./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3266670230 <...> Warning: Permanently added '10.128.1.163' (ECDSA) to the list of known hosts. execve("./syz-executor3266670230", ["./syz-executor3266670230"], 0x7fff5eaa1020 /* 10 vars */) = 0 brk(NULL) = 0x555557117000 brk(0x555557117c40) = 0x555557117c40 arch_prctl(ARCH_SET_FS, 0x555557117300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x5555571175d0) = 371 set_robust_list(0x5555571175e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7fca3126a580, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7fca3126ac50}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7fca3126a620, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fca3126ac50}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3266670230", 4096) = 28 brk(0x555557138c40) = 0x555557138c40 brk(0x555557139000) = 0x555557139000 mprotect(0x7fca3132c000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571175d0) = 372 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571175d0) = 373 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571175d0) = 374 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571175d0) = 375 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571175d0) = 376 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571175d0) = 377 ./strace-static-x86_64: Process 377 attached [pid 377] set_robust_list(0x5555571175e0, 24) = 0 [pid 377] getpid() = 377 [pid 377] mkdir("./syzkaller.6PPJ6J", 0700) = 0 [pid 377] chmod("./syzkaller.6PPJ6J", 0777) = 0 [pid 377] chdir("./syzkaller.6PPJ6J") = 0 [pid 377] mkdir("./0", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 377] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 377] close(3) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 376 attached [pid 376] set_robust_list(0x5555571175e0, 24) = 0 [pid 376] getpid( [pid 377] <... clone resumed>, child_tidptr=0x5555571175d0) = 378 [pid 376] <... getpid resumed>) = 376 [pid 376] mkdir("./syzkaller.rP5wZC", 0700) = 0 [pid 376] chmod("./syzkaller.rP5wZC", 0777) = 0 [pid 376] chdir("./syzkaller.rP5wZC") = 0 [pid 376] mkdir("./0", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 376] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 376] close(3) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571175d0) = 379 ./strace-static-x86_64: Process 378 attached [pid 378] set_robust_list(0x5555571175e0, 24) = 0 [pid 378] chdir("./0") = 0 [pid 378] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 378] setpgid(0, 0) = 0 [pid 378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 378] write(3, "1000", 4) = 4 [pid 378] close(3) = 0 [pid 378] symlink("/dev/binderfs", "./binderfs") = 0 [pid 378] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fca31239000 [pid 378] mprotect(0x7fca3123a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 378] clone(child_stack=0x7fca312593f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[380], tls=0x7fca31259700, child_tidptr=0x7fca312599d0) = 380 [pid 378] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 380 attached [pid 380] set_robust_list(0x7fca312599e0, 24) = 0 [pid 380] memfd_create("syzkaller", 0) = 3 [pid 380] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca28e39000 ./strace-static-x86_64: Process 372 attached ./strace-static-x86_64: Process 373 attached ./strace-static-x86_64: Process 374 attached ./strace-static-x86_64: Process 375 attached [pid 375] set_robust_list(0x5555571175e0, 24 [pid 374] set_robust_list(0x5555571175e0, 24 [pid 373] set_robust_list(0x5555571175e0, 24./strace-static-x86_64: Process 379 attached [pid 375] <... set_robust_list resumed>) = 0 [pid 374] <... set_robust_list resumed>) = 0 [pid 373] <... set_robust_list resumed>) = 0 [pid 372] set_robust_list(0x5555571175e0, 24 [pid 379] set_robust_list(0x5555571175e0, 24) = 0 [pid 375] getpid( [pid 374] getpid( [pid 373] getpid( [pid 372] <... set_robust_list resumed>) = 0 [pid 380] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 380] munmap(0x7fca28e39000, 1048576) = 0 [pid 380] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 380] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 380] close(3) = 0 [pid 380] mkdir("./file0", 0777) = 0 [ 23.413475][ T23] audit: type=1400 audit(1678645955.829:73): avc: denied { execmem } for pid=371 comm="syz-executor326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 380] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 379] chdir("./0" [pid 375] <... getpid resumed>) = 375 [pid 374] <... getpid resumed>) = 374 [pid 373] <... getpid resumed>) = 373 [pid 372] getpid( [pid 374] mkdir("./syzkaller.ANjLSt", 0700 [pid 373] mkdir("./syzkaller.0YuXuo", 0700 [pid 379] <... chdir resumed>) = 0 [pid 375] mkdir("./syzkaller.2tiMvA", 0700 [pid 372] <... getpid resumed>) = 372 [pid 374] <... mkdir resumed>) = 0 [pid 374] chmod("./syzkaller.ANjLSt", 0777) = 0 [pid 374] chdir("./syzkaller.ANjLSt") = 0 [pid 374] mkdir("./0", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 374] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 374] close(3) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571175d0) = 384 [pid 373] <... mkdir resumed>) = 0 [pid 373] chmod("./syzkaller.0YuXuo", 0777) = 0 [pid 373] chdir("./syzkaller.0YuXuo") = 0 [pid 373] mkdir("./0", 0777) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 373] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 373] close(3) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571175d0) = 385 [pid 379] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 23.445242][ T23] audit: type=1400 audit(1678645955.829:74): avc: denied { read write } for pid=377 comm="syz-executor326" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 23.470001][ T23] audit: type=1400 audit(1678645955.829:75): avc: denied { open } for pid=377 comm="syz-executor326" path="/dev/loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 379] setpgid(0, 0 [pid 375] <... mkdir resumed>) = 0 [pid 372] mkdir("./syzkaller.VEoLXl", 0700) = 0 [pid 372] chmod("./syzkaller.VEoLXl", 0777) = 0 [pid 372] chdir("./syzkaller.VEoLXl") = 0 [pid 372] mkdir("./0", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 372] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 372] close(3) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571175d0) = 386 ./strace-static-x86_64: Process 385 attached ./strace-static-x86_64: Process 386 attached [pid 386] set_robust_list(0x5555571175e0, 24 [pid 385] set_robust_list(0x5555571175e0, 24) = 0 [pid 385] chdir("./0" [pid 386] <... set_robust_list resumed>) = 0 [pid 386] chdir("./0" [pid 385] <... chdir resumed>) = 0 [pid 385] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 386] <... chdir resumed>) = 0 [pid 385] <... prctl resumed>) = 0 [pid 385] setpgid(0, 0 [pid 386] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 385] <... setpgid resumed>) = 0 [pid 386] setpgid(0, 0 [pid 385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 386] <... setpgid resumed>) = 0 [pid 386] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 384 attached [pid 385] <... openat resumed>) = 3 [pid 384] set_robust_list(0x5555571175e0, 24 [pid 386] <... openat resumed>) = 3 [pid 384] <... set_robust_list resumed>) = 0 [pid 385] write(3, "1000", 4 [pid 384] chdir("./0" [pid 385] <... write resumed>) = 4 [pid 385] close(3) = 0 [pid 386] write(3, "1000", 4) = 4 [pid 385] symlink("/dev/binderfs", "./binderfs" [pid 386] close(3 [pid 385] <... symlink resumed>) = 0 [pid 386] <... close resumed>) = 0 [pid 384] <... chdir resumed>) = 0 [pid 386] symlink("/dev/binderfs", "./binderfs") = 0 [pid 384] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 384] setpgid(0, 0) = 0 [pid 384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 385] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 385] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 386] <... futex resumed>) = 0 [pid 385] <... mmap resumed>) = 0x7fca31239000 [pid 386] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 384] <... openat resumed>) = 3 [pid 386] <... mmap resumed>) = 0x7fca31239000 [pid 385] mprotect(0x7fca3123a000, 131072, PROT_READ|PROT_WRITE [pid 386] mprotect(0x7fca3123a000, 131072, PROT_READ|PROT_WRITE [pid 385] <... mprotect resumed>) = 0 [pid 386] <... mprotect resumed>) = 0 [pid 385] clone(child_stack=0x7fca312593f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 386] clone(child_stack=0x7fca312593f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 384] write(3, "1000", 4) = 4 [pid 384] close(3) = 0 [pid 384] symlink("/dev/binderfs", "./binderfs") = 0 [pid 386] <... clone resumed>, parent_tid=[388], tls=0x7fca31259700, child_tidptr=0x7fca312599d0) = 388 [pid 385] <... clone resumed>, parent_tid=[387], tls=0x7fca31259700, child_tidptr=0x7fca312599d0) = 387 [pid 386] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 385] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 386] <... futex resumed>) = 0 [pid 385] <... futex resumed>) = 0 [pid 386] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 385] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 384] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 384] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fca31239000 [pid 384] mprotect(0x7fca3123a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 384] clone(child_stack=0x7fca312593f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[389], tls=0x7fca31259700, child_tidptr=0x7fca312599d0) = 389 [pid 384] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 384] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 388 attached [pid 388] set_robust_list(0x7fca312599e0, 24) = 0 [pid 388] memfd_create("syzkaller", 0) = 3 [pid 388] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca28e39000 ./strace-static-x86_64: Process 387 attached [pid 387] set_robust_list(0x7fca312599e0, 24) = 0 [pid 387] memfd_create("syzkaller", 0) = 3 [pid 387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca28e39000 ./strace-static-x86_64: Process 389 attached [pid 389] set_robust_list(0x7fca312599e0, 24) = 0 [pid 389] memfd_create("syzkaller", 0) = 3 [pid 389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca28e39000 [pid 379] <... setpgid resumed>) = 0 [pid 375] chmod("./syzkaller.2tiMvA", 0777 [pid 379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 375] <... chmod resumed>) = 0 [pid 389] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 388] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 379] <... openat resumed>) = 3 [pid 375] chdir("./syzkaller.2tiMvA" [pid 379] write(3, "1000", 4 [pid 375] <... chdir resumed>) = 0 [pid 379] <... write resumed>) = 4 [pid 375] mkdir("./0", 0777 [pid 379] close(3 [pid 375] <... mkdir resumed>) = 0 [pid 379] <... close resumed>) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 379] symlink("/dev/binderfs", "./binderfs" [pid 375] <... openat resumed>) = 3 [pid 379] <... symlink resumed>) = 0 [pid 375] ioctl(3, LOOP_CLR_FD [pid 379] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 379] <... futex resumed>) = 0 [pid 375] close(3 [pid 379] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 375] <... close resumed>) = 0 [pid 379] <... mmap resumed>) = 0x7fca31239000 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 379] mprotect(0x7fca3123a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 375] <... clone resumed>, child_tidptr=0x5555571175d0) = 392 [pid 379] clone(child_stack=0x7fca312593f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[393], tls=0x7fca31259700, child_tidptr=0x7fca312599d0) = 393 [pid 379] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 379] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 393 attached [pid 393] set_robust_list(0x7fca312599e0, 24) = 0 [pid 393] memfd_create("syzkaller", 0) = 3 [pid 393] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca28e39000 ./strace-static-x86_64: Process 392 attached [pid 392] set_robust_list(0x5555571175e0, 24) = 0 [pid 392] chdir("./0") = 0 [pid 392] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 392] setpgid(0, 0) = 0 [pid 392] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 392] write(3, "1000", 4) = 4 [pid 392] close(3) = 0 [pid 392] symlink("/dev/binderfs", "./binderfs") = 0 [pid 392] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 392] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fca31239000 [pid 392] mprotect(0x7fca3123a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 392] clone(child_stack=0x7fca312593f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[394], tls=0x7fca31259700, child_tidptr=0x7fca312599d0) = 394 [pid 392] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 392] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 380] <... mount resumed>) = 0 [pid 380] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 380] chdir("./file0") = 0 [pid 380] ioctl(4, LOOP_CLR_FD) = 0 [pid 380] close(4) = 0 [pid 380] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 380] futex(0x7fca313327a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 393] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 389] <... write resumed>) = 1048576 [pid 393] <... write resumed>) = 1048576 [pid 393] munmap(0x7fca28e39000, 1048576 [pid 387] <... write resumed>) = 1048576 [pid 393] <... munmap resumed>) = 0 [pid 393] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 393] ioctl(4, LOOP_SET_FD, 3 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 380] <... futex resumed>) = 0 [pid 378] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000./strace-static-x86_64: Process 394 attached [pid 389] munmap(0x7fca28e39000, 1048576 [pid 388] <... write resumed>) = 1048576 [ 23.494459][ T23] audit: type=1400 audit(1678645955.829:76): avc: denied { ioctl } for pid=377 comm="syz-executor326" path="/dev/loop5" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 23.526205][ T380] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 23.526421][ T23] audit: type=1400 audit(1678645955.869:77): avc: denied { mounton } for pid=378 comm="syz-executor326" path="/root/syzkaller.6PPJ6J/0/file0" dev="sda1" ino=1143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [pid 387] munmap(0x7fca28e39000, 1048576 [pid 393] <... ioctl resumed>) = 0 [pid 393] close(3) = 0 [pid 393] mkdir("./file0", 0777) = 0 [pid 393] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 394] set_robust_list(0x7fca312599e0, 24 [pid 389] <... munmap resumed>) = 0 [pid 388] munmap(0x7fca28e39000, 1048576 [pid 387] <... munmap resumed>) = 0 [pid 394] <... set_robust_list resumed>) = 0 [pid 389] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 388] <... munmap resumed>) = 0 [pid 387] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 380] <... open resumed>) = 4 [pid 394] memfd_create("syzkaller", 0 [pid 389] <... openat resumed>) = 4 [pid 388] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 387] <... openat resumed>) = 4 [pid 394] <... memfd_create resumed>) = 3 [pid 389] ioctl(4, LOOP_SET_FD, 3 [pid 388] <... openat resumed>) = 4 [pid 387] ioctl(4, LOOP_SET_FD, 3 [pid 380] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 394] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 388] ioctl(4, LOOP_SET_FD, 3 [pid 380] <... futex resumed>) = 1 [pid 378] <... futex resumed>) = 0 [pid 394] <... mmap resumed>) = 0x7fca28e39000 [pid 380] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 378] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 394] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 380] <... write resumed>) = 9 [pid 378] <... futex resumed>) = 0 [pid 380] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 380] openat(AT_FDCWD, "./bus", O_RDONLY [pid 378] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... openat resumed>) = 5 [pid 378] <... futex resumed>) = 0 [pid 380] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 380] open("./bus", O_RDWR [pid 378] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... open resumed>) = 6 [pid 378] <... futex resumed>) = 0 [pid 380] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 380] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 378] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... mmap resumed>) = 0x20000000 [pid 378] <... futex resumed>) = 0 [pid 380] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 380] sendfile(4, 5, NULL, 2147483713 [pid 378] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 394] <... write resumed>) = 1048576 [pid 394] munmap(0x7fca28e39000, 1048576) = 0 [ 23.572105][ T23] audit: type=1400 audit(1678645955.979:78): avc: denied { mount } for pid=378 comm="syz-executor326" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 23.595450][ T23] audit: type=1400 audit(1678645955.989:79): avc: denied { write } for pid=378 comm="syz-executor326" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [pid 394] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 387] <... ioctl resumed>) = 0 [pid 378] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 389] <... ioctl resumed>) = 0 [pid 389] close(3) = 0 [pid 389] mkdir("./file0", 0777) = 0 [pid 389] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 394] <... openat resumed>) = 4 [pid 388] <... ioctl resumed>) = 0 [pid 394] ioctl(4, LOOP_SET_FD, 3 [pid 388] close(3) = 0 [pid 388] mkdir("./file0", 0777) = 0 [ 23.613691][ T380] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 23.623316][ T23] audit: type=1400 audit(1678645955.989:80): avc: denied { add_name } for pid=378 comm="syz-executor326" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 23.632679][ T380] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 388] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 394] <... ioctl resumed>) = 0 [ 23.658066][ T23] audit: type=1400 audit(1678645955.989:81): avc: denied { create } for pid=378 comm="syz-executor326" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 23.668603][ T380] EXT4-fs (loop5): This should not happen!! Data will be lost [ 23.668603][ T380] [ 23.685037][ T23] audit: type=1400 audit(1678645956.019:82): avc: denied { read write open } for pid=378 comm="syz-executor326" path="/root/syzkaller.6PPJ6J/0/file0/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [pid 387] close(3) = 0 [pid 378] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 394] close(3 [pid 387] mkdir("./file0", 0777 [pid 378] futex(0x7fca313327bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 394] <... close resumed>) = 0 [pid 387] <... mkdir resumed>) = 0 [pid 378] <... futex resumed>) = 0 [pid 394] mkdir("./file0", 0777 [pid 387] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 378] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 394] <... mkdir resumed>) = 0 [pid 378] <... mmap resumed>) = 0x7fca28f18000 [pid 394] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 378] mprotect(0x7fca28f19000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 378] clone(child_stack=0x7fca28f383f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[406], tls=0x7fca28f38700, child_tidptr=0x7fca28f389d0) = 406 [pid 378] futex(0x7fca313327b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7fca313327bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 406 attached [pid 406] set_robust_list(0x7fca28f389e0, 24) = 0 [pid 406] ioctl(5, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000080 [pid 393] <... mount resumed>) = 0 [pid 393] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 393] chdir("./file0") = 0 [pid 393] ioctl(4, LOOP_CLR_FD) = 0 [ 23.698013][ T393] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 23.729631][ T380] EXT4-fs (loop5): Total free blocks count 0 [ 23.736515][ T380] EXT4-fs (loop5): Free/Dirty block details [ 23.742996][ T380] EXT4-fs (loop5): free_blocks=2415919104 [ 23.749823][ T380] EXT4-fs (loop5): dirty_blocks=16 [ 23.755293][ T380] EXT4-fs (loop5): Block reservation details [ 23.762751][ T389] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [pid 393] close(4) = 0 [pid 393] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 393] futex(0x7fca313327a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 379] <... futex resumed>) = 0 [pid 389] <... mount resumed>) = 0 [pid 388] <... mount resumed>) = 0 [pid 387] <... mount resumed>) = 0 [pid 380] <... sendfile resumed>) = 63 [pid 379] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 389] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 388] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 379] <... futex resumed>) = 1 [pid 389] <... openat resumed>) = 3 [pid 388] <... openat resumed>) = 3 [pid 379] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 389] chdir("./file0" [pid 388] chdir("./file0" [pid 389] <... chdir resumed>) = 0 [pid 388] <... chdir resumed>) = 0 [pid 387] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 389] ioctl(4, LOOP_CLR_FD [pid 388] ioctl(4, LOOP_CLR_FD [pid 387] <... openat resumed>) = 3 [pid 389] <... ioctl resumed>) = 0 [pid 388] <... ioctl resumed>) = 0 [pid 387] chdir("./file0" [pid 389] close(4 [pid 388] close(4 [pid 387] <... chdir resumed>) = 0 [pid 389] <... close resumed>) = 0 [pid 388] <... close resumed>) = 0 [pid 387] ioctl(4, LOOP_CLR_FD [pid 389] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 388] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] <... ioctl resumed>) = 0 [pid 389] <... futex resumed>) = 1 [pid 388] <... futex resumed>) = 1 [pid 387] close(4 [pid 386] <... futex resumed>) = 0 [pid 384] <... futex resumed>) = 0 [pid 389] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 388] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 387] <... close resumed>) = 0 [pid 386] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 384] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] <... open resumed>) = 4 [pid 388] <... open resumed>) = 4 [pid 387] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 386] <... futex resumed>) = 0 [pid 384] <... futex resumed>) = 0 [pid 389] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 388] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] <... futex resumed>) = 1 [pid 386] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 385] <... futex resumed>) = 0 [pid 384] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 389] <... futex resumed>) = 0 [pid 388] <... futex resumed>) = 0 [pid 387] futex(0x7fca313327a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 386] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 385] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 384] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 389] futex(0x7fca313327a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 388] futex(0x7fca313327a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 386] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 385] <... futex resumed>) = 0 [pid 384] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 388] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 387] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 386] <... futex resumed>) = 0 [pid 385] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 384] <... futex resumed>) = 0 [pid 389] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 388] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 386] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 384] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 389] <... write resumed>) = 9 [pid 388] <... write resumed>) = 9 [pid 389] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 388] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... ioctl resumed>) = 0 [pid 389] <... futex resumed>) = 1 [pid 388] <... futex resumed>) = 1 [pid 387] <... open resumed>) = 4 [pid 386] <... futex resumed>) = 0 [pid 384] <... futex resumed>) = 0 [pid 406] futex(0x7fca313327bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] futex(0x7fca313327a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 388] futex(0x7fca313327a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 387] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 386] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 384] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 388] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 387] <... futex resumed>) = 1 [pid 386] <... futex resumed>) = 0 [pid 385] <... futex resumed>) = 0 [pid 384] <... futex resumed>) = 0 [pid 389] openat(AT_FDCWD, "./bus", O_RDONLY [pid 388] openat(AT_FDCWD, "./bus", O_RDONLY [pid 387] futex(0x7fca313327a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 386] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 385] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 384] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 389] <... openat resumed>) = 5 [pid 388] <... openat resumed>) = 5 [pid 387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 385] <... futex resumed>) = 0 [pid 389] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 388] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 385] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] <... futex resumed>) = 0 [pid 389] <... futex resumed>) = 1 [pid 388] <... futex resumed>) = 1 [pid 387] <... write resumed>) = 9 [pid 386] <... futex resumed>) = 0 [pid 384] <... futex resumed>) = 0 [pid 406] futex(0x7fca313327b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 389] futex(0x7fca313327a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 388] futex(0x7fca313327a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 387] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 386] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 384] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 388] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 387] <... futex resumed>) = 1 [pid 386] <... futex resumed>) = 0 [pid 385] <... futex resumed>) = 0 [pid 384] <... futex resumed>) = 0 [pid 389] open("./bus", O_RDWR [pid 388] open("./bus", O_RDWR [pid 387] futex(0x7fca313327a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 386] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 385] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 384] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 389] <... open resumed>) = 6 [pid 388] <... open resumed>) = 6 [pid 387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 385] <... futex resumed>) = 0 [pid 389] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 388] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] openat(AT_FDCWD, "./bus", O_RDONLY [pid 385] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] <... futex resumed>) = 1 [pid 388] <... futex resumed>) = 1 [pid 387] <... openat resumed>) = 5 [pid 386] <... futex resumed>) = 0 [pid 384] <... futex resumed>) = 0 [pid 380] <... futex resumed>) = 0 [pid 378] exit_group(0 [pid 406] <... futex resumed>) = ? [pid 393] <... futex resumed>) = 0 [pid 389] futex(0x7fca313327a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 388] futex(0x7fca313327a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 387] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 386] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 384] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... exit_group resumed>) = ? [pid 406] +++ exited with 0 +++ [pid 393] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 389] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 388] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 387] <... futex resumed>) = 1 [pid 386] <... futex resumed>) = 0 [pid 385] <... futex resumed>) = 0 [pid 384] <... futex resumed>) = 0 [pid 393] <... open resumed>) = 4 [pid 389] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 388] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 387] futex(0x7fca313327a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 386] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 385] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 384] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] +++ exited with 0 +++ [pid 378] +++ exited with 0 +++ [pid 389] <... mmap resumed>) = 0x20000000 [pid 388] <... mmap resumed>) = 0x20000000 [pid 387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 385] <... futex resumed>) = 0 [pid 389] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 388] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] open("./bus", O_RDWR [pid 385] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=378, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- [pid 389] <... futex resumed>) = 1 [pid 388] <... futex resumed>) = 1 [pid 387] <... open resumed>) = 6 [pid 386] <... futex resumed>) = 0 [pid 384] <... futex resumed>) = 0 [pid 377] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 389] futex(0x7fca313327a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 388] futex(0x7fca313327a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 387] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 386] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 384] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 389] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 388] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 387] <... futex resumed>) = 1 [pid 386] <... futex resumed>) = 0 [ 23.772224][ T388] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 23.777563][ T387] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 23.781299][ T380] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 23.791314][ T394] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [pid 385] <... futex resumed>) = 0 [pid 384] <... futex resumed>) = 0 [pid 377] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 389] sendfile(4, 5, NULL, 2147483713 [pid 388] sendfile(4, 5, NULL, 2147483713 [pid 387] futex(0x7fca313327a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 386] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 385] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 384] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... openat resumed>) = 3 [pid 394] <... mount resumed>) = 0 [pid 393] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 394] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 393] <... futex resumed>) = 1 [pid 394] <... openat resumed>) = 3 [pid 393] futex(0x7fca313327a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 394] chdir("./file0") = 0 [pid 394] ioctl(4, LOOP_CLR_FD) = 0 [pid 394] close(4) = 0 [pid 387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 385] <... futex resumed>) = 0 [pid 379] <... futex resumed>) = 0 [pid 377] fstat(3, [pid 394] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 385] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 394] <... futex resumed>) = 1 [pid 393] <... futex resumed>) = 0 [pid 392] <... futex resumed>) = 0 [pid 387] <... mmap resumed>) = 0x20000000 [pid 379] <... futex resumed>) = 1 [pid 377] getdents64(3, [pid 394] futex(0x7fca313327a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 393] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 392] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... getdents64 resumed>0x555557118620 /* 4 entries */, 32768) = 112 [pid 394] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 393] <... write resumed>) = 9 [pid 392] <... futex resumed>) = 0 [pid 387] <... futex resumed>) = 1 [pid 385] <... futex resumed>) = 0 [pid 377] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 394] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 393] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 392] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] futex(0x7fca313327a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 385] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 394] <... open resumed>) = 4 [pid 393] <... futex resumed>) = 1 [pid 387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 385] <... futex resumed>) = 0 [pid 379] <... futex resumed>) = 0 [pid 377] lstat("./0/binderfs", [pid 394] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] futex(0x7fca313327a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 387] sendfile(4, 5, NULL, 2147483713 [pid 385] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 394] <... futex resumed>) = 1 [pid 393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 392] <... futex resumed>) = 0 [ 23.821243][ T389] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 23.835920][ T389] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 23.848278][ T389] EXT4-fs (loop2): This should not happen!! Data will be lost [ 23.848278][ T389] [ 23.851276][ T387] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 394] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 393] openat(AT_FDCWD, "./bus", O_RDONLY [pid 392] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] <... futex resumed>) = 0 [pid 377] unlink("./0/binderfs" [pid 394] <... write resumed>) = 9 [pid 393] <... openat resumed>) = 5 [pid 392] <... futex resumed>) = 0 [pid 386] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 384] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 379] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... unlink resumed>) = 0 [pid 394] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 392] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 386] futex(0x7fca313327bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 384] futex(0x7fca313327bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 394] <... futex resumed>) = 0 [pid 393] <... futex resumed>) = 0 [pid 392] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 386] <... futex resumed>) = 0 [pid 384] <... futex resumed>) = 0 [ 23.858501][ T389] EXT4-fs (loop2): Total free blocks count 0 [ 23.873030][ T387] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 23.879243][ T389] EXT4-fs (loop2): Free/Dirty block details [ 23.892367][ T387] EXT4-fs (loop1): This should not happen!! Data will be lost [ 23.892367][ T387] [ 23.897371][ T389] EXT4-fs (loop2): free_blocks=2415919104 [ 23.906908][ T387] EXT4-fs (loop1): Total free blocks count 0 [ 23.913791][ T389] EXT4-fs (loop2): dirty_blocks=16 [pid 379] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 394] futex(0x7fca313327a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 393] open("./bus", O_RDWR [pid 392] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 386] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 385] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 384] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 379] <... futex resumed>) = 0 [pid 394] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 393] <... open resumed>) = 6 [pid 392] <... futex resumed>) = 0 [pid 386] <... mmap resumed>) = 0x7fca28f18000 [pid 385] futex(0x7fca313327bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 384] <... mmap resumed>) = 0x7fca28f18000 [pid 379] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 389] <... sendfile resumed>) = 63 [pid 389] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] futex(0x7fca313327a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 394] openat(AT_FDCWD, "./bus", O_RDONLY [pid 393] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 392] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 386] mprotect(0x7fca28f19000, 131072, PROT_READ|PROT_WRITE [pid 385] <... futex resumed>) = 0 [pid 384] mprotect(0x7fca28f19000, 131072, PROT_READ|PROT_WRITE [pid 379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 394] <... openat resumed>) = 5 [pid 394] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 394] futex(0x7fca313327a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 393] <... futex resumed>) = 0 [pid 393] futex(0x7fca313327a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 392] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 392] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 394] <... futex resumed>) = 0 [pid 392] <... futex resumed>) = 1 [pid 394] open("./bus", O_RDWR [pid 392] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 394] <... open resumed>) = 6 [pid 394] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 392] <... futex resumed>) = 0 [pid 394] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 392] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 394] <... mmap resumed>) = 0x20000000 [pid 392] <... futex resumed>) = 0 [pid 394] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 392] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 394] <... futex resumed>) = 0 [pid 392] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 394] sendfile(4, 5, NULL, 2147483713 [pid 392] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 392] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 386] <... mprotect resumed>) = 0 [pid 385] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 384] <... mprotect resumed>) = 0 [pid 379] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = 0 [pid 386] clone(child_stack=0x7fca28f383f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 385] <... mmap resumed>) = 0x7fca28f18000 [pid 384] clone(child_stack=0x7fca28f383f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 379] <... futex resumed>) = 1 [ 23.919026][ T387] EXT4-fs (loop1): Free/Dirty block details [ 23.924424][ T389] EXT4-fs (loop2): Block reservation details [ 23.930063][ T177] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 23.935877][ T389] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 23.947899][ T387] EXT4-fs (loop1): free_blocks=2415919104 [ 23.954530][ T177] EXT4-fs (loop5): This should not happen!! Data will be lost [ 23.954530][ T177] [ 23.959711][ T387] EXT4-fs (loop1): dirty_blocks=16 [pid 393] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 385] mprotect(0x7fca28f19000, 131072, PROT_READ|PROT_WRITE [pid 379] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 386] <... clone resumed>, parent_tid=[414], tls=0x7fca28f38700, child_tidptr=0x7fca28f389d0) = 414 [pid 385] <... mprotect resumed>) = 0 [pid 384] <... clone resumed>, parent_tid=[415], tls=0x7fca28f38700, child_tidptr=0x7fca28f389d0) = 415 [pid 379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 23.975245][ T387] EXT4-fs (loop1): Block reservation details [ 23.976760][ T388] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 23.982404][ T387] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 23.997004][ T388] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 ./strace-static-x86_64: Process 415 attached ./strace-static-x86_64: Process 414 attached [pid 387] <... sendfile resumed>) = 63 [pid 386] futex(0x7fca313327b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 385] clone(child_stack=0x7fca28f383f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 384] futex(0x7fca313327b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 392] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 392] futex(0x7fca313327bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 392] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fca28f18000 [pid 392] mprotect(0x7fca28f19000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 392] clone(child_stack=0x7fca28f383f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[416], tls=0x7fca28f38700, child_tidptr=0x7fca28f389d0) = 416 [pid 392] futex(0x7fca313327b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 392] futex(0x7fca313327bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 416 attached [pid 416] set_robust_list(0x7fca28f389e0, 24) = 0 [pid 416] ioctl(5, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000080./strace-static-x86_64: Process 417 attached [pid 415] set_robust_list(0x7fca28f389e0, 24 [pid 414] set_robust_list(0x7fca28f389e0, 24 [pid 387] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 386] <... futex resumed>) = 0 [pid 384] <... futex resumed>) = 0 [pid 379] <... futex resumed>) = 1 [pid 393] <... futex resumed>) = 0 [pid 393] sendfile(4, 5, NULL, 2147483713 [pid 417] set_robust_list(0x7fca28f389e0, 24 [pid 415] <... set_robust_list resumed>) = 0 [pid 414] <... set_robust_list resumed>) = 0 [pid 387] <... futex resumed>) = 0 [pid 386] futex(0x7fca313327bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 385] <... clone resumed>, parent_tid=[417], tls=0x7fca28f38700, child_tidptr=0x7fca28f389d0) = 417 [pid 384] futex(0x7fca313327bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 24.002618][ T394] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 24.014877][ T388] EXT4-fs (loop0): This should not happen!! Data will be lost [ 24.014877][ T388] [ 24.028960][ T394] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 24.041605][ T388] EXT4-fs (loop0): Total free blocks count 0 [ 24.051009][ T394] EXT4-fs (loop3): This should not happen!! Data will be lost [ 24.051009][ T394] [ 24.057722][ T388] EXT4-fs (loop0): Free/Dirty block details [pid 379] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 417] <... set_robust_list resumed>) = 0 [pid 415] ioctl(5, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000080 [pid 414] ioctl(5, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000080 [pid 387] futex(0x7fca313327a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 385] futex(0x7fca313327b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 417] ioctl(5, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000080 [pid 415] <... ioctl resumed>) = 0 [pid 385] <... futex resumed>) = 0 [pid 392] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 417] <... ioctl resumed>) = 0 [pid 415] futex(0x7fca313327bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 385] futex(0x7fca313327bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 417] futex(0x7fca313327bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 415] <... futex resumed>) = 1 [pid 385] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 384] <... futex resumed>) = 0 [pid 388] <... sendfile resumed>) = 63 [pid 388] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 388] futex(0x7fca313327a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 417] <... futex resumed>) = 0 [pid 417] futex(0x7fca313327b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 415] futex(0x7fca313327b8, FUTEX_WAIT_PRIVATE, 0, NULL [ 24.066533][ T394] EXT4-fs (loop3): Total free blocks count 0 [ 24.073122][ T388] EXT4-fs (loop0): free_blocks=2415919104 [ 24.078200][ T394] EXT4-fs (loop3): Free/Dirty block details [ 24.084827][ T388] EXT4-fs (loop0): dirty_blocks=16 [ 24.090236][ T394] EXT4-fs (loop3): free_blocks=2415919104 [ 24.096095][ T388] EXT4-fs (loop0): Block reservation details [ 24.106721][ T394] EXT4-fs (loop3): dirty_blocks=16 [ 24.106734][ T394] EXT4-fs (loop3): Block reservation details [ 24.112842][ T388] EXT4-fs (loop0): i_reserved_data_blocks=1 [pid 385] exit_group(0 [pid 417] <... futex resumed>) = ? [pid 385] <... exit_group resumed>) = ? [pid 417] +++ exited with 0 +++ [pid 384] exit_group(0 [pid 415] <... futex resumed>) = ? [pid 389] <... futex resumed>) = ? [pid 384] <... exit_group resumed>) = ? [pid 415] +++ exited with 0 +++ [pid 389] +++ exited with 0 +++ [pid 384] +++ exited with 0 +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=384, si_uid=0, si_status=0, si_utime=1, si_stime=11} --- [pid 374] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 414] <... ioctl resumed>) = 0 [pid 386] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 379] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 374] <... openat resumed>) = 3 [pid 414] futex(0x7fca313327bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 394] <... sendfile resumed>) = 63 [pid 387] <... futex resumed>) = ? [pid 379] futex(0x7fca313327bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] fstat(3, [pid 416] <... ioctl resumed>) = 0 [pid 414] <... futex resumed>) = 0 [pid 394] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] <... futex resumed>) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 416] futex(0x7fca313327bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] futex(0x7fca313327b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 394] <... futex resumed>) = 0 [pid 392] exit_group(0 [pid 387] +++ exited with 0 +++ [pid 385] +++ exited with 0 +++ [pid 379] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 374] getdents64(3, [pid 416] <... futex resumed>) = ? [pid 392] <... exit_group resumed>) = ? [pid 386] exit_group(0 [pid 379] <... mmap resumed>) = 0x7fca28f18000 [pid 374] <... getdents64 resumed>0x555557118620 /* 4 entries */, 32768) = 112 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=385, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- [pid 414] <... futex resumed>) = ? [pid 386] <... exit_group resumed>) = ? [pid 379] mprotect(0x7fca28f19000, 131072, PROT_READ|PROT_WRITE [pid 414] +++ exited with 0 +++ [pid 379] <... mprotect resumed>) = 0 [pid 379] clone(child_stack=0x7fca28f383f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 416] +++ exited with 0 +++ [pid 374] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 379] <... clone resumed>, parent_tid=[418], tls=0x7fca28f38700, child_tidptr=0x7fca28f389d0) = 418 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 379] futex(0x7fca313327b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] lstat("./0/binderfs", [pid 379] <... futex resumed>) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 379] futex(0x7fca313327bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] unlink("./0/binderfs") = 0 [pid 374] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 388] <... futex resumed>) = ? [pid 373] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x555557118620 /* 4 entries */, 32768) = 112 [pid 373] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./0/binderfs") = 0 [pid 373] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 394] +++ exited with 0 +++ [pid 392] +++ exited with 0 +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=392, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- [pid 375] restart_syscall(<... resuming interrupted clone ...> [pid 388] +++ exited with 0 +++ [pid 386] +++ exited with 0 +++ [pid 375] <... restart_syscall resumed>) = 0 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=386, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- [pid 372] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 375] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... openat resumed>) = 3 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] fstat(3, [pid 372] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... openat resumed>) = 3 [pid 375] getdents64(3, [pid 372] fstat(3, [pid 375] <... getdents64 resumed>0x555557118620 /* 4 entries */, 32768) = 112 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] getdents64(3, [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... getdents64 resumed>0x555557118620 /* 4 entries */, 32768) = 112 [pid 375] lstat("./0/binderfs", [pid 372] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] unlink("./0/binderfs" [pid 372] lstat("./0/binderfs", [pid 375] <... unlink resumed>) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] unlink("./0/binderfs") = 0 [pid 372] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 418 attached [pid 418] set_robust_list(0x7fca28f389e0, 24) = 0 [ 24.118148][ T394] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 24.132453][ T393] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 24.147302][ T177] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 24.151300][ T393] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 418] ioctl(5, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000080 [pid 379] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 24.159489][ T177] EXT4-fs (loop2): This should not happen!! Data will be lost [ 24.159489][ T177] [ 24.171964][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 24.181423][ T393] EXT4-fs (loop4): This should not happen!! Data will be lost [ 24.181423][ T393] [ 24.194561][ T9] EXT4-fs (loop1): This should not happen!! Data will be lost [ 24.194561][ T9] [ 24.203473][ T393] EXT4-fs (loop4): Total free blocks count 0 [pid 377] <... umount2 resumed>) = 0 [pid 377] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555557120660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555557120660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./0/file0") = 0 [pid 377] getdents64(3, 0x555557118620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./0") = 0 [pid 377] mkdir("./1", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 377] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 377] close(3) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571175d0) = 420 ./strace-static-x86_64: Process 420 attached [pid 420] set_robust_list(0x5555571175e0, 24) = 0 [pid 420] chdir("./1") = 0 [pid 420] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 420] setpgid(0, 0) = 0 [pid 420] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 420] write(3, "1000", 4) = 4 [pid 420] close(3) = 0 [pid 420] symlink("/dev/binderfs", "./binderfs") = 0 [pid 420] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 24.214906][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 24.219141][ T177] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 24.243188][ T177] EXT4-fs (loop0): This should not happen!! Data will be lost [ 24.243188][ T177] [ 24.252965][ T9] EXT4-fs (loop3): This should not happen!! Data will be lost [ 24.252965][ T9] [ 24.263058][ T393] EXT4-fs (loop4): Free/Dirty block details [ 24.269120][ T393] EXT4-fs (loop4): free_blocks=2415919104 [pid 420] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fca31239000 [pid 420] mprotect(0x7fca3123a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 420] clone(child_stack=0x7fca312593f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[422], tls=0x7fca31259700, child_tidptr=0x7fca312599d0) = 422 [pid 420] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 420] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 422 attached [pid 422] set_robust_list(0x7fca312599e0, 24) = 0 [pid 422] memfd_create("syzkaller", 0) = 3 [pid 422] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca28e39000 [pid 422] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 418] <... ioctl resumed>) = 0 [pid 393] <... sendfile resumed>) = 63 [pid 422] <... write resumed>) = 1048576 [pid 393] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] futex(0x7fca313327bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = 0 [pid 393] futex(0x7fca313327a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 422] munmap(0x7fca28e39000, 1048576) = 0 [pid 422] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 418] <... futex resumed>) = 0 [pid 418] futex(0x7fca313327b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 379] exit_group(0) = ? [pid 418] <... futex resumed>) = ? [pid 418] +++ exited with 0 +++ [pid 393] <... futex resumed>) = ? [pid 393] +++ exited with 0 +++ [pid 379] +++ exited with 0 +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=379, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- [pid 376] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 376] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, [pid 373] <... umount2 resumed>) = 0 [pid 376] <... getdents64 resumed>0x555557118620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./0/binderfs") = 0 [pid 376] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555557120660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555557120660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./0/file0") = 0 [pid 373] getdents64(3, 0x555557118620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./0") = 0 [pid 373] mkdir("./1", 0777) = 0 [ 24.274924][ T393] EXT4-fs (loop4): dirty_blocks=16 [ 24.280067][ T393] EXT4-fs (loop4): Block reservation details [ 24.286258][ T393] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 24.297440][ T421] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 24.309613][ T421] EXT4-fs (loop4): This should not happen!! Data will be lost [ 24.309613][ T421] [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 422] <... openat resumed>) = 4 [pid 422] ioctl(4, LOOP_SET_FD, 3 [pid 375] <... umount2 resumed>) = 0 [pid 375] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555557120660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555557120660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./0/file0") = 0 [pid 375] getdents64(3, 0x555557118620 /* 0 entries */, 32768) = 0 [pid 375] close(3 [pid 374] <... umount2 resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 375] rmdir("./0") = 0 [pid 375] mkdir("./1", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 375] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 375] close(3) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571175d0) = 424 ./strace-static-x86_64: Process 424 attached [pid 424] set_robust_list(0x5555571175e0, 24) = 0 [pid 424] chdir("./1") = 0 [pid 424] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 424] setpgid(0, 0) = 0 [pid 424] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 424] write(3, "1000", 4) = 4 [pid 424] close(3) = 0 [pid 424] symlink("/dev/binderfs", "./binderfs") = 0 [pid 424] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 424] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fca31239000 [pid 424] mprotect(0x7fca3123a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 424] clone(child_stack=0x7fca312593f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[426], tls=0x7fca31259700, child_tidptr=0x7fca312599d0) = 426 [pid 424] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 424] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 426 attached [pid 426] set_robust_list(0x7fca312599e0, 24) = 0 [pid 426] memfd_create("syzkaller", 0 [pid 422] <... ioctl resumed>) = 0 [pid 422] close(3 [pid 376] <... umount2 resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 372] <... umount2 resumed>) = 0 [pid 376] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555557120660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555557120660 /* 0 entries */, 32768) = 0 [pid 376] close(4 [pid 373] ioctl(3, LOOP_CLR_FD [pid 422] <... close resumed>) = 0 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] <... close resumed>) = 0 [pid 376] rmdir("./0/file0" [pid 373] close(3 [pid 422] mkdir("./file0", 0777 [pid 374] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 422] <... mkdir resumed>) = 0 [pid 376] <... rmdir resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... close resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] getdents64(3, 0x555557118620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./0") = 0 [pid 376] mkdir("./1", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 376] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 376] close(3) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571175d0) = 427 [pid 426] <... memfd_create resumed>) = 3 [pid 426] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca28e39000 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 422] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 373] <... clone resumed>, child_tidptr=0x5555571175d0) = 428 [pid 374] lstat("./0/file0", [pid 372] lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... openat resumed>) = 4 ./strace-static-x86_64: Process 428 attached [pid 374] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] fstat(4, [pid 428] set_robust_list(0x5555571175e0, 24 [pid 374] <... openat resumed>) = 4 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 428] <... set_robust_list resumed>) = 0 [pid 374] fstat(4, [pid 372] getdents64(4, [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, [pid 372] <... getdents64 resumed>0x555557120660 /* 2 entries */, 32768) = 48 [pid 374] <... getdents64 resumed>0x555557120660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, [pid 428] chdir("./1") = 0 [pid 428] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 428] setpgid(0, 0) = 0 [pid 374] getdents64(4, [pid 372] <... getdents64 resumed>0x555557120660 /* 0 entries */, 32768) = 0 [pid 374] <... getdents64 resumed>0x555557120660 /* 0 entries */, 32768) = 0 [pid 428] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 374] close(4 [pid 372] close(4 [pid 374] <... close resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 374] rmdir("./0/file0" [pid 372] rmdir("./0/file0" [pid 374] <... rmdir resumed>) = 0 [pid 428] <... openat resumed>) = 3 [pid 428] write(3, "1000", 4) = 4 [pid 372] <... rmdir resumed>) = 0 [pid 374] getdents64(3, [pid 372] getdents64(3, [pid 428] close(3 [pid 374] <... getdents64 resumed>0x555557118620 /* 0 entries */, 32768) = 0 [pid 372] <... getdents64 resumed>0x555557118620 /* 0 entries */, 32768) = 0 [pid 428] <... close resumed>) = 0 [pid 428] symlink("/dev/binderfs", "./binderfs") = 0 [pid 426] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 374] close(3 [pid 372] close(3 [pid 428] futex(0x7fca313327ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... close resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 428] <... futex resumed>) = 0 [pid 374] rmdir("./0" [pid 372] rmdir("./0" [pid 428] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fca31239000 [pid 372] <... rmdir resumed>) = 0 [pid 428] mprotect(0x7fca3123a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 428] clone(child_stack=0x7fca312593f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 374] mkdir("./1", 0777 [pid 372] mkdir("./1", 0777 [pid 374] <... mkdir resumed>) = 0 [pid 428] <... clone resumed>, parent_tid=[430], tls=0x7fca31259700, child_tidptr=0x7fca312599d0) = 430 [pid 428] futex(0x7fca313327a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 428] futex(0x7fca313327ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 372] <... mkdir resumed>) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 374] ioctl(3, LOOP_CLR_FD