprocmask(SIG_SETMASK, [], [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1687] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 298] openat(AT_FDCWD, "./53/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1687] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 298] <... openat resumed>) = 4 [pid 1687] <... mmap resumed>) = 0x20000000 [pid 1670] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] newfstatat(4, "", [pid 1671] <... futex resumed>) = 0 [pid 1670] <... futex resumed>) = 1 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./53/file1") = 0 [pid 298] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./53") = 0 [pid 298] mkdir("./54", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1687] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1671] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1670] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... openat resumed>) = 3 [pid 1687] <... futex resumed>) = 1 [pid 1672] <... futex resumed>) = 0 [pid 298] ioctl(3, LOOP_CLR_FD [pid 1687] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1672] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1675] <... futex resumed>) = 0 [pid 1672] <... futex resumed>) = 1 [pid 298] close(3 [pid 1675] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1672] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... close resumed>) = 0 [pid 1675] <... open resumed>) = -1 EFAULT (Bad address) [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1675] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1672] <... futex resumed>) = 0 [pid 1675] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1672] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... clone resumed>, child_tidptr=0x55558909e690) = 1688 [pid 1675] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1672] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1688 attached [pid 1671] <... open resumed>) = 4 [pid 1688] set_robust_list(0x55558909e6a0, 24 [pid 1671] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1688] <... set_robust_list resumed>) = 0 [pid 1671] <... futex resumed>) = 1 [pid 1670] <... futex resumed>) = 0 [pid 1688] chdir("./54" [pid 1671] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1670] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1688] <... chdir resumed>) = 0 [pid 1671] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1670] <... futex resumed>) = 0 [pid 1688] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1671] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1670] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1688] <... prctl resumed>) = 0 [pid 1671] <... open resumed>) = 5 [pid 1688] setpgid(0, 0 [pid 1671] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1688] <... setpgid resumed>) = 0 [pid 1671] <... futex resumed>) = 1 [pid 1670] <... futex resumed>) = 0 [pid 1688] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1671] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1670] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1688] <... openat resumed>) = 3 [pid 1671] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1670] <... futex resumed>) = 0 [pid 1688] write(3, "1000", 4 [pid 1671] creat("./bus", 000 [pid 1670] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1688] <... write resumed>) = 4 [pid 1671] <... creat resumed>) = 6 [pid 1688] close(3 [pid 1671] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1688] <... close resumed>) = 0 [pid 1671] <... futex resumed>) = 1 [pid 1670] <... futex resumed>) = 0 [pid 1688] symlink("/dev/binderfs", "./binderfs" [pid 1671] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1670] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1688] <... symlink resumed>) = 0 [pid 1671] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1670] <... futex resumed>) = 0 executing program [pid 1688] write(1, "executing program\n", 18 [pid 1671] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1670] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1688] <... write resumed>) = 18 [pid 1671] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1688] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1671] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1688] <... futex resumed>) = 0 [pid 1671] <... futex resumed>) = 1 [pid 1670] <... futex resumed>) = 0 [pid 1688] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1671] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1670] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1688] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1672] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1671] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1670] <... futex resumed>) = 0 [pid 1688] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1671] pwrite64(6, "+", 1, 0 [pid 1670] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1688] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1671] <... pwrite64 resumed>) = 1 [pid 1688] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1671] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1688] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1671] <... futex resumed>) = 1 [ 55.589084][ T1677] EXT4-fs (loop2): free_blocks=2415919504 [ 55.595036][ T1677] EXT4-fs (loop2): dirty_blocks=32 [ 55.600628][ T1677] EXT4-fs (loop2): Block reservation details [ 55.606911][ T1675] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 55.607273][ T1677] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 55.621983][ T1675] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 1670] <... futex resumed>) = 0 [pid 1688] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1671] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1670] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1688] <... mprotect resumed>) = 0 [pid 1671] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1670] <... futex resumed>) = 0 [pid 1688] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1671] open("./bus", O_RDONLY [pid 1670] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1688] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1671] <... open resumed>) = 7 [pid 1688] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1671] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1670] <... futex resumed>) = 0 [pid 1688] <... clone3 resumed> => {parent_tid=[1689]}, 88) = 1689 [pid 1671] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1670] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1688] rt_sigprocmask(SIG_SETMASK, [], [pid 1684] <... ioctl resumed>) = 0 [pid 1671] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1670] <... futex resumed>) = 0 [pid 1688] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1684] close(3 [pid 1671] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1670] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1688] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1684] <... close resumed>) = 0 [pid 1671] <... copy_file_range resumed>) = 1 [pid 1670] <... futex resumed>) = 0 [pid 1688] <... futex resumed>) = 0 [pid 1684] close(4 [pid 1671] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1670] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1688] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1684] <... close resumed>) = 0 [pid 1671] <... futex resumed>) = 0 [pid 1670] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1684] mkdir("./file1", 0777 [pid 1671] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1670] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1684] <... mkdir resumed>) = 0 [pid 1670] <... mprotect resumed>) = 0 [pid 1684] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 1670] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1677] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1670] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1683] <... futex resumed>) = ? [pid 1670] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1683] +++ killed by SIGBUS +++ [pid 1670] <... clone3 resumed> => {parent_tid=[1690]}, 88) = 1690 [pid 1670] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 1689 attached NULL, 8) = 0 [pid 1689] set_robust_list(0x7f13c8ce49a0, 24 [pid 1670] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1689] <... set_robust_list resumed>) = 0 [pid 1670] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1690 attached [pid 1689] rt_sigprocmask(SIG_SETMASK, [], [pid 1670] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1690] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1690] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1690] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 1670] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1671] <... futex resumed>) = 0 [pid 1670] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1671] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1690] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1671] <... open resumed>) = -1 EFAULT (Bad address) [pid 1671] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1670] <... futex resumed>) = 0 [pid 1671] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1670] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1671] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1670] <... futex resumed>) = 0 [pid 1689] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1670] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 55.639504][ T1675] EXT4-fs (loop3): This should not happen!! Data will be lost [ 55.639504][ T1675] [ 55.656062][ T1671] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 55.656102][ T1677] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 55.683045][ T1677] EXT4-fs (loop2): This should not happen!! Data will be lost [pid 1689] memfd_create("syzkaller", 0) = 3 [pid 1677] +++ killed by SIGBUS +++ [pid 1676] +++ killed by SIGBUS +++ [pid 1689] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1676, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 1689] <... mmap resumed>) = 0x7f13c08c4000 [pid 1689] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1672] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 299] umount2("./54", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./54/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./54/binderfs") = 0 [pid 299] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1689] <... write resumed>) = 1048576 [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./54/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1670] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./54/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1675] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 299] <... openat resumed>) = 4 [ 55.683045][ T1677] [ 55.684318][ T1671] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 55.693370][ T1675] EXT4-fs (loop3): Total free blocks count 0 [ 55.710866][ T1675] EXT4-fs (loop3): Free/Dirty block details [ 55.716722][ T1675] EXT4-fs (loop3): free_blocks=2415919504 [ 55.722497][ T1675] EXT4-fs (loop3): dirty_blocks=32 [ 55.727829][ T1675] EXT4-fs (loop3): Block reservation details [ 55.734167][ T1675] EXT4-fs (loop3): i_reserved_data_blocks=2 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./54/file1") = 0 [pid 299] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./54") = 0 [pid 299] mkdir("./55", 0777 [pid 1687] <... futex resumed>) = ? [pid 299] <... mkdir resumed>) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1687] +++ killed by SIGBUS +++ [pid 1675] +++ killed by SIGBUS +++ [pid 299] <... clone resumed>, child_tidptr=0x55558909e690) = 1693 [pid 1684] <... mount resumed>) = 0 [pid 1684] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1684] chdir("./file1") = 0 [pid 1684] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1684] ioctl(4, LOOP_CLR_FD) = 0 [pid 1684] close(4) = 0 [pid 1684] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1681] <... futex resumed>) = 0 [pid 1681] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1681] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1684] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 1684] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1681] <... futex resumed>) = 0 [pid 1681] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1681] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1684] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 1684] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1681] <... futex resumed>) = 0 [pid 1689] munmap(0x7f13c08c4000, 138412032 [pid 1684] creat("./bus", 000 [pid 1681] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1689] <... munmap resumed>) = 0 [pid 1684] <... creat resumed>) = 6 [pid 1681] <... futex resumed>) = 0 [pid 1689] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1684] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1681] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1689] <... openat resumed>) = 4 [pid 1684] <... futex resumed>) = 0 [pid 1681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1689] ioctl(4, LOOP_SET_FD, 3 [pid 1684] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1681] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1684] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1681] <... futex resumed>) = 0 [pid 1684] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1681] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1684] <... futex resumed>) = 0 [pid 1681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1684] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1681] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1684] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1681] <... futex resumed>) = 0 [pid 1684] pwrite64(6, "+", 1, 0 [pid 1681] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1684] <... pwrite64 resumed>) = 1 [pid 1684] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1681] <... futex resumed>) = 0 [pid 1684] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1681] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1684] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1681] <... futex resumed>) = 0 [pid 1684] open("./bus", O_RDONLY [pid 1681] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1684] <... open resumed>) = 7 [pid 1684] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1681] <... futex resumed>) = 0 [pid 1684] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1681] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1684] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1681] <... futex resumed>) = 0 [pid 1684] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1681] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1693 attached [pid 1684] <... copy_file_range resumed>) = 1 [pid 1681] <... futex resumed>) = 0 [pid 1693] set_robust_list(0x55558909e6a0, 24 [pid 1684] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1681] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1693] <... set_robust_list resumed>) = 0 [pid 1684] <... futex resumed>) = 0 [pid 1681] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1693] chdir("./55" [pid 1684] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1681] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1693] <... chdir resumed>) = 0 [pid 1681] <... mprotect resumed>) = 0 [ 55.740202][ T1671] EXT4-fs (loop4): This should not happen!! Data will be lost [ 55.740202][ T1671] [ 55.749864][ T1671] EXT4-fs (loop4): Total free blocks count 0 [ 55.756660][ T1672] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 55.768079][ T1689] loop1: detected capacity change from 0 to 2048 [ 55.768859][ T1671] EXT4-fs (loop4): Free/Dirty block details [ 55.780654][ T1672] EXT4-fs (loop3): This should not happen!! Data will be lost [ 55.780654][ T1672] [pid 1693] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1681] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1693] <... prctl resumed>) = 0 [pid 1681] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1693] setpgid(0, 0 [pid 1681] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1693] <... setpgid resumed>) = 0 [pid 1693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1681] <... clone3 resumed> => {parent_tid=[1694]}, 88) = 1694 [pid 1693] <... openat resumed>) = 3 [pid 1681] rt_sigprocmask(SIG_SETMASK, [], [pid 1693] write(3, "1000", 4 [pid 1681] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1693] <... write resumed>) = 4 [pid 1681] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1693] close(3 [pid 1681] <... futex resumed>) = 0 [pid 1693] <... close resumed>) = 0 [pid 1681] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1693] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 1693] write(1, "executing program\n", 18) = 18 [pid 1693] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1693] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1693] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1693] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1693] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1693] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1695]}, 88) = 1695 [pid 1693] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1693] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1693] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1672] +++ killed by SIGBUS +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1672, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 1689] <... ioctl resumed>) = 0 [pid 1689] close(3) = 0 [pid 1689] close(4./strace-static-x86_64: Process 1695 attached ./strace-static-x86_64: Process 1694 attached ) = 0 [pid 1671] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 300] <... restart_syscall resumed>) = 0 [pid 1694] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1694] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 300] umount2("./53", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1694] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1694] <... mmap resumed>) = 0x20000000 [ 55.790620][ T1671] EXT4-fs (loop4): free_blocks=2415919504 [ 55.796366][ T1671] EXT4-fs (loop4): dirty_blocks=32 [ 55.801259][ T1671] EXT4-fs (loop4): Block reservation details [ 55.807142][ T1671] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 55.816562][ T1684] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 1694] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1694] <... futex resumed>) = 1 [pid 1681] <... futex resumed>) = 0 [pid 1694] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1681] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... openat resumed>) = 3 [pid 1681] <... futex resumed>) = 1 [pid 1684] <... futex resumed>) = 0 [pid 300] newfstatat(3, "", [pid 1681] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1684] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1684] <... open resumed>) = -1 EFAULT (Bad address) [pid 300] getdents64(3, [pid 1684] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1695] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1689] mkdir("./file1", 0777 [pid 1684] <... futex resumed>) = 1 [pid 1681] <... futex resumed>) = 0 [pid 300] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1684] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1681] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] umount2("./53/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1684] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1681] <... futex resumed>) = 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1695] rt_sigprocmask(SIG_SETMASK, [], [pid 1690] <... futex resumed>) = ? [pid 1689] <... mkdir resumed>) = 0 [pid 1695] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1690] +++ killed by SIGBUS +++ [pid 1695] memfd_create("syzkaller", 0 [pid 1689] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 1671] +++ killed by SIGBUS +++ [pid 1695] <... memfd_create resumed>) = 3 [pid 1695] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1681] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1695] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1695] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1695] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1695] ioctl(4, LOOP_SET_FD, 3 [pid 300] newfstatat(AT_FDCWD, "./53/binderfs", [pid 1695] <... ioctl resumed>) = 0 [pid 1695] close(3) = 0 [pid 1695] close(4) = 0 [pid 1695] mkdir("./file1", 0777) = 0 [pid 1695] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 300] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1670] +++ killed by SIGBUS +++ [pid 300] unlink("./53/binderfs") = 0 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1670, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 300] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 1689] <... mount resumed>) = 0 [pid 1681] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1681] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 301] <... restart_syscall resumed>) = 0 [pid 1681] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 301] umount2("./53", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./53/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./53/binderfs", [pid 1689] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1689] <... openat resumed>) = 3 [pid 301] unlink("./53/binderfs" [pid 1689] chdir("./file1" [pid 301] <... unlink resumed>) = 0 [pid 1689] <... chdir resumed>) = 0 [pid 301] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1689] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1689] ioctl(4, LOOP_CLR_FD) = 0 [ 55.832425][ T1670] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 55.840117][ T1695] loop2: detected capacity change from 0 to 2048 [ 55.849217][ T1670] EXT4-fs (loop4): This should not happen!! Data will be lost [ 55.849217][ T1670] [ 55.852227][ T1684] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 55.872449][ T1684] EXT4-fs (loop0): This should not happen!! Data will be lost [ 55.872449][ T1684] [ 55.881925][ T1684] EXT4-fs (loop0): Total free blocks count 0 [pid 1689] close(4) = 0 [pid 300] <... umount2 resumed>) = 0 [pid 1689] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1688] <... futex resumed>) = 0 [pid 1688] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1688] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1689] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 1689] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1688] <... futex resumed>) = 0 [pid 1688] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1688] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1689] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 1689] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1688] <... futex resumed>) = 0 [pid 1688] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1688] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1689] creat("./bus", 000) = 6 [pid 1689] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1688] <... futex resumed>) = 0 [pid 1688] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1688] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1689] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1695] <... mount resumed>) = 0 [pid 1689] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1684] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 300] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1695] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1689] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1695] <... openat resumed>) = 3 [pid 1689] <... futex resumed>) = 1 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1688] <... futex resumed>) = 0 [pid 1695] chdir("./file1" [pid 1688] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1695] <... chdir resumed>) = 0 [pid 1689] pwrite64(6, "+", 1, 0 [pid 1688] <... futex resumed>) = 0 [pid 1695] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1688] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1689] <... pwrite64 resumed>) = 1 [pid 300] newfstatat(AT_FDCWD, "./53/file1", [pid 1695] <... openat resumed>) = 4 [pid 1689] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1695] ioctl(4, LOOP_CLR_FD) = 0 [pid 1689] <... futex resumed>) = 1 [pid 1688] <... futex resumed>) = 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1695] close(4 [pid 1689] open("./bus", O_RDONLY [pid 1688] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1695] <... close resumed>) = 0 [pid 1689] <... open resumed>) = 7 [pid 1695] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1688] <... futex resumed>) = 0 [pid 1695] <... futex resumed>) = 1 [pid 1693] <... futex resumed>) = 0 [pid 1688] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1695] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1693] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1689] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1688] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1695] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1693] <... futex resumed>) = 0 [pid 1688] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1689] <... futex resumed>) = 0 [pid 1695] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1693] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1688] <... futex resumed>) = 0 [pid 1689] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 300] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1688] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./53/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1688] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 300] <... openat resumed>) = 4 [pid 300] newfstatat(4, "", [pid 1695] <... open resumed>) = 4 [pid 1688] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1695] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1689] <... copy_file_range resumed>) = 1 [pid 300] getdents64(4, [pid 1688] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1695] <... futex resumed>) = 1 [pid 1693] <... futex resumed>) = 0 [pid 1695] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1693] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1689] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1688] <... mprotect resumed>) = 0 [pid 300] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1695] <... open resumed>) = 5 [pid 1693] <... futex resumed>) = 0 [pid 1695] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1688] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1693] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1689] <... futex resumed>) = 0 [pid 1688] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1695] <... futex resumed>) = 0 [pid 1693] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1688] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1689] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1695] creat("./bus", 000 [pid 1694] <... futex resumed>) = ? [pid 1693] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... umount2 resumed>) = 0 [pid 300] getdents64(4, ./strace-static-x86_64: Process 1700 attached [pid 1695] <... creat resumed>) = 6 [pid 1694] +++ killed by SIGBUS +++ [pid 1693] <... futex resumed>) = 0 [pid 1688] <... clone3 resumed> => {parent_tid=[1700]}, 88) = 1700 [pid 301] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1700] set_robust_list(0x7f13c8cc39a0, 24 [pid 1695] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1693] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1688] rt_sigprocmask(SIG_SETMASK, [], [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1700] <... set_robust_list resumed>) = 0 [pid 1695] <... futex resumed>) = 0 [pid 1693] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1688] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 301] newfstatat(AT_FDCWD, "./53/file1", [pid 1700] rt_sigprocmask(SIG_SETMASK, [], [pid 1695] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1693] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1688] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1700] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1695] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1693] <... futex resumed>) = 0 [pid 1688] <... futex resumed>) = 0 [pid 301] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1700] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1695] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1693] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1688] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1700] <... mmap resumed>) = 0x20000000 [pid 1695] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 301] openat(AT_FDCWD, "./53/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 300] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1700] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1695] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... openat resumed>) = 4 [pid 1700] <... futex resumed>) = 1 [pid 1695] <... futex resumed>) = 1 [ 55.887928][ T1684] EXT4-fs (loop0): Free/Dirty block details [ 55.893757][ T1684] EXT4-fs (loop0): free_blocks=2415919504 [ 55.899311][ T1684] EXT4-fs (loop0): dirty_blocks=32 [ 55.904356][ T1684] EXT4-fs (loop0): Block reservation details [ 55.910238][ T1684] EXT4-fs (loop0): i_reserved_data_blocks=2 [pid 1693] <... futex resumed>) = 0 [pid 1688] <... futex resumed>) = 0 [pid 301] newfstatat(4, "", [pid 1700] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1695] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1693] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1688] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] close(4 [pid 1695] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1693] <... futex resumed>) = 0 [pid 1689] <... futex resumed>) = 0 [pid 1688] <... futex resumed>) = 1 [pid 301] getdents64(4, [pid 1695] pwrite64(6, "+", 1, 0 [pid 1693] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1689] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1688] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1695] <... pwrite64 resumed>) = 1 [pid 1689] <... open resumed>) = -1 EFAULT (Bad address) [pid 301] getdents64(4, [pid 1695] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1689] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1695] <... futex resumed>) = 1 [pid 1693] <... futex resumed>) = 0 [pid 1689] <... futex resumed>) = 1 [pid 1688] <... futex resumed>) = 0 [pid 301] close(4 [pid 1695] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1693] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1689] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1688] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... close resumed>) = 0 [pid 1695] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1693] <... futex resumed>) = 0 [pid 1689] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1688] <... futex resumed>) = 0 [pid 301] rmdir("./53/file1" [pid 1695] open("./bus", O_RDONLY [pid 1693] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... close resumed>) = 0 [pid 300] rmdir("./53/file1") = 0 [pid 300] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./53") = 0 [pid 300] mkdir("./54", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1701 [pid 1684] +++ killed by SIGBUS +++ [pid 1681] +++ killed by SIGBUS +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1681, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 297] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 1701 attached [pid 1695] <... open resumed>) = 7 [pid 1688] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... rmdir resumed>) = 0 [ 55.932048][ T1684] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 55.935883][ T1689] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 55.944996][ T1684] EXT4-fs (loop0): This should not happen!! Data will be lost [ 55.944996][ T1684] [ 55.959598][ T1689] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 1701] set_robust_list(0x55558909e6a0, 24) = 0 [pid 297] <... restart_syscall resumed>) = 0 [pid 1701] chdir("./54") = 0 [pid 1701] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 297] umount2("./54", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1701] <... prctl resumed>) = 0 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1701] setpgid(0, 0 [pid 297] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1701] <... setpgid resumed>) = 0 [pid 297] <... openat resumed>) = 3 [pid 1701] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 297] newfstatat(3, "", [pid 1701] <... openat resumed>) = 3 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1701] write(3, "1000", 4 [pid 297] getdents64(3, [pid 1701] <... write resumed>) = 4 [pid 297] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1701] close(3 [pid 297] umount2("./54/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1701] <... close resumed>) = 0 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1701] symlink("/dev/binderfs", "./binderfs" [pid 297] newfstatat(AT_FDCWD, "./54/binderfs", executing program [pid 1701] <... symlink resumed>) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1701] write(1, "executing program\n", 18 [pid 297] unlink("./54/binderfs" [pid 1701] <... write resumed>) = 18 [pid 297] <... unlink resumed>) = 0 [pid 1701] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1701] <... futex resumed>) = 0 [pid 1701] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1701] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1701] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1701] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1701] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1701] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1702]}, 88) = 1702 [pid 1701] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1701] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1701] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1695] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1695] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./53") = 0 [pid 301] mkdir("./54", 0777 [pid 1693] <... futex resumed>) = 0 [pid 301] <... mkdir resumed>) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3 [pid 1693] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... close resumed>) = 0 [pid 1695] <... futex resumed>) = 0 [pid 1693] <... futex resumed>) = 1 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 1702 attached [pid 1695] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1693] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1702] set_robust_list(0x7f13c8ce49a0, 24 [pid 1695] <... copy_file_range resumed>) = 1 [pid 301] <... clone resumed>, child_tidptr=0x55558909e690) = 1703 [pid 1695] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1695] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1703 attached [pid 1703] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1703] chdir("./54") = 0 [pid 1703] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1703] setpgid(0, 0) = 0 [pid 1703] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1703] write(3, "1000", 4) = 4 [pid 1703] close(3) = 0 [pid 1703] symlink("/dev/binderfs", "./binderfs"executing program [pid 1693] <... futex resumed>) = 0 [pid 1703] <... symlink resumed>) = 0 [pid 1703] write(1, "executing program\n", 18) = 18 [pid 1703] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1703] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1703] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1703] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1703] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1693] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1703] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1693] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1703] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1703] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1693] <... mprotect resumed>) = 0 [pid 1703] <... clone3 resumed> => {parent_tid=[1704]}, 88) = 1704 [pid 1693] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1703] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1703] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1693] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1703] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1693] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0}./strace-static-x86_64: Process 1704 attached [pid 1704] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1704] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1693] <... clone3 resumed> => {parent_tid=[1705]}, 88) = 1705 [pid 1702] <... set_robust_list resumed>) = 0 [pid 1704] memfd_create("syzkaller", 0) = 3 [pid 1693] rt_sigprocmask(SIG_SETMASK, [], [pid 1702] rt_sigprocmask(SIG_SETMASK, [], [pid 1693] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1704] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1693] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1702] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1693] <... futex resumed>) = 0 [pid 1702] memfd_create("syzkaller", 0 [pid 1693] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1702] <... memfd_create resumed>) = 3 [pid 1702] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 297] <... umount2 resumed>) = 0 [pid 1702] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 297] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 1705 attached [pid 1704] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1704] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1704] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1704] ioctl(4, LOOP_SET_FD, 3 [pid 1705] set_robust_list(0x7f13c8cc39a0, 24 [pid 1702] <... write resumed>) = 1048576 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1704] <... ioctl resumed>) = 0 [pid 1704] close(3) = 0 [ 55.981059][ T1689] EXT4-fs (loop1): This should not happen!! Data will be lost [ 55.981059][ T1689] [ 55.993072][ T1689] EXT4-fs (loop1): Total free blocks count 0 [ 56.010833][ T1689] EXT4-fs (loop1): Free/Dirty block details [ 56.019040][ T1704] loop4: detected capacity change from 0 to 2048 [ 56.021381][ T1689] EXT4-fs (loop1): free_blocks=2415919504 [pid 1704] close(4 [pid 1705] <... set_robust_list resumed>) = 0 [pid 1702] munmap(0x7f13c08c4000, 138412032 [pid 297] newfstatat(AT_FDCWD, "./54/file1", [pid 1705] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1702] <... munmap resumed>) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1705] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 297] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1702] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1688] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1705] <... mmap resumed>) = 0x20000000 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1702] <... openat resumed>) = 4 [pid 297] openat(AT_FDCWD, "./54/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 1702] ioctl(4, LOOP_SET_FD, 3 [pid 1705] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1704] <... close resumed>) = 0 [pid 1704] mkdir("./file1", 0777) = 0 [pid 1704] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./54/file1") = 0 [pid 297] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./54") = 0 [pid 297] mkdir("./55", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1706 [pid 1705] <... futex resumed>) = 1 [pid 1702] <... ioctl resumed>) = 0 [pid 1705] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1693] <... futex resumed>) = 0 [pid 1702] close(3 [pid 1693] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1702] <... close resumed>) = 0 [pid 1695] <... futex resumed>) = 0 [pid 1693] <... futex resumed>) = 1 [pid 1695] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1702] close(4 [pid 1695] <... open resumed>) = -1 EFAULT (Bad address) [pid 1693] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1702] <... close resumed>) = 0 [pid 1695] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1695] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1706 attached [pid 1702] mkdir("./file1", 0777 [pid 1693] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1693] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000executing program [pid 1702] <... mkdir resumed>) = 0 [pid 1695] <... futex resumed>) = 0 [pid 1693] <... futex resumed>) = 1 [pid 1702] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 1706] set_robust_list(0x55558909e6a0, 24 [pid 1693] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1689] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1706] <... set_robust_list resumed>) = 0 [pid 1706] chdir("./55") = 0 [pid 1706] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1706] setpgid(0, 0) = 0 [pid 1706] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1706] write(3, "1000", 4) = 4 [pid 1706] close(3) = 0 [pid 1706] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1706] write(1, "executing program\n", 18) = 18 [pid 1706] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1706] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1706] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1706] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1706] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1706] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1706] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1709]}, 88) = 1709 [pid 1706] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1706] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1706] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1709 attached [pid 1700] <... futex resumed>) = ? [pid 1700] +++ killed by SIGBUS +++ [pid 1709] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1709] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1709] memfd_create("syzkaller", 0) = 3 [pid 1709] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [ 56.031289][ T1689] EXT4-fs (loop1): dirty_blocks=32 [ 56.037906][ T1689] EXT4-fs (loop1): Block reservation details [ 56.046307][ T1702] loop3: detected capacity change from 0 to 2048 [ 56.055276][ T1689] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 56.062039][ T1695] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 1709] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1709] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1709] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1709] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1709] close(3) = 0 [pid 1709] close(4) = 0 [pid 1709] mkdir("./file1", 0777) = 0 [pid 1709] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 1704] <... mount resumed>) = 0 [pid 1693] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1704] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [ 56.078259][ T1689] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 56.091160][ T1709] loop0: detected capacity change from 0 to 2048 [ 56.091450][ T1695] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 56.104300][ T1689] EXT4-fs (loop1): This should not happen!! Data will be lost [ 56.104300][ T1689] [ 56.115230][ T1695] EXT4-fs (loop2): This should not happen!! Data will be lost [ 56.115230][ T1695] [pid 1704] chdir("./file1") = 0 [pid 1704] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1704] ioctl(4, LOOP_CLR_FD) = 0 [pid 1704] close(4) = 0 [pid 1704] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1703] <... futex resumed>) = 0 [pid 1704] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1703] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1704] <... open resumed>) = 4 [pid 1703] <... futex resumed>) = 0 [pid 1704] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1703] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1704] <... futex resumed>) = 0 [pid 1703] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1704] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1703] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1704] <... open resumed>) = 5 [pid 1703] <... futex resumed>) = 0 [pid 1704] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1703] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1704] <... futex resumed>) = 0 [pid 1703] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1704] creat("./bus", 000 [pid 1703] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1704] <... creat resumed>) = 6 [pid 1703] <... futex resumed>) = 0 [pid 1703] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1704] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1703] <... futex resumed>) = 0 [pid 1703] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1703] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1704] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 1704] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1703] <... futex resumed>) = 0 [pid 1703] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1703] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1704] pwrite64(6, "+", 1, 0) = 1 [pid 1704] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1703] <... futex resumed>) = 0 [pid 1703] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1703] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1704] open("./bus", O_RDONLY) = 7 [pid 1704] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1703] <... futex resumed>) = 0 [pid 1703] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1703] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1703] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1704] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1703] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1704] <... copy_file_range resumed>) = 1 [pid 1703] <... mprotect resumed>) = 0 [pid 1704] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1703] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1704] <... futex resumed>) = 0 [pid 1703] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1704] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1703] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1712]}, 88) = 1712 [pid 1703] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1703] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1703] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1712 attached [pid 1689] +++ killed by SIGBUS +++ [pid 1688] +++ killed by SIGBUS +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1688, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 1712] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1712] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1712] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1695] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1712] <... mmap resumed>) = 0x20000000 [pid 1712] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1712] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1703] <... futex resumed>) = 0 [pid 1702] <... mount resumed>) = 0 [pid 298] <... restart_syscall resumed>) = 0 [pid 1705] <... futex resumed>) = ? [pid 1703] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1702] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1705] +++ killed by SIGBUS +++ [pid 1704] <... futex resumed>) = 0 [pid 1703] <... futex resumed>) = 1 [pid 1704] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1703] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1702] <... openat resumed>) = 3 [pid 298] umount2("./54", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1704] <... open resumed>) = -1 EFAULT (Bad address) [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1704] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1702] chdir("./file1" [pid 1704] <... futex resumed>) = 1 [pid 1703] <... futex resumed>) = 0 [pid 298] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1702] <... chdir resumed>) = 0 [ 56.128473][ T1695] EXT4-fs (loop2): Total free blocks count 0 [ 56.134497][ T1695] EXT4-fs (loop2): Free/Dirty block details [ 56.140215][ T1695] EXT4-fs (loop2): free_blocks=2415919504 [ 56.145829][ T1695] EXT4-fs (loop2): dirty_blocks=32 [ 56.150710][ T1695] EXT4-fs (loop2): Block reservation details [ 56.156598][ T1695] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 56.166417][ T1704] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 1703] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1709] <... mount resumed>) = 0 [pid 1703] <... futex resumed>) = 0 [pid 1702] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 298] <... openat resumed>) = 3 [pid 1709] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1703] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1702] <... openat resumed>) = 4 [pid 298] newfstatat(3, "", [pid 1695] +++ killed by SIGBUS +++ [pid 1693] +++ killed by SIGBUS +++ [pid 1709] <... openat resumed>) = 3 [pid 1709] chdir("./file1") = 0 [pid 1709] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1709] ioctl(4, LOOP_CLR_FD) = 0 [pid 1709] close(4) = 0 [pid 1709] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1706] <... futex resumed>) = 0 [pid 1709] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1706] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1706] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1702] ioctl(4, LOOP_CLR_FD) = 0 [pid 1702] close(4) = 0 [pid 1702] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1709] <... open resumed>) = 4 [pid 1702] <... futex resumed>) = 1 [pid 1701] <... futex resumed>) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1709] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1702] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1701] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1693, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 298] getdents64(3, [pid 1709] <... futex resumed>) = 1 [pid 1706] <... futex resumed>) = 0 [pid 1702] <... open resumed>) = 4 [pid 1701] <... futex resumed>) = 0 [pid 299] umount2("./55", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1709] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1706] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1702] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1701] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] umount2("./54/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1709] <... open resumed>) = 5 [pid 1706] <... futex resumed>) = 0 [pid 1702] <... futex resumed>) = 0 [pid 1701] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1709] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1706] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1702] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1701] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... openat resumed>) = 3 [pid 298] newfstatat(AT_FDCWD, "./54/binderfs", [pid 1709] <... futex resumed>) = 0 [pid 1706] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1702] <... open resumed>) = 5 [pid 1701] <... futex resumed>) = 0 [pid 299] newfstatat(3, "", [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1709] creat("./bus", 000 [pid 1706] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1702] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1701] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] unlink("./54/binderfs" [pid 1709] <... creat resumed>) = 6 [pid 1706] <... futex resumed>) = 0 [pid 1702] <... futex resumed>) = 0 [pid 1701] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] getdents64(3, [pid 298] <... unlink resumed>) = 0 [pid 1709] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1706] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1702] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [ 56.166883][ T1695] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 56.183778][ T1704] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 56.193214][ T1695] EXT4-fs (loop2): This should not happen!! Data will be lost [ 56.193214][ T1695] [ 56.206019][ T1704] EXT4-fs (loop4): This should not happen!! Data will be lost [ 56.206019][ T1704] [ 56.224134][ T1704] EXT4-fs (loop4): Total free blocks count 0 [pid 1701] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1709] <... futex resumed>) = 0 [pid 1706] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1702] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1701] <... futex resumed>) = 0 [pid 299] umount2("./55/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1709] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1706] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1702] creat("./bus", 000 [pid 1701] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1709] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1706] <... futex resumed>) = 0 [pid 1702] <... creat resumed>) = 6 [pid 299] newfstatat(AT_FDCWD, "./55/binderfs", [pid 1709] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1706] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1702] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1709] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1702] <... futex resumed>) = 1 [pid 1701] <... futex resumed>) = 0 [pid 299] unlink("./55/binderfs" [pid 1709] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1702] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1701] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... unlink resumed>) = 0 [pid 1709] <... futex resumed>) = 1 [pid 1706] <... futex resumed>) = 0 [pid 1702] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1701] <... futex resumed>) = 0 [pid 299] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1709] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1706] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1702] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1701] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1709] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1706] <... futex resumed>) = 0 [pid 1702] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1709] pwrite64(6, "+", 1, 0 [pid 1706] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1702] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1709] <... pwrite64 resumed>) = 1 [pid 1702] <... futex resumed>) = 1 [pid 1701] <... futex resumed>) = 0 [pid 1709] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1702] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1701] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1709] <... futex resumed>) = 1 [pid 1706] <... futex resumed>) = 0 [pid 1702] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1701] <... futex resumed>) = 0 [pid 1709] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1706] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1704] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1702] pwrite64(6, "+", 1, 0 [pid 1701] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1709] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) executing program [pid 1706] <... futex resumed>) = 0 [pid 1702] <... pwrite64 resumed>) = 1 [pid 1712] <... futex resumed>) = ? [pid 1709] open("./bus", O_RDONLY [pid 1706] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1703] <... futex resumed>) = ? [pid 1702] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1712] +++ killed by SIGBUS +++ [pid 1704] +++ killed by SIGBUS +++ [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./54/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./54/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./54/file1") = 0 [pid 298] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./54") = 0 [pid 298] mkdir("./55", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1716 ./strace-static-x86_64: Process 1716 attached [pid 1716] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1716] chdir("./55") = 0 [pid 1716] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1716] setpgid(0, 0) = 0 [pid 1716] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1716] write(3, "1000", 4) = 4 [pid 1716] close(3) = 0 [pid 1716] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1716] write(1, "executing program\n", 18) = 18 [pid 1716] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1716] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1716] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1716] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1716] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1716] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1716] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1717]}, 88) = 1717 [pid 1716] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1716] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1716] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1717 attached [pid 1717] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1717] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1717] memfd_create("syzkaller", 0) = 3 [pid 1717] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1702] <... futex resumed>) = 1 [pid 1701] <... futex resumed>) = 0 [pid 1709] <... open resumed>) = 7 [pid 1702] open("./bus", O_RDONLY [pid 1701] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1701] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1702] <... open resumed>) = 7 [pid 1709] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1702] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1709] <... futex resumed>) = 1 [pid 1706] <... futex resumed>) = 0 [pid 1702] <... futex resumed>) = 1 [pid 1709] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1706] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1702] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1701] <... futex resumed>) = 0 [pid 1709] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1706] <... futex resumed>) = 0 [pid 1701] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1709] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1706] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1701] <... futex resumed>) = 1 [pid 1702] <... futex resumed>) = 0 [pid 1709] <... copy_file_range resumed>) = 1 [pid 1706] <... futex resumed>) = 0 [pid 1702] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1701] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1706] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1702] <... copy_file_range resumed>) = 1 [pid 1701] <... futex resumed>) = 0 [pid 1706] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1702] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1706] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1701] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1702] <... futex resumed>) = 0 [pid 1706] <... mprotect resumed>) = 0 [pid 1701] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1706] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1701] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1706] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1702] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1701] <... mprotect resumed>) = 0 [pid 1706] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1701] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1706] <... clone3 resumed> => {parent_tid=[1718]}, 88) = 1718 [pid 1701] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1706] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1701] <... clone3 resumed> => {parent_tid=[1719]}, 88) = 1719 [pid 1706] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1701] rt_sigprocmask(SIG_SETMASK, [], [pid 1706] <... futex resumed>) = 0 [pid 1701] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1706] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1709] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1701] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1709] <... futex resumed>) = 0 [pid 1701] <... futex resumed>) = 0 [pid 1709] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1701] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... umount2 resumed>) = 0 [pid 1717] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 299] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 1718 attached [pid 1718] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1718] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1718] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 299] newfstatat(AT_FDCWD, "./55/file1", [pid 1719] set_robust_list(0x7f13c8cc39a0, 24 [pid 1718] <... mmap resumed>) = 0x20000000 [pid 1718] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1718] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1717] <... write resumed>) = 1048576 [pid 1717] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1717] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1717] ioctl(4, LOOP_SET_FD, 3 [pid 1719] <... set_robust_list resumed>) = 0 [pid 1706] <... futex resumed>) = 0 [pid 1703] +++ killed by SIGBUS +++ [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1719] rt_sigprocmask(SIG_SETMASK, [], [pid 1706] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1703, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 299] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1719] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1709] <... futex resumed>) = 0 [pid 1706] <... futex resumed>) = 1 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1719] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1709] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1706] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] openat(AT_FDCWD, "./55/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1719] <... mmap resumed>) = 0x20000000 [pid 1709] <... open resumed>) = -1 EFAULT (Bad address) [pid 301] umount2("./54", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... openat resumed>) = 4 [pid 1709] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(4, "", [pid 1709] <... futex resumed>) = 1 [pid 1706] <... futex resumed>) = 0 [pid 301] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1719] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1717] <... ioctl resumed>) = 0 [pid 1706] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... openat resumed>) = 3 [pid 299] getdents64(4, [pid 301] newfstatat(3, "", [pid 299] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, [pid 301] getdents64(3, [pid 299] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] close(4 [pid 1719] <... futex resumed>) = 1 [pid 301] umount2("./54/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... close resumed>) = 0 [pid 1719] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] rmdir("./55/file1" [pid 301] newfstatat(AT_FDCWD, "./54/binderfs", [pid 299] <... rmdir resumed>) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] getdents64(3, [pid 301] unlink("./54/binderfs" [pid 299] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] <... unlink resumed>) = 0 [pid 299] close(3 [pid 301] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... close resumed>) = 0 [pid 299] rmdir("./55") = 0 [pid 299] mkdir("./56", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1720 [pid 1717] close(3) = 0 [pid 1717] close(4 [pid 1701] <... futex resumed>) = 0 [pid 1706] <... futex resumed>) = 0 [pid 1701] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1720 attached [pid 1706] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1702] <... futex resumed>) = 0 [pid 1701] <... futex resumed>) = 1 [pid 1720] set_robust_list(0x55558909e6a0, 24 [pid 1702] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1701] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1720] <... set_robust_list resumed>) = 0 [pid 1717] <... close resumed>) = 0 [pid 1717] mkdir("./file1", 0777) = 0 [pid 1717] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 1702] <... open resumed>) = -1 EFAULT (Bad address) [ 56.294705][ T1703] EXT4-fs (loop4): This should not happen!! Data will be lost [ 56.294705][ T1703] [ 56.299132][ T1717] loop1: detected capacity change from 0 to 2048 [ 56.309907][ T1709] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 56.326423][ T1709] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 1720] chdir("./56" [pid 1702] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1720] <... chdir resumed>) = 0 [pid 1702] <... futex resumed>) = 1 [pid 1701] <... futex resumed>) = 0 executing program [pid 1720] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1701] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1720] <... prctl resumed>) = 0 [pid 1701] <... futex resumed>) = 0 [pid 1720] setpgid(0, 0 [pid 1701] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1720] <... setpgid resumed>) = 0 [pid 1720] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1720] write(3, "1000", 4) = 4 [pid 1720] close(3) = 0 [pid 1720] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1720] write(1, "executing program\n", 18) = 18 [pid 1720] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1720] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1720] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1720] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1720] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1720] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1720] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1721]}, 88) = 1721 [pid 1720] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1720] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1720] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1721 attached [pid 1721] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1721] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1721] memfd_create("syzkaller", 0) = 3 [pid 1721] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1706] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1706] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1706] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1706] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 301] <... umount2 resumed>) = 0 [pid 1706] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 301] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./54/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./54/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./54/file1") = 0 [pid 301] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./54") = 0 [pid 301] mkdir("./55", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1724 [pid 1721] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 1724 attached [pid 1724] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1724] chdir("./55") = 0 [pid 1724] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1724] setpgid(0, 0) = 0 [pid 1724] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1724] write(3, "1000", 4) = 4 [pid 1724] close(3) = 0 [pid 1724] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1724] write(1, "executing program\n", 18) = 18 executing program [pid 1724] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1724] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1724] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1724] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1724] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1724] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 56.338967][ T1709] EXT4-fs (loop0): This should not happen!! Data will be lost [ 56.338967][ T1709] [ 56.341655][ T1702] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 56.348926][ T1709] EXT4-fs (loop0): Total free blocks count 0 [ 56.373774][ T1709] EXT4-fs (loop0): Free/Dirty block details [ 56.381812][ T1709] EXT4-fs (loop0): free_blocks=2415919504 [ 56.390285][ T1709] EXT4-fs (loop0): dirty_blocks=32 [pid 1724] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1717] <... mount resumed>) = 0 [pid 1717] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1717] chdir("./file1") = 0 [pid 1717] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1717] ioctl(4, LOOP_CLR_FD) = 0 [pid 1717] close(4) = 0 [pid 1717] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1716] <... futex resumed>) = 0 [pid 1717] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1716] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1717] <... open resumed>) = 4 [pid 1716] <... futex resumed>) = 0 [pid 1717] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1716] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1717] <... futex resumed>) = 0 [pid 1716] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1717] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1716] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1717] <... open resumed>) = 5 [pid 1716] <... futex resumed>) = 0 [pid 1717] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1716] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1717] <... futex resumed>) = 0 [pid 1716] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1716] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1717] creat("./bus", 000 [pid 1716] <... futex resumed>) = 0 [pid 1717] <... creat resumed>) = 6 [pid 1716] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1717] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1716] <... futex resumed>) = 0 [pid 1717] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1716] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1717] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1716] <... futex resumed>) = 0 [pid 1717] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1716] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1717] <... futex resumed>) = 0 [pid 1716] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1717] pwrite64(6, "+", 1, 0 [pid 1716] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1717] <... pwrite64 resumed>) = 1 [pid 1716] <... futex resumed>) = 0 [pid 1717] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1716] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1717] <... futex resumed>) = 0 [pid 1716] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1717] open("./bus", O_RDONLY [pid 1716] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1717] <... open resumed>) = 7 [pid 1716] <... futex resumed>) = 0 [pid 1717] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1716] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1717] <... futex resumed>) = 0 [pid 1716] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1717] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1716] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1717] <... copy_file_range resumed>) = 1 [pid 1716] <... futex resumed>) = 0 [pid 1717] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1716] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1717] <... futex resumed>) = 0 [pid 1716] <... futex resumed>) = 0 [pid 1717] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1716] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1716] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1716] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1716] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1726]}, 88) = 1726 [pid 1716] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1716] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1716] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1724] <... clone3 resumed> => {parent_tid=[1725]}, 88) = 1725 [pid 1724] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1724] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1724] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1726 attached [pid 1721] <... write resumed>) = 1048576 [pid 1721] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1721] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1721] ioctl(4, LOOP_SET_FD, 3 [pid 1726] set_robust_list(0x7f13c8cc39a0, 24 [pid 1701] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 1725 attached [pid 1725] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1725] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1725] memfd_create("syzkaller", 0) = 3 [pid 1725] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1726] <... set_robust_list resumed>) = 0 [pid 1726] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1725] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1726] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1725] <... write resumed>) = 1048576 [pid 1725] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1725] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1725] ioctl(4, LOOP_SET_FD, 3 [pid 1726] <... mmap resumed>) = 0x20000000 [pid 1721] <... ioctl resumed>) = 0 [pid 1721] close(3) = 0 [pid 1721] close(4) = 0 [pid 1721] mkdir("./file1", 0777) = 0 [pid 1721] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 1725] <... ioctl resumed>) = 0 [pid 1725] close(3) = 0 [pid 1725] close(4 [pid 1726] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1716] <... futex resumed>) = 0 [pid 1716] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1717] <... futex resumed>) = 0 [pid 1716] <... futex resumed>) = 1 [pid 1717] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1716] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1717] <... open resumed>) = -1 EFAULT (Bad address) [pid 1717] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1716] <... futex resumed>) = 0 [ 56.401675][ T1702] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 56.404259][ T1721] loop2: detected capacity change from 0 to 2048 [ 56.414158][ T1709] EXT4-fs (loop0): Block reservation details [ 56.426672][ T1709] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 56.433010][ T1725] loop4: detected capacity change from 0 to 2048 [ 56.435274][ T1702] EXT4-fs (loop3): This should not happen!! Data will be lost [ 56.435274][ T1702] [pid 1726] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1716] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1709] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1716] <... futex resumed>) = 0 [pid 1716] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1725] <... close resumed>) = 0 [pid 1725] mkdir("./file1", 0777) = 0 [ 56.453148][ T1717] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 56.455340][ T1702] EXT4-fs (loop3): Total free blocks count 0 [ 56.470706][ T1717] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 56.479428][ T1702] EXT4-fs (loop3): Free/Dirty block details [ 56.486928][ T1717] EXT4-fs (loop1): This should not happen!! Data will be lost [ 56.486928][ T1717] [pid 1725] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 1718] <... futex resumed>) = ? [pid 1718] +++ killed by SIGBUS +++ [pid 1709] +++ killed by SIGBUS +++ [pid 1716] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 56.491851][ T1702] EXT4-fs (loop3): free_blocks=2415919504 [ 56.501566][ T1717] EXT4-fs (loop1): Total free blocks count 0 [ 56.507863][ T1706] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 56.513461][ T1717] EXT4-fs (loop1): Free/Dirty block details [ 56.525108][ T1702] EXT4-fs (loop3): dirty_blocks=32 [ 56.530997][ T1717] EXT4-fs (loop1): free_blocks=2415919504 [ 56.536070][ T1706] EXT4-fs (loop0): This should not happen!! Data will be lost [ 56.536070][ T1706] [pid 1706] +++ killed by SIGBUS +++ [pid 1702] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1719] <... futex resumed>) = ? [pid 1719] +++ killed by SIGBUS +++ [pid 1725] <... mount resumed>) = 0 [pid 1721] <... mount resumed>) = 0 [pid 1717] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1725] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1721] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1706, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11} --- [pid 1725] <... openat resumed>) = 3 [pid 1721] <... openat resumed>) = 3 [pid 1725] chdir("./file1" [pid 1721] chdir("./file1" [pid 1725] <... chdir resumed>) = 0 [pid 1721] <... chdir resumed>) = 0 [pid 297] umount2("./55", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1725] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1721] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1725] <... openat resumed>) = 4 [pid 1721] <... openat resumed>) = 4 [pid 297] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1725] ioctl(4, LOOP_CLR_FD [pid 1721] ioctl(4, LOOP_CLR_FD [pid 297] <... openat resumed>) = 3 [pid 1725] <... ioctl resumed>) = 0 [pid 1721] <... ioctl resumed>) = 0 [pid 297] newfstatat(3, "", [pid 1725] close(4 [pid 1721] close(4 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1725] <... close resumed>) = 0 [pid 1721] <... close resumed>) = 0 [pid 297] getdents64(3, [pid 1725] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1721] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1725] <... futex resumed>) = 1 [pid 1724] <... futex resumed>) = 0 [pid 1721] <... futex resumed>) = 1 [pid 1720] <... futex resumed>) = 0 [pid 297] umount2("./55/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1725] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1724] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1721] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1720] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1725] <... open resumed>) = 4 [pid 1724] <... futex resumed>) = 0 [pid 1721] <... open resumed>) = 4 [pid 1720] <... futex resumed>) = 0 [pid 297] newfstatat(AT_FDCWD, "./55/binderfs", [pid 1725] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1724] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1721] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1720] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1725] <... futex resumed>) = 0 [pid 1724] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1721] <... futex resumed>) = 0 [pid 1720] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 297] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1725] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1724] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1721] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1720] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1725] <... open resumed>) = 5 [pid 1724] <... futex resumed>) = 0 [pid 1721] <... open resumed>) = 5 [pid 1720] <... futex resumed>) = 0 [pid 297] unlink("./55/binderfs" [pid 1725] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1724] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1721] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1720] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... unlink resumed>) = 0 [pid 1725] <... futex resumed>) = 0 [pid 1724] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1721] <... futex resumed>) = 0 [pid 1720] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 297] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1725] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1724] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1721] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1720] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1725] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1724] <... futex resumed>) = 0 [pid 1721] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1720] <... futex resumed>) = 0 [pid 1725] creat("./bus", 000 [pid 1724] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1721] creat("./bus", 000 [pid 1720] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1725] <... creat resumed>) = 6 [pid 1721] <... creat resumed>) = 6 [pid 1725] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1721] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1725] <... futex resumed>) = 1 [pid 1724] <... futex resumed>) = 0 [pid 1721] <... futex resumed>) = 1 [pid 1720] <... futex resumed>) = 0 [pid 1725] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1724] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1721] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1720] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1725] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1724] <... futex resumed>) = 0 [pid 1721] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1720] <... futex resumed>) = 0 [pid 1725] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1724] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1721] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1720] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1725] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1721] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1725] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1721] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1725] <... futex resumed>) = 1 [pid 1724] <... futex resumed>) = 0 [pid 1721] <... futex resumed>) = 1 [pid 1720] <... futex resumed>) = 0 [pid 1725] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1724] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1721] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1720] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1725] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1724] <... futex resumed>) = 0 [pid 1721] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1720] <... futex resumed>) = 0 [pid 1725] pwrite64(6, "+", 1, 0 [pid 1724] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1721] pwrite64(6, "+", 1, 0 [pid 1720] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1725] <... pwrite64 resumed>) = 1 [pid 1721] <... pwrite64 resumed>) = 1 [pid 1725] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1721] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1725] <... futex resumed>) = 1 [pid 1724] <... futex resumed>) = 0 [pid 1721] <... futex resumed>) = 1 [pid 1720] <... futex resumed>) = 0 [pid 1725] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1724] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1721] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1720] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1725] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1724] <... futex resumed>) = 0 [pid 1721] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1720] <... futex resumed>) = 0 [pid 1725] open("./bus", O_RDONLY [pid 1724] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1721] open("./bus", O_RDONLY [pid 1720] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1725] <... open resumed>) = 7 [pid 1721] <... open resumed>) = 7 [pid 1725] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1721] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1725] <... futex resumed>) = 1 [pid 1724] <... futex resumed>) = 0 [pid 1721] <... futex resumed>) = 1 [pid 1720] <... futex resumed>) = 0 [pid 1725] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1724] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1725] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1724] <... futex resumed>) = 0 [pid 1721] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1720] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1702] +++ killed by SIGBUS +++ [pid 1701] +++ killed by SIGBUS +++ [pid 1725] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1724] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1721] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1720] <... futex resumed>) = 0 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1701, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 1725] <... copy_file_range resumed>) = 1 [pid 1724] <... futex resumed>) = 0 [pid 1721] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1720] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1725] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1724] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1721] <... copy_file_range resumed>) = 1 [pid 1720] <... futex resumed>) = 0 [pid 1725] <... futex resumed>) = 0 [pid 1724] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1721] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1720] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 300] umount2("./54", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1725] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1724] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1721] <... futex resumed>) = 0 [pid 1720] <... mmap resumed>) = 0x7f13c8ca3000 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1724] <... mprotect resumed>) = 0 [pid 1721] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1720] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 300] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1724] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1720] <... mprotect resumed>) = 0 [pid 300] <... openat resumed>) = 3 [pid 1724] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1720] rt_sigprocmask(SIG_BLOCK, ~[], [pid 300] newfstatat(3, "", [pid 297] <... umount2 resumed>) = 0 [pid 1724] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1720] <... rt_sigprocmask resumed>[], 8) = 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1720] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 300] getdents64(3, [pid 1724] <... clone3 resumed> => {parent_tid=[1731]}, 88) = 1731 [pid 300] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1724] rt_sigprocmask(SIG_SETMASK, [], [pid 1720] <... clone3 resumed> => {parent_tid=[1732]}, 88) = 1732 [pid 300] umount2("./54/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1724] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1720] rt_sigprocmask(SIG_SETMASK, [], [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1724] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1720] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 300] newfstatat(AT_FDCWD, "./54/binderfs", [pid 1724] <... futex resumed>) = 0 [pid 1720] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1724] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1720] <... futex resumed>) = 0 [ 56.540955][ T1717] EXT4-fs (loop1): dirty_blocks=32 [ 56.550705][ T1702] EXT4-fs (loop3): Block reservation details [ 56.555879][ T1717] EXT4-fs (loop1): Block reservation details [ 56.561255][ T1702] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 56.567714][ T1717] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 56.576097][ T1702] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 56.591486][ T1702] EXT4-fs (loop3): This should not happen!! Data will be lost [ 56.591486][ T1702] [pid 300] unlink("./54/binderfs" [pid 1720] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... unlink resumed>) = 0 [pid 300] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1726] <... futex resumed>) = ? [pid 1717] +++ killed by SIGBUS +++ [pid 297] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./55/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./55/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./55/file1") = 0 [pid 297] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./55") = 0 [pid 297] mkdir("./56", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1733 ./strace-static-x86_64: Process 1731 attached [pid 1731] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1731] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1731] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1724] <... futex resumed>) = 0 [pid 1724] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1725] <... futex resumed>) = 0 [pid 1724] <... futex resumed>) = 1 [pid 1725] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1724] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1725] <... open resumed>) = -1 EFAULT (Bad address) [pid 1725] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1724] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1733 attached ./strace-static-x86_64: Process 1732 attached [pid 1724] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1724] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1731] <... futex resumed>) = 1 [pid 1731] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1733] set_robust_list(0x55558909e6a0, 24 [ 56.614180][ T1726] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 56.625515][ T1725] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 56.631765][ T1726] EXT4-fs (loop1): This should not happen!! Data will be lost [ 56.631765][ T1726] [ 56.642155][ T1725] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 1732] set_robust_list(0x7f13c8cc39a0, 24 [pid 1733] <... set_robust_list resumed>) = 0 [pid 1732] <... set_robust_list resumed>) = 0 [pid 1720] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1720] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 1732] rt_sigprocmask(SIG_SETMASK, [], [pid 1720] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1733] chdir("./56" [pid 1732] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1720] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1732] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1733] <... chdir resumed>) = 0 [pid 1721] <... futex resumed>) = 0 [pid 1720] <... futex resumed>) = 1 [pid 1721] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1720] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1733] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1732] <... mmap resumed>) = 0x20000000 [pid 1726] +++ killed by SIGBUS +++ [pid 1721] <... open resumed>) = -1 EFAULT (Bad address) [pid 1716] +++ killed by SIGBUS +++ [pid 300] <... umount2 resumed>) = 0 [pid 1733] <... prctl resumed>) = 0 [pid 1721] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1733] setpgid(0, 0 [pid 1721] <... futex resumed>) = 0 [pid 1733] <... setpgid resumed>) = 0 [pid 1721] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1733] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1733] write(3, "1000", 4) = 4 [pid 1733] close(3) = 0 [pid 1733] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 1733] write(1, "executing program\n", 18) = 18 [pid 1733] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1733] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1720] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1733] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1720] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1716, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 1733] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1721] <... futex resumed>) = 0 [pid 1720] <... futex resumed>) = 1 [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 1733] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1720] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... restart_syscall resumed>) = 0 [pid 1733] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1733] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1732] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] umount2("./55", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1733] <... mprotect resumed>) = 0 [pid 1732] <... futex resumed>) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1733] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1732] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 298] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./55/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./55/binderfs") = 0 [pid 1733] <... rt_sigprocmask resumed>[], 8) = 0 [pid 298] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1733] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1734]}, 88) = 1734 [pid 1733] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1724] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 300] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... umount2 resumed>) = 0 [pid 1733] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1733] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 56.663128][ T1725] EXT4-fs (loop4): This should not happen!! Data will be lost [ 56.663128][ T1725] [ 56.673675][ T1725] EXT4-fs (loop4): Total free blocks count 0 [ 56.678484][ T1721] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 56.679894][ T1725] EXT4-fs (loop4): Free/Dirty block details [ 56.700150][ T1725] EXT4-fs (loop4): free_blocks=2415919504 [ 56.707782][ T1725] EXT4-fs (loop4): dirty_blocks=32 [pid 298] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./55/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./55/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 300] newfstatat(AT_FDCWD, "./54/file1", [pid 298] <... openat resumed>) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./55/file1") = 0 [pid 298] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./55") = 0 [pid 1725] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1731] <... futex resumed>) = ? [pid 300] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] mkdir("./56", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3 [pid 1731] +++ killed by SIGBUS +++ [pid 1725] +++ killed by SIGBUS +++ [pid 298] <... close resumed>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 1734 attached [pid 1734] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1734] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1734] memfd_create("syzkaller", 0) = 3 [pid 298] <... clone resumed>, child_tidptr=0x55558909e690) = 1735 [pid 1734] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1720] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 1735 attached [pid 1735] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1735] chdir("./56") = 0 [pid 1735] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1735] setpgid(0, 0) = 0 [pid 1735] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1735] write(3, "1000", 4 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./54/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1735] <... write resumed>) = 4 [pid 1735] close(3) = 0 [ 56.712873][ T1725] EXT4-fs (loop4): Block reservation details [ 56.718760][ T1725] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 56.724838][ T1721] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 56.737832][ T1724] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 56.750123][ T1724] EXT4-fs (loop4): This should not happen!! Data will be lost [ 56.750123][ T1724] [pid 1735] symlink("/dev/binderfs", "./binderfs" [pid 1734] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1724] +++ killed by SIGBUS +++ [pid 300] <... openat resumed>) = 4 [pid 1735] <... symlink resumed>) = 0 [pid 1734] <... write resumed>) = 1048576 executing program [pid 1735] write(1, "executing program\n", 18) = 18 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1724, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=10} --- [pid 300] newfstatat(4, "", [pid 1735] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1735] <... futex resumed>) = 0 [pid 1735] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1735] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1735] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1735] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1735] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1735] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1736]}, 88) = 1736 [pid 1735] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1735] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1735] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1734] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1734] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1734] ioctl(4, LOOP_SET_FD, 3 [pid 300] getdents64(4, ./strace-static-x86_64: Process 1736 attached [pid 1736] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1736] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1736] memfd_create("syzkaller", 0) = 3 [pid 1736] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1734] <... ioctl resumed>) = 0 [pid 1734] close(3) = 0 [pid 1734] close(4 [pid 300] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, [pid 301] umount2("./55", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] close(4 [pid 301] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 300] <... close resumed>) = 0 [pid 301] <... openat resumed>) = 3 [pid 300] rmdir("./54/file1" [pid 301] newfstatat(3, "", [pid 300] <... rmdir resumed>) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, [pid 301] getdents64(3, [pid 300] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 300] close(3 [pid 301] umount2("./55/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] <... close resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] rmdir("./54" [pid 301] newfstatat(AT_FDCWD, "./55/binderfs", [pid 300] <... rmdir resumed>) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] mkdir("./55", 0777 [pid 301] unlink("./55/binderfs" [pid 300] <... mkdir resumed>) = 0 [pid 301] <... unlink resumed>) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 301] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] <... openat resumed>) = 3 [pid 1734] <... close resumed>) = 0 [pid 1734] mkdir("./file1", 0777) = 0 [ 56.752748][ T1721] EXT4-fs (loop2): This should not happen!! Data will be lost [ 56.752748][ T1721] [ 56.769163][ T1721] EXT4-fs (loop2): Total free blocks count 0 [ 56.775496][ T1721] EXT4-fs (loop2): Free/Dirty block details [ 56.780968][ T1734] loop0: detected capacity change from 0 to 2048 [ 56.781317][ T1721] EXT4-fs (loop2): free_blocks=2415919504 [ 56.793434][ T1721] EXT4-fs (loop2): dirty_blocks=32 [ 56.805186][ T1721] EXT4-fs (loop2): Block reservation details [pid 1734] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 1736] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1737 ./strace-static-x86_64: Process 1737 attached [pid 1721] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1737] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1732] <... futex resumed>) = ? [pid 1732] +++ killed by SIGBUS +++ [pid 1721] +++ killed by SIGBUS +++ [pid 1737] chdir("./55") = 0 [pid 1737] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1736] <... write resumed>) = 1048576 [pid 301] <... umount2 resumed>) = 0 [pid 301] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./55/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./55/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./55/file1") = 0 [pid 301] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./55") = 0 [pid 301] mkdir("./56", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD [pid 1737] <... prctl resumed>) = 0 [pid 1736] munmap(0x7f13c08c4000, 138412032 [pid 301] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1739 [pid 1737] setpgid(0, 0 [pid 1736] <... munmap resumed>) = 0 [pid 1737] <... setpgid resumed>) = 0 [pid 1736] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 1739 attached [pid 1737] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1736] <... openat resumed>) = 4 [pid 1739] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1737] <... openat resumed>) = 3 [pid 1736] ioctl(4, LOOP_SET_FD, 3 [pid 1720] +++ killed by SIGBUS +++ [pid 1739] chdir("./56" [pid 1734] <... mount resumed>) = 0 [pid 1734] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1734] chdir("./file1") = 0 [pid 1734] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1734] ioctl(4, LOOP_CLR_FD) = 0 [pid 1734] close(4) = 0 [pid 1734] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1733] <... futex resumed>) = 0 [pid 1733] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1733] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1734] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 1734] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1733] <... futex resumed>) = 0 [pid 1733] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1733] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}executing program [pid 1739] <... chdir resumed>) = 0 [pid 1737] write(3, "1000", 4 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1720, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=10} --- [pid 1736] <... ioctl resumed>) = 0 [pid 1739] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1737] <... write resumed>) = 4 [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 1739] <... prctl resumed>) = 0 [pid 1737] close(3 [pid 1739] setpgid(0, 0 [pid 1734] <... futex resumed>) = 1 [pid 1739] <... setpgid resumed>) = 0 [pid 1737] <... close resumed>) = 0 [pid 1734] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1739] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1737] symlink("/dev/binderfs", "./binderfs" [pid 1734] <... open resumed>) = 5 [pid 1734] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1733] <... futex resumed>) = 0 [pid 1739] <... openat resumed>) = 3 [pid 1733] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1733] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1737] <... symlink resumed>) = 0 [pid 1739] write(3, "1000", 4 [pid 1734] <... futex resumed>) = 1 [pid 1739] <... write resumed>) = 4 [pid 1737] write(1, "executing program\n", 18 [pid 1739] close(3 [pid 1737] <... write resumed>) = 18 [pid 1739] <... close resumed>) = 0 [pid 1737] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1739] symlink("/dev/binderfs", "./binderfs" [pid 1734] creat("./bus", 000 [pid 1737] <... futex resumed>) = 0 executing program [pid 1739] <... symlink resumed>) = 0 [pid 1737] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1734] <... creat resumed>) = 6 [pid 1739] write(1, "executing program\n", 18 [pid 1737] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1739] <... write resumed>) = 18 [pid 1737] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1739] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1737] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1739] <... futex resumed>) = 0 [pid 1737] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1739] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1737] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1734] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1739] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1737] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1739] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1737] <... mprotect resumed>) = 0 [pid 1734] <... futex resumed>) = 1 [pid 1733] <... futex resumed>) = 0 [pid 299] <... restart_syscall resumed>) = 0 [pid 1739] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1737] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1734] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1733] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1739] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1737] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1734] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1733] <... futex resumed>) = 0 [pid 1739] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1737] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1734] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1733] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1739] <... mprotect resumed>) = 0 [pid 1734] <... futex resumed>) = 0 [pid 1733] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] umount2("./56", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1739] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1737] <... clone3 resumed> => {parent_tid=[1741]}, 88) = 1741 [pid 1734] pwrite64(6, "+", 1, 0 [pid 1733] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1739] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1737] rt_sigprocmask(SIG_SETMASK, [], [pid 1734] <... pwrite64 resumed>) = 1 [pid 1733] <... futex resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1739] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1737] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1734] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1733] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 1741 attached [pid 1737] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1736] close(3 [pid 1734] <... futex resumed>) = 0 [pid 1733] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] <... openat resumed>) = 3 [pid 1739] <... clone3 resumed> => {parent_tid=[1742]}, 88) = 1742 [pid 1737] <... futex resumed>) = 0 [pid 1736] <... close resumed>) = 0 [pid 1734] open("./bus", O_RDONLY [pid 1733] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] newfstatat(3, "", [pid 1739] rt_sigprocmask(SIG_SETMASK, [], [pid 1737] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1736] close(4 [pid 1734] <... open resumed>) = 7 [pid 1733] <... futex resumed>) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1739] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1736] <... close resumed>) = 0 [pid 1734] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1733] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] getdents64(3, [pid 1739] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1736] mkdir("./file1", 0777 [pid 299] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1739] <... futex resumed>) = 0 [pid 1736] <... mkdir resumed>) = 0 [pid 299] umount2("./56/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1739] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1736] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 1733] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1734] <... futex resumed>) = 0 [pid 299] newfstatat(AT_FDCWD, "./56/binderfs", [pid 1733] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1734] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1733] <... futex resumed>) = 0 [pid 299] unlink("./56/binderfs" [pid 1734] <... copy_file_range resumed>) = 1 [pid 1733] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... unlink resumed>) = 0 [pid 1734] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1733] <... futex resumed>) = 0 [pid 299] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1741] set_robust_list(0x7f13c8ce49a0, 24 [pid 1734] <... futex resumed>) = 0 [pid 1733] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1741] <... set_robust_list resumed>) = 0 [pid 1741] rt_sigprocmask(SIG_SETMASK, [], [pid 1733] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1741] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1741] memfd_create("syzkaller", 0 [pid 1733] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1741] <... memfd_create resumed>) = 3 [pid 1733] <... mprotect resumed>) = 0 [pid 1734] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1741] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1733] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1741] <... mmap resumed>) = 0x7f13c08c4000 [pid 1733] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1733] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1743]}, 88) = 1743 [pid 1733] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1733] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1733] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1741] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 1743 attached [pid 1743] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1743] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1743] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./56/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 1742 attached [pid 299] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 1742] set_robust_list(0x7f13c8ce49a0, 24 [pid 299] openat(AT_FDCWD, "./56/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1742] <... set_robust_list resumed>) = 0 [pid 299] <... openat resumed>) = 4 [pid 1742] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1742] memfd_create("syzkaller", 0) = 3 [pid 1742] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1743] <... mmap resumed>) = 0x20000000 [pid 299] getdents64(4, [pid 1741] <... write resumed>) = 1048576 [pid 299] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1743] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [ 56.811074][ T1721] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 56.826651][ T1720] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 56.839056][ T1720] EXT4-fs (loop2): This should not happen!! Data will be lost [ 56.839056][ T1720] [ 56.849955][ T1736] loop1: detected capacity change from 0 to 2048 [pid 1742] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1743] <... futex resumed>) = 1 [pid 1741] munmap(0x7f13c08c4000, 138412032 [pid 1736] <... mount resumed>) = 0 [pid 1733] <... futex resumed>) = 0 [pid 299] getdents64(4, [pid 1733] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1734] <... futex resumed>) = 0 [pid 1733] <... futex resumed>) = 1 [pid 1734] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1733] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1734] <... open resumed>) = -1 EFAULT (Bad address) [pid 1734] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1733] <... futex resumed>) = 0 [pid 1743] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1742] <... write resumed>) = 1048576 [pid 1741] <... munmap resumed>) = 0 [pid 1736] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1733] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./56/file1") = 0 [pid 1736] <... openat resumed>) = 3 [pid 1736] chdir("./file1") = 0 [pid 1736] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1736] ioctl(4, LOOP_CLR_FD) = 0 [pid 299] getdents64(3, [pid 1736] close(4 [pid 299] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1736] <... close resumed>) = 0 [pid 299] close(3) = 0 [pid 1736] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1735] <... futex resumed>) = 0 [pid 1735] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1735] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1736] <... futex resumed>) = 1 [pid 299] rmdir("./56" [pid 1736] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 299] <... rmdir resumed>) = 0 [pid 299] mkdir("./57", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 1733] <... futex resumed>) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1733] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1736] <... open resumed>) = 4 [pid 1736] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1735] <... futex resumed>) = 0 [pid 1735] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1735] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1736] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 1736] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1735] <... futex resumed>) = 0 [pid 1735] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1735] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1736] creat("./bus", 000) = 6 [pid 1736] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1735] <... futex resumed>) = 0 [pid 1735] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1735] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1736] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 1736] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1735] <... futex resumed>) = 0 [pid 1735] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1735] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1736] pwrite64(6, "+", 1, 0) = 1 [pid 1736] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1735] <... futex resumed>) = 0 [pid 1735] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1735] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1736] open("./bus", O_RDONLY) = 7 [pid 1736] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1735] <... futex resumed>) = 0 [pid 1735] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1735] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1735] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1735] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1735] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1735] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1747]}, 88) = 1747 [pid 1735] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1735] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1735] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1736] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 299] <... clone resumed>, child_tidptr=0x55558909e690) = 1746 [pid 1736] <... copy_file_range resumed>) = 1 [pid 1736] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1736] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1742] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1742] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1741] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1742] <... openat resumed>) = 4 [pid 1741] <... openat resumed>) = 4 [pid 1742] ioctl(4, LOOP_SET_FD, 3 [pid 1741] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 1747 attached [pid 1747] set_robust_list(0x7f13c8cc39a0, 24) = 0 [ 56.890342][ T1734] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 56.905904][ T1734] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 56.917746][ T1742] loop4: detected capacity change from 0 to 2048 [ 56.918696][ T1734] EXT4-fs (loop0): This should not happen!! Data will be lost [ 56.918696][ T1734] [ 56.928211][ T1741] loop3: detected capacity change from 0 to 2048 [pid 1747] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1747] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1746] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1746] chdir("./57") = 0 [pid 1746] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1746] setpgid(0, 0) = 0 [pid 1746] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1747] <... mmap resumed>) = 0x20000000 [pid 1746] <... openat resumed>) = 3 [pid 1746] write(3, "1000", 4) = 4 [pid 1746] close(3) = 0 [pid 1746] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1746] write(1, "executing program\n", 18executing program ) = 18 [pid 1746] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1746] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1746] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1746] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1746] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1746] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1746] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1747] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1746] <... clone3 resumed> => {parent_tid=[1748]}, 88) = 1748 [pid 1735] <... futex resumed>) = 0 [pid 1735] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1736] <... futex resumed>) = 0 [pid 1735] <... futex resumed>) = 1 [pid 1736] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1735] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1736] <... open resumed>) = -1 EFAULT (Bad address) [pid 1736] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1735] <... futex resumed>) = 0 [pid 1736] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1735] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1736] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1747] <... futex resumed>) = 1 [pid 1746] rt_sigprocmask(SIG_SETMASK, [], [pid 1735] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1748 attached [pid 1742] <... ioctl resumed>) = 0 [pid 1741] <... ioctl resumed>) = 0 [pid 1734] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1733] <... futex resumed>) = ? [pid 1748] set_robust_list(0x7f13c8ce49a0, 24 [pid 1742] close(3 [pid 1741] close(3 [pid 1748] <... set_robust_list resumed>) = 0 [pid 1742] <... close resumed>) = 0 [pid 1748] rt_sigprocmask(SIG_SETMASK, [], [pid 1742] close(4 [pid 1741] <... close resumed>) = 0 [pid 1748] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1742] <... close resumed>) = 0 [pid 1748] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1742] mkdir("./file1", 0777 [pid 1741] close(4 [pid 1742] <... mkdir resumed>) = 0 [pid 1742] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 1741] <... close resumed>) = 0 [pid 1741] mkdir("./file1", 0777) = 0 [pid 1741] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 1747] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1746] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1746] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1748] <... futex resumed>) = 0 [pid 1748] memfd_create("syzkaller", 0) = 3 [pid 1748] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1746] <... futex resumed>) = 1 [pid 1748] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1746] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1748] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1748] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 56.933540][ T1734] EXT4-fs (loop0): Total free blocks count 0 [ 56.933558][ T1734] EXT4-fs (loop0): Free/Dirty block details [ 56.933571][ T1734] EXT4-fs (loop0): free_blocks=2415919504 [ 56.933584][ T1734] EXT4-fs (loop0): dirty_blocks=32 [ 56.933596][ T1734] EXT4-fs (loop0): Block reservation details [ 56.951034][ T1736] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, [ 56.951908][ T1734] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 56.957298][ T1736] block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 1748] ioctl(4, LOOP_SET_FD, 3 [pid 1735] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1743] <... futex resumed>) = ? [pid 1743] +++ killed by SIGBUS +++ [pid 1734] +++ killed by SIGBUS +++ [pid 1733] +++ killed by SIGBUS +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1733, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 297] umount2("./56", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./56/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./56/binderfs") = 0 [pid 297] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1748] <... ioctl resumed>) = 0 [pid 1748] close(3) = 0 [pid 1748] close(4) = 0 [pid 1748] mkdir("./file1", 0777) = 0 [pid 1748] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 1742] <... mount resumed>) = 0 [pid 1742] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1742] chdir("./file1") = 0 [pid 1742] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1742] ioctl(4, LOOP_CLR_FD) = 0 [pid 1742] close(4) = 0 [pid 1742] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1742] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1741] <... mount resumed>) = 0 [pid 1739] <... futex resumed>) = 0 [pid 1741] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1741] chdir("./file1") = 0 [pid 1741] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1741] ioctl(4, LOOP_CLR_FD) = 0 [pid 1741] close(4) = 0 [pid 1741] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 56.976745][ T1748] loop2: detected capacity change from 0 to 2048 [ 56.998968][ T1734] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 56.999556][ T1736] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 57.011139][ T1734] EXT4-fs (loop0): This should not happen!! Data will be lost [ 57.011139][ T1734] [ 57.032750][ T1736] EXT4-fs (loop1): This should not happen!! Data will be lost [pid 1741] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1739] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1742] <... futex resumed>) = 0 [pid 1739] <... futex resumed>) = 1 [pid 1737] <... futex resumed>) = 0 [pid 1742] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1739] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1742] <... open resumed>) = 4 [pid 1742] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1739] <... futex resumed>) = 0 [pid 1742] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1739] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1737] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1742] <... open resumed>) = 5 [pid 1741] <... futex resumed>) = 0 [pid 1739] <... futex resumed>) = 0 [pid 1737] <... futex resumed>) = 1 [pid 297] <... umount2 resumed>) = 0 [pid 1742] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1741] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1739] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1742] <... futex resumed>) = 0 [pid 1741] <... open resumed>) = 4 [pid 1739] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1742] creat("./bus", 000 [pid 1741] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1739] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1742] <... creat resumed>) = 6 [pid 1741] <... futex resumed>) = 0 [pid 1739] <... futex resumed>) = 0 [pid 1742] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1741] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1739] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1737] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1735] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1742] <... futex resumed>) = 0 [pid 1739] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1742] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1739] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1742] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1739] <... futex resumed>) = 0 [pid 1742] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1739] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1737] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1737] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1742] <... futex resumed>) = 0 [pid 1741] <... futex resumed>) = 0 [pid 1739] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1737] <... futex resumed>) = 1 [pid 1742] pwrite64(6, "+", 1, 0 [pid 1741] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1739] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1737] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1739] <... futex resumed>) = 0 [pid 1739] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1742] <... pwrite64 resumed>) = 1 [pid 1741] <... open resumed>) = 5 [pid 1741] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1741] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1742] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1739] <... futex resumed>) = 0 [pid 1739] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1739] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1742] open("./bus", O_RDONLY) = 7 [pid 1742] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1739] <... futex resumed>) = 0 [pid 1739] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1739] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1739] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1742] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1739] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1742] <... copy_file_range resumed>) = 1 [pid 1739] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1737] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1742] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1739] <... mprotect resumed>) = 0 [pid 1737] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1742] <... futex resumed>) = 0 [pid 1739] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1742] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1741] <... futex resumed>) = 0 [pid 1739] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1737] <... futex resumed>) = 1 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1741] creat("./bus", 000 [pid 1739] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1741] <... creat resumed>) = 6 [pid 297] newfstatat(AT_FDCWD, "./56/file1", [pid 1741] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1739] <... clone3 resumed> => {parent_tid=[1756]}, 88) = 1756 [pid 1741] <... futex resumed>) = 0 [pid 1739] rt_sigprocmask(SIG_SETMASK, [], [pid 1741] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1739] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1739] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1739] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./56/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1737] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] close(4) = 0 [pid 297] rmdir("./56/file1" [pid 1737] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 297] <... rmdir resumed>) = 0 [pid 297] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./56") = 0 [pid 297] mkdir("./57", 0777 [pid 1737] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... mkdir resumed>) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1757 ./strace-static-x86_64: Process 1756 attached [pid 1756] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1756] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1756] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1741] <... futex resumed>) = 0 [pid 1737] <... futex resumed>) = 1 [pid 1741] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 1741] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1741] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1756] <... mmap resumed>) = 0x20000000 [pid 1756] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1739] <... futex resumed>) = 0 [pid 1739] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1742] <... futex resumed>) = 0 [pid 1739] <... futex resumed>) = 1 [pid 1742] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1739] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1742] <... open resumed>) = -1 EFAULT (Bad address) [pid 1742] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1739] <... futex resumed>) = 0 [ 57.032750][ T1736] [ 57.045933][ T1736] EXT4-fs (loop1): Total free blocks count 0 [ 57.061930][ T1736] EXT4-fs (loop1): Free/Dirty block details [ 57.070263][ T1736] EXT4-fs (loop1): free_blocks=2415919504 [pid 1742] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1739] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1737] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1742] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1739] <... futex resumed>) = 0 [pid 1737] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) ./strace-static-x86_64: Process 1757 attached [pid 1748] <... mount resumed>) = 0 [pid 1737] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1757] set_robust_list(0x55558909e6a0, 24 [pid 1748] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1741] <... futex resumed>) = 0 [pid 1737] <... futex resumed>) = 1 [pid 1757] <... set_robust_list resumed>) = 0 [pid 1748] <... openat resumed>) = 3 [pid 1741] pwrite64(6, "+", 1, 0 [pid 1737] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1757] chdir("./57" [pid 1748] chdir("./file1" [pid 1741] <... pwrite64 resumed>) = 1 [pid 1757] <... chdir resumed>) = 0 [pid 1748] <... chdir resumed>) = 0 [pid 1741] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1757] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1748] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1741] <... futex resumed>) = 1 [pid 1737] <... futex resumed>) = 0 [pid 1757] <... prctl resumed>) = 0 [pid 1748] <... openat resumed>) = 4 [pid 1741] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1737] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1757] setpgid(0, 0 [pid 1748] ioctl(4, LOOP_CLR_FD [pid 1741] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1737] <... futex resumed>) = 0 [pid 1757] <... setpgid resumed>) = 0 [pid 1756] <... futex resumed>) = 1 [pid 1748] <... ioctl resumed>) = 0 [pid 1741] open("./bus", O_RDONLY [pid 1737] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1757] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1756] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1748] close(4 [pid 1741] <... open resumed>) = 7 [pid 1739] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1757] <... openat resumed>) = 3 [pid 1748] <... close resumed>) = 0 [pid 1741] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1757] write(3, "1000", 4 [pid 1748] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1741] <... futex resumed>) = 1 [pid 1737] <... futex resumed>) = 0 [pid 1757] <... write resumed>) = 4 [pid 1748] <... futex resumed>) = 1 [pid 1746] <... futex resumed>) = 0 [pid 1741] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1737] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1757] close(3 [pid 1748] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1746] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1741] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1737] <... futex resumed>) = 0 [pid 1757] <... close resumed>) = 0 [pid 1748] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1746] <... futex resumed>) = 0 [pid 1741] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1737] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1757] symlink("/dev/binderfs", "./binderfs" [pid 1748] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1746] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1741] <... copy_file_range resumed>) = 1 [pid 1737] <... futex resumed>) = 0 [pid 1757] <... symlink resumed>) = 0 [pid 1748] <... open resumed>) = 4 [pid 1741] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000executing program [pid 1737] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1757] write(1, "executing program\n", 18 [pid 1748] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1741] <... futex resumed>) = 0 [pid 1737] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1757] <... write resumed>) = 18 [pid 1748] <... futex resumed>) = 1 [pid 1746] <... futex resumed>) = 0 [pid 1741] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1737] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1757] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1748] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1746] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1737] <... mprotect resumed>) = 0 [pid 1757] <... futex resumed>) = 0 [pid 1748] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1746] <... futex resumed>) = 0 [pid 1737] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1757] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1748] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1746] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1737] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1757] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1748] <... open resumed>) = 5 [pid 1737] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1757] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1748] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1757] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1748] <... futex resumed>) = 1 [pid 1746] <... futex resumed>) = 0 [pid 1737] <... clone3 resumed> => {parent_tid=[1758]}, 88) = 1758 [pid 1757] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1748] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1746] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1737] rt_sigprocmask(SIG_SETMASK, [], [pid 1757] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1748] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1746] <... futex resumed>) = 0 [pid 1737] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1757] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1748] creat("./bus", 000 [pid 1746] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1737] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1757] <... mprotect resumed>) = 0 [pid 1748] <... creat resumed>) = 6 [pid 1737] <... futex resumed>) = 0 [pid 1757] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1748] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1737] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1757] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1748] <... futex resumed>) = 1 [pid 1746] <... futex resumed>) = 0 [pid 1757] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1748] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1746] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1748] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1746] <... futex resumed>) = 0 [pid 1757] <... clone3 resumed> => {parent_tid=[1759]}, 88) = 1759 [pid 1748] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1746] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1757] rt_sigprocmask(SIG_SETMASK, [], [pid 1748] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1757] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1748] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1757] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1748] <... futex resumed>) = 1 [pid 1746] <... futex resumed>) = 0 [pid 1757] <... futex resumed>) = 0 [pid 1748] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1746] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1757] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1748] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1746] <... futex resumed>) = 0 [pid 1748] pwrite64(6, "+", 1, 0 [pid 1746] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1748] <... pwrite64 resumed>) = 1 [pid 1748] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1746] <... futex resumed>) = 0 [pid 1748] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1746] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1748] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1746] <... futex resumed>) = 0 [ 57.080236][ T1742] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 57.083113][ T1736] EXT4-fs (loop1): dirty_blocks=32 [ 57.095418][ T1742] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 57.111777][ T1736] EXT4-fs (loop1): Block reservation details [ 57.111963][ T1742] EXT4-fs (loop4): This should not happen!! Data will be lost [ 57.111963][ T1742] [ 57.127228][ T1742] EXT4-fs (loop4): Total free blocks count 0 [ 57.133333][ T1742] EXT4-fs (loop4): Free/Dirty block details [pid 1748] open("./bus", O_RDONLY [pid 1746] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1748] <... open resumed>) = 7 [pid 1748] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1746] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1758 attached [pid 1748] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1746] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1748] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1746] <... futex resumed>) = 0 [pid 1748] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1746] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1759 attached [pid 1748] <... copy_file_range resumed>) = 1 [pid 1746] <... futex resumed>) = 0 [pid 1759] set_robust_list(0x7f13c8ce49a0, 24 [pid 1748] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1746] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1759] <... set_robust_list resumed>) = 0 [pid 1748] <... futex resumed>) = 0 [pid 1746] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1759] rt_sigprocmask(SIG_SETMASK, [], [pid 1748] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1746] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1759] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1746] <... mprotect resumed>) = 0 [pid 1759] memfd_create("syzkaller", 0 [pid 1746] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1759] <... memfd_create resumed>) = 3 [pid 1746] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1759] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1746] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1759] <... mmap resumed>) = 0x7f13c08c4000 [pid 1759] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1758] set_robust_list(0x7f13c8cc39a0, 24 [pid 1746] <... clone3 resumed> => {parent_tid=[1760]}, 88) = 1760 [pid 1746] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1746] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1746] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1760 attached [pid 1760] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1760] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1760] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1758] <... set_robust_list resumed>) = 0 [pid 1736] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1747] <... futex resumed>) = ? [pid 1747] +++ killed by SIGBUS +++ [pid 1760] <... mmap resumed>) = 0x20000000 [pid 1759] <... write resumed>) = 1048576 [pid 1758] rt_sigprocmask(SIG_SETMASK, [], [pid 1742] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1758] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1758] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1759] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1759] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1759] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1756] <... futex resumed>) = ? [pid 1739] <... futex resumed>) = ? [pid 1737] <... futex resumed>) = 0 [pid 1759] close(3) = 0 [pid 1759] close(4) = 0 [pid 1759] mkdir("./file1", 0777) = 0 [pid 1759] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 1760] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1760] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1756] +++ killed by SIGBUS +++ [pid 1742] +++ killed by SIGBUS +++ [ 57.139123][ T1742] EXT4-fs (loop4): free_blocks=2415919504 [ 57.140995][ T1736] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 57.144830][ T1742] EXT4-fs (loop4): dirty_blocks=32 [ 57.155629][ T1742] EXT4-fs (loop4): Block reservation details [ 57.161730][ T1742] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 57.165620][ T1736] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 57.175434][ T1759] loop0: detected capacity change from 0 to 2048 [pid 1746] <... futex resumed>) = 0 [pid 1737] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1746] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1741] <... futex resumed>) = 0 [pid 1737] <... futex resumed>) = 1 [pid 1736] +++ killed by SIGBUS +++ [pid 1735] +++ killed by SIGBUS +++ [pid 1746] <... futex resumed>) = 1 [pid 1746] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1741] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000) = -1 EFAULT (Bad address) [pid 1741] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1741] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1737] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 1737] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1741] <... futex resumed>) = 0 [pid 1737] <... futex resumed>) = 1 [pid 1748] <... futex resumed>) = 0 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1735, si_uid=0, si_status=SIGBUS, si_utime=1, si_stime=17} --- [pid 1748] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000) = -1 EFAULT (Bad address) [pid 1748] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1746] <... futex resumed>) = 0 [pid 1748] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1746] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1748] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 57.180114][ T1736] EXT4-fs (loop1): This should not happen!! Data will be lost [ 57.180114][ T1736] [ 57.189626][ T1739] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 57.208013][ T1739] EXT4-fs (loop4): This should not happen!! Data will be lost [ 57.208013][ T1739] [ 57.212430][ T1741] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 1746] <... futex resumed>) = 0 [pid 1746] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1737] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] umount2("./56", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./56/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./56/binderfs") = 0 [pid 298] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1739] +++ killed by SIGBUS +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1739, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 301] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 301] umount2("./56", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1759] <... mount resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./56/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./56/binderfs") = 0 [pid 1759] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 301] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1759] <... openat resumed>) = 3 [pid 1759] chdir("./file1") = 0 [pid 1759] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1759] ioctl(4, LOOP_CLR_FD) = 0 [pid 1759] close(4) = 0 [pid 1759] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1757] <... futex resumed>) = 0 [pid 1759] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1757] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1759] <... open resumed>) = 4 [pid 1757] <... futex resumed>) = 0 [pid 1759] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1757] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1759] <... futex resumed>) = 0 [pid 1757] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1759] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1757] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1759] <... open resumed>) = 5 [pid 1757] <... futex resumed>) = 0 [pid 1759] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1757] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1759] <... futex resumed>) = 0 [pid 1757] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1759] creat("./bus", 000 [pid 1757] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1759] <... creat resumed>) = 6 [pid 1757] <... futex resumed>) = 0 [pid 1759] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1757] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1759] <... futex resumed>) = 0 [pid 1757] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1759] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1757] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1759] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1757] <... futex resumed>) = 0 [pid 1759] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1757] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1759] <... futex resumed>) = 0 [pid 1757] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1759] pwrite64(6, "+", 1, 0 [pid 1757] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1759] <... pwrite64 resumed>) = 1 [pid 1757] <... futex resumed>) = 0 [pid 1759] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1757] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1759] <... futex resumed>) = 0 [pid 1757] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1759] open("./bus", O_RDONLY [pid 1757] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1759] <... open resumed>) = 7 [pid 1757] <... futex resumed>) = 0 [pid 1759] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1757] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1759] <... futex resumed>) = 0 [pid 1757] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1759] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1757] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1759] <... copy_file_range resumed>) = 1 [pid 1757] <... futex resumed>) = 0 [pid 1759] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1757] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1759] <... futex resumed>) = 0 [pid 1757] <... futex resumed>) = 0 [pid 1759] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1757] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1757] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [ 57.218961][ T1748] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 57.232638][ T1741] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 57.249736][ T1748] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 57.258859][ T1741] EXT4-fs (loop3): This should not happen!! Data will be lost [ 57.258859][ T1741] [ 57.280093][ T1741] EXT4-fs (loop3): Total free blocks count 0 [ 57.285955][ T1741] EXT4-fs (loop3): Free/Dirty block details [pid 1757] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1746] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1757] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1763]}, 88) = 1763 [pid 1757] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1757] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1757] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1763 attached [pid 1737] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1741] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 301] <... umount2 resumed>) = 0 [pid 301] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./56/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./56/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1758] <... futex resumed>) = ? [pid 301] <... openat resumed>) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./56/file1") = 0 [pid 301] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 1758] +++ killed by SIGBUS +++ [pid 1741] +++ killed by SIGBUS +++ [pid 301] rmdir("./56") = 0 [pid 301] mkdir("./57", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] <... umount2 resumed>) = 0 [pid 301] <... clone resumed>, child_tidptr=0x55558909e690) = 1764 [ 57.291998][ T1741] EXT4-fs (loop3): free_blocks=2415919504 [ 57.297734][ T1741] EXT4-fs (loop3): dirty_blocks=32 [ 57.302699][ T1741] EXT4-fs (loop3): Block reservation details [ 57.308708][ T1741] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 57.314866][ T1748] EXT4-fs (loop2): This should not happen!! Data will be lost [ 57.314866][ T1748] [ 57.324794][ T1748] EXT4-fs (loop2): Total free blocks count 0 [pid 1763] set_robust_list(0x7f13c8cc39a0, 24./strace-static-x86_64: Process 1764 attached ) = 0 [pid 1763] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1763] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1737] +++ killed by SIGBUS +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1737, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 300] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 300] umount2("./55", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./55/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./55/binderfs" [pid 1757] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 300] <... unlink resumed>) = 0 [pid 1757] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1763] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1759] <... futex resumed>) = 0 [pid 1757] <... futex resumed>) = 1 [pid 298] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1763] <... futex resumed>) = 0 [pid 1759] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1757] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1763] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1759] <... open resumed>) = -1 EFAULT (Bad address) [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1759] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1757] <... futex resumed>) = 0 [pid 298] newfstatat(AT_FDCWD, "./56/file1", [pid 1759] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1757] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1757] <... futex resumed>) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1764] <... chdir resumed>) = 0 [pid 1757] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./56/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./56/file1") = 0 [pid 298] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./56") = 0 [pid 298] mkdir("./57", 0777) = 0 [pid 1764] prctl(PR_SET_PDEATHSIG, SIGKILL [ 57.331886][ T1737] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 57.344372][ T1737] EXT4-fs (loop3): This should not happen!! Data will be lost [ 57.344372][ T1737] [ 57.354395][ T1748] EXT4-fs (loop2): Free/Dirty block details [ 57.360443][ T1759] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 57.360554][ T1748] EXT4-fs (loop2): free_blocks=2415919504 [ 57.380454][ T1748] EXT4-fs (loop2): dirty_blocks=32 [ 57.385626][ T1748] EXT4-fs (loop2): Block reservation details [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3 [pid 1764] <... prctl resumed>) = 0 [pid 1748] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 300] <... umount2 resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 300] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./55/file1", [pid 298] <... clone resumed>, child_tidptr=0x55558909e690) = 1765 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 1764] setpgid(0, 0 [pid 1760] <... futex resumed>) = ? [pid 300] openat(AT_FDCWD, "./55/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1764] <... setpgid resumed>) = 0 [pid 1760] +++ killed by SIGBUS +++ [pid 1748] +++ killed by SIGBUS +++ [pid 300] <... openat resumed>) = 4 [pid 300] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1757] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 300] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./55/file1") = 0 [pid 300] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./55") = 0 [pid 1764] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 300] mkdir("./56", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [ 57.391754][ T1748] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 57.397973][ T1759] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 57.410342][ T1759] EXT4-fs (loop0): This should not happen!! Data will be lost [ 57.410342][ T1759] [ 57.411647][ T1746] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 57.420024][ T1759] EXT4-fs (loop0): Total free blocks count 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1766 ./strace-static-x86_64: Process 1765 attached [pid 1764] <... openat resumed>) = 3 ./strace-static-x86_64: Process 1766 attached [pid 1765] set_robust_list(0x55558909e6a0, 24 [pid 1764] write(3, "1000", 4 [pid 1765] <... set_robust_list resumed>) = 0 [pid 1765] chdir("./57") = 0 [pid 1765] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1765] setpgid(0, 0) = 0 [pid 1765] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1765] write(3, "1000", 4) = 4 [pid 1765] close(3) = 0 [pid 1766] set_robust_list(0x55558909e6a0, 24 [pid 1765] symlink("/dev/binderfs", "./binderfs" [pid 1764] <... write resumed>) = 4 executing program [pid 1765] <... symlink resumed>) = 0 [pid 1765] write(1, "executing program\n", 18) = 18 [pid 1765] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1765] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1765] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1765] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1765] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1765] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1765] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1767]}, 88) = 1767 [pid 1765] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1765] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1765] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1767 attached [pid 1767] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1766] <... set_robust_list resumed>) = 0 [pid 1764] close(3 [pid 1766] chdir("./56" [pid 1764] <... close resumed>) = 0 [pid 1767] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1767] memfd_create("syzkaller", 0) = 3 [pid 1767] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1766] <... chdir resumed>) = 0 [pid 1766] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1764] symlink("/dev/binderfs", "./binderfs" [pid 1767] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1764] <... symlink resumed>) = 0 [pid 1766] <... prctl resumed>) = 0 [pid 1766] setpgid(0, 0 [pid 1764] write(1, "executing program\n", 18 [pid 1759] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1767] <... write resumed>) = 1048576 [pid 1767] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1767] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1767] ioctl(4, LOOP_SET_FD, 3executing program executing program [pid 1766] <... setpgid resumed>) = 0 [pid 1764] <... write resumed>) = 18 [pid 1746] +++ killed by SIGBUS +++ [pid 1766] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1764] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1746, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=17} --- [pid 1766] <... openat resumed>) = 3 [pid 1764] <... futex resumed>) = 0 [pid 1766] write(3, "1000", 4 [pid 1764] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1766] <... write resumed>) = 4 [pid 1764] <... rt_sigaction resumed>NULL, 8) = 0 [pid 299] umount2("./57", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1766] close(3 [pid 1764] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1766] <... close resumed>) = 0 [pid 1764] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 299] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1766] symlink("/dev/binderfs", "./binderfs" [pid 1764] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 299] <... openat resumed>) = 3 [pid 1766] <... symlink resumed>) = 0 [pid 1764] <... mmap resumed>) = 0x7f13c8cc4000 [pid 299] newfstatat(3, "", [pid 1766] write(1, "executing program\n", 18 [pid 1764] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1766] <... write resumed>) = 18 [pid 1764] <... mprotect resumed>) = 0 [pid 299] getdents64(3, [pid 1766] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1764] rt_sigprocmask(SIG_BLOCK, ~[], [pid 299] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1766] <... futex resumed>) = 0 [pid 1764] <... rt_sigprocmask resumed>[], 8) = 0 [pid 299] umount2("./57/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1766] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1764] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1766] <... rt_sigaction resumed>NULL, 8) = 0 [pid 299] newfstatat(AT_FDCWD, "./57/binderfs", [pid 1766] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1764] <... clone3 resumed> => {parent_tid=[1768]}, 88) = 1768 [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1766] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1764] rt_sigprocmask(SIG_SETMASK, [], [pid 299] unlink("./57/binderfs" [pid 1766] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1764] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 299] <... unlink resumed>) = 0 [pid 1766] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1764] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1766] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1764] <... futex resumed>) = 0 [pid 1766] <... mprotect resumed>) = 0 [pid 1764] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1766] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1766] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0}./strace-static-x86_64: Process 1769 attached ./strace-static-x86_64: Process 1768 attached [pid 1767] <... ioctl resumed>) = 0 [pid 1766] <... clone3 resumed> => {parent_tid=[1769]}, 88) = 1769 [pid 1763] <... futex resumed>) = ? [ 57.438351][ T1759] EXT4-fs (loop0): Free/Dirty block details [ 57.444603][ T1759] EXT4-fs (loop0): free_blocks=2415919504 [ 57.450679][ T1759] EXT4-fs (loop0): dirty_blocks=32 [ 57.455877][ T1759] EXT4-fs (loop0): Block reservation details [ 57.462389][ T1759] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 57.468659][ T1746] EXT4-fs (loop2): This should not happen!! Data will be lost [ 57.468659][ T1746] [ 57.471308][ T1767] loop1: detected capacity change from 0 to 2048 executing program [pid 1769] set_robust_list(0x7f13c8ce49a0, 24 [pid 1768] set_robust_list(0x7f13c8ce49a0, 24 [pid 1767] close(3 [pid 1766] rt_sigprocmask(SIG_SETMASK, [], [pid 1763] +++ killed by SIGBUS +++ [pid 1759] +++ killed by SIGBUS +++ [pid 1769] <... set_robust_list resumed>) = 0 [pid 1769] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1769] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./57/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./57/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./57/file1") = 0 [pid 299] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./57") = 0 [pid 299] mkdir("./58", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1770 ./strace-static-x86_64: Process 1770 attached [pid 1770] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1770] chdir("./58") = 0 [pid 1770] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1770] setpgid(0, 0) = 0 [pid 1770] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1770] write(3, "1000", 4) = 4 [pid 1770] close(3) = 0 [pid 1770] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1770] write(1, "executing program\n", 18) = 18 [pid 1770] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1770] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1770] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1770] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1770] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1770] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1770] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1771]}, 88) = 1771 [pid 1770] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1770] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1770] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1771 attached [pid 1771] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1771] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1771] memfd_create("syzkaller", 0) = 3 [pid 1771] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1771] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1768] <... set_robust_list resumed>) = 0 [pid 1767] <... close resumed>) = 0 [pid 1767] close(4 [pid 1768] rt_sigprocmask(SIG_SETMASK, [], [pid 1766] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1768] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1767] <... close resumed>) = 0 [pid 1766] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1768] memfd_create("syzkaller", 0 [pid 1767] mkdir("./file1", 0777 [pid 1766] <... futex resumed>) = 1 [pid 1769] <... futex resumed>) = 0 [pid 1769] memfd_create("syzkaller", 0) = 3 [pid 1769] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1767] <... mkdir resumed>) = 0 [pid 1768] <... memfd_create resumed>) = 3 [pid 1767] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 1768] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1766] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1769] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1768] <... mmap resumed>) = 0x7f13c08c4000 [pid 1768] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1771] <... write resumed>) = 1048576 [pid 1769] <... write resumed>) = 1048576 [pid 1769] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1771] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1769] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1769] ioctl(4, LOOP_SET_FD, 3 [pid 1771] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1768] <... write resumed>) = 1048576 [pid 1771] ioctl(4, LOOP_SET_FD, 3 [pid 1769] <... ioctl resumed>) = 0 [pid 1768] munmap(0x7f13c08c4000, 138412032 [pid 1757] +++ killed by SIGBUS +++ [pid 1768] <... munmap resumed>) = 0 [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1757, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11} --- [pid 1768] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1768] ioctl(4, LOOP_SET_FD, 3 [pid 1771] <... ioctl resumed>) = 0 [pid 1769] close(3) = 0 [ 57.486942][ T1757] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 57.519367][ T1769] loop3: detected capacity change from 0 to 2048 [ 57.526278][ T1757] EXT4-fs (loop0): This should not happen!! Data will be lost [ 57.526278][ T1757] [ 57.529761][ T1771] loop2: detected capacity change from 0 to 2048 [pid 1769] close(4) = 0 [pid 1771] close(3) = 0 [pid 1771] close(4 [pid 1769] mkdir("./file1", 0777 [pid 1771] <... close resumed>) = 0 [pid 1769] <... mkdir resumed>) = 0 [pid 1771] mkdir("./file1", 0777) = 0 [pid 1771] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 1769] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 1768] <... ioctl resumed>) = 0 [pid 297] umount2("./57", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./57/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./57/binderfs") = 0 [pid 297] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1768] close(3) = 0 [pid 1767] <... mount resumed>) = 0 [pid 1767] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1768] close(4 [pid 1767] chdir("./file1") = 0 [pid 1767] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1767] ioctl(4, LOOP_CLR_FD) = 0 [pid 1767] close(4) = 0 [pid 1767] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1765] <... futex resumed>) = 0 [pid 1767] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1765] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1768] <... close resumed>) = 0 [pid 1767] <... open resumed>) = 4 [pid 1765] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1767] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1765] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1767] <... futex resumed>) = 0 [pid 1765] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1767] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1765] <... futex resumed>) = 0 [pid 1767] <... open resumed>) = 5 [pid 1765] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1767] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1768] mkdir("./file1", 0777) = 0 [pid 1768] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 1767] <... futex resumed>) = 1 [pid 1765] <... futex resumed>) = 0 [pid 1767] creat("./bus", 000 [pid 1765] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1767] <... creat resumed>) = 6 [pid 1765] <... futex resumed>) = 0 [pid 1767] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1765] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1767] <... futex resumed>) = 0 [pid 1765] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1767] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1765] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1767] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1765] <... futex resumed>) = 0 [pid 1767] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1765] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1767] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1767] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1765] <... futex resumed>) = 0 [pid 1767] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1765] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1767] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1765] <... futex resumed>) = 0 [pid 1767] pwrite64(6, "+", 1, 0 [pid 1765] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1767] <... pwrite64 resumed>) = 1 [pid 1767] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1765] <... futex resumed>) = 0 [pid 1767] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1765] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1767] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1765] <... futex resumed>) = 0 [pid 1767] open("./bus", O_RDONLY [pid 1765] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1767] <... open resumed>) = 7 [pid 1767] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1765] <... futex resumed>) = 0 [pid 297] <... umount2 resumed>) = 0 [pid 1765] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1765] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1765] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1765] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1767] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1765] rt_sigprocmask(SIG_BLOCK, ~[], [pid 297] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1767] <... copy_file_range resumed>) = 1 [pid 1765] <... rt_sigprocmask resumed>[], 8) = 0 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1767] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1765] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1767] <... futex resumed>) = 0 [pid 297] newfstatat(AT_FDCWD, "./57/file1", [pid 1767] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 1778 attached [pid 1765] <... clone3 resumed> => {parent_tid=[1778]}, 88) = 1778 [pid 297] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1778] set_robust_list(0x7f13c8cc39a0, 24 [pid 1765] rt_sigprocmask(SIG_SETMASK, [], [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1765] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1778] <... set_robust_list resumed>) = 0 [pid 1765] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] openat(AT_FDCWD, "./57/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1778] rt_sigprocmask(SIG_SETMASK, [], [pid 1765] <... futex resumed>) = 0 [pid 1778] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 297] <... openat resumed>) = 4 [pid 1778] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1765] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./57/file1") = 0 [pid 297] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./57" [pid 1769] <... mount resumed>) = 0 [pid 297] <... rmdir resumed>) = 0 [pid 297] mkdir("./58", 0777) = 0 [pid 1769] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1769] <... openat resumed>) = 3 [pid 297] <... openat resumed>) = 3 [pid 1778] <... mmap resumed>) = 0x20000000 [pid 1769] chdir("./file1" [pid 297] ioctl(3, LOOP_CLR_FD [pid 1778] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1769] <... chdir resumed>) = 0 [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1778] <... futex resumed>) = 1 [pid 1769] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1765] <... futex resumed>) = 0 [pid 297] close(3 [pid 1765] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1778] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1769] <... openat resumed>) = 4 [pid 1767] <... futex resumed>) = 0 [pid 1765] <... futex resumed>) = 1 [pid 297] <... close resumed>) = 0 [pid 1769] ioctl(4, LOOP_CLR_FD [pid 1767] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1765] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1769] <... ioctl resumed>) = 0 [pid 1767] <... open resumed>) = -1 EFAULT (Bad address) ./strace-static-x86_64: Process 1780 attached [pid 1769] close(4 [pid 1767] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1769] <... close resumed>) = 0 [pid 1767] <... futex resumed>) = 1 [pid 1765] <... futex resumed>) = 0 [pid 297] <... clone resumed>, child_tidptr=0x55558909e690) = 1780 [pid 1769] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1767] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1765] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1769] <... futex resumed>) = 1 [pid 1767] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 57.538341][ T1768] loop4: detected capacity change from 0 to 2048 [pid 1766] <... futex resumed>) = 0 [pid 1765] <... futex resumed>) = 0 [pid 1771] <... mount resumed>) = 0 [pid 1769] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1768] <... mount resumed>) = 0 [pid 1766] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1765] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1769] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1766] <... futex resumed>) = 0 [pid 1769] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1766] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1771] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1769] <... open resumed>) = 4 [pid 1768] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1769] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1766] <... futex resumed>) = 0 [pid 1769] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1766] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1769] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1766] <... futex resumed>) = 0 [pid 1769] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1766] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1769] <... open resumed>) = 5 [pid 1769] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1766] <... futex resumed>) = 0 [pid 1769] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1766] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1769] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1766] <... futex resumed>) = 0 [pid 1769] creat("./bus", 000 [pid 1766] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1771] <... openat resumed>) = 3 [pid 1769] <... creat resumed>) = 6 [pid 1768] <... openat resumed>) = 3 [pid 1771] chdir("./file1" [pid 1769] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1768] chdir("./file1" [pid 1780] set_robust_list(0x55558909e6a0, 24 [pid 1771] <... chdir resumed>) = 0 [pid 1768] <... chdir resumed>) = 0 [pid 1780] <... set_robust_list resumed>) = 0 [pid 1771] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1768] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1780] chdir("./58" [pid 1771] <... openat resumed>) = 4 [pid 1769] <... futex resumed>) = 1 [pid 1768] <... openat resumed>) = 4 [pid 1766] <... futex resumed>) = 0 [pid 1780] <... chdir resumed>) = 0 [pid 1771] ioctl(4, LOOP_CLR_FD [pid 1768] ioctl(4, LOOP_CLR_FD [pid 1780] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1771] <... ioctl resumed>) = 0 [pid 1768] <... ioctl resumed>) = 0 [pid 1780] <... prctl resumed>) = 0 [pid 1771] close(4 [pid 1768] close(4 [pid 1780] setpgid(0, 0 [pid 1771] <... close resumed>) = 0 [pid 1769] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1768] <... close resumed>) = 0 [pid 1766] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1780] <... setpgid resumed>) = 0 [pid 1771] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1768] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1780] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1771] <... futex resumed>) = 1 [pid 1770] <... futex resumed>) = 0 [pid 1768] <... futex resumed>) = 1 [pid 1764] <... futex resumed>) = 0 [pid 1780] <... openat resumed>) = 3 [pid 1771] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1770] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1768] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1764] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1780] write(3, "1000", 4 [pid 1771] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1770] <... futex resumed>) = 0 [pid 1768] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1764] <... futex resumed>) = 0 [pid 1780] <... write resumed>) = 4 [pid 1771] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1770] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1769] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1768] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1766] <... futex resumed>) = 0 [pid 1764] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1780] close(3 [pid 1771] <... open resumed>) = 4 [pid 1768] <... open resumed>) = 4 [pid 1780] <... close resumed>) = 0 [pid 1771] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [ 57.575308][ T1767] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 57.594517][ T1767] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 57.606612][ T1767] EXT4-fs (loop1): This should not happen!! Data will be lost [ 57.606612][ T1767] [ 57.616479][ T1767] EXT4-fs (loop1): Total free blocks count 0 [pid 1768] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1780] symlink("/dev/binderfs", "./binderfs" [pid 1771] <... futex resumed>) = 1 [pid 1770] <... futex resumed>) = 0 [pid 1768] <... futex resumed>) = 1 [pid 1764] <... futex resumed>) = 0 [pid 1780] <... symlink resumed>) = 0 [pid 1771] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1770] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1769] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1768] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1766] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1764] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000executing program [pid 1780] write(1, "executing program\n", 18 [pid 1771] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1770] <... futex resumed>) = 0 [pid 1769] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1768] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1764] <... futex resumed>) = 0 [pid 1780] <... write resumed>) = 18 [pid 1771] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1770] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1769] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1768] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1764] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1780] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1771] <... open resumed>) = 5 [pid 1769] <... futex resumed>) = 1 [pid 1768] <... open resumed>) = 5 [pid 1766] <... futex resumed>) = 0 [pid 1780] <... futex resumed>) = 0 [pid 1771] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1769] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1768] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1766] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1780] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1771] <... futex resumed>) = 1 [pid 1770] <... futex resumed>) = 0 [pid 1769] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1768] <... futex resumed>) = 1 [pid 1766] <... futex resumed>) = 0 [pid 1764] <... futex resumed>) = 0 [pid 1780] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1771] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1770] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1769] pwrite64(6, "+", 1, 0 [pid 1768] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1766] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1764] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1780] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1771] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1770] <... futex resumed>) = 0 [pid 1769] <... pwrite64 resumed>) = 1 [pid 1768] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1764] <... futex resumed>) = 0 [pid 1780] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1771] creat("./bus", 000 [pid 1770] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1769] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1768] creat("./bus", 000 [pid 1764] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1780] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1771] <... creat resumed>) = 6 [pid 1769] <... futex resumed>) = 1 [pid 1768] <... creat resumed>) = 6 [pid 1766] <... futex resumed>) = 0 [pid 1780] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1771] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1769] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1768] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1766] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1780] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1771] <... futex resumed>) = 1 [pid 1770] <... futex resumed>) = 0 [pid 1769] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1768] <... futex resumed>) = 1 [pid 1766] <... futex resumed>) = 0 [pid 1764] <... futex resumed>) = 0 [pid 1780] <... mprotect resumed>) = 0 [pid 1771] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1770] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1769] open("./bus", O_RDONLY [pid 1768] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1766] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1764] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1780] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1771] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1770] <... futex resumed>) = 0 [pid 1769] <... open resumed>) = 7 [pid 1768] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1764] <... futex resumed>) = 0 [pid 1780] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1771] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1770] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1769] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1768] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1764] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1780] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1771] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1769] <... futex resumed>) = 1 [pid 1768] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1766] <... futex resumed>) = 0 [pid 1765] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1771] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1769] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1768] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1766] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1780] <... clone3 resumed> => {parent_tid=[1782]}, 88) = 1782 [pid 1771] <... futex resumed>) = 1 [pid 1770] <... futex resumed>) = 0 [pid 1769] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1768] <... futex resumed>) = 1 [pid 1766] <... futex resumed>) = 0 [pid 1764] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1782 attached [pid 1780] rt_sigprocmask(SIG_SETMASK, [], [pid 1771] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1770] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1769] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1768] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1767] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1766] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1764] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1782] set_robust_list(0x7f13c8ce49a0, 24 [pid 1780] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1778] <... futex resumed>) = ? [pid 1771] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1770] <... futex resumed>) = 0 [pid 1769] <... copy_file_range resumed>) = 1 [pid 1782] <... set_robust_list resumed>) = 0 [pid 1780] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1778] +++ killed by SIGBUS +++ [pid 1771] pwrite64(6, "+", 1, 0 [pid 1770] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1769] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1768] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1766] <... futex resumed>) = 0 [pid 1764] <... futex resumed>) = 0 [pid 1780] <... futex resumed>) = 0 [pid 1771] <... pwrite64 resumed>) = 1 [pid 1769] <... futex resumed>) = 0 [pid 1768] pwrite64(6, "+", 1, 0 [pid 1766] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1764] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1780] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1771] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1769] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1768] <... pwrite64 resumed>) = 1 [pid 1766] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1771] <... futex resumed>) = 1 [pid 1770] <... futex resumed>) = 0 [pid 1768] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1766] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1771] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1770] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1768] <... futex resumed>) = 1 [pid 1766] <... mprotect resumed>) = 0 [pid 1764] <... futex resumed>) = 0 [pid 1771] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1770] <... futex resumed>) = 0 [pid 1768] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1766] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1764] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1771] open("./bus", O_RDONLY [pid 1770] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1768] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1766] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1764] <... futex resumed>) = 0 [pid 1771] <... open resumed>) = 7 [pid 1768] open("./bus", O_RDONLY [pid 1766] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1764] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1771] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1768] <... open resumed>) = 7 [pid 1771] <... futex resumed>) = 1 [pid 1770] <... futex resumed>) = 0 [pid 1768] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1766] <... clone3 resumed> => {parent_tid=[1783]}, 88) = 1783 [pid 1771] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1770] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1768] <... futex resumed>) = 1 [pid 1766] rt_sigprocmask(SIG_SETMASK, [], [pid 1764] <... futex resumed>) = 0 [pid 1771] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1770] <... futex resumed>) = 0 [pid 1768] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1766] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1764] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1771] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1770] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1768] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1766] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1764] <... futex resumed>) = 0 [pid 1782] rt_sigprocmask(SIG_SETMASK, [], [pid 1771] <... copy_file_range resumed>) = 1 [pid 1770] <... futex resumed>) = 0 [pid 1768] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1766] <... futex resumed>) = 0 [pid 1764] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1771] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1770] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1768] <... copy_file_range resumed>) = 1 [pid 1766] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1764] <... futex resumed>) = 0 [pid 1771] <... futex resumed>) = 0 [pid 1770] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1768] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1764] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1771] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1770] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1768] <... futex resumed>) = 0 [pid 1764] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1770] <... mprotect resumed>) = 0 [pid 1768] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1764] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1770] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1764] <... mprotect resumed>) = 0 [pid 1770] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1764] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1770] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1764] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1764] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1770] <... clone3 resumed> => {parent_tid=[1784]}, 88) = 1784 [pid 1770] rt_sigprocmask(SIG_SETMASK, [], [pid 1764] <... clone3 resumed> => {parent_tid=[1785]}, 88) = 1785 [pid 1770] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1764] rt_sigprocmask(SIG_SETMASK, [], [pid 1770] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1764] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1770] <... futex resumed>) = 0 [pid 1764] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1770] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1764] <... futex resumed>) = 0 [pid 1764] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1783 attached [pid 1783] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1783] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1783] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<NULL, 8) = 0 [pid 1767] +++ killed by SIGBUS +++ [pid 1783] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1765] +++ killed by SIGBUS +++ [pid 1785] rt_sigprocmask(SIG_SETMASK, [], [pid 1782] memfd_create("syzkaller", 0 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1765, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11} --- [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 1782] <... memfd_create resumed>) = 3 [pid 1782] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1784] set_robust_list(0x7f13c8cc39a0, 24 [pid 1782] <... mmap resumed>) = 0x7f13c08c4000 [pid 1784] <... set_robust_list resumed>) = 0 [pid 1784] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1784] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 298] <... restart_syscall resumed>) = 0 [pid 298] umount2("./57", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./57/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./57/binderfs") = 0 [ 57.622529][ T1767] EXT4-fs (loop1): Free/Dirty block details [ 57.628298][ T1767] EXT4-fs (loop1): free_blocks=2415919504 [ 57.634217][ T1767] EXT4-fs (loop1): dirty_blocks=32 [ 57.639178][ T1767] EXT4-fs (loop1): Block reservation details [ 57.645251][ T1767] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 57.653039][ T1767] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 57.665218][ T1767] EXT4-fs (loop1): This should not happen!! Data will be lost [ 57.665218][ T1767] [pid 298] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1785] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1784] <... mmap resumed>) = 0x20000000 [pid 1783] <... futex resumed>) = 1 [pid 1782] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1766] <... futex resumed>) = 0 [pid 1766] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1782] <... write resumed>) = 1048576 [pid 1769] <... futex resumed>) = 0 [pid 1766] <... futex resumed>) = 1 [pid 298] <... umount2 resumed>) = 0 [pid 1769] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1766] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1782] munmap(0x7f13c08c4000, 138412032 [pid 1769] <... open resumed>) = -1 EFAULT (Bad address) [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1782] <... munmap resumed>) = 0 [pid 298] newfstatat(AT_FDCWD, "./57/file1", [pid 1782] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1769] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1769] <... futex resumed>) = 1 [pid 1766] <... futex resumed>) = 0 [pid 1769] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1766] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1769] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1766] <... futex resumed>) = 0 [pid 1782] <... openat resumed>) = 4 [pid 298] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1782] ioctl(4, LOOP_SET_FD, 3 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 1785] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1784] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1783] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1766] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] openat(AT_FDCWD, "./57/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./57/file1") = 0 [pid 298] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./57") = 0 [pid 298] mkdir("./58", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1786 ./strace-static-x86_64: Process 1786 attached [pid 1786] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1786] chdir("./58") = 0 [pid 1786] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1786] setpgid(0, 0) = 0 [pid 1786] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1786] write(3, "1000", 4) = 4 [pid 1786] close(3) = 0 [pid 1786] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1786] write(1, "executing program\n", 18) = 18 [pid 1786] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1786] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1786] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1786] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1786] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1786] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1786] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1787]}, 88) = 1787 [pid 1786] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1786] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1786] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1782] <... ioctl resumed>) = 0 [pid 1782] close(3) = 0 [pid 1782] close(4) = 0 [pid 1782] mkdir("./file1", 0777) = 0 [pid 1782] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 1785] <... mmap resumed>) = 0x20000000 [pid 1785] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1785] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1784] <... futex resumed>) = 1 [pid 1784] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1770] <... futex resumed>) = 0 [pid 1764] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1787 attached [pid 1770] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1764] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1787] set_robust_list(0x7f13c8ce49a0, 24 [pid 1770] <... futex resumed>) = 1 [pid 1764] <... futex resumed>) = 1 [pid 1787] <... set_robust_list resumed>) = 0 [pid 1771] <... futex resumed>) = 0 [pid 1770] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1768] <... futex resumed>) = 0 [pid 1764] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1787] rt_sigprocmask(SIG_SETMASK, [], [pid 1771] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1768] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1787] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1771] <... open resumed>) = -1 EFAULT (Bad address) [pid 1768] <... open resumed>) = -1 EFAULT (Bad address) [pid 1787] memfd_create("syzkaller", 0 [pid 1771] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1768] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1787] <... memfd_create resumed>) = 3 [pid 1768] <... futex resumed>) = 1 [pid 1764] <... futex resumed>) = 0 [pid 1771] <... futex resumed>) = 1 [pid 1770] <... futex resumed>) = 0 [ 57.687715][ T1769] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 57.687905][ T1782] loop0: detected capacity change from 0 to 2048 [ 57.704814][ T1769] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 57.721087][ T1769] EXT4-fs (loop3): This should not happen!! Data will be lost [ 57.721087][ T1769] [ 57.731499][ T1769] EXT4-fs (loop3): Total free blocks count 0 [pid 1764] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1787] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1782] <... mount resumed>) = 0 [pid 1771] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1770] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1764] <... futex resumed>) = 0 [pid 1787] <... mmap resumed>) = 0x7f13c08c4000 [pid 1782] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1771] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1770] <... futex resumed>) = 0 [pid 1766] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 57.738621][ T1768] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 57.738728][ T1769] EXT4-fs (loop3): Free/Dirty block details [ 57.757307][ T1768] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 57.759872][ T1769] EXT4-fs (loop3): free_blocks=2415919504 [ 57.771299][ T1768] EXT4-fs (loop4): This should not happen!! Data will be lost [ 57.771299][ T1768] [pid 1764] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1787] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1782] <... openat resumed>) = 3 [pid 1787] <... write resumed>) = 1048576 [pid 1782] chdir("./file1" [pid 1770] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1787] munmap(0x7f13c08c4000, 138412032 [pid 1782] <... chdir resumed>) = 0 [pid 1787] <... munmap resumed>) = 0 [pid 1782] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1787] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1782] <... openat resumed>) = 4 [pid 1787] <... openat resumed>) = 4 [pid 1782] ioctl(4, LOOP_CLR_FD [pid 1787] ioctl(4, LOOP_SET_FD, 3 [pid 1782] <... ioctl resumed>) = 0 [ 57.777553][ T1769] EXT4-fs (loop3): dirty_blocks=32 [ 57.790513][ T1771] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 57.791845][ T1769] EXT4-fs (loop3): Block reservation details [ 57.809901][ T1771] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 57.811985][ T1769] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 57.824561][ T1787] loop1: detected capacity change from 0 to 2048 [pid 1782] close(4) = 0 [pid 1769] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1782] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1780] <... futex resumed>) = 0 [pid 1782] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1780] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1782] <... open resumed>) = 4 [pid 1780] <... futex resumed>) = 0 [pid 1782] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1780] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1782] <... futex resumed>) = 0 [pid 1780] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1782] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1780] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1782] <... open resumed>) = 5 [pid 1780] <... futex resumed>) = 0 [pid 1782] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1780] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1782] <... futex resumed>) = 0 [pid 1780] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1782] creat("./bus", 000 [pid 1780] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1782] <... creat resumed>) = 6 [pid 1780] <... futex resumed>) = 0 [pid 1782] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1780] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1782] <... futex resumed>) = 0 [pid 1780] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1782] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1780] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1782] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1780] <... futex resumed>) = 0 [pid 1782] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1780] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1782] <... futex resumed>) = 0 [pid 1780] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1782] pwrite64(6, "+", 1, 0 [pid 1780] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1782] <... pwrite64 resumed>) = 1 [pid 1780] <... futex resumed>) = 0 [pid 1782] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1780] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1782] <... futex resumed>) = 0 [pid 1780] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1782] open("./bus", O_RDONLY [pid 1780] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1782] <... open resumed>) = 7 [pid 1780] <... futex resumed>) = 0 [pid 1782] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1780] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1782] <... futex resumed>) = 0 [pid 1780] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1782] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1780] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1782] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1780] <... futex resumed>) = 0 [pid 1782] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1780] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1782] <... copy_file_range resumed>) = 1 [pid 1780] <... futex resumed>) = 0 [pid 1782] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1780] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1782] <... futex resumed>) = 0 [pid 1780] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1782] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1780] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1780] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1780] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1783] <... futex resumed>) = ? [pid 1780] <... clone3 resumed> => {parent_tid=[1790]}, 88) = 1790 [pid 1780] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1780] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1780] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1787] <... ioctl resumed>) = 0 [pid 1787] close(3) = 0 [pid 1787] close(4 [pid 1783] +++ killed by SIGBUS +++ [pid 1764] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 1790 attached [pid 1787] <... close resumed>) = 0 [pid 1787] mkdir("./file1", 0777 [pid 1770] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1787] <... mkdir resumed>) = 0 [ 57.829189][ T1768] EXT4-fs (loop4): Total free blocks count 0 [ 57.841067][ T1768] EXT4-fs (loop4): Free/Dirty block details [ 57.847685][ T1768] EXT4-fs (loop4): free_blocks=2415919504 [ 57.854283][ T1769] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 57.859937][ T1771] EXT4-fs (loop2): This should not happen!! Data will be lost [ 57.859937][ T1771] [ 57.867454][ T1768] EXT4-fs (loop4): dirty_blocks=32 [ 57.880980][ T1771] EXT4-fs (loop2): Total free blocks count 0 [pid 1787] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 1790] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1790] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1790] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1780] <... futex resumed>) = 0 [pid 1769] +++ killed by SIGBUS +++ [pid 1766] +++ killed by SIGBUS +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1766, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 1780] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... restart_syscall resumed>) = 0 [pid 300] umount2("./56", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./56/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./56/binderfs") = 0 [pid 300] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1782] <... futex resumed>) = 0 [pid 1780] <... futex resumed>) = 1 [pid 1787] <... mount resumed>) = 0 [pid 1787] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1787] chdir("./file1") = 0 [pid 1787] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1782] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1780] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1787] ioctl(4, LOOP_CLR_FD [pid 1782] <... open resumed>) = -1 EFAULT (Bad address) [pid 1771] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1768] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1787] <... ioctl resumed>) = 0 [pid 1782] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1787] close(4 [pid 1782] <... futex resumed>) = 1 [pid 1780] <... futex resumed>) = 0 [ 57.887029][ T1771] EXT4-fs (loop2): Free/Dirty block details [ 57.892989][ T1771] EXT4-fs (loop2): free_blocks=2415919504 [ 57.896337][ T1769] EXT4-fs (loop3): This should not happen!! Data will be lost [ 57.896337][ T1769] [ 57.898678][ T1771] EXT4-fs (loop2): dirty_blocks=32 [ 57.910440][ T1768] EXT4-fs (loop4): Block reservation details [ 57.913733][ T1771] EXT4-fs (loop2): Block reservation details [ 57.924053][ T1768] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 57.925365][ T1771] EXT4-fs (loop2): i_reserved_data_blocks=2 [pid 1784] <... futex resumed>) = ? [pid 1787] <... close resumed>) = 0 [pid 1784] +++ killed by SIGBUS +++ [pid 1780] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1787] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1780] <... futex resumed>) = 0 [pid 1787] <... futex resumed>) = 1 [pid 1780] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 57.937442][ T1782] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 57.938412][ T1771] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 57.952809][ T1782] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 57.976164][ T1782] EXT4-fs (loop0): This should not happen!! Data will be lost [ 57.976164][ T1782] [pid 1787] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1786] <... futex resumed>) = 0 [pid 1786] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1785] <... futex resumed>) = ? [pid 1787] <... futex resumed>) = 0 [pid 1786] <... futex resumed>) = 1 [pid 1785] +++ killed by SIGBUS +++ [pid 1787] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1786] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1787] <... open resumed>) = 4 [pid 1787] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1786] <... futex resumed>) = 0 [pid 1787] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1786] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1787] <... open resumed>) = 5 [pid 1786] <... futex resumed>) = 0 [pid 1787] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1786] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1787] <... futex resumed>) = 0 [pid 1786] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1787] creat("./bus", 000 [pid 1786] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1787] <... creat resumed>) = 6 [pid 1786] <... futex resumed>) = 0 [pid 1787] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1786] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1787] <... futex resumed>) = 0 [pid 1786] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1787] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1786] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1787] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1786] <... futex resumed>) = 0 [pid 1787] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1786] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1787] <... futex resumed>) = 0 [pid 1786] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1787] pwrite64(6, "+", 1, 0 [pid 1786] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1787] <... pwrite64 resumed>) = 1 [pid 1786] <... futex resumed>) = 0 [pid 1787] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1786] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1787] <... futex resumed>) = 0 [pid 1786] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1787] open("./bus", O_RDONLY [pid 1786] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1787] <... open resumed>) = 7 [pid 1786] <... futex resumed>) = 0 [pid 1787] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1786] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 1786] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1786] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1786] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1786] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1786] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1786] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1793]}, 88) = 1793 [pid 1786] rt_sigprocmask(SIG_SETMASK, [], [pid 1787] <... futex resumed>) = 0 [pid 1786] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1787] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1786] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1787] <... copy_file_range resumed>) = 1 [pid 1786] <... futex resumed>) = 0 [pid 1787] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1786] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1787] <... futex resumed>) = 0 [pid 1787] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1793 attached [pid 1793] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1793] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1793] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = -1 ETIMEDOUT (Connection timed out) [pid 1793] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1786] <... futex resumed>) = 0 [pid 1786] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1787] <... futex resumed>) = 0 [pid 1786] <... futex resumed>) = 1 [pid 1787] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1786] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1787] <... open resumed>) = -1 EFAULT (Bad address) [ 57.981798][ T1768] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 57.985711][ T1782] EXT4-fs (loop0): Total free blocks count 0 [ 57.985728][ T1782] EXT4-fs (loop0): Free/Dirty block details [ 57.985740][ T1782] EXT4-fs (loop0): free_blocks=2415919504 [ 58.015633][ T1782] EXT4-fs (loop0): dirty_blocks=32 [ 58.020742][ T1782] EXT4-fs (loop0): Block reservation details [pid 1787] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1786] <... futex resumed>) = 0 [pid 1786] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1786] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1793] <... futex resumed>) = 1 [pid 1793] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] <... umount2 resumed>) = 0 [pid 300] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./56/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./56/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1782] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 300] <... openat resumed>) = 4 [pid 300] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./56/file1") = 0 [pid 300] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./56") = 0 [pid 300] mkdir("./57", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 1790] <... futex resumed>) = ? [pid 1790] +++ killed by SIGBUS +++ [pid 1782] +++ killed by SIGBUS +++ [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1794 ./strace-static-x86_64: Process 1794 attached [pid 1794] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1794] chdir("./57") = 0 [pid 1794] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1794] setpgid(0, 0) = 0 [pid 1794] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1794] write(3, "1000", 4) = 4 [pid 1794] close(3) = 0 [pid 1794] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 1794] write(1, "executing program\n", 18) = 18 [pid 1794] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1794] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1794] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1794] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1794] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1794] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1771] +++ killed by SIGBUS +++ [pid 1770] +++ killed by SIGBUS +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1770, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 299] umount2("./58", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./58/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./58/binderfs") = 0 [pid 299] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1794] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1794] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1795]}, 88) = 1795 [pid 1794] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1794] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 58.023487][ T1787] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 58.026802][ T1782] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 58.047347][ T1771] EXT4-fs (loop2): This should not happen!! Data will be lost [ 58.047347][ T1771] [ 58.059606][ T1780] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 58.065552][ T1768] EXT4-fs (loop4): This should not happen!! Data will be lost [ 58.065552][ T1768] [ 58.072446][ T1780] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 1794] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1795 attached [pid 1780] +++ killed by SIGBUS +++ [pid 1768] +++ killed by SIGBUS +++ [pid 1764] +++ killed by SIGBUS +++ [pid 1795] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1795] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1795] memfd_create("syzkaller", 0) = 3 [pid 1795] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1795] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1795] munmap(0x7f13c08c4000, 138412032 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1764, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1780, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 297] restart_syscall(<... resuming interrupted clone ...> [pid 301] <... restart_syscall resumed>) = 0 [pid 297] <... restart_syscall resumed>) = 0 [pid 301] umount2("./57", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] umount2("./58", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] <... openat resumed>) = 3 [pid 297] <... openat resumed>) = 3 [pid 301] newfstatat(3, "", [pid 297] newfstatat(3, "", [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1786] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 301] getdents64(3, [pid 297] getdents64(3, [pid 301] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./57/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] umount2("./58/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./57/binderfs", [pid 297] newfstatat(AT_FDCWD, "./58/binderfs", [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./57/binderfs" [pid 297] unlink("./58/binderfs" [pid 301] <... unlink resumed>) = 0 [pid 297] <... unlink resumed>) = 0 [pid 301] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1795] <... munmap resumed>) = 0 [pid 1795] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1795] ioctl(4, LOOP_SET_FD, 3 [pid 297] <... umount2 resumed>) = 0 [pid 297] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./58/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./58/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./58/file1") = 0 [pid 297] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./58") = 0 [pid 297] mkdir("./59", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1797 executing program [pid 1795] <... ioctl resumed>) = 0 [pid 1795] close(3) = 0 [pid 1795] close(4) = 0 [pid 1795] mkdir("./file1", 0777) = 0 [pid 1795] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue"./strace-static-x86_64: Process 1797 attached [pid 1797] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1797] chdir("./59") = 0 [pid 1797] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1797] setpgid(0, 0) = 0 [pid 1797] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1797] write(3, "1000", 4) = 4 [pid 1797] close(3) = 0 [pid 1797] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1797] write(1, "executing program\n", 18) = 18 [pid 1797] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1797] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1797] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1797] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1797] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1797] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1797] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1798]}, 88) = 1798 [pid 1797] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1797] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1797] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1798 attached [pid 1798] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1798] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1798] memfd_create("syzkaller", 0) = 3 [pid 1798] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 301] <... umount2 resumed>) = 0 [pid 301] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./57/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./57/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./57/file1") = 0 [pid 301] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./57") = 0 [pid 301] mkdir("./58", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1799 [pid 1798] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1798] munmap(0x7f13c08c4000, 138412032) = 0 [ 58.072446][ T1780] [ 58.086736][ T1787] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 58.104293][ T1787] EXT4-fs (loop1): This should not happen!! Data will be lost [ 58.104293][ T1787] [ 58.107335][ T1795] loop3: detected capacity change from 0 to 2048 [ 58.114559][ T1787] EXT4-fs (loop1): Total free blocks count 0 [ 58.126220][ T1787] EXT4-fs (loop1): Free/Dirty block details [pid 1798] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1798] ioctl(4, LOOP_SET_FD, 3 [pid 1795] <... mount resumed>) = 0 [pid 299] <... umount2 resumed>) = 0 [pid 1798] <... ioctl resumed>) = 0 [pid 1795] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 1799 attached [pid 299] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1798] close(3) = 0 [pid 1798] close(4) = 0 [pid 1798] mkdir("./file1", 0777 [pid 1799] set_robust_list(0x55558909e6a0, 24 [pid 1798] <... mkdir resumed>) = 0 [pid 1795] <... openat resumed>) = 3 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1798] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 1799] <... set_robust_list resumed>) = 0 [pid 1795] chdir("./file1" [pid 299] newfstatat(AT_FDCWD, "./58/file1", [pid 1799] chdir("./58" [pid 1795] <... chdir resumed>) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1799] <... chdir resumed>) = 0 [pid 1795] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 299] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 1795] <... openat resumed>) = 4 [pid 1799] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 299] openat(AT_FDCWD, "./58/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1799] <... prctl resumed>) = 0 [pid 1795] ioctl(4, LOOP_CLR_FD [pid 299] <... openat resumed>) = 4 [pid 1799] setpgid(0, 0) = 0 [pid 1799] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1799] write(3, "1000", 4) = 4 [pid 1799] close(3) = 0 [pid 1799] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 1799] write(1, "executing program\n", 18) = 18 [pid 1799] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1799] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1799] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1799] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1799] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1799] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1799] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1803]}, 88) = 1803 [pid 1799] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 1803 attached NULL, 8) = 0 [pid 1795] <... ioctl resumed>) = 0 [pid 1787] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 299] newfstatat(4, "", [pid 1795] close(4 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1795] <... close resumed>) = 0 [pid 299] getdents64(4, [pid 1803] set_robust_list(0x7f13c8ce49a0, 24 [pid 1799] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1795] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1795] <... futex resumed>) = 1 [pid 1794] <... futex resumed>) = 0 [pid 299] getdents64(4, [pid 1795] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1794] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1795] <... open resumed>) = 4 [pid 1794] <... futex resumed>) = 0 [pid 1795] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1794] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] close(4 [pid 1795] <... futex resumed>) = 0 [pid 1794] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] <... close resumed>) = 0 [pid 1795] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1794] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] rmdir("./58/file1" [pid 1795] <... open resumed>) = 5 [pid 1794] <... futex resumed>) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 1795] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1794] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] getdents64(3, [pid 1795] <... futex resumed>) = 0 [pid 1794] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1795] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1794] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] close(3 [pid 1795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1794] <... futex resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 1795] creat("./bus", 000 [pid 1794] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] rmdir("./58" [pid 1795] <... creat resumed>) = 6 [pid 299] <... rmdir resumed>) = 0 [pid 1795] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] mkdir("./59", 0777 [pid 1795] <... futex resumed>) = 1 [pid 1794] <... futex resumed>) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 1795] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1794] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1803] <... set_robust_list resumed>) = 0 [pid 1799] <... futex resumed>) = 0 [pid 1795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1794] <... futex resumed>) = 0 [pid 299] <... openat resumed>) = 3 [pid 1795] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1794] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] ioctl(3, LOOP_CLR_FD [pid 1795] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1795] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] close(3 [pid 1795] <... futex resumed>) = 1 [pid 1794] <... futex resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 1795] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1794] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1803] rt_sigprocmask(SIG_SETMASK, [], [pid 1799] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1794] <... futex resumed>) = 0 [pid 1803] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1795] pwrite64(6, "+", 1, 0 [pid 1794] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... clone resumed>, child_tidptr=0x55558909e690) = 1805 [pid 1795] <... pwrite64 resumed>) = 1 [pid 1795] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1803] memfd_create("syzkaller", 0 [pid 1795] <... futex resumed>) = 1 [pid 1794] <... futex resumed>) = 0 [pid 1795] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1794] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1803] <... memfd_create resumed>) = 3 [pid 1795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1794] <... futex resumed>) = 0 [pid 1795] open("./bus", O_RDONLY [pid 1794] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1803] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1795] <... open resumed>) = 7 [pid 1795] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1794] <... futex resumed>) = 0 [pid 1795] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1794] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1794] <... futex resumed>) = 0 [pid 1795] copy_file_range(7, NULL, 5, [65536], 6, 0executing program [pid 1794] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1803] <... mmap resumed>) = 0x7f13c08c4000 [pid 1795] <... copy_file_range resumed>) = 1 [pid 1794] <... futex resumed>) = 0 [pid 1795] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1794] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1795] <... futex resumed>) = 0 [pid 1794] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1795] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1794] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1794] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1794] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1806]}, 88) = 1806 [pid 1794] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1794] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1794] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1805 attached [pid 1805] set_robust_list(0x55558909e6a0, 24./strace-static-x86_64: Process 1806 attached [pid 1806] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1806] rt_sigprocmask(SIG_SETMASK, [], [pid 1805] <... set_robust_list resumed>) = 0 [pid 1806] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1805] chdir("./59" [pid 1806] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1805] <... chdir resumed>) = 0 [pid 1805] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1805] setpgid(0, 0) = 0 [pid 1805] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1805] write(3, "1000", 4) = 4 [pid 1805] close(3) = 0 [pid 1805] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1805] write(1, "executing program\n", 18) = 18 [pid 1805] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1805] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1803] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1805] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1805] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1805] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1805] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1806] <... mmap resumed>) = 0x20000000 [pid 1798] <... mount resumed>) = 0 [pid 1805] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1805] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1807]}, 88) = 1807 [pid 1805] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1805] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1805] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1806] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1794] <... futex resumed>) = 0 [pid 1794] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1795] <... futex resumed>) = 0 [pid 1794] <... futex resumed>) = 1 [pid 1795] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1794] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1795] <... open resumed>) = -1 EFAULT (Bad address) [pid 1795] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1794] <... futex resumed>) = 0 [pid 1795] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1794] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 58.160709][ T1798] loop0: detected capacity change from 0 to 2048 [ 58.167358][ T1787] EXT4-fs (loop1): free_blocks=2415919504 [ 58.173198][ T1787] EXT4-fs (loop1): dirty_blocks=32 [ 58.178487][ T1787] EXT4-fs (loop1): Block reservation details [ 58.187349][ T1787] EXT4-fs (loop1): i_reserved_data_blocks=2 [pid 1794] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1807 attached [pid 1806] <... futex resumed>) = 1 [pid 1803] <... write resumed>) = 1048576 [pid 1798] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1803] munmap(0x7f13c08c4000, 138412032 [pid 1798] <... openat resumed>) = 3 [pid 1803] <... munmap resumed>) = 0 [pid 1798] chdir("./file1" [pid 1803] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1798] <... chdir resumed>) = 0 [pid 1803] <... openat resumed>) = 4 [pid 1798] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1803] ioctl(4, LOOP_SET_FD, 3 [pid 1798] <... openat resumed>) = 4 [pid 1803] <... ioctl resumed>) = 0 [pid 1798] ioctl(4, LOOP_CLR_FD [pid 1794] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1793] <... futex resumed>) = ? [pid 1807] set_robust_list(0x7f13c8ce49a0, 24 [pid 1806] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1798] <... ioctl resumed>) = 0 [pid 1787] +++ killed by SIGBUS +++ [pid 1807] <... set_robust_list resumed>) = 0 [pid 1798] close(4 [pid 1807] rt_sigprocmask(SIG_SETMASK, [], [pid 1798] <... close resumed>) = 0 [pid 1807] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1798] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [ 58.208866][ T1795] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 58.223595][ T1803] loop4: detected capacity change from 0 to 2048 [ 58.223773][ T1795] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 58.243354][ T1786] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 1807] memfd_create("syzkaller", 0 [pid 1798] <... futex resumed>) = 1 [pid 1797] <... futex resumed>) = 0 [pid 1803] close(3 [pid 1793] +++ killed by SIGBUS +++ [pid 1803] <... close resumed>) = 0 [pid 1803] close(4 [pid 1798] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1797] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1803] <... close resumed>) = 0 [pid 1797] <... futex resumed>) = 0 [pid 1798] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1803] mkdir("./file1", 0777) = 0 [pid 1803] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 1807] <... memfd_create resumed>) = 3 [pid 1807] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1807] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1807] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1807] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1807] ioctl(4, LOOP_SET_FD, 3 [pid 1798] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1797] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1807] <... ioctl resumed>) = 0 [pid 1807] close(3) = 0 [pid 1807] close(4) = 0 [pid 1798] <... open resumed>) = 4 [pid 1798] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1807] mkdir("./file1", 0777 [pid 1798] <... futex resumed>) = 1 [pid 1797] <... futex resumed>) = 0 [pid 1807] <... mkdir resumed>) = 0 [pid 1807] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 1797] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1798] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1797] <... futex resumed>) = 0 [pid 1798] <... open resumed>) = 5 [pid 1797] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1798] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1797] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1798] <... futex resumed>) = 0 [pid 1797] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1798] creat("./bus", 000 [pid 1797] <... futex resumed>) = 0 [pid 1798] <... creat resumed>) = 6 [pid 1797] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1798] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1797] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1798] <... futex resumed>) = 0 [pid 1797] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1798] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1797] <... futex resumed>) = 0 [pid 1798] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1797] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1798] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1797] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1798] <... futex resumed>) = 0 [pid 1797] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1798] pwrite64(6, "+", 1, 0 [pid 1797] <... futex resumed>) = 0 [pid 1798] <... pwrite64 resumed>) = 1 [pid 1797] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1798] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1797] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1798] <... futex resumed>) = 0 [pid 1797] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1798] open("./bus", O_RDONLY [pid 1797] <... futex resumed>) = 0 [pid 1798] <... open resumed>) = 7 [pid 1797] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1798] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1797] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1798] <... futex resumed>) = 0 [pid 1797] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1798] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1797] <... futex resumed>) = 0 [pid 1798] <... copy_file_range resumed>) = 1 [pid 1797] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1798] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1797] <... futex resumed>) = 0 [pid 1798] <... futex resumed>) = 0 [pid 1797] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1798] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1797] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1797] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1797] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1797] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1808]}, 88) = 1808 [pid 1797] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1797] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1797] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1803] <... mount resumed>) = 0 [pid 1794] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1803] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1803] chdir("./file1") = 0 [pid 1803] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1803] ioctl(4, LOOP_CLR_FD) = 0 [pid 1803] close(4) = 0 [pid 1803] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1799] <... futex resumed>) = 0 [pid 1803] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1799] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1803] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1799] <... futex resumed>) = 0 [pid 1803] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [ 58.252748][ T1807] loop2: detected capacity change from 0 to 2048 [ 58.264881][ T1795] EXT4-fs (loop3): This should not happen!! Data will be lost [ 58.264881][ T1795] [ 58.275399][ T1795] EXT4-fs (loop3): Total free blocks count 0 [ 58.281341][ T1795] EXT4-fs (loop3): Free/Dirty block details [ 58.283517][ T1786] EXT4-fs (loop1): This should not happen!! Data will be lost [ 58.283517][ T1786] [ 58.287179][ T1795] EXT4-fs (loop3): free_blocks=2415919504 [ 58.287198][ T1795] EXT4-fs (loop3): dirty_blocks=32 [pid 1799] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1803] <... open resumed>) = 4 ./strace-static-x86_64: Process 1808 attached [pid 1803] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1808] set_robust_list(0x7f13c8cc39a0, 24 [pid 1803] <... futex resumed>) = 1 [pid 1799] <... futex resumed>) = 0 [pid 1808] <... set_robust_list resumed>) = 0 [pid 1803] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1799] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1808] rt_sigprocmask(SIG_SETMASK, [], [pid 1803] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1799] <... futex resumed>) = 0 [pid 1808] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1803] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1799] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1808] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1803] <... open resumed>) = 5 [pid 1795] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1786] +++ killed by SIGBUS +++ [pid 1806] <... futex resumed>) = ? [pid 1808] <... mmap resumed>) = 0x20000000 [pid 1807] <... mount resumed>) = 0 [pid 1806] +++ killed by SIGBUS +++ [pid 1803] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1786, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 1808] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1807] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1803] <... futex resumed>) = 1 [pid 1799] <... futex resumed>) = 0 [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 1808] <... futex resumed>) = 1 [pid 1807] <... openat resumed>) = 3 [pid 1803] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1799] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1797] <... futex resumed>) = 0 [pid 298] <... restart_syscall resumed>) = 0 [pid 1808] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1807] chdir("./file1" [pid 1803] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1799] <... futex resumed>) = 0 [pid 1797] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1807] <... chdir resumed>) = 0 [pid 1803] creat("./bus", 000 [pid 1799] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1798] <... futex resumed>) = 0 [pid 1797] <... futex resumed>) = 1 [pid 1807] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1807] ioctl(4, LOOP_CLR_FD) = 0 [pid 1807] close(4) = 0 [pid 1807] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1805] <... futex resumed>) = 0 [pid 1807] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1805] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1807] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1805] <... futex resumed>) = 0 [pid 1807] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1805] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1807] <... open resumed>) = 4 [pid 1807] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1805] <... futex resumed>) = 0 [pid 1807] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1805] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1807] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1805] <... futex resumed>) = 0 [pid 1807] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1805] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1807] <... open resumed>) = 5 [pid 1807] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1805] <... futex resumed>) = 0 [pid 1807] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1805] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1807] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1805] <... futex resumed>) = 0 [pid 1807] creat("./bus", 000 [pid 1805] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1807] <... creat resumed>) = 6 [pid 1807] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1805] <... futex resumed>) = 0 [pid 1807] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1805] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1807] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1805] <... futex resumed>) = 0 [pid 1807] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1805] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1807] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1807] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1805] <... futex resumed>) = 0 [pid 1807] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1805] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1807] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1805] <... futex resumed>) = 0 [pid 1807] pwrite64(6, "+", 1, 0 [pid 1805] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1807] <... pwrite64 resumed>) = 1 [pid 1807] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1805] <... futex resumed>) = 0 [pid 1807] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1805] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1803] <... creat resumed>) = 6 [pid 1798] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1797] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1807] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1805] <... futex resumed>) = 0 [pid 1807] open("./bus", O_RDONLY [pid 1805] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] umount2("./58", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1807] <... open resumed>) = 7 [pid 1807] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1805] <... futex resumed>) = 0 [pid 1807] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1805] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1807] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1805] <... futex resumed>) = 0 [pid 1807] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1805] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1807] <... copy_file_range resumed>) = 1 [pid 1805] <... futex resumed>) = 0 [pid 1807] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1805] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1807] <... futex resumed>) = 0 [pid 1805] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1807] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1805] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1805] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1805] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1813]}, 88) = 1813 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1805] rt_sigprocmask(SIG_SETMASK, [], [pid 1803] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1798] <... open resumed>) = -1 EFAULT (Bad address) [pid 1805] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 298] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1805] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1803] <... futex resumed>) = 1 [pid 1799] <... futex resumed>) = 0 [pid 1798] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1805] <... futex resumed>) = 0 [pid 298] <... openat resumed>) = 3 [pid 1805] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1803] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1799] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1798] <... futex resumed>) = 1 [pid 1797] <... futex resumed>) = 0 [pid 298] newfstatat(3, "", [pid 1803] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1799] <... futex resumed>) = 0 [pid 1798] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1797] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1803] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1799] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1798] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1797] <... futex resumed>) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1803] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 1813 attached [pid 1813] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1813] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1813] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1805] <... futex resumed>) = 0 [pid 1805] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1807] <... futex resumed>) = 0 [pid 1805] <... futex resumed>) = 1 [pid 1807] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1805] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1807] <... open resumed>) = -1 EFAULT (Bad address) [ 58.307159][ T1795] EXT4-fs (loop3): Block reservation details [ 58.312982][ T1795] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 58.320154][ T1795] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 58.332479][ T1795] EXT4-fs (loop3): This should not happen!! Data will be lost [ 58.332479][ T1795] [pid 1807] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1805] <... futex resumed>) = 0 [pid 1807] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1805] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1807] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1805] <... futex resumed>) = 0 [pid 1805] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1803] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1797] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] getdents64(3, [pid 1803] <... futex resumed>) = 1 [pid 1799] <... futex resumed>) = 0 [pid 298] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1803] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1799] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] umount2("./58/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1803] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1799] <... futex resumed>) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1803] pwrite64(6, "+", 1, 0 [pid 1799] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] newfstatat(AT_FDCWD, "./58/binderfs", [pid 1803] <... pwrite64 resumed>) = 1 [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1803] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] unlink("./58/binderfs" [pid 1803] <... futex resumed>) = 1 [pid 1799] <... futex resumed>) = 0 [pid 298] <... unlink resumed>) = 0 [pid 1803] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1799] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1803] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1799] <... futex resumed>) = 0 [pid 1803] open("./bus", O_RDONLY [pid 1799] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1803] <... open resumed>) = 7 [pid 1803] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1799] <... futex resumed>) = 0 [pid 1803] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1799] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1803] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1799] <... futex resumed>) = 0 [pid 1803] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1799] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1803] <... copy_file_range resumed>) = 1 [pid 1799] <... futex resumed>) = 0 [pid 1803] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1799] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1803] <... futex resumed>) = 0 [pid 1799] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1803] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1799] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1799] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1799] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1814]}, 88) = 1814 [pid 1799] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1799] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1799] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1813] <... futex resumed>) = 1 [pid 1813] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1814 attached [pid 1814] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1814] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1814] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1799] <... futex resumed>) = 0 [pid 1799] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1803] <... futex resumed>) = 0 [pid 1799] <... futex resumed>) = 1 [pid 1803] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1799] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1803] <... open resumed>) = -1 EFAULT (Bad address) [pid 1803] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1799] <... futex resumed>) = 0 [pid 1803] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [ 58.348275][ T1798] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 58.352733][ T1807] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 58.363591][ T1798] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 58.390142][ T1798] EXT4-fs (loop0): This should not happen!! Data will be lost [ 58.390142][ T1798] [ 58.399673][ T1798] EXT4-fs (loop0): Total free blocks count 0 [pid 1799] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1803] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1799] <... futex resumed>) = 0 [pid 1799] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1814] <... futex resumed>) = 1 [pid 1814] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1795] +++ killed by SIGBUS +++ [pid 1794] +++ killed by SIGBUS +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1794, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9} --- [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 298] <... umount2 resumed>) = 0 [pid 1805] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1797] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 298] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] <... restart_syscall resumed>) = 0 [pid 300] umount2("./57", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./57/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./57/binderfs") = 0 [pid 300] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] newfstatat(AT_FDCWD, "./58/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./58/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./58/file1") = 0 [pid 298] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./58") = 0 [pid 298] mkdir("./59", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1815 [ 58.405320][ T1803] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 58.405815][ T1798] EXT4-fs (loop0): Free/Dirty block details [ 58.425724][ T1798] EXT4-fs (loop0): free_blocks=2415919504 [ 58.431340][ T1798] EXT4-fs (loop0): dirty_blocks=32 [ 58.436951][ T1798] EXT4-fs (loop0): Block reservation details [ 58.444738][ T1798] EXT4-fs (loop0): i_reserved_data_blocks=2 ./strace-static-x86_64: Process 1815 attached [pid 1798] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 300] <... umount2 resumed>) = 0 [pid 1799] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1815] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1808] <... futex resumed>) = ? [pid 300] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1815] chdir("./59" [pid 1808] +++ killed by SIGBUS +++ [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 58.448590][ T1803] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 58.453545][ T1807] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 58.475101][ T1807] EXT4-fs (loop2): This should not happen!! Data will be lost [ 58.475101][ T1807] [ 58.476613][ T1798] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 58.485045][ T1807] EXT4-fs (loop2): Total free blocks count 0 [ 58.498358][ T1803] EXT4-fs (loop4): This should not happen!! Data will be lost [ 58.498358][ T1803] [pid 1815] <... chdir resumed>) = 0 [pid 300] newfstatat(AT_FDCWD, "./57/file1", [pid 1815] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1798] +++ killed by SIGBUS +++ [pid 1797] +++ killed by SIGBUS +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1797, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 297] umount2("./59", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./59/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./59/binderfs") = 0 [pid 297] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1815] <... prctl resumed>) = 0 [pid 1815] setpgid(0, 0) = 0 [pid 1815] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 300] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1815] <... openat resumed>) = 3 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1815] write(3, "1000", 4) = 4 [pid 1815] close(3) = 0 [pid 1815] symlink("/dev/binderfs", "./binderfs") = 0 [pid 300] openat(AT_FDCWD, "./57/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYexecuting program [pid 1815] write(1, "executing program\n", 18 [pid 300] <... openat resumed>) = 4 [pid 1815] <... write resumed>) = 18 [pid 300] newfstatat(4, "", [pid 1815] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1815] <... futex resumed>) = 0 [pid 1815] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1815] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1815] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1815] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1815] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1815] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1816]}, 88) = 1816 [pid 1815] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1815] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1815] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1816 attached [pid 1816] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1816] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1816] memfd_create("syzkaller", 0) = 3 [pid 1816] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 300] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./57/file1") = 0 [pid 300] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 300] close(3 [pid 1816] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 300] <... close resumed>) = 0 [pid 300] rmdir("./57") = 0 [pid 300] mkdir("./58", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] <... umount2 resumed>) = 0 [ 58.502808][ T1807] EXT4-fs (loop2): Free/Dirty block details [ 58.513854][ T1798] EXT4-fs (loop0): This should not happen!! Data will be lost [ 58.513854][ T1798] [ 58.517974][ T1807] EXT4-fs (loop2): free_blocks=2415919504 [ 58.534824][ T1803] EXT4-fs (loop4): Total free blocks count 0 [ 58.543125][ T1803] EXT4-fs (loop4): Free/Dirty block details [ 58.550092][ T1807] EXT4-fs (loop2): dirty_blocks=32 [pid 1816] <... write resumed>) = 1048576 [pid 1816] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1816] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1816] ioctl(4, LOOP_SET_FD, 3 [pid 297] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 1817 attached [pid 1817] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1817] chdir("./58") = 0 [pid 1817] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1817] setpgid(0, 0) = 0 [pid 1817] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1817] write(3, "1000", 4) = 4 [pid 1817] close(3) = 0 [pid 1817] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 1817] write(1, "executing program\n", 18) = 18 [pid 1817] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1817] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 300] <... clone resumed>, child_tidptr=0x55558909e690) = 1817 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./59/file1", [pid 1817] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1817] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1817] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1817] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1817] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1818]}, 88) = 1818 [pid 1817] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1817] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1817] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1816] <... ioctl resumed>) = 0 [pid 1816] close(3) = 0 [pid 1816] close(4./strace-static-x86_64: Process 1818 attached [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1816] <... close resumed>) = 0 [pid 1816] mkdir("./file1", 0777) = 0 [pid 1816] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 1807] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1813] <... futex resumed>) = ? [pid 1813] +++ killed by SIGBUS +++ [pid 1818] set_robust_list(0x7f13c8ce49a0, 24 [ 58.560160][ T1803] EXT4-fs (loop4): free_blocks=2415919504 [ 58.565588][ T1816] loop1: detected capacity change from 0 to 2048 [ 58.566751][ T1807] EXT4-fs (loop2): Block reservation details [ 58.578274][ T1803] EXT4-fs (loop4): dirty_blocks=32 [ 58.583759][ T1803] EXT4-fs (loop4): Block reservation details [ 58.589601][ T1807] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 58.591598][ T1807] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 297] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1818] <... set_robust_list resumed>) = 0 [pid 1803] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1818] rt_sigprocmask(SIG_SETMASK, [], [pid 297] openat(AT_FDCWD, "./59/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1818] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 297] <... openat resumed>) = 4 [pid 1818] memfd_create("syzkaller", 0 [pid 297] newfstatat(4, "", [pid 1818] <... memfd_create resumed>) = 3 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1818] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 297] getdents64(4, [pid 1818] <... mmap resumed>) = 0x7f13c08c4000 [pid 297] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1818] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 297] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./59/file1") = 0 [pid 297] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./59") = 0 [pid 297] mkdir("./60", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1819 ./strace-static-x86_64: Process 1819 attached [pid 1818] <... write resumed>) = 1048576 [pid 1814] <... futex resumed>) = ? [pid 1807] +++ killed by SIGBUS +++ [pid 1805] +++ killed by SIGBUS +++ [pid 1814] +++ killed by SIGBUS +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1805, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=18} --- [pid 1819] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1819] chdir("./60") = 0 [pid 299] umount2("./59", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1819] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1819] setpgid(0, 0 [pid 299] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1819] <... setpgid resumed>) = 0 executing program [pid 1819] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 299] <... openat resumed>) = 3 [pid 1819] <... openat resumed>) = 3 [pid 299] newfstatat(3, "", [pid 1819] write(3, "1000", 4) = 4 [pid 1819] close(3) = 0 [pid 1819] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1819] write(1, "executing program\n", 18) = 18 [pid 1819] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1819] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1819] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1819] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1819] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1819] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1819] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1820]}, 88) = 1820 [pid 1819] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1819] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1819] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1820 attached [pid 1820] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1820] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./59/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1820] memfd_create("syzkaller", 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1820] <... memfd_create resumed>) = 3 [pid 1820] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 299] newfstatat(AT_FDCWD, "./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./59/binderfs") = 0 [pid 299] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1820] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1820] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1820] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1820] ioctl(4, LOOP_SET_FD, 3 [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1820] <... ioctl resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1820] close(3) = 0 [pid 1820] close(4) = 0 [pid 1820] mkdir("./file1", 0777) = 0 [pid 1820] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 1818] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1818] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 58.595801][ T1803] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 58.608945][ T1807] EXT4-fs (loop2): This should not happen!! Data will be lost [ 58.608945][ T1807] [ 58.637843][ T1803] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 58.643384][ T1820] loop0: detected capacity change from 0 to 2048 [pid 1818] ioctl(4, LOOP_SET_FD, 3 [pid 299] newfstatat(AT_FDCWD, "./59/file1", [pid 1803] +++ killed by SIGBUS +++ [pid 1799] +++ killed by SIGBUS +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1799, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11} --- [pid 301] umount2("./58", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1818] <... ioctl resumed>) = 0 [pid 1818] close(3 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./58/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./58/binderfs" [pid 1816] <... mount resumed>) = 0 [pid 1818] <... close resumed>) = 0 [pid 1816] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 301] <... unlink resumed>) = 0 [pid 299] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1816] <... openat resumed>) = 3 [pid 1816] chdir("./file1") = 0 [pid 1816] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1816] ioctl(4, LOOP_CLR_FD) = 0 [pid 1816] close(4 [pid 1820] <... mount resumed>) = 0 [pid 1818] close(4 [pid 1816] <... close resumed>) = 0 [pid 301] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1820] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1818] <... close resumed>) = 0 [pid 1816] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] openat(AT_FDCWD, "./59/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1820] <... openat resumed>) = 3 [pid 1816] <... futex resumed>) = 1 [pid 1815] <... futex resumed>) = 0 [pid 299] <... openat resumed>) = 4 [pid 1820] chdir("./file1" [pid 1816] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1815] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1820] <... chdir resumed>) = 0 [pid 1816] <... open resumed>) = 4 [pid 1815] <... futex resumed>) = 0 [pid 1816] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1820] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1815] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1820] <... openat resumed>) = 4 [pid 1815] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1820] ioctl(4, LOOP_CLR_FD [pid 1815] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1820] <... ioctl resumed>) = 0 [pid 1815] <... futex resumed>) = 0 [pid 299] newfstatat(4, "", [pid 1820] close(4 [pid 1815] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1820] <... close resumed>) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1820] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] getdents64(4, [pid 1820] <... futex resumed>) = 1 [pid 1819] <... futex resumed>) = 0 [pid 299] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1820] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1819] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1820] <... open resumed>) = 4 [pid 1819] <... futex resumed>) = 0 [pid 299] getdents64(4, [pid 1820] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1819] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1820] <... futex resumed>) = 0 [pid 1819] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1820] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1819] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] close(4 [pid 1820] <... open resumed>) = 5 [pid 1819] <... futex resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 1820] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1819] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] rmdir("./59/file1" [pid 1820] <... futex resumed>) = 0 [pid 1819] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1820] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1819] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1816] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 301] <... umount2 resumed>) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 1820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1819] <... futex resumed>) = 0 [pid 1816] <... open resumed>) = 5 [pid 1820] creat("./bus", 000 [pid 1819] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] getdents64(3, [pid 1820] <... creat resumed>) = 6 [pid 1816] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1820] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1820] <... futex resumed>) = 1 [pid 1819] <... futex resumed>) = 0 [pid 1816] <... futex resumed>) = 1 [pid 1815] <... futex resumed>) = 0 [pid 1820] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1819] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1816] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1815] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] close(3 [pid 1820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1819] <... futex resumed>) = 0 [pid 1816] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1815] <... futex resumed>) = 0 [pid 1820] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1819] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1816] creat("./bus", 000 [pid 1815] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... close resumed>) = 0 [pid 1820] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1816] <... creat resumed>) = 6 [pid 1820] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] rmdir("./59" [pid 1820] <... futex resumed>) = 1 [pid 1819] <... futex resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... rmdir resumed>) = 0 [pid 1820] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1819] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1819] <... futex resumed>) = 0 [pid 301] newfstatat(AT_FDCWD, "./58/file1", [pid 299] mkdir("./60", 0777 [pid 1820] pwrite64(6, "+", 1, 0 [pid 1819] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 1820] <... pwrite64 resumed>) = 1 [pid 1820] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1820] <... futex resumed>) = 1 [pid 1819] <... futex resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... openat resumed>) = 3 [pid 1820] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1819] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] openat(AT_FDCWD, "./58/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 299] ioctl(3, LOOP_CLR_FD [pid 1820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1819] <... futex resumed>) = 0 [pid 301] <... openat resumed>) = 4 [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1820] open("./bus", O_RDONLY [pid 1819] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1816] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] newfstatat(4, "", [pid 299] close(3 [pid 1820] <... open resumed>) = 7 [pid 1818] mkdir("./file1", 0777 [pid 1816] <... futex resumed>) = 1 [pid 1815] <... futex resumed>) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] <... close resumed>) = 0 [pid 1820] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1818] <... mkdir resumed>) = 0 [pid 1816] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1815] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] getdents64(4, [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1820] <... futex resumed>) = 1 [pid 1819] <... futex resumed>) = 0 [pid 1818] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 1816] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1815] <... futex resumed>) = 0 [pid 301] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1820] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1819] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1815] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] getdents64(4, [pid 299] <... clone resumed>, child_tidptr=0x55558909e690) = 1825 [pid 1820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1819] <... futex resumed>) = 0 [pid 1816] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 301] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1820] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1819] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1816] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 301] close(4 [pid 1820] <... copy_file_range resumed>) = 1 [pid 1819] <... futex resumed>) = 0 [pid 1816] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... close resumed>) = 0 [pid 1820] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1819] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1816] <... futex resumed>) = 1 [pid 1815] <... futex resumed>) = 0 [pid 301] rmdir("./58/file1" [pid 1820] <... futex resumed>) = 0 [pid 1819] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1816] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1815] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... rmdir resumed>) = 0 [pid 1820] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1819] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1816] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1815] <... futex resumed>) = 0 [pid 301] getdents64(3, [pid 1819] <... mprotect resumed>) = 0 [pid 1816] pwrite64(6, "+", 1, 0 [pid 1815] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1819] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1816] <... pwrite64 resumed>) = 1 [pid 301] close(3 [pid 1819] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1816] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... close resumed>) = 0 [pid 1819] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1816] <... futex resumed>) = 1 [pid 1815] <... futex resumed>) = 0 [pid 301] rmdir("./58" [pid 1816] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1815] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... rmdir resumed>) = 0 [pid 1819] <... clone3 resumed> => {parent_tid=[1826]}, 88) = 1826 [pid 1816] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1815] <... futex resumed>) = 0 [pid 301] mkdir("./59", 0777./strace-static-x86_64: Process 1826 attached ./strace-static-x86_64: Process 1825 attached [pid 1819] rt_sigprocmask(SIG_SETMASK, [], [pid 1816] open("./bus", O_RDONLY [pid 1815] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... mkdir resumed>) = 0 [pid 1819] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1826] set_robust_list(0x7f13c8cc39a0, 24 [pid 1825] set_robust_list(0x55558909e6a0, 24 [pid 1819] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1816] <... open resumed>) = 7 [pid 301] <... openat resumed>) = 3 [pid 1826] <... set_robust_list resumed>) = 0 [pid 1825] <... set_robust_list resumed>) = 0 [pid 1819] <... futex resumed>) = 0 [pid 1816] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] ioctl(3, LOOP_CLR_FD [pid 1819] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1826] rt_sigprocmask(SIG_SETMASK, [], executing program [pid 1816] <... futex resumed>) = 1 [pid 1815] <... futex resumed>) = 0 [pid 301] close(3 [pid 1825] chdir("./60" [pid 1816] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1815] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... close resumed>) = 0 [pid 1815] <... futex resumed>) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1816] <... copy_file_range resumed>) = 1 [pid 1815] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1816] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1815] <... futex resumed>) = 0 [pid 301] <... clone resumed>, child_tidptr=0x55558909e690) = 1828 [pid 1816] <... futex resumed>) = 0 [pid 1815] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1816] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1815] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1815] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1815] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1815] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1829]}, 88) = 1829 [pid 1815] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1815] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1815] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1829 attached [pid 1829] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1829] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1829] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1828] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1828] chdir("./59") = 0 [pid 1828] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1828] setpgid(0, 0) = 0 [pid 1828] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1828] write(3, "1000", 4) = 4 [pid 1828] close(3) = 0 [pid 1828] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1826] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1825] <... chdir resumed>) = 0 [pid 1828] write(1, "executing program\n", 18) = 18 [pid 1828] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1826] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1825] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1828] <... futex resumed>) = 0 [pid 1828] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1828] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1828] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1828] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1828] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1828] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1829] <... mmap resumed>) = 0x20000000 [pid 1825] <... prctl resumed>) = 0 [pid 1825] setpgid(0, 0 [pid 1818] <... mount resumed>) = 0 [pid 1818] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1825] <... setpgid resumed>) = 0 [pid 1826] <... mmap resumed>) = 0x20000000 [pid 1818] <... openat resumed>) = 3 [pid 1818] chdir("./file1") = 0 [pid 1818] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1818] ioctl(4, LOOP_CLR_FD) = 0 [pid 1818] close(4./strace-static-x86_64: Process 1831 attached [pid 1829] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1828] <... clone3 resumed> => {parent_tid=[1831]}, 88) = 1831 [pid 1826] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1825] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1818] <... close resumed>) = 0 [pid 1826] <... futex resumed>) = 1 [ 58.659195][ T1803] EXT4-fs (loop4): This should not happen!! Data will be lost [ 58.659195][ T1803] [ 58.661981][ T1818] loop3: detected capacity change from 0 to 2048 [pid 1825] <... openat resumed>) = 3 [pid 1819] <... futex resumed>) = 0 [pid 1818] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1826] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1825] write(3, "1000", 4 [pid 1819] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1818] <... futex resumed>) = 1 [pid 1817] <... futex resumed>) = 0 [pid 1825] <... write resumed>) = 4 [pid 1820] <... futex resumed>) = 0 [pid 1819] <... futex resumed>) = 1 [pid 1818] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1817] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1825] close(3 [pid 1831] set_robust_list(0x7f13c8ce49a0, 24 [pid 1828] rt_sigprocmask(SIG_SETMASK, [], [pid 1825] <... close resumed>) = 0 [pid 1820] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1819] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1818] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1817] <... futex resumed>) = 0 [pid 1831] <... set_robust_list resumed>) = 0 [pid 1828] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1825] symlink("/dev/binderfs", "./binderfs" [pid 1820] <... open resumed>) = -1 EFAULT (Bad address) [pid 1818] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1817] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1831] rt_sigprocmask(SIG_SETMASK, [], [pid 1829] <... futex resumed>) = 1 [pid 1828] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1825] <... symlink resumed>) = 0 executing program [pid 1820] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1815] <... futex resumed>) = 0 [pid 1831] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1829] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1828] <... futex resumed>) = 0 [pid 1825] write(1, "executing program\n", 18 [pid 1820] <... futex resumed>) = 1 [pid 1819] <... futex resumed>) = 0 [pid 1818] <... open resumed>) = 4 [pid 1815] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1831] memfd_create("syzkaller", 0 [pid 1828] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1825] <... write resumed>) = 18 [pid 1820] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1819] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1818] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1816] <... futex resumed>) = 0 [pid 1815] <... futex resumed>) = 1 [pid 1831] <... memfd_create resumed>) = 3 [pid 1825] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1819] <... futex resumed>) = 0 [pid 1818] <... futex resumed>) = 1 [pid 1817] <... futex resumed>) = 0 [pid 1816] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1815] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1831] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1825] <... futex resumed>) = 0 [pid 1831] <... mmap resumed>) = 0x7f13c08c4000 [pid 1825] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1825] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1825] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1831] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1825] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1825] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1825] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1825] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1832]}, 88) = 1832 [pid 1825] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1825] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1825] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1831] <... write resumed>) = 1048576 [pid 1831] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1831] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1831] ioctl(4, LOOP_SET_FD, 3 [pid 1816] <... open resumed>) = -1 EFAULT (Bad address) [pid 1817] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1819] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1818] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1817] <... futex resumed>) = 0 [pid 1816] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1818] <... open resumed>) = 5 [pid 1817] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1816] <... futex resumed>) = 1 [pid 1815] <... futex resumed>) = 0 [pid 1818] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1817] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1816] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1815] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1818] <... futex resumed>) = 0 [pid 1817] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1816] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1815] <... futex resumed>) = 0 [pid 1818] creat("./bus", 000 [pid 1817] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1832 attached [pid 1818] <... creat resumed>) = 6 [pid 1817] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1815] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1831] <... ioctl resumed>) = 0 [pid 1831] close(3) = 0 [pid 1831] close(4) = 0 [pid 1831] mkdir("./file1", 0777) = 0 [ 58.728392][ T1820] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 58.744463][ T1816] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 58.745031][ T1831] loop4: detected capacity change from 0 to 2048 [ 58.760598][ T1816] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 1831] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 1832] set_robust_list(0x7f13c8ce49a0, 24 [pid 1818] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1817] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1832] <... set_robust_list resumed>) = 0 [pid 1818] <... futex resumed>) = 0 [pid 1817] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1832] rt_sigprocmask(SIG_SETMASK, [], [pid 1818] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1817] <... futex resumed>) = 0 [pid 1832] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1818] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1817] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1832] memfd_create("syzkaller", 0 [pid 1818] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1832] <... memfd_create resumed>) = 3 [pid 1818] <... futex resumed>) = 1 [pid 1817] <... futex resumed>) = 0 [pid 1818] pwrite64(6, "+", 1, 0 [pid 1817] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1832] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1817] <... futex resumed>) = 0 [pid 1818] <... pwrite64 resumed>) = 1 [pid 1817] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1832] <... mmap resumed>) = 0x7f13c08c4000 [pid 1818] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1832] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1819] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1818] <... futex resumed>) = 0 [pid 1817] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1832] <... write resumed>) = 1048576 [pid 1818] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1817] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1832] munmap(0x7f13c08c4000, 138412032 [pid 1818] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1817] <... futex resumed>) = 0 [ 58.768643][ T1820] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 58.791434][ T1820] EXT4-fs (loop0): This should not happen!! Data will be lost [ 58.791434][ T1820] [ 58.799807][ T1816] EXT4-fs (loop1): This should not happen!! Data will be lost [ 58.799807][ T1816] [ 58.801785][ T1820] EXT4-fs (loop0): Total free blocks count 0 [ 58.814875][ T1816] EXT4-fs (loop1): Total free blocks count 0 [ 58.817127][ T1820] EXT4-fs (loop0): Free/Dirty block details [pid 1832] <... munmap resumed>) = 0 [pid 1818] open("./bus", O_RDONLY [pid 1817] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1815] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1832] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1831] <... mount resumed>) = 0 [pid 1818] <... open resumed>) = 7 [pid 1832] <... openat resumed>) = 4 [pid 1831] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1818] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1832] ioctl(4, LOOP_SET_FD, 3 [pid 1831] <... openat resumed>) = 3 [pid 1818] <... futex resumed>) = 1 [pid 1817] <... futex resumed>) = 0 [pid 1820] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [ 58.822096][ T1816] EXT4-fs (loop1): Free/Dirty block details [ 58.828533][ T1820] EXT4-fs (loop0): free_blocks=2415919504 [ 58.834940][ T1816] EXT4-fs (loop1): free_blocks=2415919504 [ 58.840180][ T1820] EXT4-fs (loop0): dirty_blocks=32 [ 58.846492][ T1816] EXT4-fs (loop1): dirty_blocks=32 [ 58.850172][ T1820] EXT4-fs (loop0): Block reservation details [ 58.854978][ T1816] EXT4-fs (loop1): Block reservation details [ 58.861220][ T1820] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 58.866595][ T1816] EXT4-fs (loop1): i_reserved_data_blocks=2 [pid 1831] chdir("./file1" [pid 1818] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1817] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1816] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1831] <... chdir resumed>) = 0 [pid 1818] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1817] <... futex resumed>) = 0 [pid 1831] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1818] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1817] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1831] <... openat resumed>) = 4 [pid 1818] <... copy_file_range resumed>) = 1 [pid 1817] <... futex resumed>) = 0 [pid 1831] ioctl(4, LOOP_CLR_FD [pid 1818] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1817] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1831] <... ioctl resumed>) = 0 [pid 1818] <... futex resumed>) = 0 [pid 1817] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1831] close(4 [pid 1818] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1817] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1831] <... close resumed>) = 0 [pid 1817] <... mprotect resumed>) = 0 [pid 1831] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1817] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1831] <... futex resumed>) = 1 [pid 1828] <... futex resumed>) = 0 [pid 1817] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1831] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1828] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1817] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1831] <... open resumed>) = 4 [pid 1828] <... futex resumed>) = 0 [pid 1831] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1828] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1817] <... clone3 resumed> => {parent_tid=[1835]}, 88) = 1835 [pid 1831] <... futex resumed>) = 0 [pid 1828] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1817] rt_sigprocmask(SIG_SETMASK, [], [pid 1831] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1828] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1817] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1831] <... open resumed>) = 5 [pid 1828] <... futex resumed>) = 0 [pid 1817] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1831] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1828] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1817] <... futex resumed>) = 0 [pid 1831] <... futex resumed>) = 0 [pid 1828] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1817] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1831] creat("./bus", 000 [pid 1828] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1831] <... creat resumed>) = 6 [pid 1828] <... futex resumed>) = 0 [pid 1831] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1828] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1831] <... futex resumed>) = 0 [pid 1828] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1826] <... futex resumed>) = ? [pid 1832] <... ioctl resumed>) = 0 [pid 1831] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1828] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1826] +++ killed by SIGBUS +++ [pid 1831] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1828] <... futex resumed>) = 0 [pid 1831] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1828] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1831] <... futex resumed>) = 0 [pid 1828] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1831] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1828] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1831] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1828] <... futex resumed>) = 0 [pid 1831] pwrite64(6, "+", 1, 0 [pid 1828] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1831] <... pwrite64 resumed>) = 1 [pid 1831] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1828] <... futex resumed>) = 0 [pid 1831] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1828] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1831] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1828] <... futex resumed>) = 0 [pid 1831] open("./bus", O_RDONLY [pid 1828] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1831] <... open resumed>) = 7 [pid 1831] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1828] <... futex resumed>) = 0 [pid 1831] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1828] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1831] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1828] <... futex resumed>) = 0 [pid 1831] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1828] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1831] <... copy_file_range resumed>) = 1 [pid 1828] <... futex resumed>) = 0 [pid 1831] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1828] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1831] <... futex resumed>) = 0 [pid 1828] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1831] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1828] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1828] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1828] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1836]}, 88) = 1836 [pid 1828] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1828] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1828] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1836 attached ./strace-static-x86_64: Process 1835 attached [pid 1832] close(3 [pid 1829] <... futex resumed>) = ? [pid 1820] +++ killed by SIGBUS +++ [pid 1819] +++ killed by SIGBUS +++ [pid 1835] set_robust_list(0x7f13c8cc39a0, 24 [pid 1832] <... close resumed>) = 0 [pid 1829] +++ killed by SIGBUS +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1819, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 297] umount2("./60", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./60/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./60/binderfs") = 0 [pid 297] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1836] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1836] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1836] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1828] <... futex resumed>) = 0 [pid 1828] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1831] <... futex resumed>) = 0 [pid 1828] <... futex resumed>) = 1 [pid 1831] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1828] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1831] <... open resumed>) = -1 EFAULT (Bad address) [pid 1831] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1828] <... futex resumed>) = 0 [ 58.873321][ T1832] loop2: detected capacity change from 0 to 2048 [ 58.886750][ T1820] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 58.899095][ T1820] EXT4-fs (loop0): This should not happen!! Data will be lost [ 58.899095][ T1820] [ 58.910424][ T1816] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 1831] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1828] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1831] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1828] <... futex resumed>) = 0 [pid 1835] <... set_robust_list resumed>) = 0 [pid 1832] close(4 [pid 1828] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1817] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1836] <... futex resumed>) = 1 [pid 1835] rt_sigprocmask(SIG_SETMASK, [], [pid 1832] <... close resumed>) = 0 [pid 1817] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1816] +++ killed by SIGBUS +++ [pid 1815] +++ killed by SIGBUS +++ [pid 297] <... umount2 resumed>) = 0 [pid 1835] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1832] mkdir("./file1", 0777 [pid 1818] <... futex resumed>) = 0 [pid 1817] <... futex resumed>) = 1 [pid 1818] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1817] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1815, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 1818] <... open resumed>) = -1 EFAULT (Bad address) [pid 298] umount2("./59", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1818] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1836] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1818] <... futex resumed>) = 1 [pid 1817] <... futex resumed>) = 0 [pid 298] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1835] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1832] <... mkdir resumed>) = 0 [pid 1818] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1817] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... openat resumed>) = 3 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 58.917472][ T1831] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 58.922925][ T1816] EXT4-fs (loop1): This should not happen!! Data will be lost [ 58.922925][ T1816] [ 58.946785][ T1831] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 58.958824][ T1831] EXT4-fs (loop4): This should not happen!! Data will be lost [ 58.958824][ T1831] [ 58.968556][ T1831] EXT4-fs (loop4): Total free blocks count 0 [pid 1835] <... mmap resumed>) = 0x20000000 [pid 1832] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 1818] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1817] <... futex resumed>) = 0 [pid 298] newfstatat(3, "", [pid 297] newfstatat(AT_FDCWD, "./60/file1", [pid 1835] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1828] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1817] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1835] <... futex resumed>) = 0 [pid 298] getdents64(3, [pid 297] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1835] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 298] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] umount2("./59/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] openat(AT_FDCWD, "./60/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... openat resumed>) = 4 [pid 298] newfstatat(AT_FDCWD, "./59/binderfs", [pid 297] newfstatat(4, "", [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] unlink("./59/binderfs" [pid 297] getdents64(4, [pid 298] <... unlink resumed>) = 0 [pid 297] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 298] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./60/file1") = 0 [pid 297] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./60") = 0 [pid 297] mkdir("./61", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3 [pid 1832] <... mount resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 1832] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1832] <... openat resumed>) = 3 [pid 1832] chdir("./file1" [pid 297] <... clone resumed>, child_tidptr=0x55558909e690) = 1839 [pid 1832] <... chdir resumed>) = 0 [pid 1832] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1832] ioctl(4, LOOP_CLR_FD) = 0 [pid 1832] close(4./strace-static-x86_64: Process 1839 attached ) = 0 [pid 1831] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1832] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1825] <... futex resumed>) = 0 [pid 1832] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1825] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1832] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1825] <... futex resumed>) = 0 [pid 1832] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1825] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1832] <... open resumed>) = 4 [pid 1832] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1825] <... futex resumed>) = 0 [pid 1832] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1825] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1832] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1825] <... futex resumed>) = 0 [pid 1832] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1825] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1832] <... open resumed>) = 5 [pid 1832] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 58.972557][ T1818] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 58.974697][ T1831] EXT4-fs (loop4): Free/Dirty block details [ 58.994939][ T1831] EXT4-fs (loop4): free_blocks=2415919504 [ 59.001002][ T1831] EXT4-fs (loop4): dirty_blocks=32 [ 59.006111][ T1831] EXT4-fs (loop4): Block reservation details [ 59.011911][ T1831] EXT4-fs (loop4): i_reserved_data_blocks=2 [pid 1825] <... futex resumed>) = 0 [pid 1832] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1825] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1839] set_robust_list(0x55558909e6a0, 24 [pid 1836] <... futex resumed>) = ? [pid 1832] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1825] <... futex resumed>) = 0 [pid 1832] creat("./bus", 000 [pid 1825] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... umount2 resumed>) = 0 [pid 1832] <... creat resumed>) = 6 [pid 1832] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1825] <... futex resumed>) = 0 [pid 1832] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1825] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1832] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1825] <... futex resumed>) = 0 [pid 1832] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1825] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1832] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1832] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1825] <... futex resumed>) = 0 [pid 1832] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1825] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1832] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1825] <... futex resumed>) = 0 [pid 1832] pwrite64(6, "+", 1, 0 [pid 1825] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1832] <... pwrite64 resumed>) = 1 [pid 1832] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1825] <... futex resumed>) = 0 [pid 1832] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1825] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1832] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1825] <... futex resumed>) = 0 [pid 1832] open("./bus", O_RDONLY [pid 1825] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1832] <... open resumed>) = 7 [pid 1832] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1825] <... futex resumed>) = 0 [pid 298] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1832] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1825] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1832] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1825] <... futex resumed>) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1832] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1825] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1832] <... copy_file_range resumed>) = 1 [pid 1825] <... futex resumed>) = 0 [pid 298] newfstatat(AT_FDCWD, "./59/file1", [pid 1832] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1825] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1832] <... futex resumed>) = 0 [pid 1825] <... mmap resumed>) = 0x7f13c8ca3000 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1832] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1825] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 298] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1825] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1825] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 298] openat(AT_FDCWD, "./59/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1839] <... set_robust_list resumed>) = 0 [pid 1836] +++ killed by SIGBUS +++ [pid 1825] <... clone3 resumed> => {parent_tid=[1840]}, 88) = 1840 [pid 1825] rt_sigprocmask(SIG_SETMASK, [], [pid 298] <... openat resumed>) = 4 [pid 1825] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1825] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] newfstatat(4, "", [pid 1825] <... futex resumed>) = 0 [pid 1825] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1817] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1839] chdir("./61" [pid 298] getdents64(4, [pid 1839] <... chdir resumed>) = 0 [pid 1839] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 298] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1839] <... prctl resumed>) = 0 [pid 1839] setpgid(0, 0 [pid 298] getdents64(4, [pid 1839] <... setpgid resumed>) = 0 [pid 1839] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 298] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1839] <... openat resumed>) = 3 [pid 298] close(4 [pid 1839] write(3, "1000", 4 [pid 298] <... close resumed>) = 0 [pid 1839] <... write resumed>) = 4 [pid 298] rmdir("./59/file1" [pid 1839] close(3 [pid 298] <... rmdir resumed>) = 0 [pid 1839] <... close resumed>) = 0 [pid 1839] symlink("/dev/binderfs", "./binderfs"executing program [pid 298] getdents64(3, [pid 1839] <... symlink resumed>) = 0 [pid 298] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1839] write(1, "executing program\n", 18 [pid 298] close(3./strace-static-x86_64: Process 1840 attached [pid 1839] <... write resumed>) = 18 [pid 298] <... close resumed>) = 0 [pid 1840] set_robust_list(0x7f13c8cc39a0, 24 [pid 1839] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] rmdir("./59" [pid 1840] <... set_robust_list resumed>) = 0 [pid 1839] <... futex resumed>) = 0 [pid 298] <... rmdir resumed>) = 0 [pid 1840] rt_sigprocmask(SIG_SETMASK, [], [pid 1839] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 298] mkdir("./60", 0777 [pid 1840] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1839] <... rt_sigaction resumed>NULL, 8) = 0 [pid 298] <... mkdir resumed>) = 0 [pid 1840] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1839] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1840] <... mmap resumed>) = 0x20000000 [pid 1839] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 298] <... openat resumed>) = 3 [pid 1839] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 298] ioctl(3, LOOP_CLR_FD [pid 1839] <... mmap resumed>) = 0x7f13c8cc4000 [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1839] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 298] close(3 [pid 1839] <... mprotect resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 1839] rt_sigprocmask(SIG_BLOCK, ~[], [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1839] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1839] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 298] <... clone resumed>, child_tidptr=0x55558909e690) = 1841 [pid 1840] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1839] <... clone3 resumed> => {parent_tid=[1842]}, 88) = 1842 [pid 1825] <... futex resumed>) = 0 [pid 1840] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1839] rt_sigprocmask(SIG_SETMASK, [], [pid 1825] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1839] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1832] <... futex resumed>) = 0 [pid 1825] <... futex resumed>) = 1 [pid 1839] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1832] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1825] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1841 attached [pid 1839] <... futex resumed>) = 0 [pid 1832] <... open resumed>) = -1 EFAULT (Bad address) [pid 1841] set_robust_list(0x55558909e6a0, 24 [ 59.018280][ T1818] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 59.030705][ T1818] EXT4-fs (loop3): This should not happen!! Data will be lost [ 59.030705][ T1818] [ 59.041118][ T1831] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 59.054035][ T1831] EXT4-fs (loop4): This should not happen!! Data will be lost [ 59.054035][ T1831] [ 59.064052][ T1818] EXT4-fs (loop3): Total free blocks count 0 [pid 1839] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1832] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1831] +++ killed by SIGBUS +++ [pid 1828] +++ killed by SIGBUS +++ [pid 1832] <... futex resumed>) = 1 [pid 1825] <... futex resumed>) = 0 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1828, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 1832] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1825] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 1832] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1825] <... futex resumed>) = 0 [pid 1841] <... set_robust_list resumed>) = 0 [pid 1825] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... restart_syscall resumed>) = 0 [pid 301] umount2("./59", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 1842 attached ) = 3 [pid 1842] set_robust_list(0x7f13c8ce49a0, 24 [pid 301] newfstatat(3, "", [pid 1842] <... set_robust_list resumed>) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1842] rt_sigprocmask(SIG_SETMASK, [], [pid 301] getdents64(3, [pid 1842] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 301] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1842] memfd_create("syzkaller", 0 [pid 301] umount2("./59/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1842] <... memfd_create resumed>) = 3 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1842] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 301] newfstatat(AT_FDCWD, "./59/binderfs", [pid 1842] <... mmap resumed>) = 0x7f13c08c4000 [pid 1841] chdir("./60" [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./59/binderfs") = 0 [pid 301] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1841] <... chdir resumed>) = 0 [pid 1842] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1841] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1842] <... write resumed>) = 1048576 [pid 1842] munmap(0x7f13c08c4000, 138412032 [pid 1841] <... prctl resumed>) = 0 [pid 1841] setpgid(0, 0 [pid 1818] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 301] <... umount2 resumed>) = 0 [pid 301] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./59/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./59/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./59/file1") = 0 [pid 301] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./59") = 0 [pid 301] mkdir("./60", 0777) = 0 [ 59.066142][ T1832] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 59.069906][ T1818] EXT4-fs (loop3): Free/Dirty block details [ 59.090466][ T1818] EXT4-fs (loop3): free_blocks=2415919504 [ 59.097093][ T1818] EXT4-fs (loop3): dirty_blocks=32 [ 59.102285][ T1818] EXT4-fs (loop3): Block reservation details [ 59.108294][ T1818] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 59.114339][ T1832] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 1841] <... setpgid resumed>) = 0 [pid 1835] <... futex resumed>) = ? [pid 1841] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1835] +++ killed by SIGBUS +++ [pid 1825] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1818] +++ killed by SIGBUS +++ [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1844 [pid 1841] <... openat resumed>) = 3 [pid 1842] <... munmap resumed>) = 0 [pid 1842] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1842] ioctl(4, LOOP_SET_FD, 3 [pid 1841] write(3, "1000", 4./strace-static-x86_64: Process 1844 attached [pid 1844] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1844] chdir("./60") = 0 [pid 1844] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1844] setpgid(0, 0) = 0 [pid 1844] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1844] write(3, "1000", 4) = 4 [pid 1841] <... write resumed>) = 4 [pid 1844] close(3) = 0 [pid 1844] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 1844] write(1, "executing program\n", 18) = 18 [pid 1844] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1844] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1844] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1844] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1844] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1844] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1844] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1845]}, 88) = 1845 [pid 1844] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1844] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1844] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1842] <... ioctl resumed>) = 0 [pid 1842] close(3./strace-static-x86_64: Process 1845 attached [pid 1841] close(3 [pid 1842] <... close resumed>) = 0 [ 59.126924][ T1832] EXT4-fs (loop2): This should not happen!! Data will be lost [ 59.126924][ T1832] [ 59.128153][ T1817] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 59.136553][ T1832] EXT4-fs (loop2): Total free blocks count 0 [ 59.154785][ T1832] EXT4-fs (loop2): Free/Dirty block details [ 59.157882][ T1842] loop0: detected capacity change from 0 to 2048 [ 59.160805][ T1832] EXT4-fs (loop2): free_blocks=2415919504 [ 59.172593][ T1832] EXT4-fs (loop2): dirty_blocks=32 [pid 1842] close(4 [pid 1841] <... close resumed>) = 0 [pid 1842] <... close resumed>) = 0 [pid 1841] symlink("/dev/binderfs", "./binderfs" [pid 1845] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1841] <... symlink resumed>) = 0 [pid 1842] mkdir("./file1", 0777) = 0 [pid 1842] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 1845] rt_sigprocmask(SIG_SETMASK, [], [pid 1841] write(1, "executing program\n", 18 [pid 1832] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1845] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1845] memfd_create("syzkaller", 0) = 3 [pid 1845] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1845] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576executing program [pid 1841] <... write resumed>) = 18 [pid 1841] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1841] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1841] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1832] +++ killed by SIGBUS +++ [pid 1841] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1840] <... futex resumed>) = ? [pid 1845] <... write resumed>) = 1048576 [pid 1841] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1817] +++ killed by SIGBUS +++ [pid 1845] munmap(0x7f13c08c4000, 138412032 [pid 1841] <... mmap resumed>) = 0x7f13c8cc4000 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1817, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11} --- [pid 300] umount2("./58", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./58/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./58/binderfs") = 0 [pid 300] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1841] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1845] <... munmap resumed>) = 0 [pid 1841] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1845] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1845] ioctl(4, LOOP_SET_FD, 3 [pid 1841] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1840] +++ killed by SIGBUS +++ [pid 1825] +++ killed by SIGBUS +++ [pid 1841] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1846]}, 88) = 1846 [pid 1841] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1841] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 59.177765][ T1832] EXT4-fs (loop2): Block reservation details [ 59.184137][ T1832] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 59.190575][ T1817] EXT4-fs (loop3): This should not happen!! Data will be lost [ 59.190575][ T1817] [ 59.203539][ T1840] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 59.216681][ T1840] EXT4-fs (loop2): This should not happen!! Data will be lost [ 59.216681][ T1840] [pid 1841] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1825, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- ./strace-static-x86_64: Process 1846 attached [pid 1846] set_robust_list(0x7f13c8ce49a0, 24 [pid 1845] <... ioctl resumed>) = 0 [pid 1846] <... set_robust_list resumed>) = 0 [pid 1845] close(3 [pid 1846] rt_sigprocmask(SIG_SETMASK, [], [pid 1845] <... close resumed>) = 0 [pid 1846] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1846] memfd_create("syzkaller", 0) = 3 [pid 1842] <... mount resumed>) = 0 [pid 1845] close(4 [pid 299] umount2("./60", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1842] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1842] chdir("./file1" [pid 299] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1842] <... chdir resumed>) = 0 [pid 299] <... openat resumed>) = 3 [pid 1842] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 299] newfstatat(3, "", [pid 1846] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1845] <... close resumed>) = 0 [pid 1842] <... openat resumed>) = 4 [pid 300] <... umount2 resumed>) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1842] ioctl(4, LOOP_CLR_FD [pid 299] getdents64(3, [pid 1842] <... ioctl resumed>) = 0 [pid 299] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1842] close(4 [pid 299] umount2("./60/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1842] <... close resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1842] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] newfstatat(AT_FDCWD, "./60/binderfs", [pid 1842] <... futex resumed>) = 1 [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1842] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] unlink("./60/binderfs") = 0 [pid 299] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1846] <... mmap resumed>) = 0x7f13c08c4000 [pid 1839] <... futex resumed>) = 0 [pid 1839] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1839] <... futex resumed>) = 1 [pid 1839] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./58/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./58/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 1842] <... futex resumed>) = 0 [pid 300] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./58/file1" [pid 1842] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1845] mkdir("./file1", 0777 [pid 300] <... rmdir resumed>) = 0 [pid 1842] <... open resumed>) = 4 [pid 1842] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1839] <... futex resumed>) = 0 [pid 1839] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1842] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1839] <... futex resumed>) = 0 [pid 1839] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1842] <... open resumed>) = 5 [pid 1842] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1839] <... futex resumed>) = 0 [pid 1839] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1842] creat("./bus", 000 [pid 1839] <... futex resumed>) = 0 [pid 1839] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1842] <... creat resumed>) = 6 [pid 300] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1842] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1839] <... futex resumed>) = 0 [pid 1839] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1842] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 300] close(3 [pid 1846] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1845] <... mkdir resumed>) = 0 [pid 1842] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1839] <... futex resumed>) = 0 [pid 299] <... umount2 resumed>) = 0 [pid 1842] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... close resumed>) = 0 [pid 1845] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 300] rmdir("./58" [pid 1842] <... futex resumed>) = 0 [pid 1839] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1842] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1839] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] <... rmdir resumed>) = 0 [pid 299] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1842] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1839] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1842] pwrite64(6, "+", 1, 0 [pid 1839] <... futex resumed>) = 0 [pid 1842] <... pwrite64 resumed>) = 1 [pid 1839] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] mkdir("./59", 0777 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1842] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1839] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1842] <... futex resumed>) = 0 [pid 1839] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] newfstatat(AT_FDCWD, "./60/file1", [pid 1842] open("./bus", O_RDONLY [pid 1839] <... futex resumed>) = 0 [pid 1842] <... open resumed>) = 7 [pid 1839] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1842] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1839] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1842] <... futex resumed>) = 0 [pid 1839] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1842] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1839] <... futex resumed>) = 0 [pid 1842] <... copy_file_range resumed>) = 1 [pid 1839] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1842] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1839] <... futex resumed>) = 0 [pid 1842] <... futex resumed>) = 0 [pid 1839] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 299] openat(AT_FDCWD, "./60/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1846] <... write resumed>) = 1048576 [pid 1842] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1839] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1846] munmap(0x7f13c08c4000, 138412032 [pid 300] <... mkdir resumed>) = 0 [pid 299] <... openat resumed>) = 4 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1849 [pid 1846] <... munmap resumed>) = 0 [pid 1839] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 299] newfstatat(4, "", [pid 1846] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1839] <... mprotect resumed>) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1846] <... openat resumed>) = 4 [pid 1839] rt_sigprocmask(SIG_BLOCK, ~[], [pid 299] getdents64(4, [pid 1839] <... rt_sigprocmask resumed>[], 8) = 0 [ 59.218981][ T1845] loop4: detected capacity change from 0 to 2048 [pid 1846] ioctl(4, LOOP_SET_FD, 3 [pid 1839] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0}./strace-static-x86_64: Process 1851 attached ./strace-static-x86_64: Process 1849 attached [pid 1849] set_robust_list(0x55558909e6a0, 24 [pid 1839] <... clone3 resumed> => {parent_tid=[1851]}, 88) = 1851 [pid 1851] set_robust_list(0x7f13c8cc39a0, 24 [pid 1849] <... set_robust_list resumed>) = 0 [pid 1839] rt_sigprocmask(SIG_SETMASK, [], [pid 1849] chdir("./59" [pid 1839] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1851] <... set_robust_list resumed>) = 0 [pid 1849] <... chdir resumed>) = 0 [pid 1846] <... ioctl resumed>) = 0 [pid 1845] <... mount resumed>) = 0 [pid 1851] rt_sigprocmask(SIG_SETMASK, [], [pid 1845] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1839] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1851] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1846] close(3 [pid 1845] <... openat resumed>) = 3 [pid 1851] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1846] <... close resumed>) = 0 [pid 1845] chdir("./file1" [pid 1849] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1839] <... futex resumed>) = 0 [pid 1849] <... prctl resumed>) = 0 [pid 1839] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1849] setpgid(0, 0) = 0 [pid 1849] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1849] write(3, "1000", 4) = 4 [pid 1851] <... mmap resumed>) = 0x20000000 [pid 1846] close(4 [pid 1849] close(3 [pid 1845] <... chdir resumed>) = 0 [pid 1851] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1846] <... close resumed>) = 0 [pid 1845] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1851] <... futex resumed>) = 1 [pid 1846] mkdir("./file1", 0777 [pid 1845] <... openat resumed>) = 4 [pid 1839] <... futex resumed>) = 0 [pid 1851] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1845] ioctl(4, LOOP_CLR_FD [pid 1839] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1845] <... ioctl resumed>) = 0 [pid 1842] <... futex resumed>) = 0 [pid 1839] <... futex resumed>) = 1 [pid 1845] close(4 [pid 1842] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1839] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1845] <... close resumed>) = 0 [pid 1842] <... open resumed>) = -1 EFAULT (Bad address) [pid 1845] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1842] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1845] <... futex resumed>) = 1 [pid 1844] <... futex resumed>) = 0 [pid 1842] <... futex resumed>) = 1 [pid 1839] <... futex resumed>) = 0 [pid 1845] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1844] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1842] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1839] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1845] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1844] <... futex resumed>) = 0 [pid 1842] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1839] <... futex resumed>) = 0 [pid 1849] <... close resumed>) = 0 [pid 1845] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1844] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1849] symlink("/dev/binderfs", "./binderfs" [pid 1845] <... open resumed>) = 4 [pid 1839] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1845] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1844] <... futex resumed>) = 0 [pid 1845] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1844] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1845] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1844] <... futex resumed>) = 0 [pid 1845] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1844] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1845] <... open resumed>) = 5 [pid 1845] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1844] <... futex resumed>) = 0 [pid 1845] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1844] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1845] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1844] <... futex resumed>) = 0 [pid 1845] creat("./bus", 000 [pid 1844] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1845] <... creat resumed>) = 6 [pid 1845] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1844] <... futex resumed>) = 0 [pid 1845] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1844] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1845] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1844] <... futex resumed>) = 0 [pid 1849] <... symlink resumed>) = 0 [pid 1845] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000executing program [pid 1844] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1849] write(1, "executing program\n", 18 [pid 1845] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 299] getdents64(4, [pid 1849] <... write resumed>) = 18 [pid 1845] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1849] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1845] <... futex resumed>) = 1 [pid 1844] <... futex resumed>) = 0 [pid 299] close(4 [pid 1849] <... futex resumed>) = 0 [pid 1845] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1844] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... close resumed>) = 0 [pid 1849] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1845] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1844] <... futex resumed>) = 0 [pid 299] rmdir("./60/file1" [pid 1849] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1845] pwrite64(6, "+", 1, 0 [pid 1844] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... rmdir resumed>) = 0 [pid 1849] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1845] <... pwrite64 resumed>) = 1 [pid 299] getdents64(3, [pid 1849] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1846] <... mkdir resumed>) = 0 [pid 1845] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1849] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1845] <... futex resumed>) = 1 [pid 1844] <... futex resumed>) = 0 [pid 299] close(3 [pid 1849] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1845] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1844] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... close resumed>) = 0 [pid 1849] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1845] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1844] <... futex resumed>) = 0 [pid 299] rmdir("./60" [pid 1849] <... mprotect resumed>) = 0 [pid 1845] open("./bus", O_RDONLY [pid 1844] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... rmdir resumed>) = 0 [pid 1849] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1845] <... open resumed>) = 7 [pid 299] mkdir("./61", 0777 [pid 1849] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1845] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... mkdir resumed>) = 0 [pid 1849] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1845] <... futex resumed>) = 1 [pid 1844] <... futex resumed>) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1845] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1844] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... openat resumed>) = 3 [pid 1849] <... clone3 resumed> => {parent_tid=[1853]}, 88) = 1853 [pid 1845] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1844] <... futex resumed>) = 0 [pid 299] ioctl(3, LOOP_CLR_FD [pid 1849] rt_sigprocmask(SIG_SETMASK, [], [pid 1845] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1844] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 59.265751][ T1846] loop1: detected capacity change from 0 to 2048 [ 59.279261][ T1842] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 59.295510][ T1842] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 59.308230][ T1842] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 1849] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1845] <... copy_file_range resumed>) = 1 [pid 1844] <... futex resumed>) = 0 [pid 299] close(3./strace-static-x86_64: Process 1853 attached [pid 1849] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1846] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 1845] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1844] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 299] <... close resumed>) = 0 [pid 1849] <... futex resumed>) = 0 [pid 1845] <... futex resumed>) = 0 [pid 1844] <... mmap resumed>) = 0x7f13c8ca3000 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1849] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1845] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1844] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 299] <... clone resumed>, child_tidptr=0x55558909e690) = 1854 [pid 1844] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1844] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1855]}, 88) = 1855 [pid 1844] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1844] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1844] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1855 attached [pid 1855] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1855] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1853] set_robust_list(0x7f13c8ce49a0, 24 [pid 1855] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1853] <... set_robust_list resumed>) = 0 [pid 1853] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1853] memfd_create("syzkaller", 0) = 3 ./strace-static-x86_64: Process 1854 attached [pid 1853] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1855] <... mmap resumed>) = 0x20000000 [pid 1855] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1844] <... futex resumed>) = 0 [pid 1844] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1845] <... futex resumed>) = 0 [pid 1844] <... futex resumed>) = 1 [pid 1845] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1844] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1845] <... open resumed>) = -1 EFAULT (Bad address) [pid 1845] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1844] <... futex resumed>) = 0 [pid 1845] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1844] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1845] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1844] <... futex resumed>) = 0 [pid 1854] set_robust_list(0x55558909e6a0, 24 [pid 1853] <... mmap resumed>) = 0x7f13c08c4000 [pid 1844] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1855] <... futex resumed>) = 1 [pid 1855] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1854] <... set_robust_list resumed>) = 0 [ 59.308230][ T1842] [ 59.318409][ T1842] EXT4-fs (loop0): Total free blocks count 0 [ 59.325872][ T1842] EXT4-fs (loop0): Free/Dirty block details [ 59.328389][ T1845] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 59.331890][ T1842] EXT4-fs (loop0): free_blocks=2415919504 [ 59.347830][ T1845] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 1853] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1854] chdir("./61" [pid 1853] <... write resumed>) = 1048576 [pid 1839] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1854] <... chdir resumed>) = 0 [pid 1853] munmap(0x7f13c08c4000, 138412032 [pid 1846] <... mount resumed>) = 0 [pid 1854] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1853] <... munmap resumed>) = 0 [pid 1846] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1842] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1854] <... prctl resumed>) = 0 [pid 1853] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1846] <... openat resumed>) = 3 [pid 1854] setpgid(0, 0 [pid 1853] <... openat resumed>) = 4 [pid 1846] chdir("./file1" [pid 1854] <... setpgid resumed>) = 0 [pid 1853] ioctl(4, LOOP_SET_FD, 3 [pid 1846] <... chdir resumed>) = 0 executing program [pid 1854] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1846] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1844] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1854] <... openat resumed>) = 3 [pid 1846] <... openat resumed>) = 4 [pid 1854] write(3, "1000", 4 [pid 1846] ioctl(4, LOOP_CLR_FD [pid 1854] <... write resumed>) = 4 [pid 1846] <... ioctl resumed>) = 0 [pid 1854] close(3 [pid 1846] close(4 [pid 1854] <... close resumed>) = 0 [pid 1846] <... close resumed>) = 0 [pid 1854] symlink("/dev/binderfs", "./binderfs" [pid 1846] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1854] <... symlink resumed>) = 0 [pid 1846] <... futex resumed>) = 1 [pid 1841] <... futex resumed>) = 0 [pid 1854] write(1, "executing program\n", 18 [pid 1846] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1841] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1854] <... write resumed>) = 18 [pid 1846] <... open resumed>) = 4 [pid 1841] <... futex resumed>) = 0 [pid 1854] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1846] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1841] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1854] <... futex resumed>) = 0 [pid 1846] <... futex resumed>) = 0 [pid 1841] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1854] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1846] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1841] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1854] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1846] <... open resumed>) = 5 [pid 1841] <... futex resumed>) = 0 [pid 1854] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1846] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1841] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1854] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1846] <... futex resumed>) = 0 [pid 1841] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1854] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1846] creat("./bus", 000 [pid 1841] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1854] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1846] <... creat resumed>) = 6 [pid 1841] <... futex resumed>) = 0 [pid 1854] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1846] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1841] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1854] <... mprotect resumed>) = 0 [pid 1846] <... futex resumed>) = 0 [pid 1841] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1854] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1846] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1841] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1854] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1846] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1841] <... futex resumed>) = 0 [pid 1854] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1846] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1841] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1846] <... futex resumed>) = 0 [pid 1841] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1854] <... clone3 resumed> => {parent_tid=[1858]}, 88) = 1858 [pid 1846] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1841] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1854] rt_sigprocmask(SIG_SETMASK, [], [pid 1846] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1841] <... futex resumed>) = 0 [pid 1854] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1846] pwrite64(6, "+", 1, 0 [pid 1841] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1854] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1846] <... pwrite64 resumed>) = 1 [pid 1854] <... futex resumed>) = 0 [pid 1846] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1854] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1846] <... futex resumed>) = 1 [pid 1841] <... futex resumed>) = 0 [pid 1846] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1841] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1846] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1841] <... futex resumed>) = 0 [pid 1846] open("./bus", O_RDONLY [pid 1841] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1846] <... open resumed>) = 7 [pid 1846] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1841] <... futex resumed>) = 0 [pid 1846] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1841] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1846] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1841] <... futex resumed>) = 0 [pid 1846] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1841] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1846] <... copy_file_range resumed>) = 1 [pid 1841] <... futex resumed>) = 0 [pid 1846] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1841] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1846] <... futex resumed>) = 0 [pid 1841] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1846] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1841] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1841] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1841] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1859]}, 88) = 1859 [pid 1841] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1841] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1841] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1851] <... futex resumed>) = ? [pid 1851] +++ killed by SIGBUS +++ [ 59.356864][ T1842] EXT4-fs (loop0): dirty_blocks=32 [ 59.364584][ T1845] EXT4-fs (loop4): This should not happen!! Data will be lost [ 59.364584][ T1845] [ 59.373380][ T1842] EXT4-fs (loop0): Block reservation details [ 59.379230][ T1845] EXT4-fs (loop4): Total free blocks count 0 [ 59.385433][ T1842] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 59.390676][ T1845] EXT4-fs (loop4): Free/Dirty block details [ 59.397315][ T1853] loop3: detected capacity change from 0 to 2048 [ 59.401521][ T1845] EXT4-fs (loop4): free_blocks=2415919504 ./strace-static-x86_64: Process 1859 attached [pid 1859] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1859] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1859] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1859] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1841] <... futex resumed>) = 0 [pid 1841] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1846] <... futex resumed>) = 0 [pid 1841] <... futex resumed>) = 1 [pid 1846] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1841] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1846] <... open resumed>) = -1 EFAULT (Bad address) [pid 1846] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1841] <... futex resumed>) = 0 [pid 1846] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1841] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1846] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 59.417316][ T1842] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 59.418241][ T1845] EXT4-fs (loop4): dirty_blocks=32 [ 59.434808][ T1845] EXT4-fs (loop4): Block reservation details [ 59.440823][ T1845] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 59.442002][ T1846] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 1841] <... futex resumed>) = 0 [pid 1853] <... ioctl resumed>) = 0 [pid 1845] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1841] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1859] <... futex resumed>) = 1 [pid 1859] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1858] <... write resumed>) = 1048576 [pid 1858] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1858] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1858] ioctl(4, LOOP_SET_FD, 3 [pid 1855] <... futex resumed>) = ? [pid 1853] close(3 [pid 1842] +++ killed by SIGBUS +++ [pid 1839] +++ killed by SIGBUS +++ [pid 1858] <... ioctl resumed>) = 0 [pid 1858] close(3) = 0 [pid 1858] close(4 [pid 1855] +++ killed by SIGBUS +++ [pid 1853] <... close resumed>) = 0 [pid 1845] +++ killed by SIGBUS +++ [pid 1853] close(4 [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1839, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 1858] <... close resumed>) = 0 [pid 1853] <... close resumed>) = 0 [pid 297] umount2("./61", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1858] mkdir("./file1", 0777 [pid 1841] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1841] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1841] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1853] mkdir("./file1", 0777 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1858] <... mkdir resumed>) = 0 [pid 1858] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 1844] +++ killed by SIGBUS +++ [pid 1853] <... mkdir resumed>) = 0 [pid 1853] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1844, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 301] umount2("./60", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [ 59.446989][ T1842] EXT4-fs (loop0): This should not happen!! Data will be lost [ 59.446989][ T1842] [ 59.466668][ T1858] loop2: detected capacity change from 0 to 2048 [ 59.471127][ T1846] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 59.489943][ T1844] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 59.502768][ T1844] EXT4-fs (loop4): This should not happen!! Data will be lost [ 59.502768][ T1844] [pid 301] umount2("./60/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./60/binderfs") = 0 [pid 301] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./61/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./61/binderfs") = 0 [pid 297] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 297] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./61/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./61/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 297] newfstatat(4, "", [pid 301] <... umount2 resumed>) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./61/file1" [pid 301] newfstatat(AT_FDCWD, "./60/file1", [pid 297] <... rmdir resumed>) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./60/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1858] <... mount resumed>) = 0 [pid 1853] <... mount resumed>) = 0 [pid 1846] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 297] getdents64(3, [pid 1858] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1853] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 301] getdents64(4, [pid 297] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 297] close(3 [pid 301] close(4 [pid 297] <... close resumed>) = 0 [pid 1858] <... openat resumed>) = 3 [pid 1853] <... openat resumed>) = 3 [pid 301] <... close resumed>) = 0 [pid 297] rmdir("./61" [pid 1858] chdir("./file1" [pid 1853] chdir("./file1" [pid 301] rmdir("./60/file1" [pid 1858] <... chdir resumed>) = 0 [pid 1853] <... chdir resumed>) = 0 [pid 1858] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1853] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 297] <... rmdir resumed>) = 0 [pid 1858] <... openat resumed>) = 4 [pid 1853] <... openat resumed>) = 4 [pid 301] <... rmdir resumed>) = 0 [pid 297] mkdir("./62", 0777 [pid 1859] <... futex resumed>) = ? [pid 1858] ioctl(4, LOOP_CLR_FD [pid 1853] ioctl(4, LOOP_CLR_FD [pid 1858] <... ioctl resumed>) = 0 [pid 1853] <... ioctl resumed>) = 0 [pid 1858] close(4 [ 59.512829][ T1846] EXT4-fs (loop1): This should not happen!! Data will be lost [ 59.512829][ T1846] [ 59.522488][ T1846] EXT4-fs (loop1): Total free blocks count 0 [ 59.528240][ T1846] EXT4-fs (loop1): Free/Dirty block details [ 59.534132][ T1846] EXT4-fs (loop1): free_blocks=2415919504 [ 59.543259][ T1846] EXT4-fs (loop1): dirty_blocks=32 [ 59.548838][ T1846] EXT4-fs (loop1): Block reservation details [ 59.555721][ T1846] EXT4-fs (loop1): i_reserved_data_blocks=2 [pid 1853] close(4 [pid 1859] +++ killed by SIGBUS +++ [pid 1858] <... close resumed>) = 0 [pid 1853] <... close resumed>) = 0 [pid 301] getdents64(3, [pid 297] <... mkdir resumed>) = 0 [pid 1858] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1853] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1858] <... futex resumed>) = 1 [pid 1853] <... futex resumed>) = 1 [pid 1849] <... futex resumed>) = 0 [pid 1858] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1853] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1849] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1853] <... open resumed>) = 4 [pid 1849] <... futex resumed>) = 0 [pid 1853] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1849] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1853] <... futex resumed>) = 0 [pid 1849] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1853] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1849] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1853] <... open resumed>) = 5 [pid 1849] <... futex resumed>) = 0 [pid 1853] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1849] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1853] <... futex resumed>) = 0 [pid 1849] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1853] creat("./bus", 000 [pid 1849] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1853] <... creat resumed>) = 6 [pid 1849] <... futex resumed>) = 0 [pid 1853] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1849] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1853] <... futex resumed>) = 0 [pid 1849] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1853] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1849] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1853] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1849] <... futex resumed>) = 0 [pid 1853] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1849] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1853] <... futex resumed>) = 0 [pid 1849] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1853] pwrite64(6, "+", 1, 0 [pid 1849] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1853] <... pwrite64 resumed>) = 1 [pid 1849] <... futex resumed>) = 0 [pid 1853] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1849] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1853] <... futex resumed>) = 0 [pid 1849] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1853] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1849] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1853] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1849] <... futex resumed>) = 0 [pid 1853] open("./bus", O_RDONLY [pid 1849] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1853] <... open resumed>) = 7 [pid 1853] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1849] <... futex resumed>) = 0 [pid 1853] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1849] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1853] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1849] <... futex resumed>) = 0 [pid 1853] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1849] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1853] <... copy_file_range resumed>) = 1 [pid 1849] <... futex resumed>) = 0 [pid 1853] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1849] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1853] <... futex resumed>) = 0 [pid 1849] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1853] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1849] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1849] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1849] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1864]}, 88) = 1864 [pid 1849] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1849] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1849] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1854] <... futex resumed>) = 0 [pid 301] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1854] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1858] <... futex resumed>) = 0 [pid 1854] <... futex resumed>) = 1 [pid 301] close(3 [pid 297] <... openat resumed>) = 3 ./strace-static-x86_64: Process 1864 attached [pid 1858] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1854] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... close resumed>) = 0 [pid 297] ioctl(3, LOOP_CLR_FD [pid 1864] set_robust_list(0x7f13c8cc39a0, 24 [pid 1858] <... open resumed>) = 4 [pid 301] rmdir("./60") = 0 [pid 301] mkdir("./61", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1865 [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1864] <... set_robust_list resumed>) = 0 [pid 1858] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] close(3) = 0 [pid 1864] rt_sigprocmask(SIG_SETMASK, [], [pid 1858] <... futex resumed>) = 1 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 1865 attached [pid 1864] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1858] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1854] <... futex resumed>) = 0 [pid 1846] +++ killed by SIGBUS +++ [pid 1841] +++ killed by SIGBUS +++ [pid 1865] set_robust_list(0x55558909e6a0, 24 [pid 1864] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1854] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1841, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=10} --- [pid 297] <... clone resumed>, child_tidptr=0x55558909e690) = 1866 [pid 1865] <... set_robust_list resumed>) = 0 [pid 298] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 1866 attached [pid 1866] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1866] chdir("./62") = 0 [pid 1866] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1864] <... mmap resumed>) = 0x20000000 [pid 1858] <... futex resumed>) = 0 [pid 1854] <... futex resumed>) = 1 [pid 1865] chdir("./61" [pid 1858] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1854] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1865] <... chdir resumed>) = 0 [pid 1864] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1858] <... open resumed>) = 5 [pid 1865] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1864] <... futex resumed>) = 1 [pid 1849] <... futex resumed>) = 0 [pid 1858] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1865] <... prctl resumed>) = 0 [pid 1864] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1858] <... futex resumed>) = 1 [pid 1849] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1854] <... futex resumed>) = 0 [pid 1865] setpgid(0, 0 [pid 1858] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1854] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1853] <... futex resumed>) = 0 [pid 1849] <... futex resumed>) = 1 [pid 1865] <... setpgid resumed>) = 0 [pid 1858] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1854] <... futex resumed>) = 0 [pid 1853] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1849] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1865] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1858] creat("./bus", 000 [pid 1854] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1853] <... open resumed>) = -1 EFAULT (Bad address) [pid 1865] <... openat resumed>) = 3 [pid 1865] write(3, "1000", 4 [pid 1858] <... creat resumed>) = 6 [pid 1853] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1865] <... write resumed>) = 4 [pid 1858] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1853] <... futex resumed>) = 1 [pid 1849] <... futex resumed>) = 0 [pid 1865] close(3 [pid 1858] <... futex resumed>) = 1 [pid 1854] <... futex resumed>) = 0 [pid 1853] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1849] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1865] <... close resumed>) = 0 [pid 1858] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1854] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1853] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1865] symlink("/dev/binderfs", "./binderfs" [pid 1858] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1854] <... futex resumed>) = 0 [pid 1849] <... futex resumed>) = 0 [pid 1866] <... prctl resumed>) = 0 [pid 1866] setpgid(0, 0) = 0 [pid 1866] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1866] write(3, "1000", 4) = 4 [pid 1866] close(3executing program ) = 0 [pid 1866] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1866] write(1, "executing program\n", 18) = 18 [pid 1866] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1866] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1866] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1866] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 298] <... restart_syscall resumed>) = 0 [pid 298] umount2("./60", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./60/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./60/binderfs") = 0 [pid 298] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1866] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1866] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1866] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1866] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1867]}, 88) = 1867 [pid 1866] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1866] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1866] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1867 attached [pid 1867] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1867] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1867] memfd_create("syzkaller", 0) = 3 [pid 1867] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1865] <... symlink resumed>) = 0 [pid 1858] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1854] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1849] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1867] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1858] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1858] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1854] <... futex resumed>) = 0 [pid 1858] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1854] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1858] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) executing program [pid 1854] <... futex resumed>) = 0 [pid 1858] pwrite64(6, "+", 1, 0 [pid 1865] write(1, "executing program\n", 18 [pid 1854] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1858] <... pwrite64 resumed>) = 1 [pid 1865] <... write resumed>) = 18 [pid 1858] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1865] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1858] <... futex resumed>) = 1 [pid 1854] <... futex resumed>) = 0 [pid 1858] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1854] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1865] <... futex resumed>) = 0 [pid 1865] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1858] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1854] <... futex resumed>) = 0 [pid 1854] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1865] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1858] open("./bus", O_RDONLY) = 7 [pid 1865] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1858] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1865] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1858] <... futex resumed>) = 1 [pid 1854] <... futex resumed>) = 0 [pid 1858] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1854] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1865] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1858] <... copy_file_range resumed>) = 1 [pid 1854] <... futex resumed>) = 0 [pid 1865] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1858] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1865] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1854] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1858] <... futex resumed>) = 0 [pid 1865] <... mprotect resumed>) = 0 [pid 1854] <... futex resumed>) = 0 [pid 1858] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1865] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1854] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1865] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1854] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1865] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1854] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1865] <... clone3 resumed> => {parent_tid=[1868]}, 88) = 1868 [pid 1854] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1865] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1854] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1865] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1854] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1865] <... futex resumed>) = 0 [pid 1865] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1854] <... clone3 resumed> => {parent_tid=[1869]}, 88) = 1869 [pid 1854] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1854] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] <... umount2 resumed>) = 0 [pid 1854] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./60/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./60/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 1868 attached [ 59.568175][ T1846] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 59.586111][ T1846] EXT4-fs (loop1): This should not happen!! Data will be lost [ 59.586111][ T1846] [ 59.602000][ T1853] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 1867] <... write resumed>) = 1048576 ./strace-static-x86_64: Process 1869 attached [pid 1869] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1869] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1869] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1868] set_robust_list(0x7f13c8ce49a0, 24 [pid 298] getdents64(4, [pid 1869] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1869] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1867] <... ioctl resumed>) = 0 [pid 1867] close(3) = 0 [pid 1867] close(4) = 0 [pid 1867] mkdir("./file1", 0777) = 0 [pid 1867] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 1868] <... set_robust_list resumed>) = 0 [pid 1868] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1868] memfd_create("syzkaller", 0) = 3 [pid 1868] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 298] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1868] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1854] <... futex resumed>) = 0 [pid 1854] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] close(4 [pid 1858] <... futex resumed>) = 0 [pid 1854] <... futex resumed>) = 1 [pid 298] <... close resumed>) = 0 [pid 1858] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1854] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] rmdir("./60/file1" [pid 1858] <... open resumed>) = -1 EFAULT (Bad address) [pid 1858] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1854] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 298] <... rmdir resumed>) = 0 [pid 1858] <... futex resumed>) = 0 [pid 1854] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1868] <... write resumed>) = 1048576 [pid 1868] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1868] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 59.629828][ T1853] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 59.637934][ T1867] loop0: detected capacity change from 0 to 2048 [ 59.642734][ T1853] EXT4-fs (loop3): This should not happen!! Data will be lost [ 59.642734][ T1853] [ 59.663773][ T1858] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 1868] ioctl(4, LOOP_SET_FD, 3 [pid 1854] <... futex resumed>) = 0 [pid 1849] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 298] getdents64(3, [pid 1868] <... ioctl resumed>) = 0 [pid 1868] close(3) = 0 [pid 1868] close(4) = 0 [pid 1868] mkdir("./file1", 0777) = 0 [pid 1868] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 1854] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./60") = 0 [pid 298] mkdir("./61", 0777 [pid 1867] <... mount resumed>) = 0 [pid 1867] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1867] chdir("./file1") = 0 [pid 1867] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1867] ioctl(4, LOOP_CLR_FD) = 0 [pid 1867] close(4) = 0 [pid 1867] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1866] <... futex resumed>) = 0 [pid 1866] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1866] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1867] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 1867] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1866] <... futex resumed>) = 0 [pid 1866] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1866] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1867] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 1867] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1866] <... futex resumed>) = 0 [pid 1866] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1866] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1867] creat("./bus", 000) = 6 [pid 1867] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1866] <... futex resumed>) = 0 [pid 1866] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1866] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1867] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 1867] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1866] <... futex resumed>) = 0 [pid 1867] pwrite64(6, "+", 1, 0 [pid 1866] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1867] <... pwrite64 resumed>) = 1 [pid 1866] <... futex resumed>) = 0 [pid 1867] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1866] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1867] <... futex resumed>) = 0 [pid 1866] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1867] open("./bus", O_RDONLY [pid 1866] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1867] <... open resumed>) = 7 [pid 1866] <... futex resumed>) = 0 [pid 1867] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1866] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1867] <... futex resumed>) = 0 [pid 1866] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1867] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1866] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1867] <... copy_file_range resumed>) = 1 [pid 1866] <... futex resumed>) = 0 [pid 1867] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1866] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1867] <... futex resumed>) = 0 [pid 1866] <... futex resumed>) = 0 [pid 1867] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1866] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 298] <... mkdir resumed>) = 0 [pid 1866] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1866] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1866] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1866] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1874]}, 88) = 1874 [pid 1866] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1866] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1866] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1874 attached [pid 1874] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1874] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1874] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1866] <... futex resumed>) = 0 [pid 1866] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1867] <... futex resumed>) = 0 [pid 1866] <... futex resumed>) = 1 [pid 1867] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1866] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1867] <... open resumed>) = -1 EFAULT (Bad address) [pid 1867] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1866] <... futex resumed>) = 0 [pid 1868] <... mount resumed>) = 0 [pid 1866] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1868] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 298] <... openat resumed>) = 3 [pid 1868] <... openat resumed>) = 3 [pid 298] ioctl(3, LOOP_CLR_FD [pid 1868] chdir("./file1" [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1868] <... chdir resumed>) = 0 [pid 298] close(3 [pid 1868] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1854] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 298] <... close resumed>) = 0 [pid 1868] <... openat resumed>) = 4 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1868] ioctl(4, LOOP_CLR_FD) = 0 [pid 298] <... clone resumed>, child_tidptr=0x55558909e690) = 1875 [pid 1868] close(4) = 0 [pid 1868] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1865] <... futex resumed>) = 0 [pid 1865] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1865] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1868] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1866] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1875 attached [pid 1868] <... open resumed>) = 4 [pid 1868] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1865] <... futex resumed>) = 0 [pid 1865] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1865] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1868] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1875] set_robust_list(0x55558909e6a0, 24 [pid 1868] <... open resumed>) = 5 [pid 1866] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1875] <... set_robust_list resumed>) = 0 [pid 1875] chdir("./61") = 0 [pid 1875] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1875] setpgid(0, 0) = 0 [pid 1875] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1875] write(3, "1000", 4) = 4 executing program [pid 1875] close(3) = 0 [pid 1875] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1875] write(1, "executing program\n", 18) = 18 [pid 1875] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1875] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1875] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1875] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1875] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1875] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1875] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1876]}, 88) = 1876 [pid 1875] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1875] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1875] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1874] <... futex resumed>) = 1 [ 59.727342][ T1867] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 59.730604][ T1858] EXT4-fs (loop2): Total free blocks count 0 [ 59.742018][ T1867] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 59.759718][ T1867] EXT4-fs (loop0): This should not happen!! Data will be lost [ 59.759718][ T1867] [ 59.769438][ T1867] EXT4-fs (loop0): Total free blocks count 0 [pid 1874] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1868] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1876 attached [pid 1876] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1876] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1876] memfd_create("syzkaller", 0) = 3 [pid 1876] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1868] <... futex resumed>) = 1 [pid 1865] <... futex resumed>) = 0 [pid 1868] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1865] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1876] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1868] <... futex resumed>) = 0 [pid 1865] <... futex resumed>) = 1 [pid 1876] <... write resumed>) = 1048576 [pid 1876] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1868] creat("./bus", 000 [pid 1865] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1866] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1876] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 59.775512][ T1853] EXT4-fs (loop3): free_blocks=2415919504 [ 59.776376][ T1867] EXT4-fs (loop0): Free/Dirty block details [ 59.781087][ T1853] EXT4-fs (loop3): dirty_blocks=32 [ 59.787068][ T1867] EXT4-fs (loop0): free_blocks=2415919504 [ 59.798269][ T1867] EXT4-fs (loop0): dirty_blocks=32 [ 59.799130][ T1858] EXT4-fs (loop2): Free/Dirty block details [ 59.803683][ T1867] EXT4-fs (loop0): Block reservation details [ 59.814097][ T1858] EXT4-fs (loop2): free_blocks=2415919504 [ 59.815298][ T1867] EXT4-fs (loop0): i_reserved_data_blocks=2 [pid 1876] ioctl(4, LOOP_SET_FD, 3 [pid 1868] <... creat resumed>) = 6 [pid 1867] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1868] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1876] <... ioctl resumed>) = 0 [pid 1876] close(3) = 0 [pid 1876] close(4) = 0 [pid 1868] <... futex resumed>) = 1 [pid 1874] <... futex resumed>) = ? [pid 1865] <... futex resumed>) = 0 [pid 1874] +++ killed by SIGBUS +++ [pid 1868] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1865] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1876] mkdir("./file1", 0777) = 0 [pid 1876] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 1865] <... futex resumed>) = 0 [pid 1865] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1868] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1868] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1868] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1867] +++ killed by SIGBUS +++ [pid 1866] +++ killed by SIGBUS +++ [pid 1865] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1853] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1865] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1866, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 1865] <... futex resumed>) = 1 [pid 1865] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] umount2("./62", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./62/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./62/binderfs") = 0 [pid 297] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1864] <... futex resumed>) = ? [pid 1864] +++ killed by SIGBUS +++ [ 59.821621][ T1876] loop1: detected capacity change from 0 to 2048 [ 59.826766][ T1853] EXT4-fs (loop3): Block reservation details [ 59.832723][ T1858] EXT4-fs (loop2): dirty_blocks=32 [ 59.838477][ T1853] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 59.850225][ T1867] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 59.862614][ T1867] EXT4-fs (loop0): This should not happen!! Data will be lost [ 59.862614][ T1867] [ 59.867990][ T1858] EXT4-fs (loop2): Block reservation details [pid 1868] <... futex resumed>) = 0 [pid 1868] pwrite64(6, "+", 1, 0) = 1 [pid 1868] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1868] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1865] <... futex resumed>) = 0 [pid 1858] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1869] <... futex resumed>) = ? [pid 1869] +++ killed by SIGBUS +++ [pid 1865] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1853] +++ killed by SIGBUS +++ [pid 1849] +++ killed by SIGBUS +++ [pid 1868] <... futex resumed>) = 0 [pid 1865] <... futex resumed>) = 1 [pid 1868] open("./bus", O_RDONLY [pid 1865] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1868] <... open resumed>) = 7 [pid 1868] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1865] <... futex resumed>) = 0 [pid 1868] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1865] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1868] <... copy_file_range resumed>) = 1 [pid 1865] <... futex resumed>) = 0 [pid 1868] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1865] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1868] <... futex resumed>) = 0 [pid 1865] <... futex resumed>) = 0 [pid 1868] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1865] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1865] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1865] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1865] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1878]}, 88) = 1878 [pid 1865] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1865] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1865] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1878 attached [pid 1878] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1878] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1878] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1865] <... futex resumed>) = 0 [pid 1865] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1868] <... futex resumed>) = 0 [pid 1865] <... futex resumed>) = 1 [pid 1868] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1865] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1868] <... open resumed>) = -1 EFAULT (Bad address) [ 59.877287][ T1853] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 59.891755][ T1858] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 59.892395][ T1853] EXT4-fs (loop3): This should not happen!! Data will be lost [ 59.892395][ T1853] [ 59.900068][ T1858] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 59.919173][ T1858] EXT4-fs (loop2): This should not happen!! Data will be lost [ 59.919173][ T1858] [pid 1868] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1865] <... futex resumed>) = 0 [pid 1878] <... futex resumed>) = 1 [pid 1865] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1858] +++ killed by SIGBUS +++ [pid 1854] +++ killed by SIGBUS +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1854, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 299] umount2("./61", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./61/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./61/binderfs", [pid 297] <... umount2 resumed>) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./61/binderfs") = 0 [pid 299] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1878] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1849, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11} --- [pid 1865] <... futex resumed>) = 0 [pid 1876] <... mount resumed>) = 0 [pid 1865] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1876] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1876] chdir("./file1") = 0 [pid 1876] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1876] ioctl(4, LOOP_CLR_FD) = 0 [pid 1876] close(4) = 0 [pid 1876] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1875] <... futex resumed>) = 0 [pid 1876] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1875] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1875] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] umount2("./59", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] umount2("./59/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1876] <... open resumed>) = 4 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./62/file1", [pid 1876] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] newfstatat(AT_FDCWD, "./59/binderfs", [pid 1876] <... futex resumed>) = 1 [pid 1875] <... futex resumed>) = 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1876] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1875] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] unlink("./59/binderfs" [pid 1876] <... open resumed>) = 5 [pid 1875] <... futex resumed>) = 0 [pid 1876] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1875] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... unlink resumed>) = 0 [pid 1876] <... futex resumed>) = 0 [pid 1875] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1876] creat("./bus", 000 [pid 1875] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1876] <... creat resumed>) = 6 [pid 1875] <... futex resumed>) = 0 [pid 1876] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1875] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1876] <... futex resumed>) = 0 [pid 1875] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1876] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1875] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1876] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1875] <... futex resumed>) = 0 [pid 1876] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1875] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1876] <... futex resumed>) = 0 [pid 1875] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1876] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1875] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1876] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1875] <... futex resumed>) = 0 [pid 1876] pwrite64(6, "+", 1, 0 [pid 1875] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1876] <... pwrite64 resumed>) = 1 [pid 1876] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1875] <... futex resumed>) = 0 [pid 1876] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1875] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1876] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1875] <... futex resumed>) = 0 [pid 1876] open("./bus", O_RDONLY [pid 1875] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1876] <... open resumed>) = 7 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1876] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1875] <... futex resumed>) = 0 [pid 1876] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1875] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1876] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1875] <... futex resumed>) = 0 [pid 1876] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1875] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1876] <... copy_file_range resumed>) = 1 [pid 1875] <... futex resumed>) = 0 [pid 1876] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1875] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1876] <... futex resumed>) = 0 [pid 1875] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1876] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1875] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1875] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1875] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1880]}, 88) = 1880 [pid 1875] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1875] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1875] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1880 attached [pid 1880] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1880] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 59.927507][ T1868] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 59.947364][ T1868] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 59.959473][ T1868] EXT4-fs (loop4): This should not happen!! Data will be lost [ 59.959473][ T1868] [ 59.969627][ T1868] EXT4-fs (loop4): Total free blocks count 0 [pid 1880] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 297] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1880] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] <... umount2 resumed>) = 0 [pid 297] openat(AT_FDCWD, "./62/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./62/file1" [pid 1880] <... futex resumed>) = 1 [pid 1875] <... futex resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... rmdir resumed>) = 0 [pid 1875] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1876] <... futex resumed>) = 0 [pid 1875] <... futex resumed>) = 1 [pid 297] getdents64(3, [pid 1876] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1875] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1876] <... open resumed>) = -1 EFAULT (Bad address) [pid 297] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1876] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1875] <... futex resumed>) = 0 [pid 297] close(3 [pid 1876] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1875] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1876] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1875] <... futex resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 1880] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1875] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1865] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 299] newfstatat(AT_FDCWD, "./61/file1", [pid 297] rmdir("./62") = 0 [pid 297] mkdir("./63", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1868] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] <... openat resumed>) = 3 [pid 299] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] ioctl(3, LOOP_CLR_FD [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 299] openat(AT_FDCWD, "./61/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] close(3 [pid 300] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... openat resumed>) = 4 [pid 297] <... close resumed>) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1881 [ 59.975946][ T1868] EXT4-fs (loop4): Free/Dirty block details [ 59.985784][ T1868] EXT4-fs (loop4): free_blocks=2415919504 [ 59.991547][ T1868] EXT4-fs (loop4): dirty_blocks=32 [ 59.996608][ T1868] EXT4-fs (loop4): Block reservation details [ 59.998885][ T1876] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 60.002650][ T1868] EXT4-fs (loop4): i_reserved_data_blocks=2 [pid 1878] <... futex resumed>) = ? [pid 1878] +++ killed by SIGBUS +++ [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(4, "", ./strace-static-x86_64: Process 1881 attached [pid 1881] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1881] chdir("./63") = 0 [pid 1881] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1881] setpgid(0, 0) = 0 [pid 1881] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1881] write(3, "1000", 4) = 4 [pid 1881] close(3) = 0 [pid 1881] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1881] write(1, "executing program\n", 18executing program ) = 18 [pid 1881] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1881] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1881] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1881] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1881] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1881] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1881] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1882]}, 88) = 1882 [pid 300] newfstatat(AT_FDCWD, "./59/file1", [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1881] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1881] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1881] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1882 attached [pid 1882] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1882] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1882] memfd_create("syzkaller", 0) = 3 [pid 1882] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] getdents64(4, [pid 300] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1882] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1875] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 300] openat(AT_FDCWD, "./59/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 299] getdents64(4, [pid 1882] <... write resumed>) = 1048576 [pid 1882] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1882] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 60.026147][ T1876] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 60.035027][ T1868] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 60.040778][ T1876] EXT4-fs (loop1): This should not happen!! Data will be lost [ 60.040778][ T1876] [ 60.060041][ T1876] EXT4-fs (loop1): Total free blocks count 0 [ 60.066097][ T1876] EXT4-fs (loop1): Free/Dirty block details [ 60.072035][ T1876] EXT4-fs (loop1): free_blocks=2415919504 [pid 1882] ioctl(4, LOOP_SET_FD, 3 [pid 300] <... openat resumed>) = 4 [pid 299] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 300] newfstatat(4, "", [pid 299] close(4 [pid 1882] <... ioctl resumed>) = 0 [pid 1882] close(3) = 0 [pid 1882] close(4 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] <... close resumed>) = 0 [pid 300] getdents64(4, [pid 299] rmdir("./61/file1" [pid 1876] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 300] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 299] <... rmdir resumed>) = 0 [pid 300] getdents64(4, [pid 299] getdents64(3, [pid 300] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 299] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 300] close(4 [pid 1868] +++ killed by SIGBUS +++ [pid 1865] +++ killed by SIGBUS +++ [pid 300] <... close resumed>) = 0 [pid 299] close(3 [pid 1882] <... close resumed>) = 0 [pid 1880] <... futex resumed>) = ? [pid 300] rmdir("./59/file1" [pid 299] <... close resumed>) = 0 [pid 1882] mkdir("./file1", 0777) = 0 [pid 1880] +++ killed by SIGBUS +++ [pid 1876] +++ killed by SIGBUS +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1865, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 300] <... rmdir resumed>) = 0 [pid 299] rmdir("./61" [pid 300] getdents64(3, [pid 299] <... rmdir resumed>) = 0 [pid 300] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 299] mkdir("./62", 0777 [pid 300] close(3 [pid 299] <... mkdir resumed>) = 0 [pid 300] <... close resumed>) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 300] rmdir("./59" [pid 299] <... openat resumed>) = 3 [pid 300] <... rmdir resumed>) = 0 [pid 299] ioctl(3, LOOP_CLR_FD [pid 1882] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 300] mkdir("./60", 0777 [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 300] <... mkdir resumed>) = 0 [pid 299] close(3 [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 299] <... close resumed>) = 0 [pid 300] <... openat resumed>) = 3 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] <... clone resumed>, child_tidptr=0x55558909e690) = 1884 [ 60.076502][ T1882] loop0: detected capacity change from 0 to 2048 [ 60.077677][ T1876] EXT4-fs (loop1): dirty_blocks=32 [ 60.084995][ T1868] EXT4-fs (loop4): This should not happen!! Data will be lost [ 60.084995][ T1868] [ 60.088832][ T1876] EXT4-fs (loop1): Block reservation details [ 60.104299][ T1876] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 60.112426][ T1875] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1885 [pid 301] <... restart_syscall resumed>) = 0 [pid 301] umount2("./61", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./61/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./61/binderfs") = 0 [pid 301] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 1884 attached [pid 1884] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1884] chdir("./62") = 0 [pid 1884] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1884] setpgid(0, 0) = 0 [pid 1884] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1884] write(3, "1000", 4) = 4 [pid 1884] close(3) = 0 [pid 1884] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1884] write(1, "executing program\n", 18executing program ) = 18 [pid 1884] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1884] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1884] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1884] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1884] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1884] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1884] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1886]}, 88) = 1886 [pid 1884] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1884] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1884] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1886 attached [pid 1886] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1886] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1886] memfd_create("syzkaller", 0) = 3 [pid 1886] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 301] <... umount2 resumed>) = 0 [pid 1886] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 301] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./61/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 1885 attached [pid 301] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1885] set_robust_list(0x55558909e6a0, 24 [pid 1875] +++ killed by SIGBUS +++ [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1885] <... set_robust_list resumed>) = 0 [pid 301] openat(AT_FDCWD, "./61/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1885] chdir("./60" [pid 301] <... openat resumed>) = 4 [pid 1885] <... chdir resumed>) = 0 [pid 301] newfstatat(4, "", [pid 1885] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1875, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=20} --- [pid 1885] <... prctl resumed>) = 0 [pid 301] getdents64(4, [pid 1885] setpgid(0, 0 [pid 301] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 1885] <... setpgid resumed>) = 0 [pid 301] getdents64(4, [pid 1885] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 301] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1885] <... openat resumed>) = 3 [pid 301] close(4 [pid 1885] write(3, "1000", 4 [pid 301] <... close resumed>) = 0 [pid 1885] <... write resumed>) = 4 [pid 301] rmdir("./61/file1" [pid 1885] close(3 [pid 301] <... rmdir resumed>) = 0 [pid 1885] <... close resumed>) = 0 [pid 301] getdents64(3, [pid 1885] symlink("/dev/binderfs", "./binderfs" [pid 301] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 executing program [pid 1885] <... symlink resumed>) = 0 [pid 301] close(3 [pid 1885] write(1, "executing program\n", 18 [pid 301] <... close resumed>) = 0 [pid 1885] <... write resumed>) = 18 [pid 301] rmdir("./61" [pid 1885] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... restart_syscall resumed>) = 0 [pid 1885] <... futex resumed>) = 0 [pid 301] <... rmdir resumed>) = 0 [pid 1885] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 301] mkdir("./62", 0777 [pid 1885] <... rt_sigaction resumed>NULL, 8) = 0 [pid 298] umount2("./61", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... mkdir resumed>) = 0 [pid 1885] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1885] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1886] <... write resumed>) = 1048576 [pid 1885] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 301] <... openat resumed>) = 3 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1885] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1885] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 301] ioctl(3, LOOP_CLR_FD [pid 1885] <... mprotect resumed>) = 0 [pid 1885] rt_sigprocmask(SIG_BLOCK, ~[], [pid 301] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 298] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1886] munmap(0x7f13c08c4000, 138412032 [pid 1885] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1885] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 301] close(3./strace-static-x86_64: Process 1887 attached [pid 1886] <... munmap resumed>) = 0 [pid 1885] <... clone3 resumed> => {parent_tid=[1887]}, 88) = 1887 [pid 301] <... close resumed>) = 0 [pid 298] <... openat resumed>) = 3 [pid 1886] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 298] newfstatat(3, "", [pid 1886] <... openat resumed>) = 4 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1886] ioctl(4, LOOP_SET_FD, 3 [pid 298] getdents64(3, [pid 1887] set_robust_list(0x7f13c8ce49a0, 24 [pid 1885] rt_sigprocmask(SIG_SETMASK, [], [pid 1882] <... mount resumed>) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1885] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1882] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1885] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1882] <... openat resumed>) = 3 [pid 301] <... clone resumed>, child_tidptr=0x55558909e690) = 1890 [pid 1885] <... futex resumed>) = 0 [pid 1882] chdir("./file1" [pid 298] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1885] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1882] <... chdir resumed>) = 0 [pid 1882] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1882] ioctl(4, LOOP_CLR_FD) = 0 [pid 1882] close(4./strace-static-x86_64: Process 1890 attached [pid 1887] <... set_robust_list resumed>) = 0 [pid 1886] <... ioctl resumed>) = 0 [pid 1882] <... close resumed>) = 0 [pid 298] umount2("./61/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./61/binderfs") = 0 [pid 298] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1886] close(3 [pid 1882] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1890] set_robust_list(0x55558909e6a0, 24 [pid 1887] rt_sigprocmask(SIG_SETMASK, [], [pid 1882] <... futex resumed>) = 1 [pid 1881] <... futex resumed>) = 0 [pid 1882] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1881] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1882] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1881] <... futex resumed>) = 0 [pid 1882] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1881] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1882] <... open resumed>) = 4 [pid 1882] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1881] <... futex resumed>) = 0 [pid 1882] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1881] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1882] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1881] <... futex resumed>) = 0 [pid 1882] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1881] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1882] <... open resumed>) = 5 [pid 1882] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1881] <... futex resumed>) = 0 [pid 1882] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1881] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1882] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1881] <... futex resumed>) = 0 [pid 1882] creat("./bus", 000 [pid 1881] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1882] <... creat resumed>) = 6 [pid 1882] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1881] <... futex resumed>) = 0 [pid 1882] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1881] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1882] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1881] <... futex resumed>) = 0 [pid 1882] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1881] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1882] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1882] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1890] <... set_robust_list resumed>) = 0 [pid 1887] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1882] <... futex resumed>) = 1 [pid 1881] <... futex resumed>) = 0 [pid 1890] chdir("./62" [pid 1887] memfd_create("syzkaller", 0 [pid 1882] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1881] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1890] <... chdir resumed>) = 0 [pid 1887] <... memfd_create resumed>) = 3 [pid 1882] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1881] <... futex resumed>) = 0 [pid 1890] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1887] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1882] pwrite64(6, "+", 1, 0 [pid 1881] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1887] <... mmap resumed>) = 0x7f13c08c4000 [pid 1882] <... pwrite64 resumed>) = 1 [pid 1890] <... prctl resumed>) = 0 [pid 1886] <... close resumed>) = 0 [pid 1882] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... umount2 resumed>) = 0 [pid 1890] setpgid(0, 0 [pid 1886] close(4 [pid 1882] <... futex resumed>) = 1 [pid 1881] <... futex resumed>) = 0 [pid 298] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1890] <... setpgid resumed>) = 0 [pid 1886] <... close resumed>) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1890] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1886] mkdir("./file1", 0777 [pid 298] newfstatat(AT_FDCWD, "./61/file1", [pid 1890] <... openat resumed>) = 3 [pid 1886] <... mkdir resumed>) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1890] write(3, "1000", 4 [pid 1886] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 298] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1890] <... write resumed>) = 4 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1890] close(3 [pid 298] openat(AT_FDCWD, "./61/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1890] <... close resumed>) = 0 [pid 1882] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1881] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... openat resumed>) = 4 [pid 1890] symlink("/dev/binderfs", "./binderfs" [pid 1882] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1881] <... futex resumed>) = 0 [pid 298] newfstatat(4, "", [pid 1890] <... symlink resumed>) = 0 [pid 1882] open("./bus", O_RDONLY [pid 1881] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1890] write(1, "executing program\n", 18executing program [pid 1882] <... open resumed>) = 7 [pid 298] getdents64(4, [pid 1890] <... write resumed>) = 18 [pid 1882] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1890] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1882] <... futex resumed>) = 1 [pid 1881] <... futex resumed>) = 0 [pid 298] getdents64(4, [pid 1890] <... futex resumed>) = 0 [pid 1882] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1881] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1890] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1882] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1881] <... futex resumed>) = 0 [pid 298] close(4 [pid 1890] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1882] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1881] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... close resumed>) = 0 [pid 1890] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 298] rmdir("./61/file1" [pid 1890] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1882] <... copy_file_range resumed>) = 1 [pid 1881] <... futex resumed>) = 0 [pid 298] <... rmdir resumed>) = 0 [pid 1890] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1882] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1881] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 298] getdents64(3, [pid 1890] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1882] <... futex resumed>) = 0 [pid 1881] <... mmap resumed>) = 0x7f13c8ca3000 [pid 298] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1890] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1882] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1881] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 298] close(3 [pid 1890] <... mprotect resumed>) = 0 [pid 1887] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1881] <... mprotect resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 1890] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1886] <... mount resumed>) = 0 [pid 1881] rt_sigprocmask(SIG_BLOCK, ~[], [pid 298] rmdir("./61" [pid 1890] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1886] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1881] <... rt_sigprocmask resumed>[], 8) = 0 [pid 298] <... rmdir resumed>) = 0 [pid 1890] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1886] <... openat resumed>) = 3 [pid 1881] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 298] mkdir("./62", 0777 [pid 1887] <... write resumed>) = 1048576 [pid 1886] chdir("./file1" [pid 1881] <... clone3 resumed> => {parent_tid=[1894]}, 88) = 1894 [pid 1881] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1887] munmap(0x7f13c08c4000, 138412032 [pid 1881] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1890] <... clone3 resumed> => {parent_tid=[1893]}, 88) = 1893 [pid 1887] <... munmap resumed>) = 0 [pid 1886] <... chdir resumed>) = 0 [pid 1881] <... futex resumed>) = 0 [pid 298] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 1894 attached ./strace-static-x86_64: Process 1893 attached [pid 1890] rt_sigprocmask(SIG_SETMASK, [], [pid 1887] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1886] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1881] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3 [pid 1894] set_robust_list(0x7f13c8cc39a0, 24 [pid 1893] set_robust_list(0x7f13c8ce49a0, 24 [pid 1890] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1887] <... openat resumed>) = 4 [pid 1886] <... openat resumed>) = 4 [pid 298] <... close resumed>) = 0 [pid 1894] <... set_robust_list resumed>) = 0 [pid 1893] <... set_robust_list resumed>) = 0 [pid 1890] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1887] ioctl(4, LOOP_SET_FD, 3 [ 60.128791][ T1875] EXT4-fs (loop1): This should not happen!! Data will be lost [ 60.128791][ T1875] [ 60.163122][ T1886] loop2: detected capacity change from 0 to 2048 [pid 1886] ioctl(4, LOOP_CLR_FD [pid 1894] rt_sigprocmask(SIG_SETMASK, [], [pid 1893] rt_sigprocmask(SIG_SETMASK, [], [pid 1890] <... futex resumed>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1895 ./strace-static-x86_64: Process 1895 attached [pid 1895] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1895] chdir("./62") = 0 [pid 1895] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1895] setpgid(0, 0) = 0 [pid 1895] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1895] write(3, "1000", 4) = 4 [pid 1895] close(3) = 0 [pid 1886] <... ioctl resumed>) = 0 [pid 1890] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1886] close(4 [pid 1895] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1894] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1893] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1887] <... ioctl resumed>) = 0 [pid 1886] <... close resumed>) = 0 [pid 1894] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1893] memfd_create("syzkaller", 0 [pid 1886] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1894] <... mmap resumed>) = 0x20000000 [pid 1893] <... memfd_create resumed>) = 3 [pid 1886] <... futex resumed>) = 1 [pid 1884] <... futex resumed>) = 0 [pid 1894] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1893] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1886] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1884] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1894] <... futex resumed>) = 1 [pid 1893] <... mmap resumed>) = 0x7f13c08c4000 [pid 1886] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1884] <... futex resumed>) = 0 [pid 1895] write(1, "executing program\n", 18 [pid 1887] close(3 [pid 1881] <... futex resumed>) = 0 [pid 1881] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1882] <... futex resumed>) = 0 [pid 1881] <... futex resumed>) = 1 [pid 1882] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1881] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1882] <... open resumed>) = -1 EFAULT (Bad address) [pid 1882] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1881] <... futex resumed>) = 0 [pid 1882] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1881] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1882] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) executing program [pid 1881] <... futex resumed>) = 0 [pid 1895] <... write resumed>) = 18 [pid 1894] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1893] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1887] <... close resumed>) = 0 [pid 1886] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1884] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1886] <... open resumed>) = 4 [pid 1886] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1884] <... futex resumed>) = 0 [pid 1886] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1884] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1886] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1884] <... futex resumed>) = 0 [pid 1886] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1884] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1886] <... open resumed>) = 5 [pid 1886] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1884] <... futex resumed>) = 0 [pid 1886] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1884] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1886] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1884] <... futex resumed>) = 0 [pid 1886] creat("./bus", 000 [pid 1884] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1886] <... creat resumed>) = 6 [pid 1886] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1884] <... futex resumed>) = 0 [pid 1886] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1884] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1886] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1884] <... futex resumed>) = 0 [pid 1886] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1884] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1886] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1886] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1884] <... futex resumed>) = 0 [pid 1886] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1884] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1886] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1884] <... futex resumed>) = 0 [pid 1887] close(4 [pid 1886] pwrite64(6, "+", 1, 0 [pid 1884] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1895] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1887] <... close resumed>) = 0 [pid 1886] <... pwrite64 resumed>) = 1 [pid 1895] <... futex resumed>) = 0 [pid 1887] mkdir("./file1", 0777 [pid 1886] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1895] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1887] <... mkdir resumed>) = 0 [pid 1886] <... futex resumed>) = 1 [pid 1884] <... futex resumed>) = 0 [pid 1895] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1887] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 1886] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1884] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1895] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1886] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1884] <... futex resumed>) = 0 [pid 1895] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1886] open("./bus", O_RDONLY [pid 1884] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1881] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1895] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1893] <... write resumed>) = 1048576 [pid 1886] <... open resumed>) = 7 [pid 1893] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1893] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 60.206360][ T1887] loop3: detected capacity change from 0 to 2048 [ 60.220302][ T1882] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 60.235935][ T1882] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 60.248160][ T1882] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 1893] ioctl(4, LOOP_SET_FD, 3 [pid 1895] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1886] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1893] <... ioctl resumed>) = 0 [pid 1893] close(3) = 0 [pid 1893] close(4 [pid 1895] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1886] <... futex resumed>) = 1 [pid 1884] <... futex resumed>) = 0 [pid 1895] <... mprotect resumed>) = 0 [pid 1886] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1884] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1893] <... close resumed>) = 0 [pid 1893] mkdir("./file1", 0777) = 0 [pid 1893] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 1886] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1884] <... futex resumed>) = 0 [pid 1886] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1884] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1895] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1887] <... mount resumed>) = 0 [pid 1887] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1887] chdir("./file1") = 0 [pid 1887] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1887] ioctl(4, LOOP_CLR_FD) = 0 [pid 1887] close(4 [pid 1895] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1887] <... close resumed>) = 0 [pid 1886] <... copy_file_range resumed>) = 1 [pid 1884] <... futex resumed>) = 0 [pid 1881] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1887] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1885] <... futex resumed>) = 0 [pid 1885] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1885] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1887] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 1895] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1887] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1886] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1884] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1882] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1886] <... futex resumed>) = 0 [pid 1884] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1895] <... clone3 resumed> => {parent_tid=[1900]}, 88) = 1900 [pid 1887] <... futex resumed>) = 1 [pid 1886] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1884] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1885] <... futex resumed>) = 0 [pid 1895] rt_sigprocmask(SIG_SETMASK, [], [pid 1887] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1885] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1884] <... mprotect resumed>) = 0 [pid 1895] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1887] <... open resumed>) = 5 [pid 1884] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1895] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1887] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1884] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1895] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1887] <... futex resumed>) = 0 [pid 1884] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1887] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1885] <... futex resumed>) = 0 [pid 1884] <... clone3 resumed> => {parent_tid=[1901]}, 88) = 1901 [pid 1884] rt_sigprocmask(SIG_SETMASK, [], [pid 1885] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1884] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1884] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1884] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1885] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) ./strace-static-x86_64: Process 1900 attached [pid 1900] set_robust_list(0x7f13c8ce49a0, 24 [pid 1885] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1900] <... set_robust_list resumed>) = 0 [pid 1900] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1887] <... futex resumed>) = 0 [pid 1885] <... futex resumed>) = 1 [pid 1887] creat("./bus", 000 [pid 1885] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1900] memfd_create("syzkaller", 0 [pid 1887] <... creat resumed>) = 6 [pid 1887] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1885] <... futex resumed>) = 0 [pid 1900] <... memfd_create resumed>) = 3 [pid 1900] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1893] <... mount resumed>) = 0 [pid 1885] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1887] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1893] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1887] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1885] <... futex resumed>) = 0 [pid 1893] <... openat resumed>) = 3 [pid 1887] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1885] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1893] chdir("./file1" [pid 1887] <... futex resumed>) = 0 [pid 1885] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1893] <... chdir resumed>) = 0 [pid 1887] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1885] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1893] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1887] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1885] <... futex resumed>) = 0 [pid 1893] <... openat resumed>) = 4 [pid 1887] pwrite64(6, "+", 1, 0 [pid 1885] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1893] ioctl(4, LOOP_CLR_FD) = 0 [pid 1887] <... pwrite64 resumed>) = 1 [pid 1893] close(4 [pid 1887] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1893] <... close resumed>) = 0 [pid 1887] <... futex resumed>) = 1 [pid 1885] <... futex resumed>) = 0 [pid 1893] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1887] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1885] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1893] <... futex resumed>) = 1 [pid 1887] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1885] <... futex resumed>) = 0 [pid 1893] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1887] open("./bus", O_RDONLY [pid 1885] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1887] <... open resumed>) = 7 [pid 1890] <... futex resumed>) = 0 [pid 1887] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1890] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1887] <... futex resumed>) = 1 [pid 1885] <... futex resumed>) = 0 [pid 1887] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1885] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1887] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1885] <... futex resumed>) = 0 [pid 1887] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1885] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1893] <... futex resumed>) = 0 [pid 1890] <... futex resumed>) = 1 [pid 1893] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1890] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1887] <... copy_file_range resumed>) = 1 [pid 1885] <... futex resumed>) = 0 [pid 1887] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1885] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1887] <... futex resumed>) = 0 [pid 1893] <... open resumed>) = 4 [pid 1887] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1885] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1893] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1885] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1893] <... futex resumed>) = 1 [pid 1890] <... futex resumed>) = 0 [pid 1893] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1890] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1885] <... mprotect resumed>) = 0 [pid 1893] <... open resumed>) = 5 [pid 1890] <... futex resumed>) = 0 [pid 1893] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1890] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1885] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1893] <... futex resumed>) = 0 [pid 1890] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1885] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 1901 attached [pid 1900] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1894] <... futex resumed>) = ? [pid 1893] creat("./bus", 000 [pid 1890] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [ 60.248160][ T1882] [ 60.251341][ T1893] loop4: detected capacity change from 0 to 2048 [ 60.257842][ T1882] EXT4-fs (loop0): Total free blocks count 0 [ 60.269703][ T1882] EXT4-fs (loop0): Free/Dirty block details [ 60.275477][ T1882] EXT4-fs (loop0): free_blocks=2415919504 [ 60.281127][ T1882] EXT4-fs (loop0): dirty_blocks=32 [ 60.286349][ T1882] EXT4-fs (loop0): Block reservation details [ 60.292432][ T1882] EXT4-fs (loop0): i_reserved_data_blocks=2 [pid 1885] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0}./strace-static-x86_64: Process 1902 attached [pid 1901] set_robust_list(0x7f13c8cc39a0, 24 [pid 1900] <... write resumed>) = 1048576 [pid 1894] +++ killed by SIGBUS +++ [pid 1893] <... creat resumed>) = 6 [pid 1890] <... futex resumed>) = 0 [pid 1893] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1890] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1893] <... futex resumed>) = 0 [pid 1890] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1893] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1890] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1893] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1890] <... futex resumed>) = 0 [pid 1893] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1890] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1893] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1893] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1890] <... futex resumed>) = 0 [pid 1893] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1890] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1893] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1890] <... futex resumed>) = 0 [pid 1893] pwrite64(6, "+", 1, 0 [pid 1890] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1893] <... pwrite64 resumed>) = 1 [pid 1902] set_robust_list(0x7f13c8cc39a0, 24 [pid 1901] <... set_robust_list resumed>) = 0 [pid 1893] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1902] <... set_robust_list resumed>) = 0 [pid 1901] rt_sigprocmask(SIG_SETMASK, [], [pid 1893] <... futex resumed>) = 1 [pid 1890] <... futex resumed>) = 0 [pid 1902] rt_sigprocmask(SIG_SETMASK, [], [pid 1901] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1893] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1890] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1902] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1901] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1893] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1890] <... futex resumed>) = 0 [pid 1902] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1901] <... mmap resumed>) = 0x20000000 [pid 1893] open("./bus", O_RDONLY [pid 1890] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1893] <... open resumed>) = 7 [pid 1893] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1890] <... futex resumed>) = 0 [pid 1893] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1890] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1893] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1890] <... futex resumed>) = 0 [pid 1893] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1890] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1893] <... copy_file_range resumed>) = 1 [pid 1890] <... futex resumed>) = 0 [pid 1893] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1890] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1893] <... futex resumed>) = 0 [pid 1890] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1893] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1890] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1890] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1890] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1903]}, 88) = 1903 [pid 1890] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1890] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1890] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1901] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1884] <... futex resumed>) = 0 [pid 1901] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1884] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1900] munmap(0x7f13c08c4000, 138412032 [pid 1886] <... futex resumed>) = 0 [pid 1884] <... futex resumed>) = 1 [pid 1900] <... munmap resumed>) = 0 [pid 1886] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1884] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1886] <... open resumed>) = -1 EFAULT (Bad address) [pid 1886] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1900] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1886] <... futex resumed>) = 1 [pid 1884] <... futex resumed>) = 0 [pid 1900] <... openat resumed>) = 4 [pid 1886] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1884] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1900] ioctl(4, LOOP_SET_FD, 3 [pid 1886] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1884] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1903 attached [pid 1885] <... clone3 resumed> => {parent_tid=[1902]}, 88) = 1902 [pid 1882] +++ killed by SIGBUS +++ [pid 1881] +++ killed by SIGBUS +++ [pid 1903] set_robust_list(0x7f13c8cc39a0, 24 [pid 1885] rt_sigprocmask(SIG_SETMASK, [], [pid 1903] <... set_robust_list resumed>) = 0 [pid 1885] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1903] rt_sigprocmask(SIG_SETMASK, [], [pid 1885] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1903] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1885] <... futex resumed>) = 1 [pid 1903] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1885] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1903] <... mmap resumed>) = 0x20000000 [pid 1902] <... futex resumed>) = 0 [pid 1884] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1881, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 1903] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1903] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1900] <... ioctl resumed>) = 0 [pid 1900] close(3) = 0 [pid 1900] close(4) = 0 [ 60.313163][ T1882] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 60.324224][ T1886] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 60.326020][ T1882] EXT4-fs (loop0): This should not happen!! Data will be lost [ 60.326020][ T1882] [ 60.339988][ T1900] loop1: detected capacity change from 0 to 2048 [pid 1900] mkdir("./file1", 0777) = 0 [pid 1900] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 1902] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1890] <... futex resumed>) = 0 [pid 1902] <... mmap resumed>) = 0x20000000 [pid 1890] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1893] <... futex resumed>) = 0 [pid 1890] <... futex resumed>) = 1 [pid 297] umount2("./63", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1893] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1890] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1893] <... open resumed>) = -1 EFAULT (Bad address) [pid 297] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1893] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... openat resumed>) = 3 [pid 1893] <... futex resumed>) = 1 [pid 1890] <... futex resumed>) = 0 [pid 297] newfstatat(3, "", [pid 1890] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1890] <... futex resumed>) = 0 [pid 297] getdents64(3, [pid 1890] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./63/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./63/binderfs") = 0 [pid 297] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1902] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 60.355485][ T1886] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 60.368300][ T1886] EXT4-fs (loop2): This should not happen!! Data will be lost [ 60.368300][ T1886] [ 60.373350][ T1893] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 60.378487][ T1886] EXT4-fs (loop2): Total free blocks count 0 [ 60.397731][ T1893] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 1902] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1885] <... futex resumed>) = 0 [pid 1885] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1900] <... mount resumed>) = 0 [pid 1884] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1900] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1900] chdir("./file1") = 0 [pid 1900] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1900] ioctl(4, LOOP_CLR_FD) = 0 [pid 1900] close(4) = 0 [pid 1887] <... futex resumed>) = 0 [pid 1885] <... futex resumed>) = 1 [pid 1900] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1895] <... futex resumed>) = 0 [pid 1900] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1895] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1900] <... open resumed>) = 4 [pid 1895] <... futex resumed>) = 0 [pid 1895] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1900] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1895] <... futex resumed>) = 0 [pid 1900] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1895] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1900] <... open resumed>) = 5 [pid 1895] <... futex resumed>) = 0 [pid 1900] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1895] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1900] <... futex resumed>) = 0 [pid 1895] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1900] creat("./bus", 000 [pid 1895] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1900] <... creat resumed>) = 6 [pid 1895] <... futex resumed>) = 0 [pid 1900] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1895] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1900] <... futex resumed>) = 0 [pid 1895] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1900] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1895] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1900] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1895] <... futex resumed>) = 0 [pid 1900] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1895] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1900] <... futex resumed>) = 0 [pid 1895] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1900] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1895] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1900] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1895] <... futex resumed>) = 0 [pid 1900] pwrite64(6, "+", 1, 0 [pid 1895] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1900] <... pwrite64 resumed>) = 1 [pid 1900] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1895] <... futex resumed>) = 0 [pid 1900] open("./bus", O_RDONLY [pid 1895] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1900] <... open resumed>) = 7 [pid 1895] <... futex resumed>) = 0 [pid 1900] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1895] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1900] <... futex resumed>) = 0 [pid 1895] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1900] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1895] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1900] <... copy_file_range resumed>) = 1 [pid 1895] <... futex resumed>) = 0 [pid 1900] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1895] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1900] <... futex resumed>) = 0 [pid 1895] <... futex resumed>) = 0 [pid 1900] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1895] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1890] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1895] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1895] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1895] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1906]}, 88) = 1906 [pid 1895] rt_sigprocmask(SIG_SETMASK, [], [pid 1887] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1885] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1895] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1895] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1887] <... open resumed>) = -1 EFAULT (Bad address) [pid 1895] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1887] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1906 attached [pid 1906] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1906] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1906] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1895] <... futex resumed>) = 0 [pid 1895] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1900] <... futex resumed>) = 0 [pid 1895] <... futex resumed>) = 1 [pid 1900] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1895] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1900] <... open resumed>) = -1 EFAULT (Bad address) [pid 1900] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1895] <... futex resumed>) = 0 [ 60.398924][ T1886] EXT4-fs (loop2): Free/Dirty block details [ 60.412047][ T1893] EXT4-fs (loop4): This should not happen!! Data will be lost [ 60.412047][ T1893] [ 60.416965][ T1886] EXT4-fs (loop2): free_blocks=2415919504 [ 60.431860][ T1886] EXT4-fs (loop2): dirty_blocks=32 [ 60.437224][ T1886] EXT4-fs (loop2): Block reservation details [ 60.444475][ T1886] EXT4-fs (loop2): i_reserved_data_blocks=2 [pid 1895] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1887] <... futex resumed>) = 1 [pid 1886] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1885] <... futex resumed>) = 0 [pid 297] <... umount2 resumed>) = 0 [pid 1895] <... futex resumed>) = 0 [pid 1895] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./63/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./63/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./63/file1") = 0 [pid 297] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1887] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1885] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] close(3) = 0 [pid 297] rmdir("./63") = 0 [pid 297] mkdir("./64", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD [pid 1901] <... futex resumed>) = ? [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1901] +++ killed by SIGBUS +++ [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1887] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1885] <... futex resumed>) = 0 [pid 1885] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... clone resumed>, child_tidptr=0x55558909e690) = 1907 [ 60.448008][ T1900] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 60.450856][ T1893] EXT4-fs (loop4): Total free blocks count 0 [ 60.470664][ T1893] EXT4-fs (loop4): Free/Dirty block details [ 60.476439][ T1893] EXT4-fs (loop4): free_blocks=2415919504 [ 60.482381][ T1893] EXT4-fs (loop4): dirty_blocks=32 [ 60.488822][ T1887] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 1895] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 1907 attached [pid 1906] <... futex resumed>) = 1 [pid 1907] set_robust_list(0x55558909e6a0, 24 [pid 1906] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1885] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 60.503659][ T1887] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 60.504767][ T1886] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 60.515894][ T1887] EXT4-fs (loop3): This should not happen!! Data will be lost [ 60.515894][ T1887] [ 60.529553][ T1893] EXT4-fs (loop4): Block reservation details [ 60.538145][ T1887] EXT4-fs (loop3): Total free blocks count 0 [ 60.544655][ T1893] EXT4-fs (loop4): i_reserved_data_blocks=2 [pid 1907] <... set_robust_list resumed>) = 0 [pid 1893] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1886] +++ killed by SIGBUS +++ [pid 1884] +++ killed by SIGBUS +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1884, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 1907] chdir("./64" [pid 1893] +++ killed by SIGBUS +++ [pid 299] <... restart_syscall resumed>) = 0 [pid 299] umount2("./62", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./62/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./62/binderfs") = 0 [pid 299] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1907] <... chdir resumed>) = 0 [pid 1903] <... futex resumed>) = ? [pid 1887] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [ 60.549373][ T1900] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 60.556374][ T1886] EXT4-fs (loop2): This should not happen!! Data will be lost [ 60.556374][ T1886] [ 60.576224][ T1887] EXT4-fs (loop3): Free/Dirty block details [ 60.576246][ T1887] EXT4-fs (loop3): free_blocks=2415919504 [ 60.576260][ T1887] EXT4-fs (loop3): dirty_blocks=32 [ 60.576272][ T1887] EXT4-fs (loop3): Block reservation details [ 60.584607][ T1900] EXT4-fs (loop1): This should not happen!! Data will be lost [ 60.584607][ T1900] [ 60.588245][ T1887] EXT4-fs (loop3): i_reserved_data_blocks=2 [pid 1907] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1903] +++ killed by SIGBUS +++ [pid 1902] <... futex resumed>) = ? [pid 1890] +++ killed by SIGBUS +++ [pid 299] <... umount2 resumed>) = 0 [pid 1907] setpgid(0, 0 [pid 1887] +++ killed by SIGBUS +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1890, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 299] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./62/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./62/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./62/file1") = 0 [pid 299] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./62") = 0 [pid 299] mkdir("./63", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1908 ./strace-static-x86_64: Process 1908 attached [pid 1908] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1908] chdir("./63") = 0 [pid 1908] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1908] setpgid(0, 0) = 0 [pid 1908] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1908] write(3, "1000", 4) = 4 [pid 1908] close(3) = 0 [pid 1908] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 1908] write(1, "executing program\n", 18) = 18 [pid 1908] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1908] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1908] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1908] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1908] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1908] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1908] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1909]}, 88) = 1909 [pid 1908] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1908] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1908] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1909 attached [pid 1909] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1909] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1909] memfd_create("syzkaller", 0) = 3 [pid 1909] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1907] <... setpgid resumed>) = 0 [pid 1907] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1907] write(3, "1000", 4 [pid 301] umount2("./62", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1907] <... write resumed>) = 4 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1907] close(3 [pid 301] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1907] <... close resumed>) = 0 [pid 301] <... openat resumed>) = 3 [pid 1907] symlink("/dev/binderfs", "./binderfs" [pid 301] newfstatat(3, "", [pid 1907] <... symlink resumed>) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1907] write(1, "executing program\n", 18executing program ) = 18 [pid 301] getdents64(3, [pid 1907] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./62/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1907] <... futex resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1907] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 301] newfstatat(AT_FDCWD, "./62/binderfs", [pid 1907] <... rt_sigaction resumed>NULL, 8) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1907] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 301] unlink("./62/binderfs" [pid 1907] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 301] <... unlink resumed>) = 0 [pid 1907] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 301] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1907] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1907] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1907] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1910]}, 88) = 1910 [ 60.597664][ T1900] EXT4-fs (loop1): Total free blocks count 0 [ 60.599910][ T1903] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 60.608609][ T1900] EXT4-fs (loop1): Free/Dirty block details [ 60.615373][ T1903] EXT4-fs (loop4): This should not happen!! Data will be lost [ 60.615373][ T1903] [ 60.620635][ T1900] EXT4-fs (loop1): free_blocks=2415919504 [ 60.642258][ T1902] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 1907] rt_sigprocmask(SIG_SETMASK, [], [pid 1909] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 ./strace-static-x86_64: Process 1910 attached [pid 1910] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1910] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1910] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1909] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1909] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1909] ioctl(4, LOOP_SET_FD, 3 [pid 1907] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1907] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1907] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1902] +++ killed by SIGBUS +++ [pid 1885] +++ killed by SIGBUS +++ [pid 1910] <... futex resumed>) = 0 [pid 1910] memfd_create("syzkaller", 0) = 3 [pid 1910] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1910] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1900] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 301] <... umount2 resumed>) = 0 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1885, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 1906] <... futex resumed>) = ? [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 1909] <... ioctl resumed>) = 0 [pid 1906] +++ killed by SIGBUS +++ [pid 301] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./62/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./62/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./62/file1") = 0 [pid 301] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./62") = 0 [pid 301] mkdir("./63", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 60.675092][ T1900] EXT4-fs (loop1): dirty_blocks=32 [ 60.676275][ T1902] EXT4-fs (loop3): This should not happen!! Data will be lost [ 60.676275][ T1902] [ 60.687763][ T1909] loop2: detected capacity change from 0 to 2048 [ 60.696249][ T1900] EXT4-fs (loop1): Block reservation details [ 60.703169][ T1900] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 60.711810][ T1900] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 301] close(3 [pid 1909] close(3 [pid 300] <... restart_syscall resumed>) = 0 [pid 301] <... close resumed>) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1911 [pid 1910] <... write resumed>) = 1048576 ./strace-static-x86_64: Process 1911 attached [pid 1909] <... close resumed>) = 0 [pid 1909] close(4 [pid 1900] +++ killed by SIGBUS +++ [pid 1895] +++ killed by SIGBUS +++ [pid 1910] munmap(0x7f13c08c4000, 138412032 [pid 1911] set_robust_list(0x55558909e6a0, 24 [pid 1909] <... close resumed>) = 0 [pid 300] umount2("./60", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1895, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 1911] <... set_robust_list resumed>) = 0 [pid 1910] <... munmap resumed>) = 0 [pid 1909] mkdir("./file1", 0777 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1909] <... mkdir resumed>) = 0 [pid 300] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1909] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 300] <... openat resumed>) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./60/binderfs", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program ) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1911] chdir("./63") = 0 [pid 1911] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1911] setpgid(0, 0) = 0 [pid 1911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1911] write(3, "1000", 4) = 4 [pid 1911] close(3) = 0 [pid 300] unlink("./60/binderfs" [pid 1911] symlink("/dev/binderfs", "./binderfs" [pid 300] <... unlink resumed>) = 0 [pid 1911] <... symlink resumed>) = 0 [pid 1911] write(1, "executing program\n", 18 [pid 300] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1911] <... write resumed>) = 18 [pid 1911] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1910] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1911] <... futex resumed>) = 0 [pid 1911] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1910] ioctl(4, LOOP_SET_FD, 3 [pid 1911] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1911] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1911] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1911] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 298] umount2("./62", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./62/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./62/binderfs") = 0 [pid 298] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1910] <... ioctl resumed>) = 0 [pid 300] <... umount2 resumed>) = 0 [pid 1911] <... mprotect resumed>) = 0 [pid 1910] close(3 [pid 300] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... umount2 resumed>) = 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] newfstatat(AT_FDCWD, "./60/file1", [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1911] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1910] <... close resumed>) = 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] newfstatat(AT_FDCWD, "./62/file1", [pid 1911] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1910] close(4 [pid 300] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1911] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1910] <... close resumed>) = 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1910] mkdir("./file1", 0777 [pid 300] openat(AT_FDCWD, "./60/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1911] <... clone3 resumed> => {parent_tid=[1912]}, 88) = 1912 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] <... openat resumed>) = 4 [pid 298] openat(AT_FDCWD, "./62/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 300] newfstatat(4, "", [pid 298] <... openat resumed>) = 4 [pid 1911] rt_sigprocmask(SIG_SETMASK, [], [pid 1910] <... mkdir resumed>) = 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] newfstatat(4, "", [pid 1911] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 300] getdents64(4, [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1910] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 300] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1911] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] getdents64(4, [pid 298] getdents64(4, [pid 1911] <... futex resumed>) = 0 [pid 300] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 298] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1911] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 300] close(4 [pid 298] getdents64(4, ./strace-static-x86_64: Process 1912 attached [pid 300] <... close resumed>) = 0 [pid 298] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1912] set_robust_list(0x7f13c8ce49a0, 24 [pid 300] rmdir("./60/file1" [pid 298] close(4 [pid 1912] <... set_robust_list resumed>) = 0 [pid 300] <... rmdir resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 1912] rt_sigprocmask(SIG_SETMASK, [], [pid 300] getdents64(3, [pid 298] rmdir("./62/file1" [pid 300] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1912] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 300] close(3 [pid 298] <... rmdir resumed>) = 0 [pid 300] <... close resumed>) = 0 [pid 298] getdents64(3, [pid 300] rmdir("./60" [pid 298] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 300] <... rmdir resumed>) = 0 [pid 298] close(3 [pid 300] mkdir("./61", 0777 [pid 298] <... close resumed>) = 0 [pid 300] <... mkdir resumed>) = 0 [pid 298] rmdir("./62" [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 298] <... rmdir resumed>) = 0 [pid 300] <... openat resumed>) = 3 [pid 298] mkdir("./63", 0777 [pid 300] ioctl(3, LOOP_CLR_FD [pid 298] <... mkdir resumed>) = 0 [pid 300] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 300] close(3 [pid 298] <... openat resumed>) = 3 [pid 300] <... close resumed>) = 0 [pid 298] ioctl(3, LOOP_CLR_FD [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 298] close(3 [pid 300] <... clone resumed>, child_tidptr=0x55558909e690) = 1915 [pid 298] <... close resumed>) = 0 [pid 1909] <... mount resumed>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1909] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 298] <... clone resumed>, child_tidptr=0x55558909e690) = 1916 [pid 1912] memfd_create("syzkaller", 0 [pid 1909] <... openat resumed>) = 3 [pid 1912] <... memfd_create resumed>) = 3 [pid 1909] chdir("./file1" [pid 1912] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1909] <... chdir resumed>) = 0 [pid 1909] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1909] ioctl(4, LOOP_CLR_FD) = 0 [pid 1909] close(4) = 0 [pid 1909] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1908] <... futex resumed>) = 0 [pid 1908] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1908] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1909] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1912] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 1916 attached [pid 1916] set_robust_list(0x55558909e6a0, 24 [pid 1909] <... open resumed>) = 4 [pid 1916] <... set_robust_list resumed>) = 0 [pid 1916] chdir("./63" [pid 1909] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1916] <... chdir resumed>) = 0 [pid 1916] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1916] setpgid(0, 0) = 0 [pid 1916] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1909] <... futex resumed>) = 1 [pid 1908] <... futex resumed>) = 0 [pid 1908] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1908] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1909] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1916] write(3, "1000", 4 [pid 1909] <... open resumed>) = 5 [pid 1916] <... write resumed>) = 4 [pid 1916] close(3) = 0 [pid 1916] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1909] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1915 attached [pid 1915] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1915] chdir("./61" [pid 1916] write(1, "executing program\n", 18executing program ) = 18 [pid 1916] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1916] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1915] <... chdir resumed>) = 0 [pid 1916] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1916] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1915] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1916] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1915] <... prctl resumed>) = 0 [pid 1915] setpgid(0, 0) = 0 [pid 1916] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1909] <... futex resumed>) = 1 [pid 1908] <... futex resumed>) = 0 [pid 1909] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1908] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1909] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1908] <... futex resumed>) = 0 [pid 1909] creat("./bus", 000 [pid 1908] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1909] <... creat resumed>) = 6 [pid 1916] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1916] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1909] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1908] <... futex resumed>) = 0 [pid 1909] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1908] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1909] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1908] <... futex resumed>) = 0 [pid 1909] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1908] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1909] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1909] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1908] <... futex resumed>) = 0 [pid 1909] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1908] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1909] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1908] <... futex resumed>) = 0 [pid 1908] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1909] pwrite64(6, "+", 1, 0) = 1 [pid 1915] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1909] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1915] <... openat resumed>) = 3 [pid 1909] <... futex resumed>) = 1 [pid 1908] <... futex resumed>) = 0 [pid 1912] <... write resumed>) = 1048576 [pid 1909] open("./bus", O_RDONLY [pid 1908] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1916] <... clone3 resumed> => {parent_tid=[1918]}, 88) = 1918 [pid 1909] <... open resumed>) = 7 [pid 1908] <... futex resumed>) = 0 [pid 1909] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1908] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1909] <... futex resumed>) = 0 [pid 1908] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1909] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1908] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1909] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1908] <... futex resumed>) = 0 [pid 1909] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1908] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1916] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1916] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1916] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1909] <... copy_file_range resumed>) = 1 [pid 1908] <... futex resumed>) = 0 [pid 1915] write(3, "1000", 4 [pid 1909] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1908] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1909] <... futex resumed>) = 0 [pid 1915] <... write resumed>) = 4 [pid 1908] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1909] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1908] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1915] close(3) = 0 [pid 1908] <... mprotect resumed>) = 0 [pid 1915] symlink("/dev/binderfs", "./binderfs" [pid 1908] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1915] <... symlink resumed>) = 0 [pid 1915] write(1, "executing program\n", 18 [pid 1908] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1915] <... write resumed>) = 18 [pid 1915] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000executing program ) = 0 [pid 1915] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1908] <... clone3 resumed> => {parent_tid=[1920]}, 88) = 1920 [pid 1908] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1915] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1908] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1915] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1908] <... futex resumed>) = 0 [pid 1915] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1908] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1915] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1915] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1915] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1915] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1921]}, 88) = 1921 [pid 1915] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1915] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1915] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1918 attached [pid 1918] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1918] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1918] memfd_create("syzkaller", 0./strace-static-x86_64: Process 1920 attached [pid 1920] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1920] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1918] <... memfd_create resumed>) = 3 [pid 1920] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1912] munmap(0x7f13c08c4000, 138412032 [pid 1918] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1910] <... mount resumed>) = 0 [pid 1912] <... munmap resumed>) = 0 [pid 1921] set_robust_list(0x7f13c8ce49a0, 24 [pid 1910] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1910] chdir("./file1") = 0 [pid 1910] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1921] <... set_robust_list resumed>) = 0 [pid 1920] <... mmap resumed>) = 0x20000000 [pid 1918] <... mmap resumed>) = 0x7f13c08c4000 [pid 1912] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1910] <... openat resumed>) = 4 [pid 1921] rt_sigprocmask(SIG_SETMASK, [], [pid 1920] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1912] <... openat resumed>) = 4 [pid 1910] ioctl(4, LOOP_CLR_FD [pid 1921] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1920] <... futex resumed>) = 1 [pid 1910] <... ioctl resumed>) = 0 [pid 1908] <... futex resumed>) = 0 [pid 1910] close(4 [pid 1921] memfd_create("syzkaller", 0 [pid 1920] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1918] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [ 60.727353][ T1900] EXT4-fs (loop1): This should not happen!! Data will be lost [ 60.727353][ T1900] [ 60.747031][ T1910] loop0: detected capacity change from 0 to 2048 [pid 1912] ioctl(4, LOOP_SET_FD, 3 [pid 1910] <... close resumed>) = 0 [pid 1908] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1921] <... memfd_create resumed>) = 3 [pid 1918] <... write resumed>) = 1048576 [pid 1910] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1918] munmap(0x7f13c08c4000, 138412032 [pid 1910] <... futex resumed>) = 1 [pid 1907] <... futex resumed>) = 0 [pid 1921] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1918] <... munmap resumed>) = 0 [pid 1910] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1909] <... futex resumed>) = 0 [pid 1908] <... futex resumed>) = 1 [pid 1907] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1918] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1909] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1907] <... futex resumed>) = 0 [pid 1921] <... mmap resumed>) = 0x7f13c08c4000 [pid 1918] <... openat resumed>) = 4 [pid 1910] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1909] <... open resumed>) = -1 EFAULT (Bad address) [pid 1908] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1907] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1918] ioctl(4, LOOP_SET_FD, 3 [pid 1910] <... open resumed>) = 4 [pid 1909] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1908] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1921] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1912] <... ioctl resumed>) = 0 [pid 1910] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1909] <... futex resumed>) = 0 [pid 1908] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1918] <... ioctl resumed>) = 0 [pid 1910] <... futex resumed>) = 1 [pid 1907] <... futex resumed>) = 0 [pid 1918] close(3 [pid 1910] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1907] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1918] <... close resumed>) = 0 [pid 1910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1907] <... futex resumed>) = 0 [pid 1918] close(4 [pid 1910] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1907] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1918] <... close resumed>) = 0 [pid 1910] <... open resumed>) = 5 [pid 1918] mkdir("./file1", 0777 [pid 1910] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1918] <... mkdir resumed>) = 0 [pid 1910] <... futex resumed>) = 1 [pid 1907] <... futex resumed>) = 0 [pid 1918] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 1910] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1907] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1907] <... futex resumed>) = 0 [pid 1910] creat("./bus", 000 [pid 1908] <... futex resumed>) = 0 [pid 1907] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1910] <... creat resumed>) = 6 [pid 1908] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1910] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1907] <... futex resumed>) = 0 [pid 1912] close(3 [pid 1910] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1907] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1907] <... futex resumed>) = 0 [pid 1910] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1907] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1910] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1910] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1907] <... futex resumed>) = 0 [pid 1910] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1907] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1907] <... futex resumed>) = 0 [pid 1910] pwrite64(6, "+", 1, 0 [pid 1907] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1910] <... pwrite64 resumed>) = 1 [pid 1910] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1907] <... futex resumed>) = 0 [pid 1910] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1907] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1907] <... futex resumed>) = 0 [pid 1910] open("./bus", O_RDONLY [pid 1907] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1910] <... open resumed>) = 7 [pid 1910] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1907] <... futex resumed>) = 0 [pid 1910] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1907] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1907] <... futex resumed>) = 0 [pid 1910] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1907] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1912] <... close resumed>) = 0 [pid 1910] <... copy_file_range resumed>) = 1 [pid 1907] <... futex resumed>) = 0 [pid 1910] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1907] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1912] close(4 [pid 1910] <... futex resumed>) = 0 [pid 1907] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1910] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1907] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1907] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1907] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1922]}, 88) = 1922 [pid 1907] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1907] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1907] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1922 attached [pid 1922] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1922] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1922] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1907] <... futex resumed>) = 0 [pid 1907] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1910] <... futex resumed>) = 0 [pid 1907] <... futex resumed>) = 1 [pid 1910] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1907] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1910] <... open resumed>) = -1 EFAULT (Bad address) [pid 1910] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1907] <... futex resumed>) = 0 [pid 1910] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1907] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 60.806817][ T1912] loop4: detected capacity change from 0 to 2048 [ 60.814474][ T1918] loop1: detected capacity change from 0 to 2048 [ 60.821706][ T1909] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 1907] <... futex resumed>) = 0 [pid 1921] <... write resumed>) = 1048576 [pid 1912] <... close resumed>) = 0 [pid 1907] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1922] <... futex resumed>) = 1 [pid 1922] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1921] munmap(0x7f13c08c4000, 138412032 [ 60.847777][ T1910] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 60.848997][ T1909] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 60.864507][ T1910] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 60.875342][ T1909] EXT4-fs (loop2): This should not happen!! Data will be lost [ 60.875342][ T1909] [ 60.887283][ T1910] EXT4-fs (loop0): This should not happen!! Data will be lost [ 60.887283][ T1910] [pid 1912] mkdir("./file1", 0777 [pid 1921] <... munmap resumed>) = 0 [pid 1912] <... mkdir resumed>) = 0 [pid 1908] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1921] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1912] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 1907] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1921] <... openat resumed>) = 4 [pid 1918] <... mount resumed>) = 0 [pid 1918] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1918] chdir("./file1") = 0 [pid 1918] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1918] ioctl(4, LOOP_CLR_FD) = 0 [pid 1918] close(4 [pid 1921] ioctl(4, LOOP_SET_FD, 3 [pid 1918] <... close resumed>) = 0 [pid 1918] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1916] <... futex resumed>) = 0 [pid 1916] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1916] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1918] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 1918] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1916] <... futex resumed>) = 0 [pid 1916] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1918] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1916] <... futex resumed>) = 0 [pid 1918] <... open resumed>) = 5 [pid 1916] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1918] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1916] <... futex resumed>) = 0 [pid 1918] creat("./bus", 000 [pid 1916] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1918] <... creat resumed>) = 6 [pid 1916] <... futex resumed>) = 0 [pid 1918] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1916] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1918] <... futex resumed>) = 0 [pid 1916] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1918] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1916] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1918] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1916] <... futex resumed>) = 0 [pid 1918] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1916] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1918] <... futex resumed>) = 0 [pid 1916] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1918] pwrite64(6, "+", 1, 0 [pid 1916] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1918] <... pwrite64 resumed>) = 1 [pid 1916] <... futex resumed>) = 0 [pid 1918] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1916] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1918] <... futex resumed>) = 0 [pid 1916] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1918] open("./bus", O_RDONLY [pid 1916] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1918] <... open resumed>) = 7 [pid 1916] <... futex resumed>) = 0 [pid 1918] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1916] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1918] <... futex resumed>) = 0 [pid 1916] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1918] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1916] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1918] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1916] <... futex resumed>) = 0 [pid 1916] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1918] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1916] <... futex resumed>) = 0 [pid 1916] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1916] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1916] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1918] <... copy_file_range resumed>) = 1 [pid 1916] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1921] <... ioctl resumed>) = 0 [pid 1918] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1916] <... clone3 resumed> => {parent_tid=[1926]}, 88) = 1926 [pid 1918] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1916] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1916] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 60.897306][ T1909] EXT4-fs (loop2): Total free blocks count 0 [ 60.911376][ T1910] EXT4-fs (loop0): Total free blocks count 0 [ 60.911952][ T1909] EXT4-fs (loop2): Free/Dirty block details [ 60.918147][ T1910] EXT4-fs (loop0): Free/Dirty block details [ 60.924581][ T1909] EXT4-fs (loop2): free_blocks=2415919504 [ 60.934802][ T1909] EXT4-fs (loop2): dirty_blocks=32 [ 60.940535][ T1921] loop3: detected capacity change from 0 to 2048 [ 60.947492][ T1910] EXT4-fs (loop0): free_blocks=2415919504 [pid 1916] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1921] close(3./strace-static-x86_64: Process 1926 attached [pid 1926] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1926] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1926] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1921] <... close resumed>) = 0 [pid 1916] <... futex resumed>) = 0 [pid 1916] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1921] close(4 [pid 1918] <... futex resumed>) = 0 [pid 1916] <... futex resumed>) = 1 [pid 1918] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1916] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1918] <... open resumed>) = -1 EFAULT (Bad address) [pid 1918] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1916] <... futex resumed>) = 0 [pid 1918] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1916] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1918] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 60.949416][ T1909] EXT4-fs (loop2): Block reservation details [ 60.953513][ T1910] EXT4-fs (loop0): dirty_blocks=32 [ 60.964620][ T1910] EXT4-fs (loop0): Block reservation details [ 60.966449][ T1918] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 60.970888][ T1910] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 60.990820][ T1909] EXT4-fs (loop2): i_reserved_data_blocks=2 [pid 1916] <... futex resumed>) = 0 [pid 1926] <... futex resumed>) = 1 [pid 1921] <... close resumed>) = 0 [pid 1910] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1909] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1921] mkdir("./file1", 0777 [pid 1916] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1922] <... futex resumed>) = ? [pid 1921] <... mkdir resumed>) = 0 [pid 1921] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 1910] +++ killed by SIGBUS +++ [pid 1912] <... mount resumed>) = 0 [pid 1922] +++ killed by SIGBUS +++ [pid 1926] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1920] <... futex resumed>) = ? [pid 1920] +++ killed by SIGBUS +++ [pid 1912] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1909] +++ killed by SIGBUS +++ [pid 1908] +++ killed by SIGBUS +++ [pid 1912] <... openat resumed>) = 3 [pid 1912] chdir("./file1" [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1908, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 1912] <... chdir resumed>) = 0 [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 1912] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1912] ioctl(4, LOOP_CLR_FD) = 0 [pid 1912] close(4) = 0 [pid 299] <... restart_syscall resumed>) = 0 [pid 1912] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1911] <... futex resumed>) = 0 [pid 1912] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1911] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] umount2("./63", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1912] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1911] <... futex resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1912] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1911] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1912] <... open resumed>) = 4 [pid 299] <... openat resumed>) = 3 [pid 1912] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [ 60.998746][ T1907] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 60.999406][ T1909] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 61.011840][ T1907] EXT4-fs (loop0): This should not happen!! Data will be lost [ 61.011840][ T1907] [ 61.023077][ T1909] EXT4-fs (loop2): This should not happen!! Data will be lost [ 61.023077][ T1909] [ 61.042275][ T1918] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 299] newfstatat(3, "", [pid 1912] <... futex resumed>) = 1 [pid 1911] <... futex resumed>) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1912] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1911] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] getdents64(3, [pid 1912] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1911] <... futex resumed>) = 0 [pid 299] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1912] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1911] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] umount2("./63/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1912] <... open resumed>) = 5 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1912] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] newfstatat(AT_FDCWD, "./63/binderfs", [pid 1912] <... futex resumed>) = 1 [pid 1911] <... futex resumed>) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1916] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1912] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1911] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] unlink("./63/binderfs" [pid 1912] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1911] <... futex resumed>) = 0 [pid 299] <... unlink resumed>) = 0 [pid 1912] creat("./bus", 000 [pid 1911] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1912] <... creat resumed>) = 6 [pid 1912] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1911] <... futex resumed>) = 0 [pid 1912] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1911] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1912] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1911] <... futex resumed>) = 0 [pid 1912] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1911] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1912] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1912] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1911] <... futex resumed>) = 0 [pid 1912] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1911] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1912] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1911] <... futex resumed>) = 0 [pid 1912] pwrite64(6, "+", 1, 0 [pid 1911] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1912] <... pwrite64 resumed>) = 1 [pid 1912] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1911] <... futex resumed>) = 0 [pid 1912] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1911] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1912] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1911] <... futex resumed>) = 0 [pid 1912] open("./bus", O_RDONLY [pid 1911] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1912] <... open resumed>) = 7 [pid 1912] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1911] <... futex resumed>) = 0 [pid 1912] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1911] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1912] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1911] <... futex resumed>) = 0 [pid 1912] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1911] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1912] <... copy_file_range resumed>) = 1 [pid 1911] <... futex resumed>) = 0 [pid 1912] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1911] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1912] <... futex resumed>) = 0 [pid 1911] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1912] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1911] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1911] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1911] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1928]}, 88) = 1928 [pid 1911] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 1928 attached [pid 1911] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... umount2 resumed>) = 0 [pid 1911] <... futex resumed>) = 0 [pid 1911] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1928] set_robust_list(0x7f13c8cc39a0, 24 [pid 299] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1907] +++ killed by SIGBUS +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1907, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 297] restart_syscall(<... resuming interrupted clone ...> [pid 1928] <... set_robust_list resumed>) = 0 [pid 1928] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1928] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 1911] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1912] <... futex resumed>) = 0 [pid 1911] <... futex resumed>) = 1 [pid 1912] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1911] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1912] <... open resumed>) = -1 EFAULT (Bad address) [pid 1912] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1911] <... futex resumed>) = 0 [pid 1911] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... restart_syscall resumed>) = 0 [pid 1911] <... futex resumed>) = 0 [pid 1911] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] umount2("./64", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1928] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 297] umount2("./64/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./64/binderfs") = 0 [ 61.054523][ T1918] EXT4-fs (loop1): This should not happen!! Data will be lost [ 61.054523][ T1918] [ 61.065002][ T1918] EXT4-fs (loop1): Total free blocks count 0 [ 61.075773][ T1918] EXT4-fs (loop1): Free/Dirty block details [ 61.081793][ T1918] EXT4-fs (loop1): free_blocks=2415919504 [ 61.086637][ T1912] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 61.088563][ T1918] EXT4-fs (loop1): dirty_blocks=32 [pid 297] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] newfstatat(AT_FDCWD, "./63/file1", [pid 1921] <... mount resumed>) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 1921] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 299] openat(AT_FDCWD, "./63/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./63/file1") = 0 [pid 299] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./63") = 0 [pid 1921] <... openat resumed>) = 3 [pid 1921] chdir("./file1") = 0 [pid 1921] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1921] ioctl(4, LOOP_CLR_FD) = 0 [pid 299] mkdir("./64", 0777 [pid 1921] close(4 [pid 299] <... mkdir resumed>) = 0 [pid 1921] <... close resumed>) = 0 [pid 1921] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1915] <... futex resumed>) = 0 [pid 1921] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1915] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1921] <... open resumed>) = 4 [pid 1915] <... futex resumed>) = 0 [pid 1915] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1921] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... openat resumed>) = 3 [pid 1921] <... futex resumed>) = 1 [pid 1915] <... futex resumed>) = 0 [pid 299] ioctl(3, LOOP_CLR_FD [pid 1921] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1915] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1921] <... open resumed>) = 5 [pid 1915] <... futex resumed>) = 0 [pid 299] close(3 [pid 1921] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1915] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... close resumed>) = 0 [pid 1921] <... futex resumed>) = 0 [pid 1915] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1915] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1915] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1921] creat("./bus", 000) = 6 [pid 299] <... clone resumed>, child_tidptr=0x55558909e690) = 1932 [pid 1921] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1915] <... futex resumed>) = 0 [pid 1915] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1915] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1921] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 1921] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1915] <... futex resumed>) = 0 [pid 1915] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1915] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1921] pwrite64(6, "+", 1, 0) = 1 [pid 1921] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1915] <... futex resumed>) = 0 [pid 1915] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1915] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1921] open("./bus", O_RDONLY) = 7 [pid 1921] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1915] <... futex resumed>) = 0 [pid 1915] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1915] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1915] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1915] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1915] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1915] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1921] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 1915] <... clone3 resumed> => {parent_tid=[1933]}, 88) = 1933 [pid 1921] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1915] rt_sigprocmask(SIG_SETMASK, [], [pid 1921] <... futex resumed>) = 0 [pid 1915] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1921] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1915] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1915] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 1932 attached ./strace-static-x86_64: Process 1933 attached [pid 1933] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1933] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1932] set_robust_list(0x55558909e6a0, 24 [pid 1933] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1932] <... set_robust_list resumed>) = 0 [ 61.106286][ T1912] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 61.120696][ T1912] EXT4-fs (loop4): This should not happen!! Data will be lost [ 61.120696][ T1912] [ 61.139359][ T1912] EXT4-fs (loop4): Total free blocks count 0 [ 61.145691][ T1912] EXT4-fs (loop4): Free/Dirty block details [ 61.152027][ T1912] EXT4-fs (loop4): free_blocks=2415919504 executing program [pid 1911] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1932] chdir("./64") = 0 [pid 1932] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1932] setpgid(0, 0) = 0 [pid 1932] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1932] write(3, "1000", 4) = 4 [pid 1932] close(3) = 0 [pid 1932] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1932] write(1, "executing program\n", 18) = 18 [pid 1932] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1932] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1932] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1932] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1932] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1932] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1932] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1934]}, 88) = 1934 [pid 1932] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1932] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1932] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1933] <... mmap resumed>) = 0x20000000 [pid 1933] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1915] <... futex resumed>) = 0 [pid 1915] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1921] <... futex resumed>) = 0 [pid 1915] <... futex resumed>) = 1 [pid 1921] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1915] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1921] <... open resumed>) = -1 EFAULT (Bad address) [pid 1921] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1915] <... futex resumed>) = 0 [pid 1921] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1915] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1921] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1915] <... futex resumed>) = 0 [pid 1915] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1933] <... futex resumed>) = 1 [pid 1933] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1934 attached [pid 1934] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1934] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1934] memfd_create("syzkaller", 0) = 3 [pid 1934] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1934] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1912] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 297] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1934] <... write resumed>) = 1048576 [pid 1934] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1934] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1934] ioctl(4, LOOP_SET_FD, 3 [pid 1928] <... futex resumed>) = ? [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1934] <... ioctl resumed>) = 0 [pid 1934] close(3) = 0 [ 61.157705][ T1912] EXT4-fs (loop4): dirty_blocks=32 [ 61.163232][ T1912] EXT4-fs (loop4): Block reservation details [ 61.164630][ T1921] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 61.169302][ T1912] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 61.189828][ T1918] EXT4-fs (loop1): Block reservation details [ 61.194941][ T1934] loop2: detected capacity change from 0 to 2048 [ 61.196521][ T1918] EXT4-fs (loop1): i_reserved_data_blocks=2 [pid 1934] close(4 [pid 1928] +++ killed by SIGBUS +++ [pid 1912] +++ killed by SIGBUS +++ [pid 1934] <... close resumed>) = 0 [pid 1934] mkdir("./file1", 0777) = 0 [pid 1934] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 297] newfstatat(AT_FDCWD, "./64/file1", [pid 1918] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1915] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1911] +++ killed by SIGBUS +++ [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1918] +++ killed by SIGBUS +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1911, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9} --- [pid 297] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./64/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] umount2("./63", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] <... openat resumed>) = 4 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(4, "", [pid 301] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] <... openat resumed>) = 3 [pid 297] getdents64(4, [pid 301] newfstatat(3, "", [pid 297] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, [pid 301] getdents64(3, [pid 297] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] close(4 [pid 301] umount2("./63/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] <... close resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] rmdir("./64/file1" [pid 301] newfstatat(AT_FDCWD, "./63/binderfs", [pid 297] <... rmdir resumed>) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] getdents64(3, [pid 301] unlink("./63/binderfs" [pid 297] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] <... unlink resumed>) = 0 [pid 297] close(3 [pid 301] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] <... close resumed>) = 0 [pid 297] rmdir("./64") = 0 [pid 297] mkdir("./65", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1935 [ 61.208643][ T1911] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 61.219294][ T1921] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 61.221101][ T1911] EXT4-fs (loop4): This should not happen!! Data will be lost [ 61.221101][ T1911] [ 61.233814][ T1921] EXT4-fs (loop3): This should not happen!! Data will be lost [ 61.233814][ T1921] [pid 1926] <... futex resumed>) = ? ./strace-static-x86_64: Process 1935 attached [pid 1934] <... mount resumed>) = 0 [pid 301] <... umount2 resumed>) = 0 [pid 301] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./63/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1935] set_robust_list(0x55558909e6a0, 24 [pid 1934] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 301] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./63/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./63/file1") = 0 [pid 301] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./63") = 0 [pid 1935] <... set_robust_list resumed>) = 0 [pid 1934] <... openat resumed>) = 3 [pid 1935] chdir("./65" [pid 1934] chdir("./file1" [pid 1935] <... chdir resumed>) = 0 [pid 1934] <... chdir resumed>) = 0 [pid 1935] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1934] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1935] <... prctl resumed>) = 0 [pid 1934] <... openat resumed>) = 4 [pid 1935] setpgid(0, 0 [pid 1934] ioctl(4, LOOP_CLR_FD [pid 1935] <... setpgid resumed>) = 0 [pid 1934] <... ioctl resumed>) = 0 [pid 1935] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1934] close(4 [pid 301] mkdir("./64", 0777 [pid 1935] <... openat resumed>) = 3 [pid 1934] <... close resumed>) = 0 [pid 301] <... mkdir resumed>) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1938 [pid 1935] write(3, "1000", 4 [pid 1934] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1938 attached [pid 1938] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1938] chdir("./64" [pid 1935] <... write resumed>) = 4 [pid 1934] <... futex resumed>) = 1 [pid 1932] <... futex resumed>) = 0 [pid 1935] close(3 [pid 1934] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1932] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1935] <... close resumed>) = 0 [pid 1934] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1938] <... chdir resumed>) = 0 [pid 1938] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1938] setpgid(0, 0) = 0 [pid 1938] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1938] write(3, "1000", 4) = 4 [pid 1938] close(3) = 0 [pid 1938] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 1938] write(1, "executing program\n", 18) = 18 [pid 1938] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1938] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1938] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1938] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1938] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1938] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1935] symlink("/dev/binderfs", "./binderfs" [pid 1934] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1932] <... futex resumed>) = 0 [pid 1938] <... rt_sigprocmask resumed>[], 8) = 0 [ 61.252831][ T1926] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 61.258996][ T1921] EXT4-fs (loop3): Total free blocks count 0 [ 61.271103][ T1921] EXT4-fs (loop3): Free/Dirty block details [ 61.286924][ T1926] EXT4-fs (loop1): This should not happen!! Data will be lost [ 61.286924][ T1926] [ 61.295345][ T1921] EXT4-fs (loop3): free_blocks=2415919504 [ 61.302843][ T1921] EXT4-fs (loop3): dirty_blocks=32 [pid 1938] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1939]}, 88) = 1939 [pid 1938] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1938] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1938] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1939 attached [pid 1939] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1939] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1939] memfd_create("syzkaller", 0) = 3 [pid 1939] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1935] <... symlink resumed>) = 0 [pid 1934] <... open resumed>) = 4 [pid 1932] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}executing program [pid 1935] write(1, "executing program\n", 18) = 18 [pid 1934] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1935] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1934] <... futex resumed>) = 1 [pid 1932] <... futex resumed>) = 0 [pid 1935] <... futex resumed>) = 0 [pid 1934] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1932] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1935] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1934] <... open resumed>) = 5 [pid 1932] <... futex resumed>) = 0 [pid 1935] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1934] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1932] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1935] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1934] <... futex resumed>) = 0 [pid 1932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1935] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1934] creat("./bus", 000 [pid 1932] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1935] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1934] <... creat resumed>) = 6 [pid 1932] <... futex resumed>) = 0 [pid 1935] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1934] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1932] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1935] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1934] <... futex resumed>) = 0 [pid 1932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1935] <... mprotect resumed>) = 0 [pid 1934] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1932] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1935] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1934] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1932] <... futex resumed>) = 0 [pid 1935] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1934] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1932] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1935] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1934] <... futex resumed>) = 0 [pid 1932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1934] pwrite64(6, "+", 1, 0 [pid 1932] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1935] <... clone3 resumed> => {parent_tid=[1940]}, 88) = 1940 [pid 1934] <... pwrite64 resumed>) = 1 [pid 1932] <... futex resumed>) = 0 [pid 1935] rt_sigprocmask(SIG_SETMASK, [], [pid 1934] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1932] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1935] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1934] <... futex resumed>) = 0 [pid 1932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1935] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1934] open("./bus", O_RDONLY [pid 1932] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1935] <... futex resumed>) = 0 [pid 1934] <... open resumed>) = 7 [pid 1932] <... futex resumed>) = 0 [pid 1935] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1934] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1932] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1934] <... futex resumed>) = 0 [pid 1932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1934] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1932] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1934] <... copy_file_range resumed>) = 1 [pid 1932] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1940 attached [pid 1934] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1932] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1926] +++ killed by SIGBUS +++ [pid 1921] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1916] +++ killed by SIGBUS +++ [pid 1934] <... futex resumed>) = 0 [pid 1932] <... futex resumed>) = 0 [pid 1934] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1932] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1916, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 1934] <... mmap resumed>) = 0x20000000 [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 1934] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1932] <... futex resumed>) = 0 [pid 1934] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1932] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1934] <... open resumed>) = -1 EFAULT (Bad address) [pid 1932] <... futex resumed>) = 0 [pid 1934] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1932] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1934] <... futex resumed>) = 0 [pid 1932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1940] set_robust_list(0x7f13c8ce49a0, 24 [pid 1939] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1932] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1940] <... set_robust_list resumed>) = 0 [pid 1940] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1940] memfd_create("syzkaller", 0) = 3 [pid 1940] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1940] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1939] <... write resumed>) = 1048576 [pid 1940] munmap(0x7f13c08c4000, 138412032 [pid 1933] <... futex resumed>) = ? [pid 298] <... restart_syscall resumed>) = 0 [pid 1933] +++ killed by SIGBUS +++ [pid 1932] <... futex resumed>) = 0 [pid 1921] +++ killed by SIGBUS +++ [pid 1940] <... munmap resumed>) = 0 [pid 1940] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1940] ioctl(4, LOOP_SET_FD, 3 [pid 1932] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1940] <... ioctl resumed>) = 0 [pid 1940] close(3) = 0 [ 61.308072][ T1921] EXT4-fs (loop3): Block reservation details [ 61.314172][ T1921] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 61.324893][ T1934] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 61.340085][ T1934] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 61.341914][ T1940] loop0: detected capacity change from 0 to 2048 [pid 1940] close(4) = 0 [pid 1940] mkdir("./file1", 0777) = 0 [pid 1940] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 1934] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 298] umount2("./63", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./63/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./63/binderfs") = 0 [pid 298] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1939] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1939] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1939] ioctl(4, LOOP_SET_FD, 3 [pid 1932] <... futex resumed>) = ? [pid 1939] <... ioctl resumed>) = 0 [pid 1939] close(3) = 0 [pid 1939] close(4) = 0 [pid 1939] mkdir("./file1", 0777) = 0 [pid 1939] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 1934] +++ killed by SIGBUS +++ [ 61.353362][ T1915] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 61.370587][ T1934] EXT4-fs (loop2): This should not happen!! Data will be lost [ 61.370587][ T1934] [ 61.370608][ T1934] EXT4-fs (loop2): Total free blocks count 0 [ 61.370622][ T1934] EXT4-fs (loop2): Free/Dirty block details [ 61.370634][ T1934] EXT4-fs (loop2): free_blocks=2415919504 [ 61.370647][ T1934] EXT4-fs (loop2): dirty_blocks=32 [ 61.370659][ T1934] EXT4-fs (loop2): Block reservation details executing program [pid 1915] +++ killed by SIGBUS +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1915, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 300] umount2("./61", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./61/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./61/binderfs") = 0 [pid 300] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./63/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./63/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./63/file1") = 0 [pid 298] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./63") = 0 [pid 298] mkdir("./64", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1941 ./strace-static-x86_64: Process 1941 attached [pid 1941] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1941] chdir("./64") = 0 [pid 1941] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1941] setpgid(0, 0) = 0 [pid 1941] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1941] write(3, "1000", 4) = 4 [pid 1941] close(3) = 0 [pid 1941] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1941] write(1, "executing program\n", 18) = 18 [pid 1941] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1941] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1941] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1941] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1941] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1941] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1941] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1945]}, 88) = 1945 [pid 1941] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1941] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1941] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1945 attached [pid 1945] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1945] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1945] memfd_create("syzkaller", 0) = 3 [pid 1945] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1945] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1939] <... mount resumed>) = 0 [pid 1932] +++ killed by SIGBUS +++ [pid 300] <... umount2 resumed>) = 0 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1932, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7} --- [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 300] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./61/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./61/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./61/file1" [pid 1939] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 299] <... restart_syscall resumed>) = 0 [pid 1939] chdir("./file1") = 0 [pid 1939] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 299] umount2("./64", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1939] <... openat resumed>) = 4 [pid 299] <... openat resumed>) = 3 [pid 1939] ioctl(4, LOOP_CLR_FD [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./64/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./64/binderfs") = 0 [pid 299] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1939] <... ioctl resumed>) = 0 [pid 1939] close(4 [pid 300] <... rmdir resumed>) = 0 [pid 300] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 1939] <... close resumed>) = 0 [pid 300] rmdir("./61" [pid 1939] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... rmdir resumed>) = 0 [pid 1939] <... futex resumed>) = 1 [pid 1938] <... futex resumed>) = 0 [pid 300] mkdir("./62", 0777executing program [pid 1939] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1938] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... mkdir resumed>) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1947 ./strace-static-x86_64: Process 1947 attached [pid 1947] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1947] chdir("./62") = 0 [pid 1947] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1947] setpgid(0, 0) = 0 [pid 1947] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1947] write(3, "1000", 4) = 4 [pid 1947] close(3) = 0 [pid 1947] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1947] write(1, "executing program\n", 18 [pid 1938] <... futex resumed>) = 0 [pid 1947] <... write resumed>) = 18 [pid 1947] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1947] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1939] <... open resumed>) = 4 [pid 1938] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1947] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1947] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1947] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1947] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1947] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1947] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1948]}, 88) = 1948 [pid 1947] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1947] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1947] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1948 attached [pid 1948] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1948] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1948] memfd_create("syzkaller", 0) = 3 [pid 1948] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1948] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1940] <... mount resumed>) = 0 [pid 1939] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1940] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1939] <... futex resumed>) = 1 [pid 1938] <... futex resumed>) = 0 [pid 1938] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1940] <... openat resumed>) = 3 [pid 1938] <... futex resumed>) = 0 [pid 1939] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1940] chdir("./file1" [pid 1938] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1939] <... open resumed>) = 5 [pid 1940] <... chdir resumed>) = 0 [pid 1940] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1939] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1940] <... openat resumed>) = 4 [pid 1939] <... futex resumed>) = 1 [pid 1938] <... futex resumed>) = 0 [pid 1938] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1938] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1940] ioctl(4, LOOP_CLR_FD [pid 1939] creat("./bus", 000 [pid 1940] <... ioctl resumed>) = 0 [pid 1939] <... creat resumed>) = 6 [pid 1940] close(4 [pid 1948] <... write resumed>) = 1048576 [pid 1948] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1948] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1948] ioctl(4, LOOP_SET_FD, 3 [pid 299] <... umount2 resumed>) = 0 [pid 1940] <... close resumed>) = 0 [ 61.370669][ T1934] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 61.375870][ T1939] loop4: detected capacity change from 0 to 2048 [ 61.386127][ T1915] EXT4-fs (loop3): This should not happen!! Data will be lost [ 61.386127][ T1915] [ 61.402545][ T1932] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 61.442276][ T1932] EXT4-fs (loop2): This should not happen!! Data will be lost [ 61.442276][ T1932] [pid 1939] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1940] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1939] <... futex resumed>) = 1 [pid 1938] <... futex resumed>) = 0 [pid 1948] <... ioctl resumed>) = 0 [pid 1948] close(3) = 0 [pid 1948] close(4) = 0 [pid 1948] mkdir("./file1", 0777) = 0 [pid 1948] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 1945] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1945] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1938] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1945] <... openat resumed>) = 4 [pid 1938] <... futex resumed>) = 0 [pid 1940] <... futex resumed>) = 1 [pid 1938] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1935] <... futex resumed>) = 0 [pid 1939] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1940] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1935] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1940] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1939] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1935] <... futex resumed>) = 0 [pid 1940] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1939] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1935] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1945] ioctl(4, LOOP_SET_FD, 3 [pid 1940] <... open resumed>) = 4 [pid 1939] <... futex resumed>) = 1 [pid 1938] <... futex resumed>) = 0 [pid 299] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1945] <... ioctl resumed>) = 0 [pid 1940] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1939] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1938] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1945] close(3 [pid 1940] <... futex resumed>) = 1 [pid 1939] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1938] <... futex resumed>) = 0 [pid 1935] <... futex resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1945] <... close resumed>) = 0 [pid 1940] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1939] pwrite64(6, "+", 1, 0 [pid 1938] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1935] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] newfstatat(AT_FDCWD, "./64/file1", [pid 1945] close(4 [pid 1940] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1939] <... pwrite64 resumed>) = 1 [pid 1935] <... futex resumed>) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1945] <... close resumed>) = 0 [pid 1940] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1939] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1935] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1945] mkdir("./file1", 0777 [pid 1940] <... open resumed>) = 5 [pid 1939] <... futex resumed>) = 1 [pid 1938] <... futex resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1945] <... mkdir resumed>) = 0 [pid 1940] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1939] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1938] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] openat(AT_FDCWD, "./64/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1945] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 1940] <... futex resumed>) = 1 [pid 1939] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1938] <... futex resumed>) = 0 [pid 1935] <... futex resumed>) = 0 [pid 299] <... openat resumed>) = 4 [pid 1940] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1939] open("./bus", O_RDONLY [pid 1938] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1935] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] newfstatat(4, "", [pid 1940] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1939] <... open resumed>) = 7 [pid 1935] <... futex resumed>) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1940] creat("./bus", 000 [pid 1939] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1935] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] getdents64(4, [pid 1940] <... creat resumed>) = 6 [pid 1939] <... futex resumed>) = 1 [pid 1938] <... futex resumed>) = 0 [pid 299] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1940] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1939] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1938] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] getdents64(4, [pid 1940] <... futex resumed>) = 1 [pid 1939] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1938] <... futex resumed>) = 0 [pid 1935] <... futex resumed>) = 0 [pid 299] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1940] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1939] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1938] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1935] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] close(4 [pid 1940] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1939] <... copy_file_range resumed>) = 1 [pid 1938] <... futex resumed>) = 0 [pid 1935] <... futex resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 1940] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1939] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1938] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1935] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] rmdir("./64/file1" [pid 1940] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1939] <... futex resumed>) = 0 [pid 1938] <... mmap resumed>) = 0x7f13c8ca3000 [pid 299] <... rmdir resumed>) = 0 [pid 1940] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1939] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1938] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 299] getdents64(3, [pid 1940] <... futex resumed>) = 1 [pid 1938] <... mprotect resumed>) = 0 [pid 1935] <... futex resumed>) = 0 [pid 299] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1940] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1938] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1935] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] close(3 [pid 1940] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1938] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1935] <... futex resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 1940] pwrite64(6, "+", 1, 0 [pid 1938] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1935] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] rmdir("./64" [pid 1940] <... pwrite64 resumed>) = 1 [pid 299] <... rmdir resumed>) = 0 [pid 1940] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1938] <... clone3 resumed> => {parent_tid=[1949]}, 88) = 1949 [pid 299] mkdir("./65", 0777 [pid 1940] <... futex resumed>) = 1 [pid 1938] rt_sigprocmask(SIG_SETMASK, [], [pid 1935] <... futex resumed>) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 1940] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1938] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1935] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1940] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1938] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1935] <... futex resumed>) = 0 [pid 299] <... openat resumed>) = 3 [pid 1940] open("./bus", O_RDONLY [pid 1938] <... futex resumed>) = 0 [pid 1935] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] ioctl(3, LOOP_CLR_FD [pid 1940] <... open resumed>) = 7 [pid 1938] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1940] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] close(3 [pid 1940] <... futex resumed>) = 1 [pid 1935] <... futex resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 1940] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1935] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1940] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1935] <... futex resumed>) = 0 [pid 1940] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1935] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... clone resumed>, child_tidptr=0x55558909e690) = 1952 [pid 1940] <... copy_file_range resumed>) = 1 [pid 1935] <... futex resumed>) = 0 [pid 1940] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1935] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1940] <... futex resumed>) = 0 [pid 1935] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1940] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1935] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1935] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1935] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1953]}, 88) = 1953 [pid 1935] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1935] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1935] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1949 attached [pid 1949] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1949] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1949] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1938] <... futex resumed>) = 0 [pid 1938] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1939] <... futex resumed>) = 0 [pid 1938] <... futex resumed>) = 1 [pid 1939] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1938] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1939] <... open resumed>) = -1 EFAULT (Bad address) [pid 1939] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1938] <... futex resumed>) = 0 [pid 1939] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1938] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1939] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1938] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1953 attached ./strace-static-x86_64: Process 1952 attached [pid 1949] <... futex resumed>) = 1 [pid 1948] <... mount resumed>) = 0 [pid 1948] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1948] chdir("./file1") = 0 [pid 1948] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1948] ioctl(4, LOOP_CLR_FD) = 0 [pid 1948] close(4) = 0 [pid 1948] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1947] <... futex resumed>) = 0 [pid 1948] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1947] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1948] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1947] <... futex resumed>) = 0 [pid 1948] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1947] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1953] set_robust_list(0x7f13c8cc39a0, 24 [pid 1952] set_robust_list(0x55558909e6a0, 24 [pid 1953] <... set_robust_list resumed>) = 0 [pid 1952] <... set_robust_list resumed>) = 0 [pid 1953] rt_sigprocmask(SIG_SETMASK, [], [pid 1952] chdir("./65" [pid 1949] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1953] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1952] <... chdir resumed>) = 0 [pid 1953] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1952] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1948] <... open resumed>) = 4 [pid 1948] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1938] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1948] <... futex resumed>) = 1 [pid 1947] <... futex resumed>) = 0 [ 61.476799][ T1948] loop3: detected capacity change from 0 to 2048 [ 61.485934][ T1945] loop1: detected capacity change from 0 to 2048 [ 61.512256][ T1939] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 1948] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1947] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1953] <... mmap resumed>) = 0x20000000 [pid 1952] <... prctl resumed>) = 0 [pid 1948] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1947] <... futex resumed>) = 0 [pid 1948] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1947] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1948] <... open resumed>) = 5 [pid 1948] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1947] <... futex resumed>) = 0 [pid 1948] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1947] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1948] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1947] <... futex resumed>) = 0 [pid 1948] creat("./bus", 000 [pid 1947] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1948] <... creat resumed>) = 6 [pid 1948] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1947] <... futex resumed>) = 0 [pid 1948] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1947] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1948] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1947] <... futex resumed>) = 0 [pid 1948] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1947] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1948] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1952] setpgid(0, 0 [pid 1948] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1953] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1952] <... setpgid resumed>) = 0 [pid 1948] <... futex resumed>) = 1 [pid 1947] <... futex resumed>) = 0 [pid 1953] <... futex resumed>) = 1 [pid 1952] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1948] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1947] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1935] <... futex resumed>) = 0 [pid 1953] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1952] <... openat resumed>) = 3 [pid 1948] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1947] <... futex resumed>) = 0 [pid 1935] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1952] write(3, "1000", 4 [pid 1948] pwrite64(6, "+", 1, 0 [pid 1947] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1940] <... futex resumed>) = 0 [pid 1935] <... futex resumed>) = 1 [pid 1952] <... write resumed>) = 4 [pid 1948] <... pwrite64 resumed>) = 1 [pid 1940] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1935] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1952] close(3 [pid 1948] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1940] <... open resumed>) = -1 EFAULT (Bad address) [pid 1952] <... close resumed>) = 0 [pid 1948] <... futex resumed>) = 1 [pid 1947] <... futex resumed>) = 0 [pid 1940] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1952] symlink("/dev/binderfs", "./binderfs" [pid 1948] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1947] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1940] <... futex resumed>) = 1 [pid 1935] <... futex resumed>) = 0 [pid 1952] <... symlink resumed>) = 0 [pid 1948] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1947] <... futex resumed>) = 0 [pid 1940] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1935] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000executing program [pid 1952] write(1, "executing program\n", 18 [pid 1948] open("./bus", O_RDONLY [pid 1947] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1940] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1935] <... futex resumed>) = 0 [pid 1952] <... write resumed>) = 18 [pid 1948] <... open resumed>) = 7 [pid 1945] <... mount resumed>) = 0 [pid 1935] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1952] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1948] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1952] <... futex resumed>) = 0 [pid 1948] <... futex resumed>) = 1 [pid 1947] <... futex resumed>) = 0 [pid 1952] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1948] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1947] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1952] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1948] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1947] <... futex resumed>) = 0 [pid 1952] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1948] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1947] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1952] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1948] <... copy_file_range resumed>) = 1 [pid 1947] <... futex resumed>) = 0 [pid 1952] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1948] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1947] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1952] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1948] <... futex resumed>) = 0 [pid 1947] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1952] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1948] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1947] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1952] <... mprotect resumed>) = 0 [pid 1947] <... mprotect resumed>) = 0 [pid 1952] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1947] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1952] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1947] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1952] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1947] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1945] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 1957 attached ./strace-static-x86_64: Process 1956 attached [pid 1952] <... clone3 resumed> => {parent_tid=[1956]}, 88) = 1956 [pid 1947] <... clone3 resumed> => {parent_tid=[1957]}, 88) = 1957 [pid 1952] rt_sigprocmask(SIG_SETMASK, [], [pid 1947] rt_sigprocmask(SIG_SETMASK, [], [pid 1952] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1947] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1952] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1947] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1952] <... futex resumed>) = 0 [pid 1947] <... futex resumed>) = 0 [pid 1952] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 61.530832][ T1939] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 61.544825][ T1939] EXT4-fs (loop4): This should not happen!! Data will be lost [ 61.544825][ T1939] [ 61.545193][ T1940] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 61.554892][ T1939] EXT4-fs (loop4): Total free blocks count 0 [ 61.575294][ T1939] EXT4-fs (loop4): Free/Dirty block details [pid 1947] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1957] set_robust_list(0x7f13c8cc39a0, 24 [pid 1956] set_robust_list(0x7f13c8ce49a0, 24 [pid 1945] <... openat resumed>) = 3 [pid 1957] <... set_robust_list resumed>) = 0 [pid 1956] <... set_robust_list resumed>) = 0 [pid 1945] chdir("./file1" [pid 1938] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1957] rt_sigprocmask(SIG_SETMASK, [], [pid 1956] rt_sigprocmask(SIG_SETMASK, [], [pid 1945] <... chdir resumed>) = 0 [pid 1935] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1935] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1957] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1956] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1945] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1947] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1947] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1948] <... futex resumed>) = 0 [pid 1947] <... futex resumed>) = 1 [ 61.580492][ T1940] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 61.581539][ T1939] EXT4-fs (loop4): free_blocks=2415919504 [ 61.594320][ T1940] EXT4-fs (loop0): This should not happen!! Data will be lost [ 61.594320][ T1940] [ 61.599517][ T1939] EXT4-fs (loop4): dirty_blocks=32 [ 61.609699][ T1940] EXT4-fs (loop0): Total free blocks count 0 [ 61.613535][ T1939] EXT4-fs (loop4): Block reservation details [ 61.620927][ T1940] EXT4-fs (loop0): Free/Dirty block details [pid 1948] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1947] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1948] <... open resumed>) = -1 EFAULT (Bad address) [pid 1948] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1947] <... futex resumed>) = 0 [pid 1948] write(-1, "\x30\x78\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65983 [pid 1947] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1948] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 1947] <... futex resumed>) = 0 [pid 1948] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1947] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1948] <... futex resumed>) = 0 [pid 1947] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1948] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1957] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1956] memfd_create("syzkaller", 0 [pid 1945] <... openat resumed>) = 4 [pid 1939] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1957] <... mmap resumed>) = 0x20000000 [pid 1956] <... memfd_create resumed>) = 3 [pid 1945] ioctl(4, LOOP_CLR_FD [pid 1956] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1945] <... ioctl resumed>) = 0 [pid 1956] <... mmap resumed>) = 0x7f13c08c4000 [pid 1945] close(4) = 0 [pid 1945] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1941] <... futex resumed>) = 0 [pid 1945] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1941] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1945] <... open resumed>) = 4 [pid 1941] <... futex resumed>) = 0 [pid 1945] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1941] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1945] <... futex resumed>) = 0 [pid 1941] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1945] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1941] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1945] <... open resumed>) = 5 [pid 1941] <... futex resumed>) = 0 [pid 1945] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1941] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1945] <... futex resumed>) = 0 [pid 1941] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1945] creat("./bus", 000 [pid 1941] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1945] <... creat resumed>) = 6 [pid 1941] <... futex resumed>) = 0 [pid 1945] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1941] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1957] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1945] <... futex resumed>) = 0 [pid 1941] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1957] <... futex resumed>) = 0 [pid 1945] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1941] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1957] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1945] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1941] <... futex resumed>) = 0 [pid 1945] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1941] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1945] <... futex resumed>) = 0 [pid 1941] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1945] pwrite64(6, "+", 1, 0 [pid 1941] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1945] <... pwrite64 resumed>) = 1 [pid 1941] <... futex resumed>) = 0 [pid 1945] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1941] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1947] exit_group(0 [pid 1945] <... futex resumed>) = 0 [pid 1941] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1957] <... futex resumed>) = ? [pid 1948] <... futex resumed>) = ? [pid 1947] <... exit_group resumed>) = ? [pid 1945] open("./bus", O_RDONLY [pid 1941] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1957] +++ exited with 0 +++ [pid 1948] +++ exited with 0 +++ [pid 1945] <... open resumed>) = 7 [pid 1941] <... futex resumed>) = 0 [pid 1956] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1945] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1941] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1945] <... futex resumed>) = 0 [pid 1941] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1945] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1941] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1945] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1941] <... futex resumed>) = 0 [pid 1945] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1941] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1945] <... copy_file_range resumed>) = 1 [pid 1941] <... futex resumed>) = 0 [pid 1945] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1941] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1945] <... futex resumed>) = 0 [pid 1941] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1945] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1941] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1941] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1941] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1958]}, 88) = 1958 [pid 1941] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1941] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1941] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1956] <... write resumed>) = 1048576 ./strace-static-x86_64: Process 1958 attached [pid 1958] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1958] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1958] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [ 61.625163][ T1939] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 61.634146][ T1940] EXT4-fs (loop0): free_blocks=2415919504 [ 61.646593][ T1947] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 61.650180][ T1940] EXT4-fs (loop0): dirty_blocks=32 [ 61.666220][ T1940] EXT4-fs (loop0): Block reservation details [ 61.672604][ T1940] EXT4-fs (loop0): i_reserved_data_blocks=2 [pid 1956] munmap(0x7f13c08c4000, 138412032 [pid 1949] <... futex resumed>) = ? [pid 1939] +++ killed by SIGBUS +++ [pid 1940] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1956] <... munmap resumed>) = 0 [pid 1956] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1956] ioctl(4, LOOP_SET_FD, 3 [pid 1958] <... mmap resumed>) = 0x20000000 [pid 1958] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1941] <... futex resumed>) = 0 [pid 1941] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1945] <... futex resumed>) = 0 [pid 1941] <... futex resumed>) = 1 [pid 1945] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1941] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1945] <... open resumed>) = -1 EFAULT (Bad address) [pid 1945] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1941] <... futex resumed>) = 0 [pid 1945] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1941] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1945] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 61.678769][ T1947] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 61.679712][ T1956] loop2: detected capacity change from 0 to 2048 [ 61.691942][ T1949] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 61.698819][ T1945] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 61.710069][ T1949] EXT4-fs (loop4): This should not happen!! Data will be lost [pid 1941] <... futex resumed>) = 0 [pid 1941] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1958] <... futex resumed>) = 1 [pid 1958] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1956] <... ioctl resumed>) = 0 [pid 1956] close(3) = 0 [pid 1956] close(4) = 0 [pid 1956] mkdir("./file1", 0777) = 0 [pid 1956] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 1953] <... futex resumed>) = ? [pid 1953] +++ killed by SIGBUS +++ [pid 1949] +++ killed by SIGBUS +++ [pid 1938] +++ killed by SIGBUS +++ [pid 1956] <... mount resumed>) = 0 [pid 1956] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1956] chdir("./file1") = 0 [pid 1956] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1956] ioctl(4, LOOP_CLR_FD) = 0 [pid 1956] close(4) = 0 [pid 1956] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 61.710069][ T1949] [ 61.732990][ T1945] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 61.738114][ T1947] EXT4-fs (loop3): This should not happen!! Data will be lost [ 61.738114][ T1947] [ 61.746206][ T1945] EXT4-fs (loop1): This should not happen!! Data will be lost [ 61.746206][ T1945] [ 61.755902][ T1940] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 61.767828][ T1945] EXT4-fs (loop1): Total free blocks count 0 [pid 1956] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1952] <... futex resumed>) = 0 [pid 1941] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1952] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1938, si_uid=0, si_status=SIGBUS, si_utime=1, si_stime=16} --- [pid 1956] <... futex resumed>) = 0 [pid 1952] <... futex resumed>) = 1 [pid 301] umount2("./64", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1956] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1952] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 61.782027][ T1947] EXT4-fs (loop3): Total free blocks count 0 [ 61.782506][ T1945] EXT4-fs (loop1): Free/Dirty block details [ 61.788607][ T1940] EXT4-fs (loop0): This should not happen!! Data will be lost [ 61.788607][ T1940] [ 61.794046][ T1945] EXT4-fs (loop1): free_blocks=2415919504 [ 61.803631][ T1947] EXT4-fs (loop3): Free/Dirty block details [ 61.808980][ T1945] EXT4-fs (loop1): dirty_blocks=32 [ 61.814816][ T1947] EXT4-fs (loop3): free_blocks=2415919504 [ 61.819713][ T1945] EXT4-fs (loop1): Block reservation details [pid 1956] <... open resumed>) = 4 [pid 1940] +++ killed by SIGBUS +++ [pid 1935] +++ killed by SIGBUS +++ [pid 301] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1956] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... openat resumed>) = 3 [pid 1945] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1956] <... futex resumed>) = 1 [pid 1956] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1958] <... futex resumed>) = ? [pid 1958] +++ killed by SIGBUS +++ [pid 1952] <... futex resumed>) = 0 [pid 301] newfstatat(3, "", [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1935, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 1952] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1947] +++ exited with 0 +++ [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] umount2("./65", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1956] <... futex resumed>) = 0 [pid 1952] <... futex resumed>) = 1 [pid 301] getdents64(3, [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1956] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1952] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1947, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- [pid 297] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1956] <... open resumed>) = 5 [pid 301] umount2("./64/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 297] <... openat resumed>) = 3 [pid 1956] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(3, "", [pid 1956] <... futex resumed>) = 1 [pid 1952] <... futex resumed>) = 0 [pid 301] newfstatat(AT_FDCWD, "./64/binderfs", [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1956] creat("./bus", 000 [pid 1952] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] getdents64(3, [pid 1956] <... creat resumed>) = 6 [pid 1952] <... futex resumed>) = 0 [pid 301] unlink("./64/binderfs" [pid 297] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1956] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1952] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... unlink resumed>) = 0 [pid 297] umount2("./65/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1956] <... futex resumed>) = 0 [pid 1952] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1956] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1952] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] newfstatat(AT_FDCWD, "./65/binderfs", [pid 1956] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1952] <... futex resumed>) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1956] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1952] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] unlink("./65/binderfs" [pid 1956] <... futex resumed>) = 0 [pid 1952] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 297] <... unlink resumed>) = 0 [pid 1956] pwrite64(6, "+", 1, 0 [pid 1952] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1956] <... pwrite64 resumed>) = 1 [pid 1952] <... futex resumed>) = 0 [pid 1956] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1952] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1956] <... futex resumed>) = 0 [pid 1952] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1956] open("./bus", O_RDONLY [pid 1952] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1956] <... open resumed>) = 7 [pid 1952] <... futex resumed>) = 0 [pid 1956] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1952] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1956] <... futex resumed>) = 0 [pid 1952] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1956] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1952] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1956] <... copy_file_range resumed>) = 1 [pid 1952] <... futex resumed>) = 0 [pid 1956] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1952] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1956] <... futex resumed>) = 0 [pid 1952] <... futex resumed>) = 0 [pid 1956] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1952] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1952] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1952] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1952] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1961]}, 88) = 1961 [pid 1952] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1952] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1952] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1961 attached [pid 1961] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1961] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1961] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1952] <... futex resumed>) = 0 [pid 1952] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1956] <... futex resumed>) = 0 [pid 1952] <... futex resumed>) = 1 [pid 1956] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1952] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1956] <... open resumed>) = -1 EFAULT (Bad address) [pid 1956] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1952] <... futex resumed>) = 0 [pid 1961] <... futex resumed>) = 1 [pid 1952] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1945] +++ killed by SIGBUS +++ [pid 1941] +++ killed by SIGBUS +++ [pid 1961] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1941, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] umount2("./64", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./64/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./64/binderfs") = 0 [pid 298] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1952] <... futex resumed>) = 0 [ 61.825854][ T1947] EXT4-fs (loop3): dirty_blocks=32 [ 61.831066][ T1945] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 61.836455][ T1947] EXT4-fs (loop3): Block reservation details [ 61.843995][ T1945] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 61.847369][ T1947] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 61.859853][ T1945] EXT4-fs (loop1): This should not happen!! Data will be lost [ 61.859853][ T1945] [pid 1952] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... restart_syscall resumed>) = 0 [pid 300] umount2("./62", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./62/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./62/binderfs") = 0 [pid 300] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... umount2 resumed>) = 0 [pid 301] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./64/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./64/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./64/file1") = 0 [pid 301] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./64") = 0 [pid 301] mkdir("./65", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1962 ./strace-static-x86_64: Process 1962 attached [pid 1952] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 61.875036][ T1956] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 61.890031][ T1956] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 61.902474][ T327] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 61.915042][ T1956] EXT4-fs (loop2): This should not happen!! Data will be lost [ 61.915042][ T1956] [ 61.925235][ T1956] EXT4-fs (loop2): Total free blocks count 0 [pid 1962] set_robust_list(0x55558909e6a0, 24 [pid 298] <... umount2 resumed>) = 0 [pid 1962] <... set_robust_list resumed>) = 0 [pid 298] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] <... umount2 resumed>) = 0 [pid 1962] chdir("./65" [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1962] <... chdir resumed>) = 0 [pid 298] newfstatat(AT_FDCWD, "./64/file1", [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1962] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] newfstatat(AT_FDCWD, "./65/file1", [pid 1962] <... prctl resumed>) = 0 [pid 298] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1962] setpgid(0, 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1962] <... setpgid resumed>) = 0 [pid 298] openat(AT_FDCWD, "./64/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1962] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 298] <... openat resumed>) = 4 [pid 297] openat(AT_FDCWD, "./65/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1962] <... openat resumed>) = 3 [pid 298] newfstatat(4, "", [pid 297] <... openat resumed>) = 4 [pid 1962] write(3, "1000", 4 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] newfstatat(4, "", [pid 1962] <... write resumed>) = 4 [pid 298] getdents64(4, [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 executing program [pid 1962] close(3 [pid 298] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, [pid 1962] <... close resumed>) = 0 [pid 298] getdents64(4, [pid 297] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1962] symlink("/dev/binderfs", "./binderfs" [pid 300] <... umount2 resumed>) = 0 [pid 298] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 297] getdents64(4, [pid 1962] <... symlink resumed>) = 0 [pid 298] close(4 [pid 297] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1962] write(1, "executing program\n", 18 [pid 298] <... close resumed>) = 0 [pid 297] close(4 [pid 1962] <... write resumed>) = 18 [pid 298] rmdir("./64/file1" [pid 297] <... close resumed>) = 0 [pid 1962] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... rmdir resumed>) = 0 [pid 297] rmdir("./65/file1" [pid 1962] <... futex resumed>) = 0 [pid 298] getdents64(3, [pid 297] <... rmdir resumed>) = 0 [pid 1962] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 298] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 297] getdents64(3, [pid 1962] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1962] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 298] close(3 [pid 297] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 1962] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 298] <... close resumed>) = 0 [pid 297] close(3 [pid 1962] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 298] rmdir("./64" [pid 297] <... close resumed>) = 0 [pid 1962] <... mmap resumed>) = 0x7f13c8cc4000 [pid 298] <... rmdir resumed>) = 0 [pid 297] rmdir("./65" [pid 1962] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 298] mkdir("./65", 0777 [pid 297] <... rmdir resumed>) = 0 [pid 1962] <... mprotect resumed>) = 0 [pid 1962] rt_sigprocmask(SIG_BLOCK, ~[], [pid 298] <... mkdir resumed>) = 0 [pid 297] mkdir("./66", 0777 [pid 1962] <... rt_sigprocmask resumed>[], 8) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 297] <... mkdir resumed>) = 0 [pid 1962] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0}./strace-static-x86_64: Process 1963 attached [pid 298] <... openat resumed>) = 3 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1962] <... clone3 resumed> => {parent_tid=[1963]}, 88) = 1963 [pid 298] ioctl(3, LOOP_CLR_FD [pid 297] <... openat resumed>) = 3 [pid 1962] rt_sigprocmask(SIG_SETMASK, [], [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 297] ioctl(3, LOOP_CLR_FD [pid 1962] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 298] close(3 [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1963] set_robust_list(0x7f13c8ce49a0, 24 [pid 1962] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1956] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 300] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... close resumed>) = 0 [pid 1963] <... set_robust_list resumed>) = 0 [pid 1963] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1963] memfd_create("syzkaller", 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1963] <... memfd_create resumed>) = 3 [pid 1963] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 300] newfstatat(AT_FDCWD, "./62/file1", [pid 1963] <... mmap resumed>) = 0x7f13c08c4000 [pid 1962] <... futex resumed>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] close(3 [pid 1963] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1962] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] <... close resumed>) = 0 [pid 300] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] <... clone resumed>, child_tidptr=0x55558909e690) = 1964 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./62/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] <... clone resumed>, child_tidptr=0x55558909e690) = 1965 [pid 300] <... openat resumed>) = 4 [pid 300] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 1965 attached ./strace-static-x86_64: Process 1964 attached [pid 1961] <... futex resumed>) = ? [pid 300] getdents64(4, [pid 1965] set_robust_list(0x55558909e6a0, 24 [pid 1964] set_robust_list(0x55558909e6a0, 24 [pid 1963] <... write resumed>) = 1048576 [pid 1961] +++ killed by SIGBUS +++ [pid 1956] +++ killed by SIGBUS +++ [pid 300] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [ 61.927587][ T327] EXT4-fs (loop3): This should not happen!! Data will be lost [ 61.927587][ T327] [ 61.931826][ T1956] EXT4-fs (loop2): Free/Dirty block details [ 61.946991][ T1956] EXT4-fs (loop2): free_blocks=2415919504 [ 61.956481][ T1956] EXT4-fs (loop2): dirty_blocks=32 [ 61.962124][ T1956] EXT4-fs (loop2): Block reservation details [ 61.968375][ T1956] EXT4-fs (loop2): i_reserved_data_blocks=2 [pid 300] rmdir("./62/file1") = 0 [pid 300] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./62") = 0 [pid 300] mkdir("./63", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1966 ./strace-static-x86_64: Process 1966 attached [pid 1966] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1965] <... set_robust_list resumed>) = 0 [pid 1964] <... set_robust_list resumed>) = 0 [pid 1963] munmap(0x7f13c08c4000, 138412032 [pid 1965] chdir("./66") = 0 [pid 1964] chdir("./65" [pid 1965] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1964] <... chdir resumed>) = 0 [pid 1963] <... munmap resumed>) = 0 [pid 1965] setpgid(0, 0 [pid 1964] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1963] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1965] <... setpgid resumed>) = 0 [pid 1964] <... prctl resumed>) = 0 [pid 1965] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1964] setpgid(0, 0 [pid 1965] <... openat resumed>) = 3 [pid 1964] <... setpgid resumed>) = 0 [pid 1963] <... openat resumed>) = 4 [pid 1965] write(3, "1000", 4) = 4 [pid 1964] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1963] ioctl(4, LOOP_SET_FD, 3 [pid 1965] close(3) = 0 [pid 1964] <... openat resumed>) = 3 [pid 1966] chdir("./63") = 0 [pid 1966] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1966] setpgid(0, 0) = 0 [pid 1966] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1966] write(3, "1000", 4) = 4 [pid 1966] close(3) = 0 [pid 1966] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1966] write(1, "executing program\n", 18executing program ) = 18 [pid 1966] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1966] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1966] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1965] symlink("/dev/binderfs", "./binderfs" [pid 1964] write(3, "1000", 4 [pid 1965] <... symlink resumed>) = 0 [pid 1965] write(1, "executing program\n", 18 [pid 1964] <... write resumed>) = 4 [pid 1965] <... write resumed>) = 18 [pid 1964] close(3executing program [pid 1965] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1964] <... close resumed>) = 0 [pid 1965] <... futex resumed>) = 0 [pid 1964] symlink("/dev/binderfs", "./binderfs" [pid 1965] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, executing program NULL, 8) = 0 [pid 1964] <... symlink resumed>) = 0 [pid 1965] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1964] write(1, "executing program\n", 18 [pid 1965] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1965] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1964] <... write resumed>) = 18 [pid 1963] <... ioctl resumed>) = 0 [pid 1966] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1966] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1966] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1966] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1966] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1967]}, 88) = 1967 [pid 1966] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1966] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1966] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1967 attached [pid 1967] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1967] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1967] memfd_create("syzkaller", 0) = 3 [pid 1967] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1965] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1964] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1965] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1964] <... futex resumed>) = 0 [pid 1963] close(3 [pid 1965] <... mprotect resumed>) = 0 [pid 1964] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 1963] <... close resumed>) = 0 [pid 1965] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1964] <... rt_sigaction resumed>NULL, 8) = 0 [pid 1965] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1964] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 1963] close(4 [pid 1965] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 1964] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1963] <... close resumed>) = 0 ./strace-static-x86_64: Process 1968 attached [pid 1967] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1964] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1963] mkdir("./file1", 0777 [pid 1952] +++ killed by SIGBUS +++ [pid 1965] <... clone3 resumed> => {parent_tid=[1968]}, 88) = 1968 [pid 1964] <... mmap resumed>) = 0x7f13c8cc4000 [pid 1963] <... mkdir resumed>) = 0 [pid 1965] rt_sigprocmask(SIG_SETMASK, [], [pid 1964] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 1963] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1952, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 1965] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1964] <... mprotect resumed>) = 0 [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 1965] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1964] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1965] <... futex resumed>) = 0 [pid 1964] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1965] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1964] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1969]}, 88) = 1969 [pid 1964] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1964] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1964] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1969 attached [pid 1968] set_robust_list(0x7f13c8ce49a0, 24 [pid 1969] set_robust_list(0x7f13c8ce49a0, 24 [pid 1968] <... set_robust_list resumed>) = 0 [pid 1969] <... set_robust_list resumed>) = 0 [pid 1968] rt_sigprocmask(SIG_SETMASK, [], [pid 1969] rt_sigprocmask(SIG_SETMASK, [], [pid 1968] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1969] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1968] memfd_create("syzkaller", 0 [pid 1969] memfd_create("syzkaller", 0) = 3 [pid 1968] <... memfd_create resumed>) = 3 [pid 1969] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1968] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1969] <... mmap resumed>) = 0x7f13c08c4000 [pid 1968] <... mmap resumed>) = 0x7f13c08c4000 [pid 1967] <... write resumed>) = 1048576 [pid 299] <... restart_syscall resumed>) = 0 [pid 299] umount2("./65", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./65/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./65/binderfs") = 0 [pid 299] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1967] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1967] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 61.993040][ T1952] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 62.008539][ T1963] loop4: detected capacity change from 0 to 2048 [ 62.016542][ T1952] EXT4-fs (loop2): This should not happen!! Data will be lost [ 62.016542][ T1952] [pid 1967] ioctl(4, LOOP_SET_FD, 3 [pid 1963] <... mount resumed>) = 0 [pid 1967] <... ioctl resumed>) = 0 [pid 1967] close(3) = 0 [pid 1967] close(4) = 0 [pid 1967] mkdir("./file1", 0777) = 0 [pid 1967] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 1963] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1963] chdir("./file1") = 0 [pid 1963] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1963] ioctl(4, LOOP_CLR_FD) = 0 [pid 1963] close(4) = 0 [pid 1963] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1962] <... futex resumed>) = 0 [pid 1962] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1963] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1962] <... futex resumed>) = 0 [pid 1962] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1969] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1963] <... open resumed>) = 4 [pid 1963] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1968] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1963] <... futex resumed>) = 1 [pid 1962] <... futex resumed>) = 0 [pid 1962] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1963] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1962] <... futex resumed>) = 0 [pid 1962] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1963] <... open resumed>) = 5 [pid 1963] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1962] <... futex resumed>) = 0 [pid 1962] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1963] creat("./bus", 000 [pid 1962] <... futex resumed>) = 0 [pid 1962] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1963] <... creat resumed>) = 6 [pid 1963] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1962] <... futex resumed>) = 0 [pid 1963] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1962] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1963] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1962] <... futex resumed>) = 0 [pid 1963] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1962] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1963] <... futex resumed>) = 0 [pid 1962] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1963] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1962] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1963] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1962] <... futex resumed>) = 0 [pid 1963] pwrite64(6, "+", 1, 0 [pid 1962] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1963] <... pwrite64 resumed>) = 1 [pid 1963] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1962] <... futex resumed>) = 0 [pid 1963] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1962] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1963] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1962] <... futex resumed>) = 0 [pid 1963] open("./bus", O_RDONLY [pid 1962] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1963] <... open resumed>) = 7 [pid 1963] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1962] <... futex resumed>) = 0 [pid 1963] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1962] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1963] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1962] <... futex resumed>) = 0 [pid 1963] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1962] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1963] <... copy_file_range resumed>) = 1 [pid 1962] <... futex resumed>) = 0 [pid 1963] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1962] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1963] <... futex resumed>) = 0 [pid 1962] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1963] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1962] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1962] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1962] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1972]}, 88) = 1972 [pid 1962] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1962] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1962] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1972 attached [pid 1969] <... write resumed>) = 1048576 [pid 1972] set_robust_list(0x7f13c8cc39a0, 24 [pid 299] <... umount2 resumed>) = 0 [pid 1969] munmap(0x7f13c08c4000, 138412032 [pid 1972] <... set_robust_list resumed>) = 0 [pid 1968] <... write resumed>) = 1048576 [pid 1968] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1968] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 62.040888][ T1967] loop3: detected capacity change from 0 to 2048 [pid 1968] ioctl(4, LOOP_SET_FD, 3 [pid 1972] rt_sigprocmask(SIG_SETMASK, [], [pid 1969] <... munmap resumed>) = 0 [pid 299] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1972] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1969] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1972] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1969] ioctl(4, LOOP_SET_FD, 3 [pid 1972] <... mmap resumed>) = 0x20000000 [pid 1967] <... mount resumed>) = 0 [pid 1967] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1967] chdir("./file1") = 0 [pid 1967] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1967] ioctl(4, LOOP_CLR_FD) = 0 [pid 1967] close(4) = 0 [pid 1967] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1966] <... futex resumed>) = 0 [pid 1966] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1966] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1967] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 1967] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1966] <... futex resumed>) = 0 [pid 1966] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1966] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1967] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 1967] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1966] <... futex resumed>) = 0 [pid 1966] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1966] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1967] creat("./bus", 000) = 6 [pid 1967] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1966] <... futex resumed>) = 0 [pid 1966] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1966] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1967] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 1967] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1966] <... futex resumed>) = 0 [pid 1967] pwrite64(6, "+", 1, 0 [pid 1966] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1967] <... pwrite64 resumed>) = 1 [pid 1966] <... futex resumed>) = 0 [pid 1967] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1966] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1967] <... futex resumed>) = 0 [pid 1966] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1967] open("./bus", O_RDONLY [pid 1966] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1967] <... open resumed>) = 7 [pid 1966] <... futex resumed>) = 0 [pid 1967] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1966] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1967] <... futex resumed>) = 0 [pid 1966] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1967] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1966] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1972] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1967] <... copy_file_range resumed>) = 1 [pid 1966] <... futex resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1972] <... futex resumed>) = 1 [pid 1967] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1966] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1962] <... futex resumed>) = 0 [pid 299] newfstatat(AT_FDCWD, "./65/file1", [pid 1972] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1969] <... ioctl resumed>) = 0 [pid 1968] <... ioctl resumed>) = 0 [pid 1967] <... futex resumed>) = 0 [pid 1966] <... futex resumed>) = 0 [pid 1962] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./65/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./65/file1") = 0 [pid 299] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./65" [pid 1967] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1966] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1963] <... futex resumed>) = 0 [pid 1962] <... futex resumed>) = 1 [pid 299] <... rmdir resumed>) = 0 [pid 1966] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1963] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1966] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1962] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1966] <... mprotect resumed>) = 0 [pid 1963] <... open resumed>) = -1 EFAULT (Bad address) [pid 299] mkdir("./66", 0777 [pid 1966] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1963] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1966] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1969] close(3 [pid 1968] close(3 [pid 1966] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1963] <... futex resumed>) = 1 [pid 1962] <... futex resumed>) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 1962] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1976 [pid 1969] <... close resumed>) = 0 [pid 1969] close(4) = 0 [pid 1969] mkdir("./file1", 0777) = 0 [pid 1969] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 1968] <... close resumed>) = 0 [pid 1968] close(4) = 0 [pid 1962] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1975 attached ./strace-static-x86_64: Process 1976 attached [pid 1966] <... clone3 resumed> => {parent_tid=[1975]}, 88) = 1975 [pid 1962] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1975] set_robust_list(0x7f13c8cc39a0, 24 [pid 1966] rt_sigprocmask(SIG_SETMASK, [], [pid 1968] mkdir("./file1", 0777) = 0 [pid 1968] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 1976] set_robust_list(0x55558909e6a0, 24) = 0 [pid 1976] chdir("./66") = 0 [pid 1976] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1976] setpgid(0, 0) = 0 [pid 1976] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1976] write(3, "1000", 4) = 4 [pid 1976] close(3) = 0 executing program [pid 1976] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1976] write(1, "executing program\n", 18) = 18 [pid 1976] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1976] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1976] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1976] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1976] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1976] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1976] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1977]}, 88) = 1977 [pid 1976] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1976] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1976] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1975] <... set_robust_list resumed>) = 0 [pid 1975] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 62.069585][ T1968] loop0: detected capacity change from 0 to 2048 [ 62.078259][ T1969] loop1: detected capacity change from 0 to 2048 [ 62.094088][ T1963] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 1975] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1966] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1966] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1975] <... futex resumed>) = 0 [pid 1966] <... futex resumed>) = 1 [pid 1975] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1966] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1975] <... mmap resumed>) = 0x20000000 [pid 1975] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1966] <... futex resumed>) = 0 [pid 1966] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1967] <... futex resumed>) = 0 [pid 1966] <... futex resumed>) = 1 [pid 1967] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1966] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1967] <... open resumed>) = -1 EFAULT (Bad address) [pid 1967] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1966] <... futex resumed>) = 0 [pid 1967] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1966] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1967] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1966] <... futex resumed>) = 0 [pid 1975] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1966] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1969] <... mount resumed>) = 0 [pid 1969] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1969] chdir("./file1") = 0 [pid 1969] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1969] ioctl(4, LOOP_CLR_FD) = 0 [pid 1969] close(4) = 0 [pid 1969] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1969] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1964] <... futex resumed>) = 0 [pid 1964] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1962] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 62.109562][ T1963] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 62.123224][ T1963] EXT4-fs (loop4): This should not happen!! Data will be lost [ 62.123224][ T1963] [ 62.129962][ T1967] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 62.133164][ T1963] EXT4-fs (loop4): Total free blocks count 0 [ 62.153658][ T1963] EXT4-fs (loop4): Free/Dirty block details [ 62.159420][ T1963] EXT4-fs (loop4): free_blocks=2415919504 [ 62.165254][ T1963] EXT4-fs (loop4): dirty_blocks=32 [pid 1969] <... futex resumed>) = 0 [pid 1964] <... futex resumed>) = 1 [pid 1969] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 1969] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1969] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1977 attached [pid 1977] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1977] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1977] memfd_create("syzkaller", 0) = 3 [pid 1977] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1964] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1977] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1964] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1964] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1963] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1968] <... mount resumed>) = 0 [pid 1968] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1968] chdir("./file1") = 0 [pid 1968] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1968] ioctl(4, LOOP_CLR_FD) = 0 [pid 1968] close(4) = 0 [pid 1968] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1965] <... futex resumed>) = 0 [pid 1965] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1965] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1968] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 1964] <... futex resumed>) = 1 [pid 1969] <... futex resumed>) = 0 [pid 1964] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1969] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1968] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1969] <... open resumed>) = 5 [pid 1969] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1968] <... futex resumed>) = 1 [pid 1965] <... futex resumed>) = 0 [pid 1969] <... futex resumed>) = 1 [pid 1968] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1965] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1964] <... futex resumed>) = 0 [pid 1969] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1965] <... futex resumed>) = 0 [pid 1968] <... open resumed>) = 5 [pid 1965] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1964] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1969] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1968] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1969] creat("./bus", 000 [pid 1965] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1964] <... futex resumed>) = 0 [pid 1972] <... futex resumed>) = ? [pid 1968] <... futex resumed>) = 0 [pid 1969] <... creat resumed>) = 6 [pid 1972] +++ killed by SIGBUS +++ [pid 1969] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1968] creat("./bus", 000 [pid 1965] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1964] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1969] <... futex resumed>) = 0 [pid 1968] <... creat resumed>) = 6 [pid 1969] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1965] <... futex resumed>) = 0 [pid 1964] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1968] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1965] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1964] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1968] <... futex resumed>) = 0 [pid 1965] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1964] <... futex resumed>) = 1 [pid 1969] <... futex resumed>) = 0 [pid 1968] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1965] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1964] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1969] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1968] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1965] <... futex resumed>) = 0 [pid 1969] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1968] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1965] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1969] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1968] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1969] <... futex resumed>) = 1 [pid 1968] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1964] <... futex resumed>) = 0 [pid 1969] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1968] <... futex resumed>) = 1 [pid 1965] <... futex resumed>) = 0 [pid 1964] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1969] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1968] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1965] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1964] <... futex resumed>) = 0 [pid 1969] pwrite64(6, "+", 1, 0 [pid 1968] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1965] <... futex resumed>) = 0 [pid 1964] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1969] <... pwrite64 resumed>) = 1 [pid 1968] pwrite64(6, "+", 1, 0 [pid 1969] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1965] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1968] <... pwrite64 resumed>) = 1 [pid 1969] <... futex resumed>) = 1 [pid 1968] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1969] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1964] <... futex resumed>) = 0 [pid 1968] <... futex resumed>) = 1 [pid 1965] <... futex resumed>) = 0 [pid 1964] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1968] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1965] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1964] <... futex resumed>) = 1 [pid 1969] <... futex resumed>) = 0 [pid 1966] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1977] <... write resumed>) = 1048576 [pid 1969] open("./bus", O_RDONLY [pid 1968] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1965] <... futex resumed>) = 0 [ 62.170287][ T1963] EXT4-fs (loop4): Block reservation details [ 62.176346][ T1963] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 62.182836][ T1967] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 62.197917][ T1963] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 62.199521][ T1967] EXT4-fs (loop3): This should not happen!! Data will be lost [ 62.199521][ T1967] [pid 1964] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1977] munmap(0x7f13c08c4000, 138412032 [pid 1969] <... open resumed>) = 7 [pid 1968] open("./bus", O_RDONLY [pid 1965] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1963] +++ killed by SIGBUS +++ [pid 1962] +++ killed by SIGBUS +++ [pid 1977] <... munmap resumed>) = 0 [pid 1969] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1968] <... open resumed>) = 7 [pid 1977] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1969] <... futex resumed>) = 1 [pid 1968] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1964] <... futex resumed>) = 0 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1962, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=10} --- [pid 1977] <... openat resumed>) = 4 [pid 1969] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1968] <... futex resumed>) = 1 [pid 1965] <... futex resumed>) = 0 [pid 1964] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] umount2("./65", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1977] ioctl(4, LOOP_SET_FD, 3 [pid 1969] <... copy_file_range resumed>) = 1 [pid 1968] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1965] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1964] <... futex resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1969] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1968] <... copy_file_range resumed>) = 1 [pid 1965] <... futex resumed>) = 0 [pid 1964] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1969] <... futex resumed>) = 0 [pid 1968] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1965] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1964] <... futex resumed>) = 0 [pid 301] <... openat resumed>) = 3 [pid 1969] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1968] <... futex resumed>) = 0 [pid 1965] <... futex resumed>) = 0 [pid 1964] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 301] newfstatat(3, "", [pid 1968] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1965] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1964] <... mmap resumed>) = 0x7f13c8ca3000 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1965] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1964] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 301] getdents64(3, [pid 1965] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1964] <... mprotect resumed>) = 0 [pid 1965] <... mprotect resumed>) = 0 [pid 1964] rt_sigprocmask(SIG_BLOCK, ~[], [pid 301] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1965] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1964] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1965] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1964] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 301] umount2("./65/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1965] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1964] <... clone3 resumed> => {parent_tid=[1983]}, 88) = 1983 [pid 301] newfstatat(AT_FDCWD, "./65/binderfs", [pid 1965] <... clone3 resumed> => {parent_tid=[1984]}, 88) = 1984 [pid 1964] rt_sigprocmask(SIG_SETMASK, [], [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1965] rt_sigprocmask(SIG_SETMASK, [], [pid 1964] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 301] unlink("./65/binderfs" [pid 1965] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1964] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... unlink resumed>) = 0 [pid 1965] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 1964] <... futex resumed>) = 0 [pid 301] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1965] <... futex resumed>) = 0 [pid 1964] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1965] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1977] <... ioctl resumed>) = 0 [pid 1977] close(3) = 0 [pid 1977] close(4) = 0 [pid 1977] mkdir("./file1", 0777) = 0 [pid 1977] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 301] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 1983 attached ./strace-static-x86_64: Process 1984 attached [pid 1967] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 301] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1983] set_robust_list(0x7f13c8cc39a0, 24 [pid 1975] <... futex resumed>) = ? [ 62.213173][ T1963] EXT4-fs (loop4): This should not happen!! Data will be lost [ 62.213173][ T1963] [ 62.220756][ T1967] EXT4-fs (loop3): Total free blocks count 0 [ 62.231993][ T1977] loop2: detected capacity change from 0 to 2048 [ 62.235464][ T1967] EXT4-fs (loop3): Free/Dirty block details [ 62.247051][ T1967] EXT4-fs (loop3): free_blocks=2415919504 [ 62.252746][ T1967] EXT4-fs (loop3): dirty_blocks=32 [ 62.257819][ T1967] EXT4-fs (loop3): Block reservation details [ 62.263682][ T1967] EXT4-fs (loop3): i_reserved_data_blocks=2 [pid 1984] set_robust_list(0x7f13c8cc39a0, 24 [pid 1983] <... set_robust_list resumed>) = 0 [pid 1975] +++ killed by SIGBUS +++ [pid 1967] +++ killed by SIGBUS +++ [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1983] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1983] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1983] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] <... openat resumed>) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./65/file1") = 0 [pid 301] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./65") = 0 [pid 1984] <... set_robust_list resumed>) = 0 [pid 1984] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1984] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1965] <... futex resumed>) = 0 [pid 1965] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1964] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1985 attached [pid 1968] <... futex resumed>) = 0 [pid 1965] <... futex resumed>) = 1 [pid 1964] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1969] <... futex resumed>) = 0 [pid 1968] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1965] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1964] <... futex resumed>) = 1 [pid 1969] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1968] <... open resumed>) = -1 EFAULT (Bad address) [pid 1964] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1969] <... open resumed>) = -1 EFAULT (Bad address) [pid 1968] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1969] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1968] <... futex resumed>) = 1 [pid 1965] <... futex resumed>) = 0 [pid 1985] set_robust_list(0x55558909e6a0, 24 [pid 1969] <... futex resumed>) = 1 [pid 1966] +++ killed by SIGBUS +++ [pid 1965] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1964] <... futex resumed>) = 0 [pid 1985] <... set_robust_list resumed>) = 0 [pid 1985] chdir("./66") = 0 [pid 1985] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1985] setpgid(0, 0) = 0 [pid 1985] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1985] write(3, "1000", 4) = 4 [pid 1985] close(3) = 0 [pid 1985] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1985] write(1, "executing program\n", 18executing program ) = 18 [pid 1985] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1985] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1985] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1985] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1985] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1985] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1985] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1986]}, 88) = 1986 [pid 1985] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1985] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1985] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1986 attached [pid 1986] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1986] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1986] memfd_create("syzkaller", 0) = 3 [pid 1986] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1966, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 1965] <... futex resumed>) = 0 [pid 1964] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1986] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1986] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1986] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 62.271868][ T1966] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 62.284967][ T1966] EXT4-fs (loop3): This should not happen!! Data will be lost [ 62.284967][ T1966] [ 62.286574][ T1968] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 1986] ioctl(4, LOOP_SET_FD, 3 [pid 1965] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1964] <... futex resumed>) = 0 [pid 1986] <... ioctl resumed>) = 0 [pid 1986] close(3) = 0 [pid 1986] close(4) = 0 [pid 1986] mkdir("./file1", 0777) = 0 [pid 1986] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 1964] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] umount2("./63", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 62.310333][ T1969] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 62.319549][ T1986] loop4: detected capacity change from 0 to 2048 [ 62.325609][ T1969] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 62.334580][ T1968] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 62.346718][ T1969] EXT4-fs (loop1): This should not happen!! Data will be lost [ 62.346718][ T1969] [ 62.364978][ T1969] EXT4-fs (loop1): Total free blocks count 0 [pid 300] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1977] <... mount resumed>) = 0 [pid 300] <... openat resumed>) = 3 [pid 1977] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 300] newfstatat(3, "", [pid 1977] <... openat resumed>) = 3 [pid 1965] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1977] chdir("./file1" [ 62.365790][ T1968] EXT4-fs (loop0): This should not happen!! Data will be lost [ 62.365790][ T1968] [ 62.372085][ T1969] EXT4-fs (loop1): Free/Dirty block details [ 62.381164][ T1968] EXT4-fs (loop0): Total free blocks count 0 [ 62.391891][ T1969] EXT4-fs (loop1): free_blocks=2415919504 [ 62.392658][ T1968] EXT4-fs (loop0): Free/Dirty block details [ 62.397975][ T1969] EXT4-fs (loop1): dirty_blocks=32 [ 62.403954][ T1968] EXT4-fs (loop0): free_blocks=2415919504 [ 62.408584][ T1969] EXT4-fs (loop1): Block reservation details [pid 300] getdents64(3, [pid 1986] <... mount resumed>) = 0 [pid 1977] <... chdir resumed>) = 0 [pid 1964] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 300] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 1986] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1977] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1969] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 300] umount2("./63/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1986] <... openat resumed>) = 3 [pid 1977] <... openat resumed>) = 4 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1986] chdir("./file1" [pid 1977] ioctl(4, LOOP_CLR_FD [pid 300] newfstatat(AT_FDCWD, "./63/binderfs", [pid 1986] <... chdir resumed>) = 0 [pid 1977] <... ioctl resumed>) = 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1986] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1977] close(4 [pid 300] unlink("./63/binderfs" [pid 1986] <... openat resumed>) = 4 [pid 1977] <... close resumed>) = 0 [pid 300] <... unlink resumed>) = 0 [pid 1986] ioctl(4, LOOP_CLR_FD [pid 1977] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1986] <... ioctl resumed>) = 0 [pid 1977] <... futex resumed>) = 1 [pid 1976] <... futex resumed>) = 0 [pid 1986] close(4 [pid 1977] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1976] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1986] <... close resumed>) = 0 [pid 1977] <... open resumed>) = 4 [pid 1976] <... futex resumed>) = 0 [pid 1986] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1977] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1976] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1986] <... futex resumed>) = 1 [pid 1977] <... futex resumed>) = 0 [pid 1976] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1986] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1985] <... futex resumed>) = 0 [pid 1977] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1976] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1977] <... open resumed>) = 5 [pid 1976] <... futex resumed>) = 0 [pid 1977] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1976] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1977] <... futex resumed>) = 0 [pid 1976] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1977] creat("./bus", 000 [pid 1976] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1977] <... creat resumed>) = 6 [pid 1976] <... futex resumed>) = 0 [pid 1977] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1976] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1977] <... futex resumed>) = 0 [pid 1976] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1977] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1976] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1977] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1976] <... futex resumed>) = 0 [pid 1977] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1976] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1977] <... futex resumed>) = 0 [pid 1976] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1977] pwrite64(6, "+", 1, 0 [pid 1976] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1977] <... pwrite64 resumed>) = 1 [pid 1976] <... futex resumed>) = 0 [pid 1977] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1976] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1977] <... futex resumed>) = 0 [pid 1976] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1977] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1976] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1977] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1976] <... futex resumed>) = 0 [pid 1985] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1977] open("./bus", O_RDONLY [pid 1976] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1986] <... futex resumed>) = 0 [pid 1985] <... futex resumed>) = 1 [pid 1977] <... open resumed>) = 7 [pid 1986] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1985] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1977] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1976] <... futex resumed>) = 0 [pid 1986] <... open resumed>) = 4 [pid 1977] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1976] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1986] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1977] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1976] <... futex resumed>) = 0 [pid 1986] <... futex resumed>) = 1 [pid 1985] <... futex resumed>) = 0 [pid 1977] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1976] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1986] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1985] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1977] <... copy_file_range resumed>) = 1 [pid 1976] <... futex resumed>) = 0 [pid 300] <... umount2 resumed>) = 0 [pid 1986] <... open resumed>) = 5 [pid 1985] <... futex resumed>) = 0 [pid 1977] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1976] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1986] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1985] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1977] <... futex resumed>) = 0 [pid 1976] <... mmap resumed>) = 0x7f13c8ca3000 [pid 1986] <... futex resumed>) = 0 [pid 1985] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1977] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1976] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 1986] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1985] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1976] <... mprotect resumed>) = 0 [pid 1986] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1985] <... futex resumed>) = 0 [pid 1976] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1986] creat("./bus", 000 [pid 1985] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1976] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1976] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1986] <... creat resumed>) = 6 [pid 1976] <... clone3 resumed> => {parent_tid=[1991]}, 88) = 1991 [pid 1986] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1976] rt_sigprocmask(SIG_SETMASK, [], [pid 1986] <... futex resumed>) = 1 [pid 1985] <... futex resumed>) = 0 [pid 1976] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1986] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1985] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1976] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1986] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1985] <... futex resumed>) = 0 [pid 1976] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1986] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1985] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1986] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1986] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1983] <... futex resumed>) = ? [pid 300] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1986] <... futex resumed>) = 1 [pid 1985] <... futex resumed>) = 0 [pid 1983] +++ killed by SIGBUS +++ [pid 1968] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- ./strace-static-x86_64: Process 1991 attached [pid 1991] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1991] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1991] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1985] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1986] pwrite64(6, "+", 1, 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1986] <... pwrite64 resumed>) = 1 [pid 1985] <... futex resumed>) = 0 [pid 1986] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] newfstatat(AT_FDCWD, "./63/file1", [pid 1985] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1986] <... futex resumed>) = 0 [pid 1985] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1986] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1985] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 1986] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1985] <... futex resumed>) = 0 [pid 1986] open("./bus", O_RDONLY [pid 1985] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1986] <... open resumed>) = 7 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1986] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1985] <... futex resumed>) = 0 [pid 1986] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1985] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] openat(AT_FDCWD, "./63/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1986] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1985] <... futex resumed>) = 0 [pid 1986] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1985] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... openat resumed>) = 4 [pid 1986] <... copy_file_range resumed>) = 1 [pid 1985] <... futex resumed>) = 0 [pid 1986] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1985] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 300] newfstatat(4, "", [pid 1986] <... futex resumed>) = 0 [pid 1985] <... mmap resumed>) = 0x7f13c8ca3000 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 1986] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1985] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 300] getdents64(4, [pid 1985] rt_sigprocmask(SIG_BLOCK, ~[], [pid 300] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 1985] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1985] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 300] getdents64(4, [pid 1985] <... clone3 resumed> => {parent_tid=[1992]}, 88) = 1992 [pid 300] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 1985] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 300] close(4 [pid 1985] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 300] <... close resumed>) = 0 [pid 1985] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] rmdir("./63/file1") = 0 [ 62.414480][ T1968] EXT4-fs (loop0): dirty_blocks=32 [ 62.420955][ T1969] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 62.425120][ T1968] EXT4-fs (loop0): Block reservation details [ 62.451718][ T1968] EXT4-fs (loop0): i_reserved_data_blocks=2 [pid 300] getdents64(3, [pid 1991] <... mmap resumed>) = 0x20000000 [pid 1991] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1976] <... futex resumed>) = 0 [pid 1976] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1977] <... futex resumed>) = 0 [pid 1976] <... futex resumed>) = 1 [pid 1977] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1976] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1977] <... open resumed>) = -1 EFAULT (Bad address) [pid 1977] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1976] <... futex resumed>) = 0 [pid 1976] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./63") = 0 [pid 300] mkdir("./64", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 1993 [pid 1984] <... futex resumed>) = ? [pid 1984] +++ killed by SIGBUS +++ [pid 1976] <... futex resumed>) = 0 [pid 1991] <... futex resumed>) = 1 [pid 1991] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1992 attached [pid 1992] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1992] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1992] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1985] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1985] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1986] <... futex resumed>) = 0 [pid 1985] <... futex resumed>) = 1 [pid 1986] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1985] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1986] <... open resumed>) = -1 EFAULT (Bad address) [pid 1986] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1985] <... futex resumed>) = 0 [pid 1986] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1985] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1986] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1985] <... futex resumed>) = 0 [pid 1985] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1976] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1993] <... setpgid resumed>) = 0 [pid 1993] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1993] write(3, "1000", 4) = 4 [pid 1993] close(3) = 0 [pid 1993] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1993] write(1, "executing program\n", 18) = 18 [pid 1993] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1993] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1993] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1993] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1992] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1992] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1993] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1993] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1993] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1994]}, 88) = 1994 [pid 1993] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1993] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1993] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1994 attached [pid 1994] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1994] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1994] memfd_create("syzkaller", 0) = 3 [pid 1994] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 1994] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1994] munmap(0x7f13c08c4000, 138412032) = 0 [pid 1994] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 62.513059][ T1986] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 62.514614][ T1977] EXT4-fs (loop2): This should not happen!! Data will be lost [ 62.514614][ T1977] [ 62.539320][ T1969] EXT4-fs (loop1): This should not happen!! Data will be lost [ 62.539320][ T1969] [ 62.540398][ T1986] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 62.549242][ T1977] EXT4-fs (loop2): Total free blocks count 0 [ 62.564461][ T1994] loop3: detected capacity change from 0 to 2048 [pid 1994] ioctl(4, LOOP_SET_FD, 3 [pid 1969] +++ killed by SIGBUS +++ [pid 1964] +++ killed by SIGBUS +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1964, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 298] umount2("./65", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./65/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./65/binderfs") = 0 [pid 298] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1985] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1994] <... ioctl resumed>) = 0 [pid 1994] close(3) = 0 [pid 1994] close(4) = 0 [pid 1994] mkdir("./file1", 0777 [pid 1976] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1994] <... mkdir resumed>) = 0 [pid 1994] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 1968] +++ killed by SIGBUS +++ [pid 1965] +++ killed by SIGBUS +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1965, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=17} --- [pid 297] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 297] umount2("./66", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./66/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./66/binderfs") = 0 [ 62.567345][ T1977] EXT4-fs (loop2): Free/Dirty block details [ 62.575058][ T1968] EXT4-fs (loop0): This should not happen!! Data will be lost [ 62.575058][ T1968] [ 62.579026][ T1977] EXT4-fs (loop2): free_blocks=2415919504 [ 62.595122][ T1986] EXT4-fs (loop4): This should not happen!! Data will be lost [ 62.595122][ T1986] [ 62.600544][ T1977] EXT4-fs (loop2): dirty_blocks=32 [ 62.606109][ T1986] EXT4-fs (loop4): Total free blocks count 0 [pid 297] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./65/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] <... umount2 resumed>) = 0 [pid 297] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./66/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./66/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./66/file1") = 0 [pid 297] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./66") = 0 [pid 297] mkdir("./67", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] openat(AT_FDCWD, "./65/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, [pid 297] <... clone resumed>, child_tidptr=0x55558909e690) = 1997 [pid 298] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 1997 attached [pid 1997] set_robust_list(0x55558909e6a0, 24executing program [pid 298] close(4 [pid 1997] <... set_robust_list resumed>) = 0 [pid 1997] chdir("./67") = 0 [pid 1997] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1997] setpgid(0, 0) = 0 [pid 1997] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1997] write(3, "1000", 4) = 4 [pid 1997] close(3) = 0 [pid 1997] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1997] write(1, "executing program\n", 18) = 18 [pid 1997] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1997] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 1997] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1997] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 1997] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1997] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1997] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[1998]}, 88) = 1998 [pid 1997] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1997] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1997] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1998 attached [pid 1998] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 1998] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1998] memfd_create("syzkaller", 0) = 3 [pid 1998] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 298] <... close resumed>) = 0 [pid 1994] <... mount resumed>) = 0 [pid 1994] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 1994] chdir("./file1") = 0 [pid 1994] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1994] ioctl(4, LOOP_CLR_FD) = 0 [pid 1994] close(4) = 0 [pid 1994] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1993] <... futex resumed>) = 0 [pid 1993] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1993] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1994] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 1994] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1993] <... futex resumed>) = 0 [pid 1993] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1993] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1994] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 1994] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1993] <... futex resumed>) = 0 [pid 1993] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1993] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1994] creat("./bus", 000) = 6 [pid 1994] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1993] <... futex resumed>) = 0 [pid 1994] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 1993] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1994] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1993] <... futex resumed>) = 0 [pid 1994] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1993] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1994] <... futex resumed>) = 0 [pid 1993] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1994] pwrite64(6, "+", 1, 0 [pid 1993] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1994] <... pwrite64 resumed>) = 1 [pid 1993] <... futex resumed>) = 0 [pid 1994] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1993] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1994] <... futex resumed>) = 0 [pid 1993] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1994] open("./bus", O_RDONLY [pid 1993] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1994] <... open resumed>) = 7 [pid 1993] <... futex resumed>) = 0 [pid 1994] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1993] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1994] <... futex resumed>) = 0 [pid 1993] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1994] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1993] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1994] <... copy_file_range resumed>) = 1 [pid 1993] <... futex resumed>) = 0 [pid 298] rmdir("./65/file1" [pid 1994] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1993] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1994] <... futex resumed>) = 0 [pid 1993] <... futex resumed>) = 0 [pid 1994] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1993] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 1993] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1993] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1993] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[1999]}, 88) = 1999 [pid 1993] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1993] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1993] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1977] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 298] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 1999 attached [pid 1999] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 1999] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1999] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1998] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 298] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [ 62.618463][ T1986] EXT4-fs (loop4): Free/Dirty block details [ 62.626003][ T1977] EXT4-fs (loop2): Block reservation details [ 62.639144][ T1986] EXT4-fs (loop4): free_blocks=2415919504 [ 62.650699][ T1986] EXT4-fs (loop4): dirty_blocks=32 [ 62.651638][ T1977] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 62.666929][ T1986] EXT4-fs (loop4): Block reservation details [pid 1991] <... futex resumed>) = ? [pid 1991] +++ killed by SIGBUS +++ [pid 1999] <... mmap resumed>) = 0x20000000 [pid 1999] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1993] <... futex resumed>) = 0 [pid 1993] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1994] <... futex resumed>) = 0 [pid 1993] <... futex resumed>) = 1 [pid 1994] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 1993] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1994] <... open resumed>) = -1 EFAULT (Bad address) [pid 1994] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1993] <... futex resumed>) = 0 [pid 1993] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1977] +++ killed by SIGBUS +++ [pid 298] rmdir("./65" [pid 1993] <... futex resumed>) = 0 [pid 1993] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1999] <... futex resumed>) = 1 [pid 1999] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1986] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 1992] <... futex resumed>) = ? [pid 1992] +++ killed by SIGBUS +++ [ 62.673933][ T1986] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 62.677666][ T1994] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 62.680623][ T1976] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 62.706175][ T1976] EXT4-fs (loop2): This should not happen!! Data will be lost [ 62.706175][ T1976] [pid 1998] <... write resumed>) = 1048576 [pid 1976] +++ killed by SIGBUS +++ [pid 298] <... rmdir resumed>) = 0 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1976, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=20} --- [pid 299] umount2("./66", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./66/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./66/binderfs") = 0 [pid 299] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1998] munmap(0x7f13c08c4000, 138412032 [pid 298] mkdir("./66", 0777 [pid 1998] <... munmap resumed>) = 0 [pid 298] <... mkdir resumed>) = 0 [pid 1993] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1986] +++ killed by SIGBUS +++ [pid 1985] +++ killed by SIGBUS +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1985, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 1998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 62.710757][ T1986] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 62.718607][ T1994] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 62.739755][ T1994] EXT4-fs (loop3): This should not happen!! Data will be lost [ 62.739755][ T1994] [ 62.749592][ T1986] EXT4-fs (loop4): This should not happen!! Data will be lost [ 62.749592][ T1986] [ 62.750152][ T1994] EXT4-fs (loop3): Total free blocks count 0 [ 62.762011][ T1998] loop0: detected capacity change from 0 to 2048 [pid 1998] ioctl(4, LOOP_SET_FD, 3 [pid 301] <... restart_syscall resumed>) = 0 [pid 299] <... umount2 resumed>) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD [pid 301] umount2("./66", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] close(3 [pid 301] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] <... close resumed>) = 0 [pid 301] <... openat resumed>) = 3 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] <... clone resumed>, child_tidptr=0x55558909e690) = 2000 [pid 301] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./66/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./66/binderfs") = 0 [pid 301] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./66/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./66/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./66/file1") = 0 [pid 299] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./66") = 0 [pid 299] mkdir("./67", 0777) = 0 executing program [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 2001 ./strace-static-x86_64: Process 2000 attached [pid 2000] set_robust_list(0x55558909e6a0, 24) = 0 [pid 2000] chdir("./66") = 0 [pid 2000] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 2000] setpgid(0, 0) = 0 [pid 2000] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 2000] write(3, "1000", 4) = 4 [pid 2000] close(3) = 0 [pid 2000] symlink("/dev/binderfs", "./binderfs") = 0 [pid 2000] write(1, "executing program\n", 18) = 18 [pid 2000] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2000] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, ./strace-static-x86_64: Process 2001 attached NULL, 8) = 0 [pid 2000] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 2001] set_robust_list(0x55558909e6a0, 24 [pid 2000] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 2000] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 2001] <... set_robust_list resumed>) = 0 [pid 2001] chdir("./67" [pid 2000] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2000] rt_sigprocmask(SIG_BLOCK, ~[], [pid 2001] <... chdir resumed>) = 0 [pid 2001] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 2001] setpgid(0, 0) = 0 [pid 2001] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 2000] <... rt_sigprocmask resumed>[], 8) = 0 [pid 2000] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[2002]}, 88) = 2002 [pid 2000] rt_sigprocmask(SIG_SETMASK, [], [pid 2001] <... openat resumed>) = 3 [pid 2000] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 2000] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2000] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 2002 attached [pid 2001] write(3, "1000", 4 [pid 1998] <... ioctl resumed>) = 0 [pid 1994] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 2001] <... write resumed>) = 4 [pid 1998] close(3) = 0 [pid 1998] close(4 [pid 2002] set_robust_list(0x7f13c8ce49a0, 24 [pid 1998] <... close resumed>) = 0 [pid 301] <... umount2 resumed>) = 0 [pid 1998] mkdir("./file1", 0777 [pid 1994] +++ killed by SIGBUS +++ [pid 1999] <... futex resumed>) = ? [pid 1998] <... mkdir resumed>) = 0 [pid 1998] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 2001] close(3) = 0 [pid 2001] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 2001] write(1, "executing program\n", 18) = 18 [pid 2001] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2001] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 2001] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 2001] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 2001] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2001] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2001] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[2003]}, 88) = 2003 [pid 2001] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2001] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2001] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 2003 attached [pid 2003] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 2003] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2003] memfd_create("syzkaller", 0) = 3 [pid 2003] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 2003] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 2003] munmap(0x7f13c08c4000, 138412032) = 0 [pid 2003] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 62.765298][ T1994] EXT4-fs (loop3): Free/Dirty block details [ 62.777085][ T1994] EXT4-fs (loop3): free_blocks=2415919504 [ 62.783305][ T1994] EXT4-fs (loop3): dirty_blocks=32 [ 62.788492][ T1994] EXT4-fs (loop3): Block reservation details [ 62.794859][ T1994] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 62.809191][ T1999] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 2003] ioctl(4, LOOP_SET_FD, 3 [pid 2002] <... set_robust_list resumed>) = 0 [pid 301] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 2003] <... ioctl resumed>) = 0 [pid 2002] rt_sigprocmask(SIG_SETMASK, [], [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 2003] close(3 [pid 2002] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 301] newfstatat(AT_FDCWD, "./66/file1", [pid 2003] <... close resumed>) = 0 [pid 2002] memfd_create("syzkaller", 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 2002] <... memfd_create resumed>) = 3 [pid 301] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 2002] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 2002] <... mmap resumed>) = 0x7f13c08c4000 [pid 301] openat(AT_FDCWD, "./66/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 2002] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 301] <... openat resumed>) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./66/file1") = 0 [pid 301] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./66") = 0 [pid 301] mkdir("./67", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3 [pid 2003] close(4 [pid 1999] +++ killed by SIGBUS +++ [pid 1993] +++ killed by SIGBUS +++ [pid 301] <... close resumed>) = 0 [pid 2003] <... close resumed>) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1993, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 2003] mkdir("./file1", 0777) = 0 [pid 301] <... clone resumed>, child_tidptr=0x55558909e690) = 2006 [pid 2003] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 300] umount2("./64", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./64/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./64/binderfs") = 0 [pid 300] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 2006 attached [pid 2002] <... write resumed>) = 1048576 [pid 2006] set_robust_list(0x55558909e6a0, 24 [pid 2002] munmap(0x7f13c08c4000, 138412032 [pid 2006] <... set_robust_list resumed>) = 0 [pid 2002] <... munmap resumed>) = 0 [pid 1998] <... mount resumed>) = 0 [pid 2006] chdir("./67" [pid 2002] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1998] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 300] <... umount2 resumed>) = 0 [pid 1998] <... openat resumed>) = 3 [pid 300] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 1998] chdir("./file1" [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 2003] <... mount resumed>) = 0 [pid 2002] <... openat resumed>) = 4 [pid 1998] <... chdir resumed>) = 0 [pid 300] newfstatat(AT_FDCWD, "./64/file1", [pid 2003] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 1998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 2003] <... openat resumed>) = 3 [pid 1998] <... openat resumed>) = 4 [pid 300] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 2003] chdir("./file1" [pid 1998] ioctl(4, LOOP_CLR_FD [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 2003] <... chdir resumed>) = 0 [pid 1998] <... ioctl resumed>) = 0 [pid 300] openat(AT_FDCWD, "./64/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 2003] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1998] close(4 [pid 300] <... openat resumed>) = 4 [pid 2003] <... openat resumed>) = 4 [pid 2002] ioctl(4, LOOP_SET_FD, 3 [pid 1998] <... close resumed>) = 0 [pid 300] newfstatat(4, "", [pid 2003] ioctl(4, LOOP_CLR_FD [pid 1998] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 2003] <... ioctl resumed>) = 0 [pid 1998] <... futex resumed>) = 1 [pid 1997] <... futex resumed>) = 0 [pid 300] getdents64(4, [pid 2003] close(4 [pid 1998] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1997] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 2003] <... close resumed>) = 0 [pid 1998] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1997] <... futex resumed>) = 0 [pid 300] getdents64(4, [pid 2003] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1998] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 1997] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 2003] <... futex resumed>) = 1 [pid 300] close(4 [pid 2003] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] <... close resumed>) = 0 [pid 300] rmdir("./64/file1") = 0 [pid 300] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./64") = 0 [pid 300] mkdir("./65", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 2009 [pid 2001] <... futex resumed>) = 0 [pid 1998] <... open resumed>) = 4 [pid 2006] <... chdir resumed>) = 0 [pid 2001] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1998] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2003] <... futex resumed>) = 0 [pid 2001] <... futex resumed>) = 1 [pid 1998] <... futex resumed>) = 1 [pid 1997] <... futex resumed>) = 0 [pid 2006] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 2003] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 2001] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1998] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1997] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2003] <... open resumed>) = 4 [pid 1997] <... futex resumed>) = 0 [pid 1998] <... open resumed>) = 5 [pid 2006] <... prctl resumed>) = 0 [pid 2003] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1998] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1997] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2006] setpgid(0, 0 [pid 2003] <... futex resumed>) = 1 [pid 2001] <... futex resumed>) = 0 [pid 1998] <... futex resumed>) = 0 [pid 1997] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2006] <... setpgid resumed>) = 0 [pid 2003] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2001] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1998] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1997] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2003] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) ./strace-static-x86_64: Process 2009 attached [pid 2006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 2003] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000executing program [pid 2002] <... ioctl resumed>) = 0 [pid 2001] <... futex resumed>) = 0 [pid 1998] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1997] <... futex resumed>) = 0 [pid 2009] set_robust_list(0x55558909e6a0, 24 [pid 2006] <... openat resumed>) = 3 [pid 2009] <... set_robust_list resumed>) = 0 [pid 2009] chdir("./65") = 0 [pid 2009] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 2009] setpgid(0, 0) = 0 [pid 2009] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 2009] write(3, "1000", 4) = 4 [pid 2009] close(3) = 0 [pid 2009] symlink("/dev/binderfs", "./binderfs") = 0 [pid 2009] write(1, "executing program\n", 18) = 18 [pid 2009] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2009] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 2009] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 2009] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 2009] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2009] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2009] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[2010]}, 88) = 2010 [pid 2009] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2009] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2009] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 2010 attached [pid 2010] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 2010] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2010] memfd_create("syzkaller", 0 [pid 2003] <... open resumed>) = 5 [pid 2001] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1998] creat("./bus", 000 [pid 1997] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2010] <... memfd_create resumed>) = 3 [pid 1998] <... creat resumed>) = 6 [pid 2006] write(3, "1000", 4 [pid 2003] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1998] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2010] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 2003] <... futex resumed>) = 1 [pid 2001] <... futex resumed>) = 0 [pid 1998] <... futex resumed>) = 1 [pid 2006] <... write resumed>) = 4 [pid 1997] <... futex resumed>) = 0 [pid 2006] close(3 [pid 2003] creat("./bus", 000 [pid 2001] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1998] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1997] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2001] <... futex resumed>) = 0 [pid 2003] <... creat resumed>) = 6 [pid 2001] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2006] <... close resumed>) = 0 [pid 1998] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1997] <... futex resumed>) = 0 [pid 1997] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2006] symlink("/dev/binderfs", "./binderfs" [pid 2003] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1998] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 2006] <... symlink resumed>) = 0 [pid 1998] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 2003] <... futex resumed>) = 1 [pid 2001] <... futex resumed>) = 0 executing program [pid 2001] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1998] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2006] write(1, "executing program\n", 18 [pid 2003] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 2001] <... futex resumed>) = 0 [pid 1998] <... futex resumed>) = 1 [pid 2006] <... write resumed>) = 18 [pid 2003] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 1997] <... futex resumed>) = 0 [pid 1997] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2001] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2006] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2003] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2002] close(3 [pid 1998] pwrite64(6, "+", 1, 0 [pid 2003] <... futex resumed>) = 0 [pid 2006] <... futex resumed>) = 0 [pid 2001] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2002] <... close resumed>) = 0 [pid 1998] <... pwrite64 resumed>) = 1 [pid 1997] <... futex resumed>) = 0 [pid 2001] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1998] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2003] pwrite64(6, "+", 1, 0 [pid 1997] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2006] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 2001] <... futex resumed>) = 0 [pid 1998] <... futex resumed>) = 0 [pid 1997] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2003] <... pwrite64 resumed>) = 1 [pid 2001] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1998] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1997] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2006] <... rt_sigaction resumed>NULL, 8) = 0 [pid 2003] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2006] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 2001] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1998] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1997] <... futex resumed>) = 0 [pid 2006] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 2003] <... futex resumed>) = 0 [pid 2001] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1998] open("./bus", O_RDONLY [pid 1997] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2006] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 2003] open("./bus", O_RDONLY [pid 2001] <... futex resumed>) = 0 [pid 1998] <... open resumed>) = 7 [pid 2006] <... mmap resumed>) = 0x7f13c8cc4000 [pid 2002] close(4 [pid 2006] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 2003] <... open resumed>) = 7 [pid 2001] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1998] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2006] <... mprotect resumed>) = 0 [pid 2003] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1998] <... futex resumed>) = 1 [pid 1997] <... futex resumed>) = 0 [pid 2006] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1998] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 1997] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2003] <... futex resumed>) = 1 [pid 2006] <... rt_sigprocmask resumed>[], 8) = 0 [pid 2001] <... futex resumed>) = 0 [pid 1998] <... copy_file_range resumed>) = 1 [pid 1997] <... futex resumed>) = 0 [pid 2006] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 2003] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 2001] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1998] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 1997] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2001] <... futex resumed>) = 0 [pid 1997] <... futex resumed>) = 0 [pid 2003] <... copy_file_range resumed>) = 1 [pid 2001] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2006] <... clone3 resumed> => {parent_tid=[2011]}, 88) = 2011 [pid 2003] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2001] <... futex resumed>) = 0 [pid 1998] <... futex resumed>) = 0 [pid 1997] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2006] rt_sigprocmask(SIG_SETMASK, [], [pid 2003] <... futex resumed>) = 0 [pid 2001] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1998] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 2006] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 2003] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2001] <... mmap resumed>) = 0x7f13c8ca3000 [pid 2010] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1998] <... mmap resumed>) = 0x20000000 [pid 2001] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 2006] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 1998] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2001] <... mprotect resumed>) = 0 [pid 2006] <... futex resumed>) = 0 [pid 1998] <... futex resumed>) = 1 [pid 1997] <... futex resumed>) = 0 [pid 2006] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 2001] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1998] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1997] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2001] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1997] <... futex resumed>) = 0 [pid 2001] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 1998] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 62.824409][ T2003] loop2: detected capacity change from 0 to 2048 [ 62.832273][ T1999] EXT4-fs (loop3): This should not happen!! Data will be lost [ 62.832273][ T1999] [ 62.861460][ T2002] loop1: detected capacity change from 0 to 2048 [pid 1997] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1998] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 2001] <... clone3 resumed> => {parent_tid=[2012]}, 88) = 2012 [pid 1998] <... open resumed>) = -1 EFAULT (Bad address) [pid 2001] rt_sigprocmask(SIG_SETMASK, [], [pid 2002] <... close resumed>) = 0 [pid 2001] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1998] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2001] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 2002] mkdir("./file1", 0777 [pid 2001] <... futex resumed>) = 0 [pid 1998] <... futex resumed>) = 1 [pid 2001] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1997] <... futex resumed>) = 0 [pid 1998] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1997] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1998] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1997] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2010] <... write resumed>) = 1048576 [pid 2010] munmap(0x7f13c08c4000, 138412032) = 0 [pid 2010] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 2010] ioctl(4, LOOP_SET_FD, 3 [pid 2002] <... mkdir resumed>) = 0 [pid 2010] <... ioctl resumed>) = 0 [pid 2010] close(3) = 0 [pid 2010] close(4) = 0 [pid 2010] mkdir("./file1", 0777) = 0 [pid 2010] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue"./strace-static-x86_64: Process 2011 attached [pid 2002] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 2011] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 2011] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2011] memfd_create("syzkaller", 0) = 3 [pid 2011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 ./strace-static-x86_64: Process 2012 attached [pid 2012] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 2012] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2012] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 2011] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 2011] munmap(0x7f13c08c4000, 138412032) = 0 [pid 2011] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 62.888273][ T1998] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 62.893307][ T2010] loop3: detected capacity change from 0 to 2048 [ 62.921106][ T2011] loop4: detected capacity change from 0 to 2048 [pid 2011] ioctl(4, LOOP_SET_FD, 3 [pid 2012] <... mmap resumed>) = 0x20000000 [pid 2011] <... ioctl resumed>) = 0 [pid 2011] close(3) = 0 [pid 2011] close(4) = 0 [pid 2011] mkdir("./file1", 0777) = 0 [pid 2011] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 2012] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2001] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1997] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 2012] <... futex resumed>) = 0 [pid 2012] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2001] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2003] <... futex resumed>) = 0 [pid 2001] <... futex resumed>) = 1 [pid 2003] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 2001] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2003] <... open resumed>) = -1 EFAULT (Bad address) [pid 2003] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2002] <... mount resumed>) = 0 [pid 2001] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2003] <... futex resumed>) = 0 [pid 2002] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 2001] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2002] <... openat resumed>) = 3 [pid 2001] <... futex resumed>) = 0 [pid 1998] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 2010] <... mount resumed>) = 0 [pid 2002] chdir("./file1" [pid 2001] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1998] +++ killed by SIGBUS +++ [pid 1997] +++ killed by SIGBUS +++ [pid 2010] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 2010] chdir("./file1") = 0 [pid 2010] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 2010] ioctl(4, LOOP_CLR_FD) = 0 [pid 2010] close(4) = 0 [pid 2010] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2009] <... futex resumed>) = 0 [pid 2010] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 2009] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2010] <... open resumed>) = 4 [pid 2009] <... futex resumed>) = 0 [pid 2010] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2009] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2010] <... futex resumed>) = 0 [pid 2009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2010] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 2009] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2010] <... open resumed>) = 5 [pid 2009] <... futex resumed>) = 0 [pid 2010] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2009] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2010] <... futex resumed>) = 0 [pid 2009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2010] creat("./bus", 000 [pid 2009] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2010] <... creat resumed>) = 6 [pid 2009] <... futex resumed>) = 0 [pid 2010] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2009] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2010] <... futex resumed>) = 0 [pid 2009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2010] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 2009] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2010] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 2009] <... futex resumed>) = 0 [pid 2010] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2009] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2010] <... futex resumed>) = 0 [pid 2009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2010] pwrite64(6, "+", 1, 0 [pid 2009] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2010] <... pwrite64 resumed>) = 1 [pid 2009] <... futex resumed>) = 0 [ 62.926663][ T1998] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 62.941281][ T1998] EXT4-fs (loop0): This should not happen!! Data will be lost [ 62.941281][ T1998] [ 62.951373][ T1998] EXT4-fs (loop0): Total free blocks count 0 [ 62.951667][ T2003] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, [ 62.957254][ T1998] EXT4-fs (loop0): Free/Dirty block details [ 62.957270][ T1998] EXT4-fs (loop0): free_blocks=2415919504 [ 62.957285][ T1998] EXT4-fs (loop0): dirty_blocks=32 [ 62.957297][ T1998] EXT4-fs (loop0): Block reservation details [pid 2010] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2009] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2010] <... futex resumed>) = 0 [pid 2009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2010] open("./bus", O_RDONLY [pid 2009] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2010] <... open resumed>) = 7 [pid 2009] <... futex resumed>) = 0 [pid 2010] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2009] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2010] <... futex resumed>) = 0 [pid 2009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2010] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 2009] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2010] <... copy_file_range resumed>) = 1 [pid 2009] <... futex resumed>) = 0 [pid 2010] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2009] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2010] <... futex resumed>) = 0 [pid 2009] <... futex resumed>) = 0 [pid 2010] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2009] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 2009] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2009] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2009] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[2019]}, 88) = 2019 [pid 2009] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2009] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2009] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2002] <... chdir resumed>) = 0 [pid 2002] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 2002] ioctl(4, LOOP_CLR_FD) = 0 [pid 2002] close(4) = 0 [pid 2002] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2002] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1997, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7} --- [pid 297] umount2("./67", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./67/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./67/binderfs") = 0 [pid 297] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 2011] <... mount resumed>) = 0 [pid 2011] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 2011] chdir("./file1") = 0 [pid 2011] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 2011] ioctl(4, LOOP_CLR_FD) = 0 [pid 2011] close(4) = 0 [pid 2011] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2011] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 2019 attached [pid 2019] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 2019] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2019] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 2009] <... futex resumed>) = 0 [pid 2009] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2010] <... futex resumed>) = 0 [pid 2009] <... futex resumed>) = 1 [pid 2010] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 2009] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2010] <... open resumed>) = -1 EFAULT (Bad address) [pid 2010] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2009] <... futex resumed>) = 0 [pid 2009] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2006] <... futex resumed>) = 0 [pid 2000] <... futex resumed>) = 0 [pid 2006] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2000] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2011] <... futex resumed>) = 0 [pid 2006] <... futex resumed>) = 1 [pid 2002] <... futex resumed>) = 0 [pid 2000] <... futex resumed>) = 1 [pid 2011] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 2006] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2002] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 2000] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2011] <... open resumed>) = 4 [pid 2011] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2006] <... futex resumed>) = 0 [pid 2011] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 2006] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2011] <... open resumed>) = 5 [pid 2006] <... futex resumed>) = 0 [pid 2011] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2006] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2011] <... futex resumed>) = 0 [pid 2006] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2011] creat("./bus", 000 [pid 2006] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2011] <... creat resumed>) = 6 [pid 2006] <... futex resumed>) = 0 [pid 2011] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2006] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2011] <... futex resumed>) = 0 [pid 2006] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2011] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 2006] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2011] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 2006] <... futex resumed>) = 0 [pid 2011] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2006] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2011] <... futex resumed>) = 0 [pid 2006] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2011] pwrite64(6, "+", 1, 0 [pid 2006] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2011] <... pwrite64 resumed>) = 1 [pid 2006] <... futex resumed>) = 0 [pid 2011] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2006] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2011] <... futex resumed>) = 0 [pid 2006] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2011] open("./bus", O_RDONLY [pid 2006] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2011] <... open resumed>) = 7 [pid 2006] <... futex resumed>) = 0 [pid 2011] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2006] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2011] <... futex resumed>) = 0 [pid 2006] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2011] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 2006] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2011] <... copy_file_range resumed>) = 1 [pid 2006] <... futex resumed>) = 0 [pid 2011] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2006] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2011] <... futex resumed>) = 0 [pid 2006] <... futex resumed>) = 0 [pid 2011] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2006] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 2006] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2006] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2006] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[2020]}, 88) = 2020 [pid 2006] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2006] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2006] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2019] <... futex resumed>) = 1 [pid 2019] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 2020 attached [ 62.957308][ T1998] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 62.959868][ T1998] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 62.965503][ T2003] block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 62.971162][ T1998] EXT4-fs (loop0): This should not happen!! Data will be lost [ 62.971162][ T1998] [ 62.978696][ T2003] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 2020] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 2020] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2020] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 2006] <... futex resumed>) = 0 [pid 2006] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2011] <... futex resumed>) = 0 [pid 2006] <... futex resumed>) = 1 [pid 2011] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 2006] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2011] <... open resumed>) = -1 EFAULT (Bad address) [pid 2011] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2006] <... futex resumed>) = 0 [pid 2009] <... futex resumed>) = 0 [pid 2006] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2002] <... open resumed>) = 4 [pid 2001] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 2006] <... futex resumed>) = 0 [pid 2002] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2006] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2002] <... futex resumed>) = 1 [pid 2000] <... futex resumed>) = 0 [pid 2002] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 2000] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2002] <... open resumed>) = 5 [pid 2000] <... futex resumed>) = 0 [pid 2002] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2000] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2002] <... futex resumed>) = 0 [pid 2000] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2002] creat("./bus", 000 [pid 2000] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2002] <... creat resumed>) = 6 [pid 2000] <... futex resumed>) = 0 [pid 2002] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2000] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2002] <... futex resumed>) = 0 [pid 2000] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2002] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 2000] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2002] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 2000] <... futex resumed>) = 0 [pid 2002] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2000] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2002] <... futex resumed>) = 0 [pid 2000] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2002] pwrite64(6, "+", 1, 0 [pid 2000] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2000] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2002] <... pwrite64 resumed>) = 1 [pid 2002] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2000] <... futex resumed>) = 0 [pid 2000] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2000] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2002] open("./bus", O_RDONLY) = 7 [pid 2002] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2000] <... futex resumed>) = 0 [pid 2002] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2000] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2002] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2000] <... futex resumed>) = 0 [pid 2002] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 2000] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2002] <... copy_file_range resumed>) = 1 [pid 2000] <... futex resumed>) = 0 [pid 2002] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2000] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 2002] <... futex resumed>) = 0 [pid 2000] <... mmap resumed>) = 0x7f13c8ca3000 [pid 2002] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2000] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2000] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2000] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[2021]}, 88) = 2021 [pid 2009] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2000] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2000] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2000] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2020] <... futex resumed>) = 1 [pid 2020] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 2021 attached [pid 2021] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 2021] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2021] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 2000] <... futex resumed>) = 0 [pid 2000] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2002] <... futex resumed>) = 0 [pid 2000] <... futex resumed>) = 1 [pid 2002] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 2000] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2002] <... open resumed>) = -1 EFAULT (Bad address) [ 63.019005][ T2010] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 63.041190][ T2011] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 63.052939][ T2010] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 63.077454][ T2010] EXT4-fs (loop3): This should not happen!! Data will be lost [ 63.077454][ T2010] [pid 2002] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2000] <... futex resumed>) = 0 [pid 2000] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2000] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2021] <... futex resumed>) = 1 [pid 2021] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 297] <... umount2 resumed>) = 0 [pid 297] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 2006] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 63.082077][ T2002] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 63.105597][ T2010] EXT4-fs (loop3): Total free blocks count 0 [ 63.110990][ T2002] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 63.111602][ T2010] EXT4-fs (loop3): Free/Dirty block details [pid 2009] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./67/file1", [pid 2000] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 63.125166][ T2011] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 63.129345][ T2010] EXT4-fs (loop3): free_blocks=2415919504 [ 63.142720][ T2002] EXT4-fs (loop1): This should not happen!! Data will be lost [ 63.142720][ T2002] [ 63.147353][ T2010] EXT4-fs (loop3): dirty_blocks=32 [ 63.158012][ T2011] EXT4-fs (loop4): This should not happen!! Data will be lost [ 63.158012][ T2011] [ 63.161716][ T2010] EXT4-fs (loop3): Block reservation details [ 63.172556][ T2003] EXT4-fs (loop2): This should not happen!! Data will be lost [ 63.172556][ T2003] [pid 297] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 2010] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./67/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 2019] <... futex resumed>) = ? [pid 297] <... openat resumed>) = 4 [pid 2019] +++ killed by SIGBUS +++ [pid 2010] +++ killed by SIGBUS +++ [ 63.176982][ T2010] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 63.187529][ T2002] EXT4-fs (loop1): Total free blocks count 0 [ 63.193693][ T2011] EXT4-fs (loop4): Total free blocks count 0 [ 63.199129][ T2003] EXT4-fs (loop2): Total free blocks count 0 [ 63.203784][ T2011] EXT4-fs (loop4): Free/Dirty block details [ 63.210638][ T2002] EXT4-fs (loop1): Free/Dirty block details [ 63.215568][ T2011] EXT4-fs (loop4): free_blocks=2415919504 [ 63.222510][ T2003] EXT4-fs (loop2): Free/Dirty block details [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [ 63.227612][ T2009] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 63.233481][ T2002] EXT4-fs (loop1): free_blocks=2415919504 [ 63.244680][ T2011] EXT4-fs (loop4): dirty_blocks=32 [ 63.251180][ T2003] EXT4-fs (loop2): free_blocks=2415919504 [ 63.255201][ T2009] EXT4-fs (loop3): This should not happen!! Data will be lost [ 63.255201][ T2009] [ 63.261707][ T2003] EXT4-fs (loop2): dirty_blocks=32 [ 63.275328][ T2011] EXT4-fs (loop4): Block reservation details [ 63.276166][ T2002] EXT4-fs (loop1): dirty_blocks=32 [pid 297] getdents64(4, [pid 2011] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 2009] +++ killed by SIGBUS +++ [pid 297] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=2009, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=19} --- [pid 300] umount2("./65", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./65/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./65/binderfs") = 0 [pid 300] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] close(4 [pid 2002] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 2021] <... futex resumed>) = ? [pid 2021] +++ killed by SIGBUS +++ [pid 2003] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 297] <... close resumed>) = 0 [pid 2011] +++ killed by SIGBUS +++ [ 63.281274][ T2011] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 63.286928][ T2002] EXT4-fs (loop1): Block reservation details [ 63.292695][ T2003] EXT4-fs (loop2): Block reservation details [ 63.302169][ T2002] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 63.304157][ T2003] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 63.312005][ T2002] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 297] rmdir("./67/file1" [pid 2020] <... futex resumed>) = ? [pid 297] <... rmdir resumed>) = 0 [pid 2012] <... futex resumed>) = ? [pid 300] <... umount2 resumed>) = 0 [pid 297] getdents64(3, [pid 2012] +++ killed by SIGBUS +++ [pid 2003] +++ killed by SIGBUS +++ [pid 2020] +++ killed by SIGBUS +++ [pid 2006] +++ killed by SIGBUS +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=2006, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 2002] +++ killed by SIGBUS +++ [pid 2000] +++ killed by SIGBUS +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=2000, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 300] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./65/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./65/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./65/file1") = 0 [pid 300] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./65") = 0 [pid 300] mkdir("./66", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3 [pid 301] <... restart_syscall resumed>) = 0 [pid 300] <... close resumed>) = 0 [pid 298] <... restart_syscall resumed>) = 0 [pid 297] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] umount2("./67", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./66", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] close(3 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... close resumed>) = 0 [pid 301] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] <... openat resumed>) = 3 [pid 298] <... openat resumed>) = 3 [pid 301] newfstatat(3, "", [pid 298] newfstatat(3, "", [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] <... clone resumed>, child_tidptr=0x55558909e690) = 2023 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, [pid 298] getdents64(3, [pid 301] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 298] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./67/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./66/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./67/binderfs", [pid 298] newfstatat(AT_FDCWD, "./66/binderfs", [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./67/binderfs" [pid 298] unlink("./66/binderfs" [pid 301] <... unlink resumed>) = 0 [pid 298] <... unlink resumed>) = 0 [pid 301] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] rmdir("./67") = 0 [pid 297] mkdir("./68", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 2024 [pid 298] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 2024 attached ./strace-static-x86_64: Process 2023 attached [pid 2001] +++ killed by SIGBUS +++ [pid 301] <... umount2 resumed>) = 0 [pid 298] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 2024] set_robust_list(0x55558909e6a0, 24 [pid 2023] set_robust_list(0x55558909e6a0, 24 [pid 301] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=2001, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=20} --- [pid 2024] <... set_robust_list resumed>) = 0 [pid 2023] <... set_robust_list resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 2023] chdir("./66" [pid 2024] chdir("./68" [pid 301] newfstatat(AT_FDCWD, "./67/file1", [pid 298] newfstatat(AT_FDCWD, "./66/file1", [pid 2023] <... chdir resumed>) = 0 [pid 2023] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 2024] <... chdir resumed>) = 0 [pid 2023] <... prctl resumed>) = 0 [pid 301] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 2023] setpgid(0, 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 2024] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 2023] <... setpgid resumed>) = 0 [pid 301] openat(AT_FDCWD, "./67/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 2023] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 301] <... openat resumed>) = 4 [pid 2024] <... prctl resumed>) = 0 [pid 298] openat(AT_FDCWD, "./66/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 2024] setpgid(0, 0 [pid 2023] <... openat resumed>) = 3 [pid 301] newfstatat(4, "", [pid 299] <... restart_syscall resumed>) = 0 [pid 298] <... openat resumed>) = 4 [pid 2024] <... setpgid resumed>) = 0 [pid 2023] write(3, "1000", 4 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] newfstatat(4, "", [pid 2024] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 2023] <... write resumed>) = 4 [pid 301] getdents64(4, [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 2024] <... openat resumed>) = 3 [pid 2023] close(3 [pid 301] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 299] umount2("./67", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] getdents64(4, [pid 2024] write(3, "1000", 4 [pid 2023] <... close resumed>) = 0 [pid 301] getdents64(4, [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 2024] <... write resumed>) = 4 [pid 2023] symlink("/dev/binderfs", "./binderfs" [pid 301] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 299] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] getdents64(4, [pid 2024] close(3 [pid 2023] <... symlink resumed>) = 0 [pid 301] close(4 [pid 299] <... openat resumed>) = 3 [pid 298] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 2024] <... close resumed>) = 0 executing program [pid 2023] write(1, "executing program\n", 18 [pid 301] <... close resumed>) = 0 [pid 299] newfstatat(3, "", [pid 298] close(4 [pid 2024] symlink("/dev/binderfs", "./binderfs" [pid 2023] <... write resumed>) = 18 [pid 301] rmdir("./67/file1" [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] <... close resumed>) = 0 [pid 2023] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./67/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 2023] <... futex resumed>) = 0 [pid 301] <... rmdir resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] rmdir("./66/file1" [pid 2024] <... symlink resumed>) = 0 [pid 2023] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 301] getdents64(3, [pid 299] newfstatat(AT_FDCWD, "./67/binderfs", executing program [pid 2024] write(1, "executing program\n", 18 [pid 2023] <... rt_sigaction resumed>NULL, 8) = 0 [pid 301] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] <... rmdir resumed>) = 0 [pid 2024] <... write resumed>) = 18 [pid 2023] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 301] close(3 [pid 299] unlink("./67/binderfs" [pid 298] getdents64(3, [pid 2024] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2023] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 301] <... close resumed>) = 0 [pid 298] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 2024] <... futex resumed>) = 0 [pid 2023] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 301] rmdir("./67" [pid 299] <... unlink resumed>) = 0 [pid 298] close(3 [pid 2024] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 2023] <... mmap resumed>) = 0x7f13c8cc4000 [pid 299] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 2024] <... rt_sigaction resumed>NULL, 8) = 0 [pid 2023] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 301] <... rmdir resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 2024] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 2023] <... mprotect resumed>) = 0 [pid 301] mkdir("./68", 0777 [pid 298] rmdir("./66" [pid 2024] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 2023] rt_sigprocmask(SIG_BLOCK, ~[], [pid 301] <... mkdir resumed>) = 0 [pid 298] <... rmdir resumed>) = 0 [pid 2024] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 2023] <... rt_sigprocmask resumed>[], 8) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 298] mkdir("./67", 0777 [pid 2024] <... mmap resumed>) = 0x7f13c8cc4000 [pid 2023] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 301] <... openat resumed>) = 3 [pid 298] <... mkdir resumed>) = 0 [pid 2024] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 301] ioctl(3, LOOP_CLR_FD [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 2024] <... mprotect resumed>) = 0 [pid 2023] <... clone3 resumed> => {parent_tid=[2025]}, 88) = 2025 [pid 301] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 298] <... openat resumed>) = 3 ./strace-static-x86_64: Process 2025 attached [pid 2024] rt_sigprocmask(SIG_BLOCK, ~[], [pid 2023] rt_sigprocmask(SIG_SETMASK, [], [pid 301] close(3 [pid 299] <... umount2 resumed>) = 0 [pid 298] ioctl(3, LOOP_CLR_FD [pid 2025] set_robust_list(0x7f13c8ce49a0, 24 [pid 2024] <... rt_sigprocmask resumed>[], 8) = 0 [pid 2023] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 301] <... close resumed>) = 0 [pid 299] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 2025] <... set_robust_list resumed>) = 0 [pid 2024] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 2023] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] close(3 [pid 2025] rt_sigprocmask(SIG_SETMASK, [], [pid 2023] <... futex resumed>) = 0 [pid 299] newfstatat(AT_FDCWD, "./67/file1", [pid 2025] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 2024] <... clone3 resumed> => {parent_tid=[2026]}, 88) = 2026 [pid 2023] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] <... close resumed>) = 0 [pid 2025] memfd_create("syzkaller", 0 [pid 2024] rt_sigprocmask(SIG_SETMASK, [], [pid 301] <... clone resumed>, child_tidptr=0x55558909e690) = 2027 [pid 299] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 2025] <... memfd_create resumed>) = 3 [pid 2024] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 2025] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 299] openat(AT_FDCWD, "./67/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 2025] <... mmap resumed>) = 0x7f13c08c4000 [pid 2024] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... openat resumed>) = 4 ./strace-static-x86_64: Process 2028 attached [pid 2025] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 2024] <... futex resumed>) = 0 [pid 299] newfstatat(4, "", [pid 298] <... clone resumed>, child_tidptr=0x55558909e690) = 2028 ./strace-static-x86_64: Process 2027 attached ./strace-static-x86_64: Process 2026 attached [pid 2028] set_robust_list(0x55558909e6a0, 24 [pid 2024] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 2028] <... set_robust_list resumed>) = 0 [pid 2027] set_robust_list(0x55558909e6a0, 24 [pid 2026] set_robust_list(0x7f13c8ce49a0, 24 [pid 299] getdents64(4, [ 63.328921][ T2020] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 63.331283][ T2002] EXT4-fs (loop1): This should not happen!! Data will be lost [ 63.331283][ T2002] [ 63.349364][ T2020] EXT4-fs (loop4): This should not happen!! Data will be lost [ 63.349364][ T2020] [ 63.351687][ T2001] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 63.372643][ T2001] EXT4-fs (loop2): This should not happen!! Data will be lost [ 63.372643][ T2001] [pid 2028] chdir("./67") = 0 [pid 2027] <... set_robust_list resumed>) = 0 [pid 2026] <... set_robust_list resumed>) = 0 [pid 299] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 2028] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 299] getdents64(4, [pid 2028] <... prctl resumed>) = 0 [pid 2027] chdir("./68" [pid 2026] rt_sigprocmask(SIG_SETMASK, [], [pid 299] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 2028] setpgid(0, 0 [pid 299] close(4 [pid 2028] <... setpgid resumed>) = 0 [pid 2027] <... chdir resumed>) = 0 [pid 2026] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 2028] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 299] <... close resumed>) = 0 [pid 2028] <... openat resumed>) = 3 [pid 2028] write(3, "1000", 4) = 4 [pid 299] rmdir("./67/file1" [pid 2028] close(3) = 0 [pid 2028] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 2028] write(1, "executing program\n", 18 [pid 299] <... rmdir resumed>) = 0 [pid 2028] <... write resumed>) = 18 [pid 2026] memfd_create("syzkaller", 0 [pid 299] getdents64(3, [pid 2028] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 2028] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 2026] <... memfd_create resumed>) = 3 [pid 2028] <... rt_sigaction resumed>NULL, 8) = 0 [pid 299] close(3 [pid 2028] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 2026] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 2028] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 299] <... close resumed>) = 0 [pid 2028] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 299] rmdir("./67" [pid 2028] <... mmap resumed>) = 0x7f13c8cc4000 [pid 2026] <... mmap resumed>) = 0x7f13c08c4000 [pid 2028] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2028] rt_sigprocmask(SIG_BLOCK, ~[], [pid 299] <... rmdir resumed>) = 0 [pid 2028] <... rt_sigprocmask resumed>[], 8) = 0 [pid 2028] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 299] mkdir("./68", 0777 [pid 2028] <... clone3 resumed> => {parent_tid=[2029]}, 88) = 2029 [pid 2028] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2028] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2028] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 299] <... mkdir resumed>) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 2027] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 2025] <... write resumed>) = 1048576 [pid 299] <... openat resumed>) = 3 [pid 2025] munmap(0x7f13c08c4000, 138412032 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3./strace-static-x86_64: Process 2029 attached [pid 2027] <... prctl resumed>) = 0 [pid 2026] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 2025] <... munmap resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 2027] setpgid(0, 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 2027] <... setpgid resumed>) = 0 [pid 2027] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 299] <... clone resumed>, child_tidptr=0x55558909e690) = 2030 [pid 2027] <... openat resumed>) = 3 [pid 2027] write(3, "1000", 4) = 4 [pid 2027] close(3) = 0 [pid 2027] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 2027] write(1, "executing program\n", 18) = 18 [pid 2027] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2027] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 2027] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], ./strace-static-x86_64: Process 2030 attached [pid 2029] set_robust_list(0x7f13c8ce49a0, 24 [pid 2027] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 2025] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 2027] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 2027] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2027] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2027] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 2029] <... set_robust_list resumed>) = 0 [pid 2027] <... clone3 resumed> => {parent_tid=[2031]}, 88) = 2031 [pid 2027] rt_sigprocmask(SIG_SETMASK, [], [pid 2030] set_robust_list(0x55558909e6a0, 24 [pid 2029] rt_sigprocmask(SIG_SETMASK, [], [pid 2027] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 2025] <... openat resumed>) = 4 [pid 2027] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2030] <... set_robust_list resumed>) = 0 [pid 2029] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 2027] <... futex resumed>) = 0 [pid 2025] ioctl(4, LOOP_SET_FD, 3 [pid 2027] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 2030] chdir("./68" [pid 2029] memfd_create("syzkaller", 0./strace-static-x86_64: Process 2031 attached [pid 2031] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 2031] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2031] memfd_create("syzkaller", 0) = 3 [pid 2031] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 2031] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 2029] <... memfd_create resumed>) = 3 [pid 2030] <... chdir resumed>) = 0 [pid 2030] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 2029] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 2026] <... write resumed>) = 1048576 [pid 2025] <... ioctl resumed>) = 0 [pid 2030] <... prctl resumed>) = 0 [pid 2029] <... mmap resumed>) = 0x7f13c08c4000 [pid 2026] munmap(0x7f13c08c4000, 138412032 [pid 2030] setpgid(0, 0 [pid 2031] <... write resumed>) = 1048576 [pid 2031] munmap(0x7f13c08c4000, 138412032) = 0 [pid 2031] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 2031] ioctl(4, LOOP_SET_FD, 3executing program [pid 2030] <... setpgid resumed>) = 0 [pid 2029] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 2026] <... munmap resumed>) = 0 [pid 2025] close(3 [pid 2030] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 2030] write(3, "1000", 4) = 4 [pid 2030] close(3) = 0 [pid 2030] symlink("/dev/binderfs", "./binderfs") = 0 [pid 2030] write(1, "executing program\n", 18) = 18 [pid 2030] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2030] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 2030] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 2030] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 2030] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2030] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2030] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[2032]}, 88) = 2032 [pid 2030] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2030] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2030] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 2026] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 2026] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 2032 attached [pid 2031] <... ioctl resumed>) = 0 [pid 2029] <... write resumed>) = 1048576 [pid 2025] <... close resumed>) = 0 [pid 2029] munmap(0x7f13c08c4000, 138412032) = 0 [pid 2029] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 2032] set_robust_list(0x7f13c8ce49a0, 24 [pid 2031] close(3 [pid 2026] <... ioctl resumed>) = 0 [pid 2025] close(4 [pid 2029] ioctl(4, LOOP_SET_FD, 3 [pid 2032] <... set_robust_list resumed>) = 0 [pid 2032] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2032] memfd_create("syzkaller", 0) = 3 [pid 2032] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 2032] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 2031] <... close resumed>) = 0 [pid 2026] close(3) = 0 [pid 2031] close(4 [pid 2032] <... write resumed>) = 1048576 [pid 2032] munmap(0x7f13c08c4000, 138412032) = 0 [pid 2032] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 2032] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 2032] close(3) = 0 [pid 2032] close(4) = 0 [pid 2032] mkdir("./file1", 0777) = 0 [pid 2032] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 2029] <... ioctl resumed>) = 0 [pid 2029] close(3) = 0 [pid 2029] close(4) = 0 [pid 2029] mkdir("./file1", 0777) = 0 [pid 2031] <... close resumed>) = 0 [pid 2026] close(4) = 0 [pid 2031] mkdir("./file1", 0777) = 0 [pid 2026] mkdir("./file1", 0777) = 0 [pid 2031] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 2026] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 2025] <... close resumed>) = 0 [pid 2029] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 2025] mkdir("./file1", 0777) = 0 [ 63.438342][ T2025] loop3: detected capacity change from 0 to 2048 [ 63.450483][ T2031] loop4: detected capacity change from 0 to 2048 [ 63.455135][ T2026] loop0: detected capacity change from 0 to 2048 [ 63.464116][ T2029] loop1: detected capacity change from 0 to 2048 [ 63.473348][ T2032] loop2: detected capacity change from 0 to 2048 [pid 2025] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 2032] <... mount resumed>) = 0 [pid 2032] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 2032] chdir("./file1") = 0 [pid 2032] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 2032] ioctl(4, LOOP_CLR_FD) = 0 [pid 2032] close(4 [pid 2025] <... mount resumed>) = 0 [pid 2032] <... close resumed>) = 0 [pid 2032] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2029] <... mount resumed>) = 0 [pid 2025] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 2029] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 2029] chdir("./file1") = 0 [pid 2025] <... openat resumed>) = 3 [pid 2032] <... futex resumed>) = 1 [pid 2030] <... futex resumed>) = 0 [pid 2029] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 2025] chdir("./file1" [pid 2030] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2030] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2032] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 2029] <... openat resumed>) = 4 [pid 2025] <... chdir resumed>) = 0 [pid 2029] ioctl(4, LOOP_CLR_FD) = 0 [pid 2025] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 2025] ioctl(4, LOOP_CLR_FD) = 0 [pid 2025] close(4 [pid 2029] close(4) = 0 [pid 2029] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2028] <... futex resumed>) = 0 [pid 2028] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2028] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2029] <... futex resumed>) = 1 [ 63.498037][ T2032] EXT4-fs mount: 452 callbacks suppressed [ 63.498058][ T2032] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 63.513162][ T2025] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 63.522039][ T2029] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 63.533252][ T2026] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [pid 2032] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2029] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 2030] <... futex resumed>) = 0 [pid 2030] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2030] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2032] <... futex resumed>) = 1 [pid 2032] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 2031] <... mount resumed>) = 0 [pid 2026] <... mount resumed>) = 0 [pid 2031] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 2026] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 2025] <... close resumed>) = 0 [pid 2031] <... openat resumed>) = 3 [pid 2026] <... openat resumed>) = 3 [pid 2025] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2032] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2031] chdir("./file1" [pid 2026] chdir("./file1" [pid 2025] <... futex resumed>) = 1 [pid 2023] <... futex resumed>) = 0 [pid 2032] <... futex resumed>) = 1 [pid 2031] <... chdir resumed>) = 0 [pid 2030] <... futex resumed>) = 0 [pid 2029] <... open resumed>) = 4 [pid 2026] <... chdir resumed>) = 0 [pid 2025] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 2023] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2032] creat("./bus", 000 [pid 2031] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 2030] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2029] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2026] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 2023] <... futex resumed>) = 0 [pid 2030] <... futex resumed>) = 0 [pid 2023] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2030] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2026] <... openat resumed>) = 4 [pid 2031] <... openat resumed>) = 4 [pid 2026] ioctl(4, LOOP_CLR_FD [pid 2031] ioctl(4, LOOP_CLR_FD [pid 2026] <... ioctl resumed>) = 0 [pid 2031] <... ioctl resumed>) = 0 [pid 2032] <... creat resumed>) = 6 [pid 2031] close(4 [pid 2026] close(4 [pid 2031] <... close resumed>) = 0 [pid 2026] <... close resumed>) = 0 [pid 2031] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2026] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2027] <... futex resumed>) = 0 [pid 2027] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2027] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2026] <... futex resumed>) = 1 [pid 2024] <... futex resumed>) = 0 [pid 2024] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2024] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2031] <... futex resumed>) = 1 [pid 2031] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 2032] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2026] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 2031] <... open resumed>) = 4 [pid 2032] <... futex resumed>) = 1 [pid 2030] <... futex resumed>) = 0 [pid 2030] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2026] <... open resumed>) = 4 [pid 2030] <... futex resumed>) = 0 [pid 2032] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 2031] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2030] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2029] <... futex resumed>) = 1 [pid 2028] <... futex resumed>) = 0 [pid 2026] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2025] <... open resumed>) = 4 [pid 2032] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 2031] <... futex resumed>) = 1 [pid 2029] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 2028] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2027] <... futex resumed>) = 0 [pid 2028] <... futex resumed>) = 0 [pid 2027] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2028] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2027] <... futex resumed>) = 0 [pid 2027] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2032] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2031] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 2029] <... open resumed>) = 5 [pid 2026] <... futex resumed>) = 1 [pid 2025] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2024] <... futex resumed>) = 0 [pid 2024] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2024] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2032] <... futex resumed>) = 1 [pid 2031] <... open resumed>) = 5 [pid 2030] <... futex resumed>) = 0 [pid 2029] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2026] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 2025] <... futex resumed>) = 1 [pid 2023] <... futex resumed>) = 0 [pid 2032] pwrite64(6, "+", 1, 0 [pid 2031] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2030] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2029] <... futex resumed>) = 1 [pid 2028] <... futex resumed>) = 0 [pid 2026] <... open resumed>) = 5 [pid 2025] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 2023] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2032] <... pwrite64 resumed>) = 1 [pid 2031] <... futex resumed>) = 1 [pid 2030] <... futex resumed>) = 0 [pid 2029] creat("./bus", 000 [pid 2028] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2027] <... futex resumed>) = 0 [pid 2026] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2025] <... open resumed>) = 5 [pid 2023] <... futex resumed>) = 0 [pid 2032] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2031] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2030] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2029] <... creat resumed>) = 6 [pid 2028] <... futex resumed>) = 0 [pid 2027] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2023] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2028] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2027] <... futex resumed>) = 0 [pid 2030] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2027] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2030] <... futex resumed>) = 0 [pid 2032] <... futex resumed>) = 0 [pid 2031] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2030] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2029] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2026] <... futex resumed>) = 1 [pid 2025] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2024] <... futex resumed>) = 0 [pid 2032] open("./bus", O_RDONLY [pid 2031] creat("./bus", 000 [pid 2029] <... futex resumed>) = 1 [pid 2028] <... futex resumed>) = 0 [pid 2026] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2025] <... futex resumed>) = 1 [pid 2024] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2023] <... futex resumed>) = 0 [pid 2032] <... open resumed>) = 7 [pid 2029] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 2028] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2025] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2024] <... futex resumed>) = 0 [pid 2023] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2032] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2031] <... creat resumed>) = 6 [pid 2029] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 2028] <... futex resumed>) = 0 [pid 2026] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2024] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2023] <... futex resumed>) = 0 [pid 2032] <... futex resumed>) = 1 [pid 2031] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2030] <... futex resumed>) = 0 [pid 2029] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2028] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2026] creat("./bus", 000 [pid 2025] creat("./bus", 000 [pid 2023] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2032] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 2031] <... futex resumed>) = 1 [pid 2030] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2029] <... futex resumed>) = 0 [pid 2028] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2027] <... futex resumed>) = 0 [pid 2030] <... futex resumed>) = 0 [pid 2025] <... creat resumed>) = 6 [pid 2030] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2028] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2027] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2025] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2030] <... futex resumed>) = 0 [pid 2029] pwrite64(6, "+", 1, 0 [pid 2028] <... futex resumed>) = 0 [pid 2027] <... futex resumed>) = 0 [pid 2030] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 2028] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2027] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2025] <... futex resumed>) = 1 [pid 2023] <... futex resumed>) = 0 [pid 2030] <... mmap resumed>) = 0x7f13c8ca3000 [pid 2023] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2030] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 2023] <... futex resumed>) = 0 [pid 2026] <... creat resumed>) = 6 [pid 2032] <... copy_file_range resumed>) = 1 [pid 2031] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 2030] <... mprotect resumed>) = 0 [pid 2029] <... pwrite64 resumed>) = 1 [pid 2025] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 2023] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2026] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2032] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2031] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 2030] rt_sigprocmask(SIG_BLOCK, ~[], [pid 2029] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2026] <... futex resumed>) = 1 [pid 2025] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 2024] <... futex resumed>) = 0 [pid 2032] <... futex resumed>) = 0 [pid 2031] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2030] <... rt_sigprocmask resumed>[], 8) = 0 [pid 2029] <... futex resumed>) = 1 [pid 2028] <... futex resumed>) = 0 [pid 2026] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2025] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2024] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2032] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2031] <... futex resumed>) = 1 [pid 2030] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 2029] open("./bus", O_RDONLY [pid 2028] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2027] <... futex resumed>) = 0 [pid 2026] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2025] <... futex resumed>) = 1 [pid 2024] <... futex resumed>) = 0 [pid 2023] <... futex resumed>) = 0 ./strace-static-x86_64: Process 2043 attached [pid 2031] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2029] <... open resumed>) = 7 [pid 2028] <... futex resumed>) = 0 [pid 2027] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2026] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 2025] pwrite64(6, "+", 1, 0 [pid 2024] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2023] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2043] set_robust_list(0x7f13c8cc39a0, 24 [pid 2031] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2030] <... clone3 resumed> => {parent_tid=[2043]}, 88) = 2043 [pid 2029] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2028] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2027] <... futex resumed>) = 0 [pid 2026] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 2025] <... pwrite64 resumed>) = 1 [pid 2023] <... futex resumed>) = 0 [pid 2043] <... set_robust_list resumed>) = 0 [ 63.542252][ T2031] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [pid 2031] pwrite64(6, "+", 1, 0 [pid 2030] rt_sigprocmask(SIG_SETMASK, [], [pid 2029] <... futex resumed>) = 0 [pid 2028] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2027] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2026] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2025] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2023] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2031] <... pwrite64 resumed>) = 1 [pid 2030] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 2029] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2028] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2026] <... futex resumed>) = 1 [pid 2043] rt_sigprocmask(SIG_SETMASK, [], [pid 2025] <... futex resumed>) = 0 [pid 2024] <... futex resumed>) = 0 [pid 2023] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2031] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2030] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 2029] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2028] <... futex resumed>) = 0 [pid 2043] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 2026] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2025] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2024] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2023] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2031] <... futex resumed>) = 1 [pid 2030] <... futex resumed>) = 0 [pid 2029] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 2028] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2027] <... futex resumed>) = 0 [pid 2030] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2026] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2024] <... futex resumed>) = 0 [pid 2023] <... futex resumed>) = 0 [pid 2029] <... copy_file_range resumed>) = 1 [pid 2027] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2026] pwrite64(6, "+", 1, 0 [pid 2028] <... futex resumed>) = 0 [pid 2025] open("./bus", O_RDONLY [pid 2027] <... futex resumed>) = 0 [pid 2024] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2031] open("./bus", O_RDONLY [pid 2023] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2029] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2043] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 2031] <... open resumed>) = 7 [pid 2028] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 2027] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2026] <... pwrite64 resumed>) = 1 [pid 2025] <... open resumed>) = 7 [pid 2029] <... futex resumed>) = 0 [pid 2031] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2029] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2028] <... mmap resumed>) = 0x7f13c8ca3000 [pid 2027] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2026] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2025] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2031] <... futex resumed>) = 0 [pid 2028] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 2027] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2026] <... futex resumed>) = 1 [pid 2025] <... futex resumed>) = 1 [pid 2024] <... futex resumed>) = 0 [pid 2023] <... futex resumed>) = 0 [pid 2031] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 2028] <... mprotect resumed>) = 0 [pid 2027] <... futex resumed>) = 0 [pid 2026] open("./bus", O_RDONLY [pid 2025] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2024] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2023] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2031] <... copy_file_range resumed>) = 1 [pid 2028] rt_sigprocmask(SIG_BLOCK, ~[], [pid 2027] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2026] <... open resumed>) = 7 [pid 2025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2024] <... futex resumed>) = 0 [pid 2023] <... futex resumed>) = 0 [pid 2031] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2028] <... rt_sigprocmask resumed>[], 8) = 0 [pid 2027] <... futex resumed>) = 0 [pid 2026] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2025] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 2028] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 2024] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2031] <... futex resumed>) = 0 [pid 2023] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2027] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 2026] <... futex resumed>) = 0 [pid 2027] <... mmap resumed>) = 0x7f13c8ca3000 [pid 2026] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2025] <... copy_file_range resumed>) = 1 [pid 2024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2023] <... futex resumed>) = 0 [pid 2031] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2027] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 2025] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2024] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2023] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 2044 attached [pid 2044] set_robust_list(0x7f13c8cc39a0, 24 [pid 2027] <... mprotect resumed>) = 0 [pid 2026] <... futex resumed>) = 0 [pid 2025] <... futex resumed>) = 0 [pid 2024] <... futex resumed>) = 1 [pid 2023] <... mmap resumed>) = 0x7f13c8ca3000 [pid 2028] <... clone3 resumed> => {parent_tid=[2044]}, 88) = 2044 [pid 2027] rt_sigprocmask(SIG_BLOCK, ~[], [pid 2026] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 2025] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2024] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2023] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 2028] rt_sigprocmask(SIG_SETMASK, [], [pid 2027] <... rt_sigprocmask resumed>[], 8) = 0 [pid 2028] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 2027] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 2026] <... copy_file_range resumed>) = 1 [pid 2024] <... futex resumed>) = 0 [pid 2023] <... mprotect resumed>) = 0 [pid 2028] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 2044] <... set_robust_list resumed>) = 0 [pid 2024] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 2026] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2023] rt_sigprocmask(SIG_BLOCK, ~[], [pid 2028] <... futex resumed>) = 0 [pid 2027] <... clone3 resumed> => {parent_tid=[2045]}, 88) = 2045 [pid 2028] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2026] <... futex resumed>) = 0 [pid 2024] <... mmap resumed>) = 0x7f13c8ca3000 [pid 2023] <... rt_sigprocmask resumed>[], 8) = 0 [pid 2027] rt_sigprocmask(SIG_SETMASK, [], [pid 2026] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2024] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 2023] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 2027] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 2024] <... mprotect resumed>) = 0 [pid 2024] rt_sigprocmask(SIG_BLOCK, ~[], [pid 2027] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2024] <... rt_sigprocmask resumed>[], 8) = 0 [pid 2023] <... clone3 resumed> => {parent_tid=[2046]}, 88) = 2046 [pid 2027] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2024] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 2023] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2024] <... clone3 resumed> => {parent_tid=[2047]}, 88) = 2047 [pid 2023] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 2024] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2023] <... futex resumed>) = 0 [pid 2024] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 2023] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2024] <... futex resumed>) = 0 [pid 2024] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2044] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 2045 attached ./strace-static-x86_64: Process 2047 attached ./strace-static-x86_64: Process 2046 attached NULL, 8) = 0 [pid 2043] <... mmap resumed>) = 0x20000000 [pid 2044] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 2047] set_robust_list(0x7f13c8cc39a0, 24 [pid 2046] set_robust_list(0x7f13c8cc39a0, 24 [pid 2045] set_robust_list(0x7f13c8cc39a0, 24 [pid 2043] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2047] <... set_robust_list resumed>) = 0 [pid 2046] <... set_robust_list resumed>) = 0 [pid 2045] <... set_robust_list resumed>) = 0 [pid 2043] <... futex resumed>) = 1 [pid 2030] <... futex resumed>) = 0 [pid 2047] rt_sigprocmask(SIG_SETMASK, [], [pid 2046] rt_sigprocmask(SIG_SETMASK, [], [pid 2045] rt_sigprocmask(SIG_SETMASK, [], [pid 2043] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2030] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2047] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 2046] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 2045] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 2032] <... futex resumed>) = 0 [pid 2030] <... futex resumed>) = 1 [pid 2047] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 2046] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 2045] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 2044] <... mmap resumed>) = 0x20000000 [pid 2032] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 2030] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2047] <... mmap resumed>) = 0x20000000 [pid 2045] <... mmap resumed>) = 0x20000000 [pid 2044] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2032] <... open resumed>) = -1 EFAULT (Bad address) [pid 2047] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2044] <... futex resumed>) = 1 [pid 2032] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2028] <... futex resumed>) = 0 [pid 2047] <... futex resumed>) = 1 [pid 2044] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2032] <... futex resumed>) = 1 [pid 2030] <... futex resumed>) = 0 [pid 2028] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2024] <... futex resumed>) = 0 [pid 2047] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2032] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2030] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2029] <... futex resumed>) = 0 [pid 2028] <... futex resumed>) = 1 [pid 2024] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2046] <... mmap resumed>) = 0x20000000 [pid 2045] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2030] <... futex resumed>) = 0 [pid 2029] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 2028] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2026] <... futex resumed>) = 0 [pid 2024] <... futex resumed>) = 1 [pid 2046] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2046] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2045] <... futex resumed>) = 1 [pid 2045] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2030] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2029] <... open resumed>) = -1 EFAULT (Bad address) [pid 2029] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2029] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2028] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2028] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2029] <... futex resumed>) = 0 [pid 2028] <... futex resumed>) = 1 [pid 2027] <... futex resumed>) = 0 [pid 2026] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 2024] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2023] <... futex resumed>) = 0 [pid 2027] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2026] <... open resumed>) = -1 EFAULT (Bad address) [pid 2023] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2031] <... futex resumed>) = 0 [pid 2027] <... futex resumed>) = 1 [pid 2026] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2025] <... futex resumed>) = 0 [pid 2023] <... futex resumed>) = 1 [pid 2031] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 2027] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2026] <... futex resumed>) = 1 [pid 2025] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 2024] <... futex resumed>) = 0 [pid 2023] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2031] <... open resumed>) = -1 EFAULT (Bad address) [pid 2026] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2025] <... open resumed>) = -1 EFAULT (Bad address) [pid 2024] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2031] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2026] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2025] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2024] <... futex resumed>) = 0 [pid 2031] <... futex resumed>) = 1 [pid 2028] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2027] <... futex resumed>) = 0 [pid 2025] <... futex resumed>) = 1 [pid 2024] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2023] <... futex resumed>) = 0 [pid 2031] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2027] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [ 63.602275][ T2032] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 63.604483][ T2029] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 63.623459][ T2026] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 2025] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2023] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2031] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2027] <... futex resumed>) = 0 [pid 2025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2023] <... futex resumed>) = 0 [pid 2030] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 63.631925][ T2029] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 63.648789][ T2031] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 63.657916][ T2029] EXT4-fs (loop1): This should not happen!! Data will be lost [ 63.657916][ T2029] [ 63.673064][ T2025] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 63.682030][ T2029] EXT4-fs (loop1): Total free blocks count 0 [pid 2027] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2023] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2024] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 2028] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 63.697505][ T2026] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 63.702234][ T2032] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 63.715077][ T2025] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 63.725915][ T2029] EXT4-fs (loop1): Free/Dirty block details [pid 2027] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 2023] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 63.739090][ T2031] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 63.744072][ T2032] EXT4-fs (loop2): This should not happen!! Data will be lost [ 63.744072][ T2032] [ 63.756805][ T2026] EXT4-fs (loop0): This should not happen!! Data will be lost [ 63.756805][ T2026] [ 63.765752][ T2029] EXT4-fs (loop1): free_blocks=2415919504 [ 63.775425][ T2031] EXT4-fs (loop4): This should not happen!! Data will be lost [ 63.775425][ T2031] [ 63.780595][ T2029] EXT4-fs (loop1): dirty_blocks=32 [ 63.790435][ T2025] EXT4-fs (loop3): This should not happen!! Data will be lost [pid 2029] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [ 63.790435][ T2025] [ 63.795046][ T2032] EXT4-fs (loop2): Total free blocks count 0 [ 63.810448][ T2029] EXT4-fs (loop1): Block reservation details [ 63.810708][ T2031] EXT4-fs (loop4): Total free blocks count 0 [ 63.816526][ T2032] EXT4-fs (loop2): Free/Dirty block details [ 63.822760][ T2026] EXT4-fs (loop0): Total free blocks count 0 [ 63.828137][ T2029] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 63.834348][ T2025] EXT4-fs (loop3): Total free blocks count 0 [ 63.839733][ T2032] EXT4-fs (loop2): free_blocks=2415919504 [pid 2044] <... futex resumed>) = ? [pid 2044] +++ killed by SIGBUS +++ [pid 2029] +++ killed by SIGBUS +++ [ 63.846215][ T2031] EXT4-fs (loop4): Free/Dirty block details [ 63.851136][ T2032] EXT4-fs (loop2): dirty_blocks=32 [ 63.857546][ T2026] EXT4-fs (loop0): Free/Dirty block details [ 63.862598][ T2028] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 63.867492][ T2025] EXT4-fs (loop3): Free/Dirty block details [ 63.879704][ T2032] EXT4-fs (loop2): Block reservation details [ 63.885788][ T2031] EXT4-fs (loop4): free_blocks=2415919504 [ 63.891088][ T2032] EXT4-fs (loop2): i_reserved_data_blocks=2 [pid 2032] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 2028] +++ killed by SIGBUS +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=2028, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 298] umount2("./67", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./67/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./67/binderfs") = 0 [pid 298] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 2043] <... futex resumed>) = ? [pid 2043] +++ killed by SIGBUS +++ [pid 2032] +++ killed by SIGBUS +++ [ 63.896975][ T2026] EXT4-fs (loop0): free_blocks=2415919504 [ 63.902726][ T2025] EXT4-fs (loop3): free_blocks=2415919504 [ 63.912595][ T2031] EXT4-fs (loop4): dirty_blocks=32 [ 63.913567][ T2025] EXT4-fs (loop3): dirty_blocks=32 [ 63.918504][ T2026] EXT4-fs (loop0): dirty_blocks=32 [ 63.923674][ T2025] EXT4-fs (loop3): Block reservation details [ 63.929643][ T2031] EXT4-fs (loop4): Block reservation details [ 63.935025][ T2030] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 2030] +++ killed by SIGBUS +++ [pid 2031] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 2026] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 2025] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 2045] <... futex resumed>) = ? [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=2030, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 2045] +++ killed by SIGBUS +++ [pid 2047] <... futex resumed>) = ? [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 2047] +++ killed by SIGBUS +++ [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./67/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./67/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./67/file1" [pid 299] <... restart_syscall resumed>) = 0 [pid 299] umount2("./68", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./68/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./68/binderfs") = 0 [pid 299] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... rmdir resumed>) = 0 [pid 298] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./67") = 0 [pid 2025] +++ killed by SIGBUS +++ [pid 298] mkdir("./68", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 2046] <... futex resumed>) = ? [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./68/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./68/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [ 63.940806][ T2026] EXT4-fs (loop0): Block reservation details [ 63.952612][ T2025] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 63.959462][ T2031] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 63.963972][ T2026] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 63.976885][ T2031] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 299] rmdir("./68/file1") = 0 [pid 299] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./68") = 0 [pid 299] mkdir("./69", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 298] <... clone resumed>, child_tidptr=0x55558909e690) = 2048 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 2049 ./strace-static-x86_64: Process 2049 attached [pid 2049] set_robust_list(0x55558909e6a0, 24) = 0 [pid 2049] chdir("./69") = 0 [pid 2049] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 2049] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 2048 attached [pid 2048] set_robust_list(0x55558909e6a0, 24) = 0 [pid 2046] +++ killed by SIGBUS +++ [pid 2023] +++ killed by SIGBUS +++ [pid 2048] chdir("./68" [pid 2031] +++ killed by SIGBUS +++ [pid 2027] +++ killed by SIGBUS +++ [pid 2026] +++ killed by SIGBUS +++ [pid 2024] +++ killed by SIGBUS +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=2023, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 2049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=2027, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=2024, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 297] restart_syscall(<... resuming interrupted clone ...> [pid 2048] <... chdir resumed>) = 0 [pid 2048] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 2048] setpgid(0, 0 [pid 2049] <... openat resumed>) = 3 [pid 2048] <... setpgid resumed>) = 0 [pid 2049] write(3, "1000", 4) = 4 [pid 2049] close(3) = 0 [pid 2049] symlink("/dev/binderfs", "./binderfs" [pid 2048] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 2048] write(3, "1000", 4) = 4 [pid 2048] close(3) = 0 [pid 2048] symlink("/dev/binderfs", "./binderfs") = 0 [pid 2048] write(1, "executing program\n", 18executing program ) = 18 [pid 2048] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2048] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 2048] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 2048] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 2048] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2048] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2048] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[2050]}, 88) = 2050 [pid 2048] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2048] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2048] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 2050 attached executing program [pid 2049] <... symlink resumed>) = 0 [pid 2049] write(1, "executing program\n", 18) = 18 [pid 2049] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2049] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 2049] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 2049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 2049] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2049] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2049] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[2051]}, 88) = 2051 [pid 2049] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2049] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2049] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 2051 attached [pid 2051] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 2051] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2051] memfd_create("syzkaller", 0) = 3 [pid 2051] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 2050] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 2050] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2050] memfd_create("syzkaller", 0 [pid 300] <... restart_syscall resumed>) = 0 [pid 297] <... restart_syscall resumed>) = 0 [pid 301] <... restart_syscall resumed>) = 0 [pid 297] umount2("./68", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] umount2("./68", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] umount2("./66", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 300] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] <... openat resumed>) = 3 [pid 297] <... openat resumed>) = 3 [pid 300] <... openat resumed>) = 3 [pid 301] newfstatat(3, "", [pid 300] newfstatat(3, "", [pid 297] newfstatat(3, "", [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, [pid 301] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] getdents64(3, [pid 300] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./68/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] umount2("./66/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./68/binderfs", [pid 300] newfstatat(AT_FDCWD, "./66/binderfs", [pid 297] umount2("./68/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./68/binderfs" [pid 300] unlink("./66/binderfs" [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... unlink resumed>) = 0 [pid 301] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] <... unlink resumed>) = 0 [pid 297] newfstatat(AT_FDCWD, "./68/binderfs", [pid 300] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./68/binderfs" [pid 2050] <... memfd_create resumed>) = 3 [pid 2050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 297] <... unlink resumed>) = 0 [pid 2050] <... mmap resumed>) = 0x7f13c08c4000 [pid 297] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 2050] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 301] <... umount2 resumed>) = 0 [pid 300] <... umount2 resumed>) = 0 [pid 297] <... umount2 resumed>) = 0 [pid 301] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./68/file1", [pid 300] newfstatat(AT_FDCWD, "./66/file1", [pid 297] newfstatat(AT_FDCWD, "./68/file1", [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] openat(AT_FDCWD, "./68/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... openat resumed>) = 4 [pid 300] openat(AT_FDCWD, "./66/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] openat(AT_FDCWD, "./68/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] newfstatat(4, "", [pid 300] <... openat resumed>) = 4 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] <... openat resumed>) = 4 [pid 300] newfstatat(4, "", [pid 301] getdents64(4, [pid 297] newfstatat(4, "", [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 300] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, [pid 301] close(4 [pid 300] getdents64(4, [pid 301] <... close resumed>) = 0 [pid 300] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 297] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 301] rmdir("./68/file1" [pid 300] close(4 [pid 297] getdents64(4, [pid 301] <... rmdir resumed>) = 0 [pid 297] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 301] getdents64(3, [pid 300] <... close resumed>) = 0 [pid 297] close(4 [pid 301] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 300] rmdir("./66/file1" [pid 301] close(3 [pid 297] <... close resumed>) = 0 [pid 300] <... rmdir resumed>) = 0 [pid 297] rmdir("./68/file1" [pid 301] <... close resumed>) = 0 [pid 300] getdents64(3, [pid 297] <... rmdir resumed>) = 0 [pid 301] rmdir("./68" [pid 300] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 297] getdents64(3, [pid 301] <... rmdir resumed>) = 0 [pid 300] close(3 [pid 297] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 301] mkdir("./69", 0777 [pid 300] <... close resumed>) = 0 [pid 297] close(3 [pid 300] rmdir("./66" [pid 297] <... close resumed>) = 0 [pid 297] rmdir("./68" [pid 300] <... rmdir resumed>) = 0 [pid 297] <... rmdir resumed>) = 0 [pid 300] mkdir("./67", 0777 [pid 301] <... mkdir resumed>) = 0 [pid 297] mkdir("./69", 0777 [pid 300] <... mkdir resumed>) = 0 [pid 297] <... mkdir resumed>) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 2050] <... write resumed>) = 1048576 [pid 2050] munmap(0x7f13c08c4000, 138412032) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 301] <... openat resumed>) = 3 [pid 300] <... openat resumed>) = 3 [pid 301] ioctl(3, LOOP_CLR_FD [pid 300] ioctl(3, LOOP_CLR_FD [pid 297] <... openat resumed>) = 3 [pid 301] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 300] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 297] ioctl(3, LOOP_CLR_FD [pid 301] close(3 [pid 300] close(3 [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 63.993245][ T2046] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 64.006605][ T2026] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 2051] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 2050] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 301] <... close resumed>) = 0 [pid 300] <... close resumed>) = 0 [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] <... clone resumed>, child_tidptr=0x55558909e690) = 2052 [pid 300] <... clone resumed>, child_tidptr=0x55558909e690) = 2053 [pid 301] <... clone resumed>, child_tidptr=0x55558909e690) = 2054 [pid 2050] <... openat resumed>) = 4 [pid 2050] ioctl(4, LOOP_SET_FD, 3 [pid 2051] <... write resumed>) = 1048576 [pid 2051] munmap(0x7f13c08c4000, 138412032) = 0 [pid 2051] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 2051] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 2054 attached ./strace-static-x86_64: Process 2053 attached ./strace-static-x86_64: Process 2052 attached [pid 2050] <... ioctl resumed>) = 0 [pid 2054] set_robust_list(0x55558909e6a0, 24 [pid 2053] set_robust_list(0x55558909e6a0, 24 [pid 2052] set_robust_list(0x55558909e6a0, 24 [pid 2053] <... set_robust_list resumed>) = 0 [pid 2054] <... set_robust_list resumed>) = 0 [pid 2053] chdir("./67" [pid 2054] chdir("./69" [pid 2052] <... set_robust_list resumed>) = 0 [pid 2052] chdir("./69" [pid 2053] <... chdir resumed>) = 0 [pid 2054] <... chdir resumed>) = 0 [pid 2052] <... chdir resumed>) = 0 [pid 2052] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 2053] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 2052] <... prctl resumed>) = 0 [pid 2053] <... prctl resumed>) = 0 [pid 2052] setpgid(0, 0 [pid 2053] setpgid(0, 0 [pid 2052] <... setpgid resumed>) = 0 [pid 2053] <... setpgid resumed>) = 0 [pid 2053] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 2052] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 2053] <... openat resumed>) = 3 [pid 2052] <... openat resumed>) = 3 [pid 2054] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 2054] setpgid(0, 0 [pid 2051] <... ioctl resumed>) = 0 [pid 2050] close(3 [pid 2054] <... setpgid resumed>) = 0 [pid 2053] write(3, "1000", 4 [pid 2052] write(3, "1000", 4 [pid 2051] close(3 [pid 2050] <... close resumed>) = 0 [pid 2050] close(4) = 0 [pid 2052] <... write resumed>) = 4 [pid 2050] mkdir("./file1", 0777 [pid 2054] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 2053] <... write resumed>) = 4 [pid 2054] <... openat resumed>) = 3 [pid 2053] close(3 [pid 2052] close(3 [pid 2051] <... close resumed>) = 0 [pid 2050] <... mkdir resumed>) = 0 [pid 2050] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 2053] <... close resumed>) = 0 [pid 2052] <... close resumed>) = 0 [pid 2054] write(3, "1000", 4) = 4 [pid 2054] close(3) = 0 [pid 2054] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 2053] symlink("/dev/binderfs", "./binderfs" [pid 2052] symlink("/dev/binderfs", "./binderfs" [pid 2054] write(1, "executing program\n", 18) = 18 [pid 2054] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2054] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 2054] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 2054] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 2052] <... symlink resumed>) = 0 [pid 2054] <... mmap resumed>) = 0x7f13c8cc4000 [pid 2054] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITEexecuting program ) = 0 [pid 2054] rt_sigprocmask(SIG_BLOCK, ~[], [pid 2053] <... symlink resumed>) = 0 [pid 2054] <... rt_sigprocmask resumed>[], 8) = 0 [pid 2053] write(1, "executing program\n", 18 [pid 2054] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[2055]}, 88) = 2055 [pid 2054] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2054] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2054] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 2055 attached [pid 2055] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 2055] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2055] memfd_create("syzkaller", 0) = 3 [pid 2055] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 executing program [pid 2053] <... write resumed>) = 18 [pid 2052] write(1, "executing program\n", 18 [pid 2051] close(4 [pid 2053] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2052] <... write resumed>) = 18 [pid 2051] <... close resumed>) = 0 [pid 2053] <... futex resumed>) = 0 [pid 2052] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2051] mkdir("./file1", 0777 [pid 2053] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 2052] <... futex resumed>) = 0 [pid 2053] <... rt_sigaction resumed>NULL, 8) = 0 [pid 2052] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 2053] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 2052] <... rt_sigaction resumed>NULL, 8) = 0 [pid 2053] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 2052] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 2053] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 2052] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 2053] <... mmap resumed>) = 0x7f13c8cc4000 [pid 2052] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 2051] <... mkdir resumed>) = 0 [pid 2053] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE [pid 2052] <... mmap resumed>) = 0x7f13c8cc4000 [pid 2053] <... mprotect resumed>) = 0 [pid 2052] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2053] rt_sigprocmask(SIG_BLOCK, ~[], [pid 2052] rt_sigprocmask(SIG_BLOCK, ~[], [pid 2053] <... rt_sigprocmask resumed>[], 8) = 0 [pid 2052] <... rt_sigprocmask resumed>[], 8) = 0 [pid 2053] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 2051] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 2052] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 2053] <... clone3 resumed> => {parent_tid=[2058]}, 88) = 2058 [pid 2053] rt_sigprocmask(SIG_SETMASK, [], [pid 2052] <... clone3 resumed> => {parent_tid=[2059]}, 88) = 2059 [pid 2053] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 2052] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 2058 attached [pid 2053] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2052] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 2058] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 2058] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2058] memfd_create("syzkaller", 0) = 3 [pid 2058] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 2058] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 2053] <... futex resumed>) = 0 [pid 2052] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2058] munmap(0x7f13c08c4000, 138412032) = 0 [pid 2058] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 2058] ioctl(4, LOOP_SET_FD, 3 [pid 2053] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 2052] <... futex resumed>) = 0 [pid 2052] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 2059 attached [pid 2055] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 2050] <... mount resumed>) = 0 [pid 2059] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 2059] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2059] memfd_create("syzkaller", 0) = 3 [pid 2059] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 2059] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 2050] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 2050] chdir("./file1") = 0 [ 64.069098][ T2050] loop1: detected capacity change from 0 to 2048 [ 64.077851][ T2051] loop2: detected capacity change from 0 to 2048 [ 64.100358][ T2050] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 64.112830][ T2058] loop3: detected capacity change from 0 to 2048 [pid 2059] <... write resumed>) = 1048576 [pid 2058] <... ioctl resumed>) = 0 [pid 2055] <... write resumed>) = 1048576 [pid 2050] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 2055] munmap(0x7f13c08c4000, 138412032 [pid 2050] <... openat resumed>) = 4 [pid 2055] <... munmap resumed>) = 0 [pid 2050] ioctl(4, LOOP_CLR_FD [pid 2055] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 2050] <... ioctl resumed>) = 0 [pid 2055] <... openat resumed>) = 4 [pid 2050] close(4 [pid 2055] ioctl(4, LOOP_SET_FD, 3 [pid 2050] <... close resumed>) = 0 [pid 2050] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2050] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2048] <... futex resumed>) = 0 [pid 2048] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2058] close(3) = 0 [pid 2058] close(4) = 0 [pid 2058] mkdir("./file1", 0777 [pid 2048] <... futex resumed>) = 1 [pid 2050] <... futex resumed>) = 0 [pid 2048] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2050] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 2058] <... mkdir resumed>) = 0 [pid 2058] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 2050] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2048] <... futex resumed>) = 0 [pid 2048] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2050] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 2048] <... futex resumed>) = 0 [pid 2048] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2050] <... open resumed>) = 5 [pid 2051] <... mount resumed>) = 0 [pid 2050] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2051] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 2051] chdir("./file1") = 0 [pid 2050] <... futex resumed>) = 1 [pid 2048] <... futex resumed>) = 0 [pid 2050] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2048] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2050] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2048] <... futex resumed>) = 0 [pid 2050] creat("./bus", 000 [pid 2048] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2051] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 2050] <... creat resumed>) = 6 [pid 2050] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2048] <... futex resumed>) = 0 [pid 2050] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2048] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2050] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2048] <... futex resumed>) = 0 [pid 2050] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 2048] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2050] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 2050] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2048] <... futex resumed>) = 0 [pid 2050] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2048] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2050] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2048] <... futex resumed>) = 0 [pid 2050] pwrite64(6, "+", 1, 0 [pid 2048] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2051] <... openat resumed>) = 4 [pid 2050] <... pwrite64 resumed>) = 1 [pid 2051] ioctl(4, LOOP_CLR_FD [pid 2050] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2051] <... ioctl resumed>) = 0 [pid 2050] <... futex resumed>) = 1 [pid 2048] <... futex resumed>) = 0 [pid 2050] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2048] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2050] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2048] <... futex resumed>) = 0 [pid 2050] open("./bus", O_RDONLY [pid 2048] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2050] <... open resumed>) = 7 [pid 2051] close(4 [pid 2050] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2048] <... futex resumed>) = 0 [pid 2050] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2048] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2050] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2048] <... futex resumed>) = 0 [pid 2050] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 2048] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2051] <... close resumed>) = 0 [pid 2051] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2050] <... copy_file_range resumed>) = 1 [pid 2049] <... futex resumed>) = 0 [pid 2048] <... futex resumed>) = 0 [pid 2050] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2049] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2050] <... futex resumed>) = 0 [pid 2049] <... futex resumed>) = 0 [pid 2048] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 2050] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2049] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2048] <... mmap resumed>) = 0x7f13c8ca3000 [pid 2051] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 2048] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2048] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2048] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[2062]}, 88) = 2062 [pid 2048] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2048] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2048] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2051] <... open resumed>) = 4 [pid 2051] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2049] <... futex resumed>) = 0 [pid 2051] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 2049] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2049] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2051] <... open resumed>) = 5 [pid 2051] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2049] <... futex resumed>) = 0 [pid 2051] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2049] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2049] <... futex resumed>) = 0 [pid 2051] creat("./bus", 000 [pid 2049] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2051] <... creat resumed>) = 6 [pid 2051] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2049] <... futex resumed>) = 0 [pid 2049] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2051] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 2049] <... futex resumed>) = 0 [pid 2051] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 2049] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2051] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2049] <... futex resumed>) = 0 [pid 2051] pwrite64(6, "+", 1, 0 [pid 2049] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2051] <... pwrite64 resumed>) = 1 [pid 2049] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2051] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2049] <... futex resumed>) = 0 [pid 2051] open("./bus", O_RDONLY [pid 2049] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2051] <... open resumed>) = 7 [pid 2049] <... futex resumed>) = 0 [pid 2051] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2049] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 2049] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2049] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2051] <... futex resumed>) = 0 [pid 2049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 2051] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 2049] <... mmap resumed>) = 0x7f13c8ca3000 [pid 2055] <... ioctl resumed>) = 0 [pid 2051] <... copy_file_range resumed>) = 1 [pid 2049] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE [pid 2051] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2049] <... mprotect resumed>) = 0 [pid 2055] close(3 [pid 2051] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2049] rt_sigprocmask(SIG_BLOCK, ~[], [pid 2055] <... close resumed>) = 0 [pid 2049] <... rt_sigprocmask resumed>[], 8) = 0 [pid 2049] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} [pid 2055] close(4./strace-static-x86_64: Process 2062 attached [pid 2062] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 2049] <... clone3 resumed> => {parent_tid=[2063]}, 88) = 2063 [pid 2062] rt_sigprocmask(SIG_SETMASK, [], [pid 2055] <... close resumed>) = 0 [pid 2049] rt_sigprocmask(SIG_SETMASK, [], [pid 2062] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 2055] mkdir("./file1", 0777 [pid 2049] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 2062] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [ 64.124759][ T2051] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 64.127944][ T2055] loop4: detected capacity change from 0 to 2048 [ 64.155671][ T2050] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 2049] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000 [pid 2055] <... mkdir resumed>) = 0 [pid 2049] <... futex resumed>) = 0 [pid 2049] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2062] <... mmap resumed>) = 0x20000000 [pid 2062] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2048] <... futex resumed>) = 0 [pid 2062] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2048] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 2063 attached [pid 2050] <... futex resumed>) = 0 [pid 2048] <... futex resumed>) = 1 [pid 2048] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2050] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 2063] set_robust_list(0x7f13c8cc39a0, 24 [pid 2050] <... open resumed>) = -1 EFAULT (Bad address) [pid 2063] <... set_robust_list resumed>) = 0 [pid 2050] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2063] rt_sigprocmask(SIG_SETMASK, [], [pid 2050] <... futex resumed>) = 1 [pid 2048] <... futex resumed>) = 0 [pid 2050] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2048] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2050] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2048] <... futex resumed>) = 0 [pid 2063] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 2063] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 2059] munmap(0x7f13c08c4000, 138412032) = 0 [pid 2059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 2059] ioctl(4, LOOP_SET_FD, 3 [pid 2049] <... futex resumed>) = 0 [pid 2048] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2049] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2051] <... futex resumed>) = 0 [pid 2049] <... futex resumed>) = 1 [pid 2051] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000) = -1 EFAULT (Bad address) [pid 2051] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2051] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2049] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 2049] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2051] <... futex resumed>) = 0 [pid 2049] <... futex resumed>) = 1 [pid 2059] <... ioctl resumed>) = 0 [pid 2055] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 2049] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2059] close(3 [pid 2048] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 64.158178][ T2059] loop0: detected capacity change from 0 to 2048 [ 64.174096][ T2051] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 64.183960][ T2050] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 64.198107][ T2051] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 64.202792][ T2050] EXT4-fs (loop1): This should not happen!! Data will be lost [ 64.202792][ T2050] [pid 2059] <... close resumed>) = 0 [pid 2059] close(4) = 0 [pid 2059] mkdir("./file1", 0777) = 0 [pid 2059] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 2049] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 2058] <... mount resumed>) = 0 [pid 2058] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 2058] chdir("./file1") = 0 [pid 2058] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 2058] ioctl(4, LOOP_CLR_FD) = 0 [pid 2058] close(4) = 0 [pid 2050] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 2058] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2053] <... futex resumed>) = 0 [pid 2053] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2053] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2058] <... futex resumed>) = 1 [pid 2058] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 2058] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2053] <... futex resumed>) = 0 [pid 2053] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2053] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2058] <... futex resumed>) = 1 [pid 2058] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 2058] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2053] <... futex resumed>) = 0 [pid 2053] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2053] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2058] <... futex resumed>) = 1 [pid 2058] creat("./bus", 000) = 6 [pid 2058] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2053] <... futex resumed>) = 0 [pid 2053] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2053] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2058] <... futex resumed>) = 1 [pid 2058] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 2058] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2053] <... futex resumed>) = 0 [pid 2053] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 64.224830][ T2050] EXT4-fs (loop1): Total free blocks count 0 [ 64.230786][ T2050] EXT4-fs (loop1): Free/Dirty block details [ 64.236862][ T2050] EXT4-fs (loop1): free_blocks=2415919504 [ 64.242573][ T2050] EXT4-fs (loop1): dirty_blocks=32 [ 64.246602][ T2058] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 64.247503][ T2050] EXT4-fs (loop1): Block reservation details [ 64.261989][ T2050] EXT4-fs (loop1): i_reserved_data_blocks=2 [pid 2053] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2058] <... futex resumed>) = 1 [pid 2058] pwrite64(6, "+", 1, 0) = 1 [pid 2058] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2053] <... futex resumed>) = 0 [pid 2053] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2053] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2058] <... futex resumed>) = 1 [pid 2058] open("./bus", O_RDONLY) = 7 [pid 2058] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2053] <... futex resumed>) = 0 [pid 2053] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2053] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2053] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 2062] <... futex resumed>) = ? [pid 2053] <... mmap resumed>) = 0x7f13c8ca3000 [pid 2062] +++ killed by SIGBUS +++ [pid 2053] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2053] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2053] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[2070]}, 88) = 2070 [pid 2053] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2053] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2053] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2058] <... futex resumed>) = 1 [pid 2058] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 2058] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2058] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 2070 attached [pid 2070] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 2070] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2070] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 2053] <... futex resumed>) = 0 [pid 2053] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2053] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2058] <... futex resumed>) = 0 [pid 2058] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000) = -1 EFAULT (Bad address) [pid 2058] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2053] <... futex resumed>) = 0 [pid 2053] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2053] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2058] <... futex resumed>) = 1 [ 64.269975][ T2051] EXT4-fs (loop2): This should not happen!! Data will be lost [ 64.269975][ T2051] [ 64.279894][ T2051] EXT4-fs (loop2): Total free blocks count 0 [ 64.286736][ T2050] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 64.290345][ T2058] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 64.300928][ T2055] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [pid 2070] <... futex resumed>) = 1 [pid 2053] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 2070] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2059] <... mount resumed>) = 0 [pid 2055] <... mount resumed>) = 0 [pid 2050] +++ killed by SIGBUS +++ [pid 2048] +++ killed by SIGBUS +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=2048, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11} --- [pid 298] umount2("./68", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./68/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./68/binderfs" [pid 2059] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 2055] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 2059] <... openat resumed>) = 3 [pid 2055] <... openat resumed>) = 3 [ 64.322114][ T2059] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 64.323166][ T2058] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 64.330441][ T2051] EXT4-fs (loop2): Free/Dirty block details [ 64.343794][ T2058] EXT4-fs (loop3): This should not happen!! Data will be lost [ 64.343794][ T2058] [ 64.348633][ T2051] EXT4-fs (loop2): free_blocks=2415919504 [ 64.363454][ T2051] EXT4-fs (loop2): dirty_blocks=32 [ 64.363887][ T2058] EXT4-fs (loop3): Total free blocks count 0 [pid 2059] chdir("./file1" [pid 2055] chdir("./file1" [pid 298] <... unlink resumed>) = 0 [pid 2059] <... chdir resumed>) = 0 [pid 2055] <... chdir resumed>) = 0 [pid 2059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 2055] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 2059] <... openat resumed>) = 4 [pid 2055] <... openat resumed>) = 4 [pid 2059] ioctl(4, LOOP_CLR_FD [pid 2055] ioctl(4, LOOP_CLR_FD [pid 2059] <... ioctl resumed>) = 0 [pid 2055] <... ioctl resumed>) = 0 [pid 2059] close(4 [pid 2055] close(4 [pid 2059] <... close resumed>) = 0 [pid 2055] <... close resumed>) = 0 [pid 2059] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2055] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2059] <... futex resumed>) = 1 [pid 2055] <... futex resumed>) = 1 [pid 2054] <... futex resumed>) = 0 [pid 2052] <... futex resumed>) = 0 [pid 2059] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 2055] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 2054] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2052] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2059] <... open resumed>) = 4 [pid 2055] <... open resumed>) = 4 [pid 2054] <... futex resumed>) = 0 [pid 2052] <... futex resumed>) = 0 [pid 298] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 2059] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2055] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2054] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2052] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2059] <... futex resumed>) = 0 [pid 2055] <... futex resumed>) = 0 [pid 2054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2052] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2059] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 2055] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 2054] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2052] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2059] <... open resumed>) = 5 [pid 2055] <... open resumed>) = 5 [pid 2054] <... futex resumed>) = 0 [pid 2052] <... futex resumed>) = 0 [pid 2059] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2055] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2054] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2052] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2059] <... futex resumed>) = 0 [pid 2055] <... futex resumed>) = 0 [pid 2054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2052] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2054] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2052] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2054] <... futex resumed>) = 0 [pid 2052] <... futex resumed>) = 0 [pid 2054] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2052] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2059] creat("./bus", 000 [pid 2055] creat("./bus", 000 [pid 2059] <... creat resumed>) = 6 [pid 2055] <... creat resumed>) = 6 [pid 2059] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2055] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2059] <... futex resumed>) = 1 [pid 2055] <... futex resumed>) = 1 [pid 2054] <... futex resumed>) = 0 [pid 2052] <... futex resumed>) = 0 [pid 2059] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2055] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2054] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2052] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2059] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2055] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2054] <... futex resumed>) = 0 [pid 2052] <... futex resumed>) = 0 [pid 2059] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 2055] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 2054] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2052] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2059] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 2055] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 2059] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2055] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2059] <... futex resumed>) = 1 [pid 2055] <... futex resumed>) = 1 [pid 2054] <... futex resumed>) = 0 [pid 2052] <... futex resumed>) = 0 [pid 2059] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2055] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2054] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2052] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2059] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2055] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2054] <... futex resumed>) = 0 [pid 2052] <... futex resumed>) = 0 [pid 2058] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 2051] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 2059] pwrite64(6, "+", 1, 0 [pid 2055] pwrite64(6, "+", 1, 0 [pid 2054] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2052] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2070] <... futex resumed>) = ? [pid 2059] <... pwrite64 resumed>) = 1 [pid 2055] <... pwrite64 resumed>) = 1 [pid 2070] +++ killed by SIGBUS +++ [pid 2058] +++ killed by SIGBUS +++ [pid 2051] +++ killed by SIGBUS +++ [pid 2059] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2059] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2055] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2055] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [ 64.368692][ T2051] EXT4-fs (loop2): Block reservation details [ 64.375375][ T2058] EXT4-fs (loop3): Free/Dirty block details [ 64.380177][ T2051] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 64.386379][ T2058] EXT4-fs (loop3): free_blocks=2415919504 [ 64.399171][ T2058] EXT4-fs (loop3): dirty_blocks=32 [ 64.404292][ T2058] EXT4-fs (loop3): Block reservation details [ 64.410490][ T2058] EXT4-fs (loop3): i_reserved_data_blocks=2 [pid 2063] <... futex resumed>) = ? [pid 2054] <... futex resumed>) = 0 [pid 2052] <... futex resumed>) = 0 [pid 2054] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2052] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2059] <... futex resumed>) = 0 [pid 2054] <... futex resumed>) = 1 [pid 2052] <... futex resumed>) = 1 [pid 2059] open("./bus", O_RDONLY [pid 2054] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2052] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2059] <... open resumed>) = 7 [pid 2059] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2052] <... futex resumed>) = 0 [pid 2059] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2052] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2059] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2052] <... futex resumed>) = 0 [pid 2059] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 2052] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2059] <... copy_file_range resumed>) = 1 [pid 2052] <... futex resumed>) = 0 [pid 2059] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2052] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 2059] <... futex resumed>) = 0 [pid 2052] <... mmap resumed>) = 0x7f13c8ca3000 [pid 2059] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2052] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2052] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2052] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[2072]}, 88) = 2072 [pid 2052] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2052] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2052] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 2072 attached [pid 2072] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 2072] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2072] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 2052] <... futex resumed>) = 0 [pid 2052] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2059] <... futex resumed>) = 0 [pid 2052] <... futex resumed>) = 1 [pid 2059] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 2052] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2059] <... open resumed>) = -1 EFAULT (Bad address) [pid 2059] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2052] <... futex resumed>) = 0 [pid 2059] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2052] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2059] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2052] <... futex resumed>) = 0 [pid 2055] <... futex resumed>) = 0 [pid 2052] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2055] open("./bus", O_RDONLY) = 7 [pid 2063] +++ killed by SIGBUS +++ [pid 2055] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2049] +++ killed by SIGBUS +++ [pid 2053] +++ killed by SIGBUS +++ [pid 298] <... umount2 resumed>) = 0 [pid 2072] <... futex resumed>) = 1 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=2053, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11} --- [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=2049, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 300] restart_syscall(<... resuming interrupted clone ...> [ 64.420691][ T2053] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 64.423702][ T2063] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 64.439092][ T2059] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 2072] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2055] <... futex resumed>) = 1 [pid 2054] <... futex resumed>) = 0 [pid 298] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 2054] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2054] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2054] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 2054] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2054] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2054] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[2073]}, 88) = 2073 [pid 2054] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2054] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2054] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 2073 attached [pid 2073] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 2073] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2073] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 2054] <... futex resumed>) = 0 [pid 2054] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2054] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2073] <... futex resumed>) = 1 [pid 2073] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000) = -1 EFAULT (Bad address) [pid 2073] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2054] <... futex resumed>) = 0 [pid 2054] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2054] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2073] <... futex resumed>) = 1 [pid 300] <... restart_syscall resumed>) = 0 [pid 299] <... restart_syscall resumed>) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] umount2("./67", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] umount2("./69", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 299] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 300] <... openat resumed>) = 3 [pid 299] <... openat resumed>) = 3 [pid 300] newfstatat(3, "", [pid 299] newfstatat(3, "", [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, [pid 299] getdents64(3, [pid 300] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] <... getdents64 resumed>0x55558909f730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./67/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] umount2("./69/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./67/binderfs", [pid 299] newfstatat(AT_FDCWD, "./69/binderfs", [pid 300] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./67/binderfs" [pid 299] unlink("./69/binderfs" [pid 300] <... unlink resumed>) = 0 [pid 299] <... unlink resumed>) = 0 [pid 300] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 2073] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 298] newfstatat(AT_FDCWD, "./68/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./68/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./68/file1") = 0 [pid 298] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./68") = 0 [pid 298] mkdir("./69", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3 [pid 2054] <... futex resumed>) = ? [pid 2073] +++ killed by SIGBUS +++ [pid 2055] +++ killed by SIGBUS +++ [pid 2052] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 298] <... close resumed>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 2074 [ 64.468410][ T2059] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 64.471449][ T2073] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 64.482310][ T2059] EXT4-fs (loop0): This should not happen!! Data will be lost [ 64.482310][ T2059] [ 64.504633][ T2059] EXT4-fs (loop0): Total free blocks count 0 [ 64.510549][ T2059] EXT4-fs (loop0): Free/Dirty block details [ 64.517130][ T2054] ------------[ cut here ]------------ [pid 300] <... umount2 resumed>) = 0 [pid 300] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./67/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./67/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./67/file1") = 0 [pid 300] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./67") = 0 [pid 300] mkdir("./68", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 2075 [ 64.519014][ T2059] EXT4-fs (loop0): free_blocks=2415919504 [ 64.522443][ T2054] kernel BUG at fs/ext4/inode.c:2760! [ 64.522666][ T2054] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 64.539079][ T2054] CPU: 1 PID: 2054 Comm: syz-executor421 Not tainted 6.1.118-syzkaller-00075-g4c2d86d81fa6 #0 [ 64.549151][ T2054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 64.554440][ T2059] EXT4-fs (loop0): dirty_blocks=32 [ 64.559033][ T2054] RIP: 0010:ext4_writepages+0x3fab/0x3fd0 [ 64.566985][ T2059] EXT4-fs (loop0): Block reservation details [pid 2059] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- ./strace-static-x86_64: Process 2074 attached [pid 2074] set_robust_list(0x55558909e6a0, 24) = 0 [pid 2074] chdir("./69") = 0 [pid 2074] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 2074] setpgid(0, 0) = 0 [pid 2074] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 2074] write(3, "1000", 4) = 4 [pid 2074] close(3) = 0 [pid 2074] symlink("/dev/binderfs", "./binderfs") = 0 [pid 2074] write(1, "executing program\n", 18executing program ) = 18 [pid 2074] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2074] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 2074] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 2074] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 2074] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2074] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2074] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0}./strace-static-x86_64: Process 2076 attached ./strace-static-x86_64: Process 2075 attached [pid 2072] <... futex resumed>) = ? [pid 299] <... umount2 resumed>) = 0 [ 64.569539][ T2054] Code: 14 80 ff 31 ff 89 de e8 03 14 80 ff 45 84 f6 75 2a e8 69 11 80 ff 49 bc 00 00 00 00 00 fc ff df e9 6e f6 ff ff e8 55 11 80 ff <0f> 0b e8 4e 11 80 ff e8 55 12 0b ff e9 46 c3 ff ff e8 3f 11 80 ff [ 64.576228][ T2059] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 64.594797][ T2054] RSP: 0000:ffffc90003917040 EFLAGS: 00010293 [ 64.594828][ T2054] RAX: ffffffff81f5755b RBX: 0000008000000000 RCX: ffff8881105f5100 [ 64.594845][ T2054] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [pid 2074] <... clone3 resumed> => {parent_tid=[2076]}, 88) = 2076 [pid 2072] +++ killed by SIGBUS +++ [pid 2074] rt_sigprocmask(SIG_SETMASK, [], [pid 299] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 2074] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 2074] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] newfstatat(AT_FDCWD, "./69/file1", [pid 2074] <... futex resumed>) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 2074] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 299] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./69/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./69/file1") = 0 [pid 299] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./69") = 0 [pid 299] mkdir("./70", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 2077 [pid 2076] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 2076] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2076] memfd_create("syzkaller", 0) = 3 [pid 2076] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 2076] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 2075] set_robust_list(0x55558909e6a0, 24) = 0 [pid 2075] chdir("./68") = 0 [pid 2075] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 2075] setpgid(0, 0) = 0 [pid 2075] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 2075] write(3, "1000", 4) = 4 [pid 2075] close(3) = 0 [pid 2075] symlink("/dev/binderfs", "./binderfs") = 0 [pid 2075] write(1, "executing program\n", 18executing program ) = 18 [pid 2075] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2075] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 2075] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 2075] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 2075] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2075] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2075] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[2078]}, 88) = 2078 [pid 2075] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2075] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2075] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 2076] <... write resumed>) = 1048576 [pid 2076] munmap(0x7f13c08c4000, 138412032) = 0 [pid 2076] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 64.594859][ T2054] RBP: ffffc90003917450 R08: ffffffff81f53cbb R09: ffffed10249de179 [ 64.594874][ T2054] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888110258000 [ 64.623395][ T2059] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 64.629857][ T2054] R13: ffff888124ef0d00 R14: 000000d410000000 R15: ffffc90003917320 [ 64.657547][ T2054] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 64.666324][ T2054] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [pid 2076] ioctl(4, LOOP_SET_FD, 3 [pid 2059] +++ killed by SIGBUS +++ [pid 2052] +++ killed by SIGBUS +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=2052, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 297] restart_syscall(<... resuming interrupted clone ...> [pid 2076] <... ioctl resumed>) = 0 [pid 2076] close(3) = 0 [pid 2076] close(4 [pid 297] <... restart_syscall resumed>) = 0 [pid 297] umount2("./69", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./69/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./69/binderfs") = 0 [pid 297] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 2076] <... close resumed>) = 0 [pid 2076] mkdir("./file1", 0777) = 0 [pid 2076] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue"./strace-static-x86_64: Process 2077 attached [pid 2077] set_robust_list(0x55558909e6a0, 24) = 0 [pid 2077] chdir("./70") = 0 [pid 2077] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 2077] setpgid(0, 0) = 0 [pid 2077] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 2077] write(3, "1000", 4) = 4 [pid 2077] close(3) = 0 [pid 2077] symlink("/dev/binderfs", "./binderfs") = 0 [pid 2077] write(1, "executing program\n", 18executing program ) = 18 [pid 2077] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2077] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 2077] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 2077] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 2077] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2077] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2077] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[2079]}, 88) = 2079 [pid 2077] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2077] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2077] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 2079 attached [pid 2079] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 2079] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2079] memfd_create("syzkaller", 0) = 3 [pid 2079] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [ 64.672740][ T2054] CR2: 00000000200000c0 CR3: 000000000700f000 CR4: 00000000003506a0 [ 64.675552][ T2076] loop1: detected capacity change from 0 to 2048 [ 64.680545][ T2054] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.694525][ T2054] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.702338][ T2054] Call Trace: [ 64.705459][ T2054] [ 64.708233][ T2054] ? __die_body+0x62/0xb0 [ 64.712404][ T2054] ? die+0x88/0xb0 [ 64.715960][ T2054] ? do_trap+0x103/0x330 [ 64.720041][ T2054] ? ext4_writepages+0x3fab/0x3fd0 [pid 2079] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 2079] munmap(0x7f13c08c4000, 138412032) = 0 [pid 2079] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 2079] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 2079] close(3) = 0 [pid 2079] close(4) = 0 [pid 2079] mkdir("./file1", 0777) = 0 [pid 2079] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue"./strace-static-x86_64: Process 2078 attached [pid 2078] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 2078] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2078] memfd_create("syzkaller", 0) = 3 [pid 2078] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [ 64.724991][ T2054] ? handle_invalid_op+0x95/0xc0 [ 64.729760][ T2054] ? ext4_writepages+0x3fab/0x3fd0 [ 64.734719][ T2054] ? exc_invalid_op+0x32/0x50 [ 64.736451][ T2079] loop2: detected capacity change from 0 to 2048 [ 64.739218][ T2054] ? asm_exc_invalid_op+0x1b/0x20 [ 64.750250][ T2054] ? ext4_writepages+0x70b/0x3fd0 [ 64.755108][ T2054] ? ext4_writepages+0x3fab/0x3fd0 [ 64.760053][ T2054] ? ext4_writepages+0x3fab/0x3fd0 [ 64.765022][ T2054] ? is_bpf_text_address+0x172/0x190 [ 64.770124][ T2054] ? stack_trace_save+0x1c0/0x1c0 [pid 2078] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 2078] munmap(0x7f13c08c4000, 138412032) = 0 [pid 2078] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 2078] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 2078] close(3) = 0 [pid 2078] close(4) = 0 [pid 2078] mkdir("./file1", 0777) = 0 [pid 2078] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 2076] <... mount resumed>) = 0 [ 64.774988][ T2054] ? ext4_read_folio+0x240/0x240 [ 64.779766][ T2054] ? is_bpf_text_address+0x172/0x190 [ 64.780647][ T2078] loop3: detected capacity change from 0 to 2048 [ 64.784873][ T2054] ? ext4_read_folio+0x240/0x240 [ 64.784907][ T2054] do_writepages+0x385/0x620 [ 64.784937][ T2054] ? __writepage+0x130/0x130 [ 64.804851][ T2054] ? arch_stack_walk+0xf3/0x140 [ 64.809540][ T2054] ? _raw_spin_unlock+0x4c/0x70 [ 64.814228][ T2054] filemap_fdatawrite_wbc+0x153/0x1b0 [ 64.814912][ T2076] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [pid 2076] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 2076] chdir("./file1") = 0 [pid 2076] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 2076] ioctl(4, LOOP_CLR_FD) = 0 [pid 2076] close(4) = 0 [pid 2076] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2074] <... futex resumed>) = 0 [pid 2074] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2074] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2076] <... futex resumed>) = 1 [pid 2076] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 2076] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2074] <... futex resumed>) = 0 [pid 2074] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2074] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2076] <... futex resumed>) = 1 [pid 2076] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 2076] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2074] <... futex resumed>) = 0 [pid 2074] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2074] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2076] <... futex resumed>) = 1 [pid 2076] creat("./bus", 000) = 6 [pid 2076] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2074] <... futex resumed>) = 0 [pid 2074] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2074] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2076] <... futex resumed>) = 1 [pid 2076] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 2076] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2074] <... futex resumed>) = 0 [pid 2074] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2074] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2076] <... futex resumed>) = 1 [pid 2076] pwrite64(6, "+", 1, 0) = 1 [pid 2076] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2074] <... futex resumed>) = 0 [pid 2074] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2074] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2076] <... futex resumed>) = 1 [pid 2076] open("./bus", O_RDONLY) = 7 [pid 2076] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2074] <... futex resumed>) = 0 [pid 2074] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2074] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2074] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 2074] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2074] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2074] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[2085]}, 88) = 2085 [pid 2074] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2074] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2074] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2076] <... futex resumed>) = 1 [pid 2076] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 2076] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2076] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2079] <... mount resumed>) = 0 [pid 2079] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 2079] chdir("./file1") = 0 [pid 2079] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 2079] ioctl(4, LOOP_CLR_FD) = 0 [ 64.819432][ T2054] filemap_flush+0x11a/0x170 [ 64.832104][ T2054] ? locks_remove_posix+0x610/0x610 [ 64.837486][ T2054] ? filemap_fdatawrite_range+0x1e0/0x1e0 [ 64.843043][ T2054] ? do_group_exit+0x21a/0x2d0 [ 64.847648][ T2054] ext4_alloc_da_blocks+0x77/0x1a0 [ 64.852593][ T2054] ext4_release_file+0x84/0x310 [ 64.857276][ T2054] ? ext4_file_open+0x750/0x750 [ 64.861965][ T2054] __fput+0x1e5/0x870 [ 64.862705][ T2079] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 64.865782][ T2054] ____fput+0x15/0x20 [pid 2079] close(4) = 0 [pid 2079] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2077] <... futex resumed>) = 0 [pid 2077] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2077] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2079] <... futex resumed>) = 1 [pid 2079] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 2079] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2077] <... futex resumed>) = 0 [pid 2077] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2077] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2079] <... futex resumed>) = 1 [pid 2079] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 2079] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2077] <... futex resumed>) = 0 [pid 2077] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2077] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2079] <... futex resumed>) = 1 [pid 2079] creat("./bus", 000) = 6 [pid 2079] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2077] <... futex resumed>) = 0 [pid 2077] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2077] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2079] <... futex resumed>) = 1 [pid 2079] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 2079] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2077] <... futex resumed>) = 0 [pid 2077] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2077] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2079] <... futex resumed>) = 1 [pid 2079] pwrite64(6, "+", 1, 0) = 1 [pid 2079] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2077] <... futex resumed>) = 0 [pid 2077] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2077] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2079] <... futex resumed>) = 1 [pid 2079] open("./bus", O_RDONLY) = 7 [pid 2079] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2077] <... futex resumed>) = 0 [pid 2077] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2077] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2077] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 2077] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2077] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2077] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[2086]}, 88) = 2086 [pid 2077] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2077] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2077] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2079] <... futex resumed>) = 1 [pid 2079] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 2079] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2079] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 2085 attached [pid 2085] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 2085] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2085] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 2074] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 64.877848][ T2054] task_work_run+0x24d/0x2e0 [ 64.882271][ T2054] ? task_work_cancel+0x2e0/0x2e0 [ 64.887129][ T2054] ? exit_fs+0x121/0x150 [ 64.891227][ T2054] ? __kasan_check_write+0x14/0x20 [ 64.896160][ T2054] ? exit_task_namespaces+0xc2/0xd0 [ 64.901194][ T2054] do_exit+0xbd5/0x2b80 [ 64.905187][ T2054] ? timerqueue_del+0xb4/0x100 [ 64.909787][ T2054] ? put_task_struct+0x80/0x80 [ 64.910946][ T2076] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, [ 64.914381][ T2054] ? remove_hrtimer+0x134/0x290 [pid 2074] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 2074] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 2074] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2076] <... futex resumed>) = 0 [pid 2074] <... futex resumed>) = 1 [pid 2076] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 2074] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2076] <... open resumed>) = -1 EFAULT (Bad address) [pid 2076] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2074] <... futex resumed>) = 0 [pid 2076] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2074] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2074] <... futex resumed>) = 0 [pid 2074] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2077] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 2077] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2079] <... futex resumed>) = 0 [pid 2077] <... futex resumed>) = 1 [pid 2079] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 2077] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2079] <... open resumed>) = -1 EFAULT (Bad address) [pid 2079] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2077] <... futex resumed>) = 0 [pid 2079] write(-1, "\x30\x78\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65983 [pid 2077] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2079] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 2077] <... futex resumed>) = 0 [pid 2079] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2077] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2079] <... futex resumed>) = 0 [pid 2077] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 64.914417][ T2054] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 64.922465][ T2076] block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 64.927139][ T2054] ? hrtimer_try_to_cancel+0x302/0x320 [ 64.934908][ T2076] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 64.941289][ T2054] ? __kasan_check_write+0x14/0x20 [ 64.947147][ T2076] EXT4-fs (loop1): This should not happen!! Data will be lost [ 64.947147][ T2076] [ 64.958564][ T2054] ? _raw_spin_lock_irq+0xa5/0x1b0 [pid 2079] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2074] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 2085] <... mmap resumed>) = 0x20000000 [ 64.958599][ T2054] do_group_exit+0x21a/0x2d0 [ 64.958623][ T2054] ? __kasan_check_write+0x14/0x20 [ 64.967389][ T2076] EXT4-fs (loop1): Total free blocks count 0 [ 64.972967][ T2054] get_signal+0x169d/0x1820 [ 64.973005][ T2054] ? ptrace_notify+0x350/0x350 [ 64.973030][ T2054] arch_do_signal_or_restart+0xb0/0x16f0 [ 64.973061][ T2054] ? do_futex+0x55a/0x9a0 [ 64.978871][ T2076] EXT4-fs (loop1): Free/Dirty block details [ 64.982343][ T2054] ? from_kuid_munged+0x1e9/0x7b0 [ 64.982371][ T2054] ? __kasan_check_write+0x14/0x20 [pid 2085] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2085] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2076] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 2085] <... futex resumed>) = ? [pid 2085] +++ killed by SIGBUS +++ [pid 2076] +++ killed by SIGBUS +++ [pid 2074] +++ killed by SIGBUS +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=2074, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 2086 attached [pid 2086] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 2086] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2086] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 2077] exit_group(0 [pid 2079] <... futex resumed>) = ? [pid 2077] <... exit_group resumed>) = ? [pid 2079] +++ exited with 0 +++ [pid 2086] <... futex resumed>) = ? [pid 298] <... restart_syscall resumed>) = 0 [ 64.982392][ T2054] ? ptrace_stop+0x218/0x930 [ 64.988144][ T2076] EXT4-fs (loop1): free_blocks=2415919504 [ 64.993112][ T2054] ? get_sigframe_size+0x10/0x10 [ 64.993153][ T2054] exit_to_user_mode_loop+0x74/0xa0 [ 64.993179][ T2054] exit_to_user_mode_prepare+0x5a/0xa0 [ 64.993204][ T2054] syscall_exit_to_user_mode+0x26/0x130 [ 64.993233][ T2054] do_syscall_64+0x47/0xb0 [ 64.998516][ T2076] EXT4-fs (loop1): dirty_blocks=32 [ 65.002042][ T2054] ? clear_bhb_loop+0x55/0xb0 [ 65.007877][ T2076] EXT4-fs (loop1): Block reservation details [pid 298] umount2("./69", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./69/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./69/binderfs") = 0 [pid 298] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 2078] <... mount resumed>) = 0 [pid 2078] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 2078] chdir("./file1") = 0 [pid 2078] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 2078] ioctl(4, LOOP_CLR_FD) = 0 [pid 2078] close(4) = 0 [pid 2078] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2075] <... futex resumed>) = 0 [pid 2075] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2075] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2078] <... futex resumed>) = 1 [ 65.011679][ T2054] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.011713][ T2054] RIP: 0033:0x7f13c8d27d89 [ 65.018215][ T2076] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 65.022699][ T2054] Code: Unable to access opcode bytes at 0x7f13c8d27d5f. [ 65.022713][ T2054] RSP: 002b:00007ffe1b110d18 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 65.022736][ T2054] RAX: fffffffffffffdfc RBX: 000000000000fbc0 RCX: 00007f13c8d27d89 [ 65.032649][ T2076] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 2078] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 2078] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2075] <... futex resumed>) = 0 [pid 2075] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2075] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2078] <... futex resumed>) = 1 [pid 2078] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 2078] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2075] <... futex resumed>) = 0 [pid 2075] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2075] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... umount2 resumed>) = 0 [pid 297] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./69/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./69/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./69/file1") = 0 [pid 297] getdents64(3, 0x55558909f730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./69") = 0 [pid 297] mkdir("./70", 0777) = 0 [pid 2078] <... futex resumed>) = 1 [pid 2078] creat("./bus", 000) = 6 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 2078] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2075] <... futex resumed>) = 0 [pid 2075] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2075] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] ioctl(3, LOOP_CLR_FD [pid 2078] <... futex resumed>) = 1 [pid 2078] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 2078] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 297] close(3 [pid 2078] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... close resumed>) = 0 [pid 2078] <... futex resumed>) = 1 [pid 2075] <... futex resumed>) = 0 [pid 2075] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2075] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2078] pwrite64(6, "+", 1, 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 2078] <... pwrite64 resumed>) = 1 [pid 2078] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2075] <... futex resumed>) = 0 [pid 2075] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2075] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2078] open("./bus", O_RDONLY) = 7 [pid 298] <... umount2 resumed>) = 0 [pid 2078] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2075] <... futex resumed>) = 0 [pid 2075] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2075] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2075] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 2075] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2075] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2075] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[2089]}, 88) = 2089 [pid 2075] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2075] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2075] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2078] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 2078] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2078] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 297] <... clone resumed>, child_tidptr=0x55558909e690) = 2088 ./strace-static-x86_64: Process 2088 attached [pid 2088] set_robust_list(0x55558909e6a0, 24) = 0 [pid 2088] chdir("./70"./strace-static-x86_64: Process 2089 attached [pid 2089] set_robust_list(0x7f13c8cc39a0, 24) = 0 [pid 2089] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2088] <... chdir resumed>) = 0 [ 65.037633][ T2054] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f13c8db071c [ 65.037653][ T2054] RBP: 000000000000fbf2 R08: 00007ffe1b1600b0 R09: 0000000000000000 [ 65.050354][ T2086] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, [ 65.052735][ T2054] R10: 00007ffe1b110d50 R11: 0000000000000246 R12: 00007ffe1b110d50 [ 65.052753][ T2054] R13: 00007f13c8db071c R14: 0000000000000032 R15: 00007f13c8cefb30 [ 65.052772][ T2054] [ 65.052780][ T2054] Modules linked in: [pid 2089] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 2088] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 2088] setpgid(0, 0) = 0 [pid 2088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 2088] write(3, "1000", 4) = 4 [pid 2088] close(3) = 0 [pid 2088] symlink("/dev/binderfs", "./binderfs") = 0 [pid 2089] <... mmap resumed>) = 0x20000000 [pid 2088] write(1, "executing program\n", 18executing program ) = 18 [pid 2088] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2088] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, [pid 298] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./69/file1", [pid 2088] <... rt_sigaction resumed>NULL, 8) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 2088] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 2088] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 298] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 2088] <... mmap resumed>) = 0x7f13c8cc4000 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./69/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 2088] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 2088] rt_sigprocmask(SIG_BLOCK, ~[], [pid 298] getdents64(4, [pid 2088] <... rt_sigprocmask resumed>[], 8) = 0 [pid 298] <... getdents64 resumed>0x5555890a7770 /* 2 entries */, 32768) = 48 [pid 2088] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} [pid 298] getdents64(4, [pid 2088] <... clone3 resumed> => {parent_tid=[2090]}, 88) = 2090 [pid 298] <... getdents64 resumed>0x5555890a7770 /* 0 entries */, 32768) = 0 [pid 2088] rt_sigprocmask(SIG_SETMASK, [], [pid 298] close(4 [pid 2088] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 298] <... close resumed>) = 0 [pid 2089] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2088] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] rmdir("./69/file1" [pid 2089] <... futex resumed>) = 1 [pid 2088] <... futex resumed>) = 0 [pid 2075] <... futex resumed>) = 0 [pid 298] <... rmdir resumed>) = 0 [pid 2075] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2078] <... futex resumed>) = 0 [pid 2075] <... futex resumed>) = 1 [pid 2078] open(NULL, O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000 [pid 2075] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2078] <... open resumed>) = -1 EFAULT (Bad address) [ 65.062416][ T2054] ---[ end trace 0000000000000000 ]--- [ 65.062431][ T2054] RIP: 0010:ext4_writepages+0x3fab/0x3fd0 [ 65.062469][ T2054] Code: 14 80 ff 31 ff 89 de e8 03 14 80 ff 45 84 f6 75 2a e8 69 11 80 ff 49 bc 00 00 00 00 00 fc ff df e9 6e f6 ff ff e8 55 11 80 ff <0f> 0b e8 4e 11 80 ff e8 55 12 0b ff e9 46 c3 ff ff e8 3f 11 80 ff [ 65.067313][ T2086] block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 65.071829][ T2054] RSP: 0000:ffffc90003917040 EFLAGS: 00010293 [pid 2078] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2089] futex(0x7f13c8db0718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2088] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 2078] <... futex resumed>) = 1 [pid 2075] <... futex resumed>) = 0 [pid 298] getdents64(3, [pid 2078] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2075] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000 [pid 2078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2075] <... futex resumed>) = 0 [pid 2075] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... getdents64 resumed>0x55558909f730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./69") = 0 [pid 298] mkdir("./70", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558909e690) = 2091 ./strace-static-x86_64: Process 2091 attached [pid 2091] set_robust_list(0x55558909e6a0, 24) = 0 [pid 2091] chdir("./70") = 0 [pid 2091] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 2091] setpgid(0, 0) = 0 [pid 2091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 2091] write(3, "1000", 4) = 4 [pid 2091] close(3) = 0 [pid 2091] symlink("/dev/binderfs", "./binderfs") = 0 [pid 2091] write(1, "executing program\n", 18executing program ) = 18 [pid 2091] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2091] rt_sigaction(SIGRT_1, {sa_handler=0x7f13c8d4e1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13c8d3f350}, NULL, 8) = 0 [pid 2091] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 2091] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8cc4000 [pid 2091] mprotect(0x7f13c8cc5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2091] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2091] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8ce4990, parent_tid=0x7f13c8ce4990, exit_signal=0, stack=0x7f13c8cc4000, stack_size=0x20300, tls=0x7f13c8ce46c0} => {parent_tid=[2092]}, 88) = 2092 [pid 2091] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2091] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2091] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 2092 attached [pid 2092] set_robust_list(0x7f13c8ce49a0, 24) = 0 [pid 2092] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2092] memfd_create("syzkaller", 0) = 3 [pid 2092] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 2092] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 2092] munmap(0x7f13c08c4000, 138412032) = 0 [pid 2092] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 2092] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 2090 attached ) = 0 [pid 2092] close(3) = 0 [pid 2092] close(4) = 0 [pid 2092] mkdir("./file1", 0777) = 0 [ 65.083177][ T2086] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 65.084017][ T2054] [ 65.089043][ T2078] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 65.093492][ T2054] RAX: ffffffff81f5755b RBX: 0000008000000000 RCX: ffff8881105f5100 [ 65.162834][ T2086] EXT4-fs (loop2): This should not happen!! Data will be lost [ 65.162834][ T2086] [ 65.167809][ T2054] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 65.193888][ T2078] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, [pid 2092] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 2090] set_robust_list(0x7f13c8ce49a0, 24 [pid 2075] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 2090] <... set_robust_list resumed>) = 0 [ 65.204835][ T2054] RBP: ffffc90003917450 R08: ffffffff81f53cbb R09: ffffed10249de179 [ 65.213370][ T2078] block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 65.221331][ T2086] EXT4-fs (loop2): Total free blocks count 0 [ 65.265525][ T2092] loop1: detected capacity change from 0 to 2048 [ 65.272249][ T2054] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888110258000 [ 65.281238][ T2086] EXT4-fs (loop2): Free/Dirty block details [ 65.283852][ T2054] R13: ffff888124ef0d00 R14: 000000d410000000 R15: ffffc90003917320 [ 65.293299][ T2086] EXT4-fs (loop2): free_blocks=2415919504 [pid 2090] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2090] memfd_create("syzkaller", 0) = 3 [pid 2090] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13c08c4000 [pid 2090] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 2092] <... mount resumed>) = 0 [ 65.301519][ T2054] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 65.304891][ T2086] EXT4-fs (loop2): dirty_blocks=32 [ 65.311960][ T2092] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 65.317978][ T2086] EXT4-fs (loop2): Block reservation details [ 65.332783][ T2054] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.339933][ T2086] EXT4-fs (loop2): i_reserved_data_blocks=2 [pid 2086] +++ exited with 0 +++ [pid 2077] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2077, si_uid=0, si_status=0, si_utime=0, si_stime=19} --- [pid 299] umount2("./70", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558909f730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./70/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./70/binderfs") = 0 [pid 299] umount2("./70/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 2092] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 2092] chdir("./file1") = 0 [pid 2092] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 2092] ioctl(4, LOOP_CLR_FD) = 0 [pid 2092] close(4) = 0 [pid 2092] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2091] <... futex resumed>) = 0 [pid 2091] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2091] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2092] <... futex resumed>) = 1 [pid 2092] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 2092] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2091] <... futex resumed>) = 0 [pid 2091] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2091] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2092] <... futex resumed>) = 1 [pid 2092] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 2092] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2091] <... futex resumed>) = 0 [pid 2091] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2091] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2092] <... futex resumed>) = 1 [pid 2092] creat("./bus", 000) = 6 [pid 2092] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2091] <... futex resumed>) = 0 [pid 2091] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2091] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2092] <... futex resumed>) = 1 [pid 2092] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 2092] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2091] <... futex resumed>) = 0 [pid 2091] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2091] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2092] <... futex resumed>) = 1 [pid 2092] pwrite64(6, "+", 1, 0) = 1 [pid 2092] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2091] <... futex resumed>) = 0 [pid 2091] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2091] futex(0x7f13c8db070c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2092] <... futex resumed>) = 1 [pid 2092] open("./bus", O_RDONLY) = 7 [pid 2092] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000 [pid 2091] <... futex resumed>) = 0 [pid 2091] futex(0x7f13c8db0708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2091] futex(0x7f13c8db071c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2091] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13c8ca3000 [pid 2091] mprotect(0x7f13c8ca4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2091] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2091] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f13c8cc3990, parent_tid=0x7f13c8cc3990, exit_signal=0, stack=0x7f13c8ca3000, stack_size=0x20300, tls=0x7f13c8cc36c0} => {parent_tid=[2096]}, 88) = 2096 [pid 2091] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2091] futex(0x7f13c8db0718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2091] futex(0x7f13c8db071c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2092] <... futex resumed>) = 1 [pid 2092] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 2092] futex(0x7f13c8db070c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2092] futex(0x7f13c8db0708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2090] <... write resumed>) = 1048576 [pid 2090] munmap(0x7f13c08c4000, 138412032) = 0 [pid 2090] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 65.359932][ T2078] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 65.364911][ T2054] CR2: 000055b213051068 CR3: 0000000111923000 CR4: 00000000003506a0 [ 65.390480][ T2054] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.390661][ T43] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 65.398380][ T2054] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.416561][ T2090] loop0: detected capacity change from 0 to 2048 [ 65.418677][ T2054] Kernel panic - not syncing: Fatal exception [ 65.424600][ T2054] Kernel Offset: disabled [ 65.434639][ T2054] Rebooting in 86400 seconds..