./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3009483990 <...> Warning: Permanently added '10.128.15.217' (ED25519) to the list of known hosts. execve("./syz-executor3009483990", ["./syz-executor3009483990"], 0x7fffc6e2a080 /* 10 vars */) = 0 brk(NULL) = 0x5555610ee000 brk(0x5555610eed40) = 0x5555610eed40 arch_prctl(ARCH_SET_FS, 0x5555610ee3c0) = 0 set_tid_address(0x5555610ee690) = 297 set_robust_list(0x5555610ee6a0, 24) = 0 rseq(0x5555610eece0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3009483990", 4096) = 28 getrandom("\x14\x44\x08\x34\x8e\xe1\x3f\x6e", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555610eed40 brk(0x55556110fd40) = 0x55556110fd40 brk(0x555561110000) = 0x555561110000 mprotect(0x7fb0839f4000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 298 ./strace-static-x86_64: Process 298 attached [pid 298] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] mkdir("./syzkaller.uaDR0l", 0700./strace-static-x86_64: Process 299 attached [pid 297] <... clone resumed>, child_tidptr=0x5555610ee690) = 299 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] <... mkdir resumed>) = 0 [pid 298] chmod("./syzkaller.uaDR0l", 0777) = 0 [pid 298] chdir("./syzkaller.uaDR0l") = 0 [pid 298] mkdir("./0", 0777 [pid 297] <... clone resumed>, child_tidptr=0x5555610ee690) = 300 [pid 299] set_robust_list(0x5555610ee6a0, 24./strace-static-x86_64: Process 300 attached [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] <... set_robust_list resumed>) = 0 [pid 298] <... mkdir resumed>) = 0 [pid 297] <... clone resumed>, child_tidptr=0x5555610ee690) = 301 [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 25.615345][ T30] audit: type=1400 audit(1735705947.465:66): avc: denied { execmem } for pid=297 comm="syz-executor300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 25.640574][ T30] audit: type=1400 audit(1735705947.485:67): avc: denied { read write } for pid=298 comm="syz-executor300" name="loop0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program [pid 298] <... openat resumed>) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 303 ./strace-static-x86_64: Process 302 attached [pid 302] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 302] mkdir("./syzkaller.IdzkAo", 0700) = 0 ./strace-static-x86_64: Process 301 attached [pid 301] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 301] mkdir("./syzkaller.wWFhBc", 0700 [pid 302] chmod("./syzkaller.IdzkAo", 0777) = 0 [pid 301] <... mkdir resumed>) = 0 [pid 302] chdir("./syzkaller.IdzkAo") = 0 [pid 302] mkdir("./0", 0777) = 0 [pid 301] chmod("./syzkaller.wWFhBc", 0777) = 0 [pid 301] chdir("./syzkaller.wWFhBc") = 0 [pid 301] mkdir("./0", 0777) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] close(3) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 302] <... clone resumed>, child_tidptr=0x5555610ee690) = 304 [pid 301] <... clone resumed>, child_tidptr=0x5555610ee690) = 305 ./strace-static-x86_64: Process 304 attached [pid 304] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 304] chdir("./0") = 0 [pid 304] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 304] setpgid(0, 0) = 0 [pid 304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 304] write(3, "1000", 4) = 4 [pid 304] close(3) = 0 [pid 304] symlink("/dev/binderfs", "./binderfs") = 0 [pid 304] write(1, "executing program\n", 18) = 18 [pid 304] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 304] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 304] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 304] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 304] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 304] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[306]}, 88) = 306 [pid 304] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 304] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 306 attached [pid 306] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 306] memfd_create("syzkaller", 0) = 3 [pid 306] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 306] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 306] munmap(0x7fb07b50e000, 138412032) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 306] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 305 attached ./strace-static-x86_64: Process 303 attached [pid 297] <... clone resumed>, child_tidptr=0x5555610ee690) = 302 [pid 300] set_robust_list(0x5555610ee6a0, 24 [pid 299] mkdir("./syzkaller.zdQHAE", 0700 [pid 306] <... ioctl resumed>) = 0 [pid 306] close(3) = 0 [pid 306] close(4 [pid 305] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 305] chdir("./0") = 0 [pid 305] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 305] setpgid(0, 0) = 0 [pid 305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 305] write(3, "1000", 4) = 4 [pid 305] close(3) = 0 [pid 303] set_robust_list(0x5555610ee6a0, 24 [pid 300] <... set_robust_list resumed>) = 0 [pid 305] symlink("/dev/binderfs", "./binderfs" [pid 299] <... mkdir resumed>) = 0 [pid 305] <... symlink resumed>) = 0 [pid 303] <... set_robust_list resumed>) = 0 [pid 300] mkdir("./syzkaller.MvDvu6", 0700 [pid 299] chmod("./syzkaller.zdQHAE", 0777executing program [pid 305] write(1, "executing program\n", 18 [pid 303] chdir("./0" [pid 305] <... write resumed>) = 18 [pid 303] <... chdir resumed>) = 0 [pid 300] <... mkdir resumed>) = 0 [pid 299] <... chmod resumed>) = 0 [pid 303] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 300] chmod("./syzkaller.MvDvu6", 0777 [pid 299] chdir("./syzkaller.zdQHAE" [pid 303] <... prctl resumed>) = 0 [pid 300] <... chmod resumed>) = 0 [pid 299] <... chdir resumed>) = 0 [pid 303] setpgid(0, 0 [pid 300] chdir("./syzkaller.MvDvu6" [pid 303] <... setpgid resumed>) = 0 [pid 299] mkdir("./0", 0777 [pid 300] <... chdir resumed>) = 0 [pid 305] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 305] <... futex resumed>) = 0 [pid 305] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, [pid 299] <... mkdir resumed>) = 0 [pid 303] <... openat resumed>) = 3 [pid 300] mkdir("./0", 0777 [pid 303] write(3, "1000", 4 [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 305] <... rt_sigaction resumed>NULL, 8) = 0 [pid 305] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 303] <... write resumed>) = 4 [pid 300] <... mkdir resumed>) = 0 [pid 299] <... openat resumed>) = 3 [pid 303] close(3 [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 303] <... close resumed>) = 0 [pid 299] ioctl(3, LOOP_CLR_FD [pid 303] symlink("/dev/binderfs", "./binderfs" [pid 300] <... openat resumed>) = 3 [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 305] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 303] <... symlink resumed>) = 0 [pid 300] ioctl(3, LOOP_CLR_FD [pid 299] close(3 [pid 303] write(1, "executing program\n", 18 [pid 300] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 299] <... close resumed>) = 0 [pid 305] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 305] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 305] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 305] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[310]}, 88) = 310 [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 305] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}executing program [pid 303] <... write resumed>) = 18 [pid 303] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 303] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 303] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 303] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 303] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 303] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 303] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[311]}, 88) = 311 [pid 303] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 303] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 303] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 312 [ 25.663397][ T306] loop4: detected capacity change from 0 to 2048 [ 25.665188][ T30] audit: type=1400 audit(1735705947.485:68): avc: denied { open } for pid=298 comm="syz-executor300" path="/dev/loop0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 313 attached ./strace-static-x86_64: Process 312 attached ./strace-static-x86_64: Process 311 attached ./strace-static-x86_64: Process 310 attached [pid 313] set_robust_list(0x5555610ee6a0, 24 [pid 311] set_robust_list(0x7fb08392e9a0, 24 [pid 310] set_robust_list(0x7fb08392e9a0, 24 [pid 299] <... clone resumed>, child_tidptr=0x5555610ee690) = 313 [pid 313] <... set_robust_list resumed>) = 0 [pid 311] <... set_robust_list resumed>) = 0 [pid 310] <... set_robust_list resumed>) = 0 [pid 313] chdir("./0" [pid 311] rt_sigprocmask(SIG_SETMASK, [], [pid 310] rt_sigprocmask(SIG_SETMASK, [], [pid 313] <... chdir resumed>) = 0 [pid 311] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 310] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 313] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 311] memfd_create("syzkaller", 0 [pid 310] memfd_create("syzkaller", 0 [pid 313] <... prctl resumed>) = 0 [pid 312] set_robust_list(0x5555610ee6a0, 24 [pid 311] <... memfd_create resumed>) = 3 [pid 310] <... memfd_create resumed>) = 3 [pid 313] setpgid(0, 0 [pid 312] <... set_robust_list resumed>) = 0 [pid 311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 310] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 313] <... setpgid resumed>) = 0 [pid 312] chdir("./0" [pid 311] <... mmap resumed>) = 0x7fb07b50e000 [pid 310] <... mmap resumed>) = 0x7fb07b50e000 [pid 313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 312] <... chdir resumed>) = 0 [pid 311] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 310] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 312] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 313] <... openat resumed>) = 3 [pid 312] <... prctl resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 313] write(3, "1000", 4 [pid 312] setpgid(0, 0 [pid 306] mkdir("./file1", 0777 [pid 313] <... write resumed>) = 4 [pid 312] <... setpgid resumed>) = 0 [pid 313] close(3 [pid 312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 306] <... mkdir resumed>) = 0 [pid 313] <... close resumed>) = 0 [pid 312] <... openat resumed>) = 3 [pid 306] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 313] symlink("/dev/binderfs", "./binderfs" [pid 312] write(3, "1000", 4) = 4 [pid 312] close(3) = 0 executing program [pid 312] symlink("/dev/binderfs", "./binderfs") = 0 [pid 312] write(1, "executing program\n", 18) = 18 [pid 312] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 312] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 312] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 312] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 312] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 312] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[314]}, 88) = 314 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 312] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 314 attached [pid 314] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 314] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 314] memfd_create("syzkaller", 0) = 3 [pid 314] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 314] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 314] munmap(0x7fb07b50e000, 138412032) = 0 [pid 314] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 314] ioctl(4, LOOP_SET_FD, 3executing program [pid 313] <... symlink resumed>) = 0 [pid 310] <... write resumed>) = 1048576 [pid 313] write(1, "executing program\n", 18 [pid 310] munmap(0x7fb07b50e000, 138412032 [pid 313] <... write resumed>) = 18 [pid 313] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... munmap resumed>) = 0 [pid 313] <... futex resumed>) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 313] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, [pid 310] <... openat resumed>) = 4 [pid 313] <... rt_sigaction resumed>NULL, 8) = 0 [ 25.699720][ T30] audit: type=1400 audit(1735705947.485:69): avc: denied { ioctl } for pid=298 comm="syz-executor300" path="/dev/loop0" dev="devtmpfs" ino=112 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 310] ioctl(4, LOOP_SET_FD, 3 [pid 313] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 311] <... write resumed>) = 1048576 [pid 311] munmap(0x7fb07b50e000, 138412032) = 0 [pid 311] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 311] ioctl(4, LOOP_SET_FD, 3 [pid 314] <... ioctl resumed>) = 0 [pid 313] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 310] <... ioctl resumed>) = 0 [pid 311] <... ioctl resumed>) = 0 [pid 311] close(3) = 0 [pid 311] close(4 [pid 313] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 314] close(3 [pid 313] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE [pid 310] close(3 [pid 314] <... close resumed>) = 0 [pid 313] <... mprotect resumed>) = 0 [pid 314] close(4 [pid 310] <... close resumed>) = 0 [pid 313] rt_sigprocmask(SIG_BLOCK, ~[], [pid 310] close(4 [pid 313] <... rt_sigprocmask resumed>[], 8) = 0 [pid 313] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0}./strace-static-x86_64: Process 315 attached => {parent_tid=[315]}, 88) = 315 [pid 315] set_robust_list(0x7fb08392e9a0, 24 [pid 313] rt_sigprocmask(SIG_SETMASK, [], [pid 315] <... set_robust_list resumed>) = 0 [pid 313] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 315] rt_sigprocmask(SIG_SETMASK, [], [pid 313] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 313] <... futex resumed>) = 0 [pid 315] memfd_create("syzkaller", 0) = 3 [pid 315] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 313] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 315] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 314] <... close resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 315] munmap(0x7fb07b50e000, 138412032 [pid 314] mkdir("./file1", 0777 [pid 310] mkdir("./file1", 0777 [pid 315] <... munmap resumed>) = 0 [pid 314] <... mkdir resumed>) = 0 [pid 311] <... close resumed>) = 0 [pid 310] <... mkdir resumed>) = 0 [pid 306] <... mount resumed>) = 0 [pid 315] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 311] mkdir("./file1", 0777 [pid 315] <... openat resumed>) = 4 [pid 311] <... mkdir resumed>) = 0 [pid 315] ioctl(4, LOOP_SET_FD, 3 [pid 311] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 306] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 306] chdir("./file1") = 0 [pid 306] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 306] ioctl(4, LOOP_CLR_FD) = 0 [pid 306] close(4) = 0 [pid 306] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 306] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 315] <... ioctl resumed>) = 0 [pid 315] close(3) = 0 [pid 315] close(4 [pid 314] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 310] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 304] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... futex resumed>) = 0 [pid 306] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 306] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... futex resumed>) = 1 [pid 306] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 306] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... futex resumed>) = 1 [ 25.742304][ T30] audit: type=1400 audit(1735705947.585:70): avc: denied { mounton } for pid=304 comm="syz-executor300" path="/root/syzkaller.IdzkAo/0/file1" dev="sda1" ino=1940 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 25.757652][ T314] loop2: detected capacity change from 0 to 2048 [ 25.774224][ T310] loop3: detected capacity change from 0 to 2048 [ 25.779722][ T311] loop0: detected capacity change from 0 to 2048 [ 25.798904][ T306] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 306] creat("./bus", 000) = 6 [pid 306] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... futex resumed>) = 1 [pid 306] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 306] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... futex resumed>) = 1 [pid 306] pwrite64(6, "+", 1, 0) = 1 [pid 306] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... futex resumed>) = 1 [pid 306] open("./bus", O_RDONLY) = 7 [pid 306] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 304] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 304] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 304] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[319]}, 88) = 319 [pid 304] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 304] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... futex resumed>) = 1 [pid 306] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 306] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 306] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 319 attached [pid 319] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 319] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 319] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 304] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... futex resumed>) = 0 [pid 319] <... futex resumed>) = 1 [ 25.810732][ T315] loop1: detected capacity change from 0 to 2048 [ 25.814409][ T30] audit: type=1400 audit(1735705947.655:71): avc: denied { mount } for pid=304 comm="syz-executor300" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 25.835496][ T306] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 319] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 304] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 319] <... futex resumed>) = 0 [pid 304] <... futex resumed>) = 1 [pid 319] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 304] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 319] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 319] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 304] <... futex resumed>) = 0 [pid 319] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 315] <... close resumed>) = 0 [pid 315] mkdir("./file1", 0777) = 0 [ 25.839462][ T30] audit: type=1400 audit(1735705947.665:72): avc: denied { write } for pid=304 comm="syz-executor300" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 25.854503][ T306] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 25.875226][ T30] audit: type=1400 audit(1735705947.665:73): avc: denied { add_name } for pid=304 comm="syz-executor300" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 25.888756][ T306] EXT4-fs (loop4): This should not happen!! Data will be lost [ 25.888756][ T306] [pid 315] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 311] <... mount resumed>) = 0 [pid 310] <... mount resumed>) = 0 [ 25.909663][ T311] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 25.918920][ T306] EXT4-fs (loop4): Total free blocks count 0 [ 25.928411][ T310] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 25.943243][ T306] EXT4-fs (loop4): Free/Dirty block details [pid 311] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 310] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 311] <... openat resumed>) = 3 [pid 310] <... openat resumed>) = 3 [pid 311] chdir("./file1" [pid 310] chdir("./file1" [pid 311] <... chdir resumed>) = 0 [pid 310] <... chdir resumed>) = 0 [pid 311] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 25.943373][ T30] audit: type=1400 audit(1735705947.665:74): avc: denied { create } for pid=304 comm="syz-executor300" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 25.949968][ T306] EXT4-fs (loop4): free_blocks=2415919504 [ 25.969751][ T30] audit: type=1400 audit(1735705947.665:75): avc: denied { read write open } for pid=304 comm="syz-executor300" path="/root/syzkaller.IdzkAo/0/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.000600][ T306] EXT4-fs (loop4): dirty_blocks=32 [ 26.005412][ T315] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 310] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 311] <... openat resumed>) = 4 [pid 310] <... openat resumed>) = 4 [pid 315] <... mount resumed>) = 0 [pid 311] ioctl(4, LOOP_CLR_FD [pid 310] ioctl(4, LOOP_CLR_FD [pid 315] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 311] <... ioctl resumed>) = 0 [pid 310] <... ioctl resumed>) = 0 [pid 315] <... openat resumed>) = 3 [pid 311] close(4 [pid 310] close(4 [pid 315] chdir("./file1" [pid 311] <... close resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 311] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] <... chdir resumed>) = 0 [pid 311] <... futex resumed>) = 1 [pid 310] <... futex resumed>) = 1 [pid 305] <... futex resumed>) = 0 [pid 303] <... futex resumed>) = 0 [pid 315] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 311] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 315] <... openat resumed>) = 4 [pid 311] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 305] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] ioctl(4, LOOP_CLR_FD [pid 311] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 310] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 305] <... futex resumed>) = 0 [pid 315] <... ioctl resumed>) = 0 [pid 303] <... futex resumed>) = 0 [pid 315] close(4 [pid 311] <... open resumed>) = 4 [pid 310] <... open resumed>) = 4 [pid 305] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] <... close resumed>) = 0 [pid 311] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 315] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... futex resumed>) = 0 [pid 310] <... futex resumed>) = 0 [pid 305] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] <... futex resumed>) = 1 [pid 313] <... futex resumed>) = 0 [pid 311] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 310] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 305] <... futex resumed>) = 0 [pid 303] <... futex resumed>) = 0 [pid 315] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 313] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... open resumed>) = 5 [pid 310] <... open resumed>) = 5 [pid 305] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 313] <... futex resumed>) = 0 [pid 311] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 315] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 313] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... futex resumed>) = 0 [pid 310] <... futex resumed>) = 0 [pid 305] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 311] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] creat("./bus", 000 [pid 305] <... futex resumed>) = 0 [pid 303] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] <... creat resumed>) = 6 [pid 305] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] <... futex resumed>) = 0 [pid 311] creat("./bus", 000 [pid 310] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 303] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... creat resumed>) = 6 [pid 305] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... futex resumed>) = 0 [pid 315] <... open resumed>) = 4 [pid 311] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 305] <... futex resumed>) = 0 [pid 315] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... futex resumed>) = 1 [pid 310] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 305] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] <... futex resumed>) = 0 [pid 315] <... futex resumed>) = 1 [pid 313] <... futex resumed>) = 0 [pid 311] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 303] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 313] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] <... futex resumed>) = 0 [pid 305] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... futex resumed>) = 0 [pid 315] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 313] <... futex resumed>) = 0 [pid 311] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 310] pwrite64(6, "+", 1, 0 [pid 305] <... futex resumed>) = 0 [pid 303] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 313] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 311] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... pwrite64 resumed>) = 1 [pid 305] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] <... open resumed>) = 5 [pid 311] <... futex resumed>) = 1 [pid 310] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 303] <... futex resumed>) = 0 [pid 311] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] <... futex resumed>) = 0 [pid 305] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 319] <... futex resumed>) = ? [pid 315] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 314] <... mount resumed>) = 0 [pid 311] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] open("./bus", O_RDONLY [pid 305] <... futex resumed>) = 0 [pid 303] <... futex resumed>) = 0 [pid 319] +++ killed by SIGBUS +++ [pid 315] <... futex resumed>) = 1 [pid 314] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 313] <... futex resumed>) = 0 [pid 311] pwrite64(6, "+", 1, 0 [pid 310] <... open resumed>) = 7 [pid 305] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 313] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... pwrite64 resumed>) = 1 [pid 310] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 314] <... openat resumed>) = 3 [pid 314] chdir("./file1") = 0 [pid 314] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 314] ioctl(4, LOOP_CLR_FD) = 0 [pid 314] close(4 [pid 315] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 313] <... futex resumed>) = 0 [pid 311] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... futex resumed>) = 0 [pid 305] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] creat("./bus", 000 [pid 313] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... futex resumed>) = 1 [pid 310] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 305] <... futex resumed>) = 0 [pid 303] <... futex resumed>) = 0 [pid 315] <... creat resumed>) = 6 [pid 311] open("./bus", O_RDONLY [pid 310] <... copy_file_range resumed>) = 1 [pid 305] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... open resumed>) = 7 [pid 310] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = 0 [pid 303] <... futex resumed>) = 0 [pid 315] <... futex resumed>) = 1 [pid 313] <... futex resumed>) = 0 [pid 311] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... futex resumed>) = 0 [pid 305] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 303] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 313] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... futex resumed>) = 0 [pid 310] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 305] <... mmap resumed>) = 0x7fb0838ed000 [pid 303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 315] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 313] <... futex resumed>) = 0 [pid 311] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 305] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 303] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... copy_file_range resumed>) = 1 [pid 305] <... mprotect resumed>) = 0 [pid 303] <... futex resumed>) = 0 [pid 315] <... futex resumed>) = 0 [pid 313] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 311] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] rt_sigprocmask(SIG_BLOCK, ~[], [pid 303] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] pwrite64(6, "+", 1, 0 [pid 313] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... futex resumed>) = 0 [pid 305] <... rt_sigprocmask resumed>[], 8) = 0 [pid 303] <... futex resumed>) = 0 [pid 315] <... pwrite64 resumed>) = 1 [pid 313] <... futex resumed>) = 0 [pid 311] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 305] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 303] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 315] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] <... mmap resumed>) = 0x7fb0838ed000 [pid 315] <... futex resumed>) = 0 [pid 313] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 305] <... clone3 resumed> => {parent_tid=[328]}, 88) = 328 [pid 303] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 315] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 313] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] rt_sigprocmask(SIG_SETMASK, [], [pid 303] <... mprotect resumed>) = 0 [pid 315] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 313] <... futex resumed>) = 0 [pid 305] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 303] rt_sigprocmask(SIG_BLOCK, ~[], [pid 315] open("./bus", O_RDONLY [pid 313] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... rt_sigprocmask resumed>[], 8) = 0 [pid 315] <... open resumed>) = 7 [pid 305] <... futex resumed>) = 0 [pid 303] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 315] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] <... futex resumed>) = 1 [pid 313] <... futex resumed>) = 0 [pid 303] <... clone3 resumed> => {parent_tid=[329]}, 88) = 329 [pid 315] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 313] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] rt_sigprocmask(SIG_SETMASK, [], [pid 315] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 313] <... futex resumed>) = 0 [pid 303] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 315] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 313] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 328 attached [pid 315] <... copy_file_range resumed>) = 1 [pid 313] <... futex resumed>) = 0 [pid 306] +++ killed by SIGBUS +++ [pid 304] +++ killed by SIGBUS +++ [pid 303] <... futex resumed>) = 0 ./strace-static-x86_64: Process 329 attached [pid 328] set_robust_list(0x7fb08390d9a0, 24 [pid 315] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 314] <... close resumed>) = 0 [pid 313] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 303] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=304, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 328] <... set_robust_list resumed>) = 0 [pid 315] <... futex resumed>) = 0 [pid 313] <... mmap resumed>) = 0x7fb0838ed000 [pid 328] rt_sigprocmask(SIG_SETMASK, [], [pid 315] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 314] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 329] set_robust_list(0x7fb08390d9a0, 24 [pid 328] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 313] <... mprotect resumed>) = 0 [pid 302] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 328] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 314] <... futex resumed>) = 1 [pid 313] rt_sigprocmask(SIG_BLOCK, ~[], [pid 312] <... futex resumed>) = 0 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 313] <... rt_sigprocmask resumed>[], 8) = 0 [pid 312] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 313] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 312] <... futex resumed>) = 0 [pid 302] <... openat resumed>) = 3 [pid 314] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 312] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] newfstatat(3, "", ./strace-static-x86_64: Process 330 attached [pid 329] <... set_robust_list resumed>) = 0 [pid 328] <... mmap resumed>) = 0x20000000 [pid 314] <... open resumed>) = 4 [pid 313] <... clone3 resumed> => {parent_tid=[330]}, 88) = 330 [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 330] set_robust_list(0x7fb08390d9a0, 24 [pid 329] rt_sigprocmask(SIG_SETMASK, [], [pid 328] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 314] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] rt_sigprocmask(SIG_SETMASK, [], [pid 302] getdents64(3, [pid 330] <... set_robust_list resumed>) = 0 [pid 329] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 328] <... futex resumed>) = 1 [pid 314] <... futex resumed>) = 1 [ 26.006259][ T306] EXT4-fs (loop4): Block reservation details [ 26.022135][ T306] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 26.035757][ T314] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 26.049265][ T306] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 313] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 312] <... futex resumed>) = 0 [pid 305] <... futex resumed>) = 0 [pid 302] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 330] rt_sigprocmask(SIG_SETMASK, [], [pid 329] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 328] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 314] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 313] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 314] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 313] <... futex resumed>) = 0 [pid 312] <... futex resumed>) = 0 [pid 310] <... futex resumed>) = 0 [pid 305] <... futex resumed>) = 1 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 330] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 329] <... mmap resumed>) = 0x20000000 [pid 314] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 313] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 312] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 330] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 329] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] <... mmap resumed>) = 0x20000000 [pid 329] <... futex resumed>) = 1 [pid 330] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 330] <... futex resumed>) = 0 [pid 330] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 305] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./0/binderfs") = 0 [pid 302] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 314] <... open resumed>) = 5 [pid 314] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 314] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 313] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 313] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 313] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 312] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 312] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 314] <... futex resumed>) = 0 [pid 312] <... futex resumed>) = 1 [pid 314] creat("./bus", 000 [pid 312] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 314] <... creat resumed>) = 6 [pid 314] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 312] <... futex resumed>) = 0 [pid 314] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 312] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 314] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 312] <... futex resumed>) = 0 [pid 314] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 314] <... futex resumed>) = 0 [pid 312] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 315] <... futex resumed>) = 0 [pid 314] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 312] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... futex resumed>) = 0 [pid 314] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 312] <... futex resumed>) = 0 [pid 314] pwrite64(6, "+", 1, 0 [pid 312] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 314] <... pwrite64 resumed>) = 1 [pid 314] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 312] <... futex resumed>) = 0 [pid 314] open("./bus", O_RDONLY [pid 312] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 314] <... open resumed>) = 7 [pid 312] <... futex resumed>) = 0 [pid 314] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 314] <... futex resumed>) = 0 [pid 312] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 314] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 312] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 314] <... copy_file_range resumed>) = 1 [pid 312] <... futex resumed>) = 0 [pid 314] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 314] <... futex resumed>) = 0 [pid 312] <... futex resumed>) = 0 [pid 314] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 312] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 312] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 312] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 312] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[331]}, 88) = 331 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 312] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 303] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 331 attached [pid 331] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 331] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 331] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 312] <... futex resumed>) = 0 [pid 312] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 314] <... futex resumed>) = 0 [pid 312] <... futex resumed>) = 1 [pid 311] <... futex resumed>) = 0 [pid 313] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 312] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 303] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 26.106461][ T315] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 26.111299][ T314] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 26.121762][ T315] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 26.135724][ T314] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 313] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] <... futex resumed>) = 1 [pid 331] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 330] <... futex resumed>) = 0 [pid 329] <... futex resumed>) = 0 [pid 328] <... futex resumed>) = 0 [pid 313] <... futex resumed>) = 1 [pid 305] <... futex resumed>) = 1 [pid 303] <... futex resumed>) = 1 [pid 302] <... umount2 resumed>) = 0 [pid 302] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 302] newfstatat(4, "", [pid 330] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 329] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 328] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 313] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 302] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 302] close(4) = 0 [pid 302] rmdir("./0/file1") = 0 [pid 302] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 328] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 302] rmdir("./0" [pid 329] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... rmdir resumed>) = 0 [pid 302] mkdir("./1", 0777) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] close(3) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 332 [ 26.148918][ T311] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 26.159866][ T314] EXT4-fs (loop2): This should not happen!! Data will be lost [ 26.159866][ T314] [ 26.175971][ T310] EXT4-fs (loop3): This should not happen!! Data will be lost [ 26.175971][ T310] [ 26.184059][ T314] EXT4-fs (loop2): Total free blocks count 0 [ 26.194912][ T310] EXT4-fs (loop3): Total free blocks count 0 [ 26.199425][ T314] EXT4-fs (loop2): Free/Dirty block details [pid 330] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... futex resumed>) = 1 [pid 328] <... futex resumed>) = 1 [pid 305] <... futex resumed>) = 0 [pid 303] <... futex resumed>) = 0 ./strace-static-x86_64: Process 332 attached [pid 330] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 328] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 312] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 332] set_robust_list(0x5555610ee6a0, 24 [pid 330] <... futex resumed>) = 1 [pid 313] <... futex resumed>) = 0 [pid 312] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] <... set_robust_list resumed>) = 0 [pid 330] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 312] <... futex resumed>) = 1 [pid 331] <... futex resumed>) = 0 [pid 331] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0) = -1 EBADF (Bad file descriptor) [ 26.218356][ T311] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 26.221312][ T314] EXT4-fs (loop2): free_blocks=2415919504 [ 26.232226][ T315] EXT4-fs (loop1): This should not happen!! Data will be lost [ 26.232226][ T315] [ 26.236560][ T314] EXT4-fs (loop2): dirty_blocks=32 [ 26.247474][ T310] EXT4-fs (loop3): Free/Dirty block details [ 26.251370][ T314] EXT4-fs (loop2): Block reservation details [pid 331] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 331] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 332] chdir("./1" [pid 314] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 312] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 332] <... chdir resumed>) = 0 [pid 312] <... futex resumed>) = ? [pid 331] <... futex resumed>) = ? [pid 332] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 331] +++ killed by SIGBUS +++ [pid 332] <... prctl resumed>) = 0 [ 26.257403][ T311] EXT4-fs (loop0): This should not happen!! Data will be lost [ 26.257403][ T311] [ 26.262943][ T314] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 26.274239][ T310] EXT4-fs (loop3): free_blocks=2415919504 [ 26.278802][ T315] EXT4-fs (loop1): Total free blocks count 0 [ 26.285132][ T310] EXT4-fs (loop3): dirty_blocks=32 [ 26.289724][ T315] EXT4-fs (loop1): Free/Dirty block details [ 26.295905][ T311] EXT4-fs (loop0): Total free blocks count 0 [ 26.301001][ T315] EXT4-fs (loop1): free_blocks=2415919504 [ 26.308195][ T310] EXT4-fs (loop3): Block reservation details [pid 332] setpgid(0, 0) = 0 [pid 310] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 328] <... futex resumed>) = ? [pid 332] <... openat resumed>) = 3 [pid 328] +++ killed by SIGBUS +++ [ 26.313898][ T314] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 26.319138][ T311] EXT4-fs (loop0): Free/Dirty block details [ 26.330239][ T315] EXT4-fs (loop1): dirty_blocks=32 [ 26.336863][ T310] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 26.340770][ T315] EXT4-fs (loop1): Block reservation details [ 26.347912][ T311] EXT4-fs (loop0): free_blocks=2415919504 [ 26.352501][ T314] EXT4-fs (loop2): This should not happen!! Data will be lost [ 26.352501][ T314] [pid 310] +++ killed by SIGBUS +++ [pid 332] write(3, "1000", 4) = 4 [pid 315] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 311] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 314] +++ killed by SIGBUS +++ [pid 312] +++ killed by SIGBUS +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=312, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=23} --- [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 332] close(3) = 0 [pid 332] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 332] write(1, "executing program\n", 18) = 18 [pid 332] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 332] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 332] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 332] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 332] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 332] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 332] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[333]}, 88) = 333 [pid 332] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 332] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 332] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 329] <... futex resumed>) = ? [pid 329] +++ killed by SIGBUS +++ ./strace-static-x86_64: Process 333 attached [pid 330] <... futex resumed>) = ? [pid 305] +++ killed by SIGBUS +++ [pid 333] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 333] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 333] memfd_create("syzkaller", 0) = 3 [pid 333] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=305, si_uid=0, si_status=SIGBUS, si_utime=1, si_stime=13} --- [pid 333] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 301] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 301] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./0/binderfs") = 0 [ 26.359176][ T311] EXT4-fs (loop0): dirty_blocks=32 [ 26.367731][ T315] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 26.374059][ T311] EXT4-fs (loop0): Block reservation details [ 26.379813][ T305] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 26.385121][ T311] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 26.396198][ T305] EXT4-fs (loop3): This should not happen!! Data will be lost [ 26.396198][ T305] [pid 301] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 330] +++ killed by SIGBUS +++ [pid 300] <... restart_syscall resumed>) = 0 [pid 311] +++ killed by SIGBUS +++ [pid 303] +++ killed by SIGBUS +++ [pid 333] <... write resumed>) = 1048576 [pid 333] munmap(0x7fb07b50e000, 138412032) = 0 [pid 333] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 333] ioctl(4, LOOP_SET_FD, 3 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=303, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=17} --- [pid 300] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] <... openat resumed>) = 3 [pid 298] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 300] newfstatat(3, "", [pid 298] <... openat resumed>) = 3 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] newfstatat(3, "", [pid 300] getdents64(3, [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 298] getdents64(3, [pid 300] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] newfstatat(AT_FDCWD, "./0/binderfs", [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] newfstatat(AT_FDCWD, "./0/binderfs", [pid 300] unlink("./0/binderfs" [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] <... unlink resumed>) = 0 [pid 298] unlink("./0/binderfs" [pid 300] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... unlink resumed>) = 0 [pid 298] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 333] <... ioctl resumed>) = 0 [pid 333] close(3) = 0 [pid 333] close(4) = 0 [pid 315] +++ killed by SIGBUS +++ [pid 313] +++ killed by SIGBUS +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=313, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=19} --- [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 333] mkdir("./file1", 0777) = 0 [pid 333] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 301] <... umount2 resumed>) = 0 [pid 299] <... restart_syscall resumed>) = 0 [pid 299] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./0/binderfs") = 0 [pid 299] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./0/file1") = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./0") = 0 [pid 301] mkdir("./1", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 336 ./strace-static-x86_64: Process 336 attached [pid 336] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 336] chdir("./1") = 0 [pid 336] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 336] setpgid(0, 0) = 0 [pid 336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 336] write(3, "1000", 4) = 4 [pid 336] close(3) = 0 [ 26.409905][ T311] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 26.423489][ T311] EXT4-fs (loop0): This should not happen!! Data will be lost [ 26.423489][ T311] [ 26.434539][ T315] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 26.438726][ T333] loop4: detected capacity change from 0 to 2048 [ 26.447008][ T315] EXT4-fs (loop1): This should not happen!! Data will be lost [ 26.447008][ T315] [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./0/file1", [pid 300] <... umount2 resumed>) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 300] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] rmdir("./0/file1" [pid 300] newfstatat(AT_FDCWD, "./0/file1", [pid 298] <... rmdir resumed>) = 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 300] close(4 [pid 298] getdents64(3, [pid 300] <... close resumed>) = 0 [pid 298] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 300] rmdir("./0/file1" [pid 298] close(3 [pid 300] <... rmdir resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 298] rmdir("./0") = 0 [pid 300] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 300] close(3 [pid 298] mkdir("./1", 0777 [pid 300] <... close resumed>) = 0 [pid 298] <... mkdir resumed>) = 0 [pid 300] rmdir("./0") = 0 [pid 300] mkdir("./1", 0777 [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD [pid 300] <... mkdir resumed>) = 0 [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] <... umount2 resumed>) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] <... clone resumed>, child_tidptr=0x5555610ee690) = 337 [pid 299] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] <... clone resumed>, child_tidptr=0x5555610ee690) = 339 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./0/file1", [pid 336] symlink("/dev/binderfs", "./binderfs") = 0 [pid 336] write(1, "executing program\n", 18executing program ) = 18 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 336] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 336] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 299] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 336] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 336] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 336] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 336] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 336] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[341]}, 88) = 341 [pid 336] rt_sigprocmask(SIG_SETMASK, [], [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 336] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 299] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 336] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... openat resumed>) = 4 [pid 336] <... futex resumed>) = 0 [pid 299] newfstatat(4, "", [pid 336] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 333] <... mount resumed>) = 0 [pid 299] getdents64(4, [pid 333] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 299] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 337 attached [pid 333] <... openat resumed>) = 3 [pid 299] close(4 [pid 333] chdir("./file1" [pid 299] <... close resumed>) = 0 [pid 337] set_robust_list(0x5555610ee6a0, 24 [pid 299] rmdir("./0/file1" [pid 333] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 339 attached [pid 337] <... set_robust_list resumed>) = 0 [pid 333] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 299] <... rmdir resumed>) = 0 [pid 337] chdir("./1" [pid 333] <... openat resumed>) = 4 [pid 299] getdents64(3, [pid 333] ioctl(4, LOOP_CLR_FD [pid 337] <... chdir resumed>) = 0 [pid 299] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 333] <... ioctl resumed>) = 0 [pid 337] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 333] close(4 [pid 299] close(3 [pid 333] <... close resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 333] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] rmdir("./0" [pid 339] set_robust_list(0x5555610ee6a0, 24 [pid 333] <... futex resumed>) = 1 [pid 332] <... futex resumed>) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 333] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 332] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] mkdir("./1", 0777 [pid 332] <... futex resumed>) = 0 [pid 339] <... set_robust_list resumed>) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 332] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] chdir("./1" [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 339] <... chdir resumed>) = 0 [pid 333] <... open resumed>) = 4 [pid 299] ioctl(3, LOOP_CLR_FD [pid 333] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 333] <... futex resumed>) = 1 [pid 332] <... futex resumed>) = 0 [pid 299] close(3 [pid 333] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 332] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] <... close resumed>) = 0 [pid 333] <... open resumed>) = 5 [pid 332] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 333] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 339] setpgid(0, 0) = 0 [pid 333] <... futex resumed>) = 1 [pid 332] <... futex resumed>) = 0 [pid 299] <... clone resumed>, child_tidptr=0x5555610ee690) = 342 [pid 333] creat("./bus", 000 [pid 332] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 332] <... futex resumed>) = 0 [pid 339] <... openat resumed>) = 3 [pid 333] <... creat resumed>) = 6 [pid 332] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 341 attached [pid 339] write(3, "1000", 4 [pid 337] <... prctl resumed>) = 0 [pid 333] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] set_robust_list(0x7fb08392e9a0, 24 [pid 339] <... write resumed>) = 4 [pid 341] <... set_robust_list resumed>) = 0 [pid 339] close(3 [pid 341] rt_sigprocmask(SIG_SETMASK, [], [pid 339] <... close resumed>) = 0 [pid 341] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 339] symlink("/dev/binderfs", "./binderfs" [pid 341] memfd_create("syzkaller", 0 [pid 339] <... symlink resumed>) = 0 executing program [pid 341] <... memfd_create resumed>) = 3 [pid 339] write(1, "executing program\n", 18 [pid 341] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 339] <... write resumed>) = 18 [pid 341] <... mmap resumed>) = 0x7fb07b50e000 [pid 339] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] setpgid(0, 0 [pid 333] <... futex resumed>) = 1 [pid 332] <... futex resumed>) = 0 [pid 339] <... futex resumed>) = 0 [pid 337] <... setpgid resumed>) = 0 [pid 333] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 332] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, [pid 337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 332] <... futex resumed>) = 0 [pid 339] <... rt_sigaction resumed>NULL, 8) = 0 [pid 337] <... openat resumed>) = 3 [pid 333] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 332] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 337] write(3, "1000", 4 [pid 333] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 342 attached [pid 341] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 339] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 337] <... write resumed>) = 4 [pid 333] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] set_robust_list(0x5555610ee6a0, 24 [pid 339] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 337] close(3 [pid 333] <... futex resumed>) = 1 [pid 332] <... futex resumed>) = 0 [pid 342] <... set_robust_list resumed>) = 0 [pid 339] <... mmap resumed>) = 0x7fb08390e000 [pid 337] <... close resumed>) = 0 [pid 333] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 332] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] chdir("./1" [pid 339] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE [pid 337] symlink("/dev/binderfs", "./binderfs" [pid 333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 332] <... futex resumed>) = 0 [pid 342] <... chdir resumed>) = 0 [pid 339] <... mprotect resumed>) = 0 [pid 337] <... symlink resumed>) = 0 [pid 333] pwrite64(6, "+", 1, 0 [pid 332] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 342] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 339] rt_sigprocmask(SIG_BLOCK, ~[], executing program [pid 337] write(1, "executing program\n", 18 [pid 333] <... pwrite64 resumed>) = 1 [pid 342] <... prctl resumed>) = 0 [pid 341] <... write resumed>) = 1048576 [pid 339] <... rt_sigprocmask resumed>[], 8) = 0 [pid 337] <... write resumed>) = 18 [pid 333] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] setpgid(0, 0 [pid 341] munmap(0x7fb07b50e000, 138412032 [pid 339] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} [pid 337] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = 1 [pid 332] <... futex resumed>) = 0 [pid 342] <... setpgid resumed>) = 0 [pid 341] <... munmap resumed>) = 0 [pid 337] <... futex resumed>) = 0 [pid 333] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 332] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 341] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 339] <... clone3 resumed> => {parent_tid=[343]}, 88) = 343 [pid 337] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, [pid 333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 332] <... futex resumed>) = 0 [pid 342] <... openat resumed>) = 3 [pid 341] <... openat resumed>) = 4 [pid 339] rt_sigprocmask(SIG_SETMASK, [], [pid 337] <... rt_sigaction resumed>NULL, 8) = 0 [pid 333] open("./bus", O_RDONLY [pid 332] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 342] write(3, "1000", 4 [pid 341] ioctl(4, LOOP_SET_FD, 3 [pid 339] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 337] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 333] <... open resumed>) = 7 ./strace-static-x86_64: Process 343 attached [pid 342] <... write resumed>) = 4 [pid 339] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 343] set_robust_list(0x7fb08392e9a0, 24 [pid 339] <... futex resumed>) = 0 [pid 343] <... set_robust_list resumed>) = 0 [pid 339] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 343] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 343] memfd_create("syzkaller", 0) = 3 [pid 343] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 342] close(3 [pid 337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 333] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... close resumed>) = 0 [pid 341] <... ioctl resumed>) = 0 [pid 337] <... mmap resumed>) = 0x7fb08390e000 [pid 333] <... futex resumed>) = 1 [pid 332] <... futex resumed>) = 0 [pid 342] symlink("/dev/binderfs", "./binderfs" [pid 341] close(3 [pid 337] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE [pid 333] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 332] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... symlink resumed>) = 0 [pid 337] <... mprotect resumed>) = 0 [pid 333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 332] <... futex resumed>) = 0 [ 26.485877][ T333] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. executing program [pid 341] <... close resumed>) = 0 [pid 342] write(1, "executing program\n", 18 [pid 341] close(4 [pid 337] rt_sigprocmask(SIG_BLOCK, ~[], [pid 333] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 332] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 342] <... write resumed>) = 18 [pid 337] <... rt_sigprocmask resumed>[], 8) = 0 [pid 333] <... copy_file_range resumed>) = 1 [pid 332] <... futex resumed>) = 0 [pid 342] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} [pid 333] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 342] <... futex resumed>) = 0 [pid 333] <... futex resumed>) = 0 [pid 332] <... mmap resumed>) = 0x7fb0838ed000 [pid 342] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, [pid 337] <... clone3 resumed> => {parent_tid=[344]}, 88) = 344 [pid 333] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 332] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 342] <... rt_sigaction resumed>NULL, 8) = 0 [pid 337] rt_sigprocmask(SIG_SETMASK, [], [pid 342] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 337] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 332] <... mprotect resumed>) = 0 [pid 342] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 337] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] rt_sigprocmask(SIG_BLOCK, ~[], [pid 342] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 337] <... futex resumed>) = 0 [pid 332] <... rt_sigprocmask resumed>[], 8) = 0 [pid 342] <... mmap resumed>) = 0x7fb08390e000 [pid 337] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 332] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 342] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 344 attached [pid 342] rt_sigprocmask(SIG_BLOCK, ~[], [pid 332] <... clone3 resumed> => {parent_tid=[345]}, 88) = 345 [pid 342] <... rt_sigprocmask resumed>[], 8) = 0 [pid 332] rt_sigprocmask(SIG_SETMASK, [], [pid 342] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} [pid 332] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 332] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... clone3 resumed> => {parent_tid=[346]}, 88) = 346 [pid 332] <... futex resumed>) = 0 ./strace-static-x86_64: Process 346 attached ./strace-static-x86_64: Process 345 attached [pid 344] set_robust_list(0x7fb08392e9a0, 24 [pid 343] <... write resumed>) = 1048576 [pid 342] rt_sigprocmask(SIG_SETMASK, [], [pid 332] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] set_robust_list(0x7fb08390d9a0, 24 [pid 344] <... set_robust_list resumed>) = 0 [pid 343] munmap(0x7fb07b50e000, 138412032 [pid 342] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 346] set_robust_list(0x7fb08392e9a0, 24 [pid 342] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 346] <... set_robust_list resumed>) = 0 [pid 342] <... futex resumed>) = 0 [pid 346] rt_sigprocmask(SIG_SETMASK, [], [pid 342] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 345] <... set_robust_list resumed>) = 0 [pid 344] rt_sigprocmask(SIG_SETMASK, [], [pid 343] <... munmap resumed>) = 0 [pid 346] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 346] memfd_create("syzkaller", 0 [pid 345] rt_sigprocmask(SIG_SETMASK, [], [pid 344] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 346] <... memfd_create resumed>) = 3 [pid 346] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 345] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 344] memfd_create("syzkaller", 0 [pid 343] <... openat resumed>) = 4 [pid 345] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 3 [pid 343] ioctl(4, LOOP_SET_FD, 3 [pid 345] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 346] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 344] <... mmap resumed>) = 0x7fb07b50e000 [pid 345] <... futex resumed>) = 1 [pid 343] <... ioctl resumed>) = 0 [pid 332] <... futex resumed>) = 0 [pid 346] <... write resumed>) = 1048576 [pid 346] munmap(0x7fb07b50e000, 138412032) = 0 [pid 346] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 346] ioctl(4, LOOP_SET_FD, 3 [pid 345] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 344] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 343] close(3 [pid 332] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = 0 [pid 332] <... futex resumed>) = 1 [pid 346] <... ioctl resumed>) = 0 [pid 341] <... close resumed>) = 0 [pid 332] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] mkdir("./file1", 0777) = 0 [pid 341] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 346] close(3) = 0 [pid 346] close(4 [pid 343] <... close resumed>) = 0 [ 26.544093][ T341] loop3: detected capacity change from 0 to 2048 [ 26.563364][ T343] loop2: detected capacity change from 0 to 2048 [ 26.573435][ T346] loop1: detected capacity change from 0 to 2048 [ 26.574680][ T333] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 343] close(4 [pid 344] <... write resumed>) = 1048576 [pid 344] munmap(0x7fb07b50e000, 138412032) = 0 [pid 344] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 344] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 344] close(3) = 0 [pid 344] close(4 [pid 332] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 332] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 332] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] <... futex resumed>) = 0 [pid 345] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0) = -1 EBADF (Bad file descriptor) [pid 345] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 332] <... futex resumed>) = 0 [pid 345] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 344] <... close resumed>) = 0 [pid 344] mkdir("./file1", 0777) = 0 [ 26.597011][ T333] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 26.599603][ T344] loop0: detected capacity change from 0 to 2048 [ 26.609512][ T333] EXT4-fs (loop4): This should not happen!! Data will be lost [ 26.609512][ T333] [ 26.624879][ T333] EXT4-fs (loop4): Total free blocks count 0 [ 26.630787][ T333] EXT4-fs (loop4): Free/Dirty block details [ 26.636547][ T333] EXT4-fs (loop4): free_blocks=2415919504 [ 26.642074][ T333] EXT4-fs (loop4): dirty_blocks=32 [pid 344] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 333] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 345] <... futex resumed>) = ? [pid 345] +++ killed by SIGBUS +++ [pid 346] <... close resumed>) = 0 [pid 343] <... close resumed>) = 0 [pid 346] mkdir("./file1", 0777 [pid 343] mkdir("./file1", 0777 [pid 346] <... mkdir resumed>) = 0 [pid 343] <... mkdir resumed>) = 0 [pid 346] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 343] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 333] +++ killed by SIGBUS +++ [pid 332] +++ killed by SIGBUS +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=332, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 302] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 341] <... mount resumed>) = 0 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 341] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 341] chdir("./file1") = 0 [pid 341] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 341] ioctl(4, LOOP_CLR_FD) = 0 [ 26.647087][ T333] EXT4-fs (loop4): Block reservation details [ 26.653048][ T333] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 26.665301][ T333] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 26.677757][ T333] EXT4-fs (loop4): This should not happen!! Data will be lost [ 26.677757][ T333] [ 26.681601][ T341] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 341] close(4) = 0 [pid 341] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] <... futex resumed>) = 0 [pid 302] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] newfstatat(3, "", [pid 336] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 341] <... futex resumed>) = 1 [pid 341] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 341] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] <... futex resumed>) = 1 [pid 341] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 341] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] <... futex resumed>) = 1 [pid 341] creat("./bus", 000) = 6 [pid 341] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] <... futex resumed>) = 1 [pid 341] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 341] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 341] <... futex resumed>) = 1 [pid 336] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] pwrite64(6, "+", 1, 0) = 1 [pid 341] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 336] <... futex resumed>) = 0 [pid 341] open("./bus", O_RDONLY [pid 336] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] <... open resumed>) = 7 [pid 336] <... futex resumed>) = 0 [pid 341] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] <... futex resumed>) = 0 [pid 336] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 341] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 336] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] <... copy_file_range resumed>) = 1 [pid 336] <... futex resumed>) = 0 [pid 341] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] <... futex resumed>) = 0 [pid 336] <... futex resumed>) = 0 [pid 341] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 336] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 336] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 336] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 336] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[356]}, 88) = 356 [pid 336] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 336] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] <... mount resumed>) = 0 [pid 344] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 344] chdir("./file1") = 0 [pid 344] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 302] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 356 attached [pid 343] <... mount resumed>) = 0 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 343] chdir("./file1") = 0 [pid 343] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 343] ioctl(4, LOOP_CLR_FD) = 0 [pid 343] close(4 [pid 302] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./1/binderfs") = 0 [pid 302] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 343] <... close resumed>) = 0 [pid 343] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] <... futex resumed>) = 0 [pid 339] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 339] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 1 [pid 343] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 343] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] set_robust_list(0x7fb08390d9a0, 24 [pid 346] <... mount resumed>) = 0 [pid 344] ioctl(4, LOOP_CLR_FD [pid 343] <... futex resumed>) = 1 [pid 339] <... futex resumed>) = 0 [pid 344] <... ioctl resumed>) = 0 [pid 339] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] close(4 [pid 339] <... futex resumed>) = 0 [pid 356] <... set_robust_list resumed>) = 0 [pid 346] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 344] <... close resumed>) = 0 [pid 343] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 339] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 337] <... futex resumed>) = 0 [pid 344] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 337] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 337] <... futex resumed>) = 0 [pid 344] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 337] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] <... open resumed>) = 4 [pid 344] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 337] <... futex resumed>) = 0 [pid 344] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 337] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 337] <... futex resumed>) = 0 [pid 344] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 343] <... open resumed>) = 5 [pid 337] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] <... open resumed>) = 5 [pid 343] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 343] <... futex resumed>) = 1 [pid 339] <... futex resumed>) = 0 [pid 337] <... futex resumed>) = 0 [pid 344] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] creat("./bus", 000 [pid 339] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 343] <... creat resumed>) = 6 [pid 339] <... futex resumed>) = 0 [pid 337] <... futex resumed>) = 0 [pid 344] creat("./bus", 000 [pid 343] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] <... creat resumed>) = 6 [pid 343] <... futex resumed>) = 0 [pid 339] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 344] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 339] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] <... futex resumed>) = 1 [pid 343] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 339] <... futex resumed>) = 0 [pid 337] <... futex resumed>) = 0 [pid 344] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 343] <... futex resumed>) = 0 [pid 339] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 337] <... futex resumed>) = 0 [pid 344] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 343] pwrite64(6, "+", 1, 0 [pid 339] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 343] <... pwrite64 resumed>) = 1 [pid 339] <... futex resumed>) = 0 [pid 344] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] <... futex resumed>) = 1 [pid 343] <... futex resumed>) = 0 [pid 339] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 337] <... futex resumed>) = 0 [pid 344] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] open("./bus", O_RDONLY [pid 339] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] rt_sigprocmask(SIG_SETMASK, [], [pid 346] <... openat resumed>) = 3 [pid 344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 343] <... open resumed>) = 7 [pid 339] <... futex resumed>) = 0 [pid 337] <... futex resumed>) = 0 [pid 356] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 346] chdir("./file1" [pid 344] pwrite64(6, "+", 1, 0 [pid 343] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 356] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 346] <... chdir resumed>) = 0 [pid 344] <... pwrite64 resumed>) = 1 [pid 343] <... futex resumed>) = 0 [pid 339] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 346] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 344] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 356] <... mmap resumed>) = 0x20000000 [pid 344] <... futex resumed>) = 1 [pid 343] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 339] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... futex resumed>) = 0 [pid 356] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 346] <... openat resumed>) = 4 [pid 344] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 339] <... futex resumed>) = 0 [pid 337] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 346] ioctl(4, LOOP_CLR_FD [pid 344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 339] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... futex resumed>) = 0 [pid 344] open("./bus", O_RDONLY [pid 343] <... copy_file_range resumed>) = 1 [pid 339] <... futex resumed>) = 0 [pid 337] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 346] <... ioctl resumed>) = 0 [pid 356] <... futex resumed>) = 1 [pid 344] <... open resumed>) = 7 [pid 343] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 336] <... futex resumed>) = 0 [pid 356] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 346] close(4 [pid 344] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] <... futex resumed>) = 0 [pid 339] <... mmap resumed>) = 0x7fb0838ed000 [pid 336] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] <... futex resumed>) = 1 [pid 343] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 339] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 341] <... futex resumed>) = 0 [pid 337] <... futex resumed>) = 0 [pid 336] <... futex resumed>) = 1 [pid 346] <... close resumed>) = 0 [pid 344] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 339] <... mprotect resumed>) = 0 [pid 337] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 346] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 339] rt_sigprocmask(SIG_BLOCK, ~[], [pid 337] <... futex resumed>) = 0 [pid 346] <... futex resumed>) = 1 [pid 344] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 342] <... futex resumed>) = 0 [pid 339] <... rt_sigprocmask resumed>[], 8) = 0 [pid 337] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 346] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 344] <... copy_file_range resumed>) = 1 [pid 342] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 337] <... futex resumed>) = 0 [pid 346] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 344] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 346] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 344] <... futex resumed>) = 0 [pid 342] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] <... clone3 resumed> => {parent_tid=[357]}, 88) = 357 [pid 337] <... mmap resumed>) = 0x7fb0838ed000 [pid 346] <... open resumed>) = 4 [pid 344] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 339] rt_sigprocmask(SIG_SETMASK, [], [pid 337] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 346] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 337] <... mprotect resumed>) = 0 [pid 346] <... futex resumed>) = 1 [pid 342] <... futex resumed>) = 0 [pid 339] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] rt_sigprocmask(SIG_BLOCK, ~[], [pid 346] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 342] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] <... futex resumed>) = 0 [pid 337] <... rt_sigprocmask resumed>[], 8) = 0 [pid 346] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 342] <... futex resumed>) = 0 [pid 339] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 346] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 342] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 346] <... open resumed>) = 5 [pid 337] <... clone3 resumed> => {parent_tid=[358]}, 88) = 358 [pid 346] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] rt_sigprocmask(SIG_SETMASK, [], [pid 346] <... futex resumed>) = 1 [pid 342] <... futex resumed>) = 0 [pid 337] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 346] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 342] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 346] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 342] <... futex resumed>) = 0 [pid 337] <... futex resumed>) = 0 [pid 346] creat("./bus", 000 [pid 342] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 346] <... creat resumed>) = 6 [pid 346] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 342] <... futex resumed>) = 0 [pid 346] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 342] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 346] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 342] <... futex resumed>) = 0 [pid 346] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [ 26.700656][ T344] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 26.713483][ T343] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 26.725491][ T346] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 342] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 346] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 346] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 342] <... futex resumed>) = 0 [pid 346] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 342] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 346] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 342] <... futex resumed>) = 0 [pid 346] pwrite64(6, "+", 1, 0 [pid 342] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 346] <... pwrite64 resumed>) = 1 [pid 346] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 357 attached ) = 1 [pid 342] <... futex resumed>) = 0 [pid 357] set_robust_list(0x7fb08390d9a0, 24 [pid 346] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 342] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 357] <... set_robust_list resumed>) = 0 [pid 346] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 342] <... futex resumed>) = 0 [pid 357] rt_sigprocmask(SIG_SETMASK, [], [pid 346] open("./bus", O_RDONLY [pid 342] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 357] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 346] <... open resumed>) = 7 [pid 357] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 346] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 357] <... mmap resumed>) = 0x20000000 [pid 346] <... futex resumed>) = 1 [pid 342] <... futex resumed>) = 0 ./strace-static-x86_64: Process 358 attached [pid 346] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 342] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] set_robust_list(0x7fb08390d9a0, 24 [pid 346] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 342] <... futex resumed>) = 0 [pid 358] <... set_robust_list resumed>) = 0 [pid 346] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 342] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] rt_sigprocmask(SIG_SETMASK, [], [pid 357] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 346] <... copy_file_range resumed>) = 1 [pid 342] <... futex resumed>) = 0 [pid 358] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 357] <... futex resumed>) = 1 [pid 346] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 339] <... futex resumed>) = 0 [pid 358] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 357] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 346] <... futex resumed>) = 0 [pid 342] <... mmap resumed>) = 0x7fb0838ed000 [pid 339] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] <... mmap resumed>) = 0x20000000 [pid 346] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] <... futex resumed>) = 0 [pid 342] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 339] <... futex resumed>) = 1 [pid 358] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... mprotect resumed>) = 0 [pid 339] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... umount2 resumed>) = 0 [pid 358] <... futex resumed>) = 1 [pid 342] rt_sigprocmask(SIG_BLOCK, ~[], [pid 337] <... futex resumed>) = 0 [pid 302] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 358] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 342] <... rt_sigprocmask resumed>[], 8) = 0 [pid 337] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 344] <... futex resumed>) = 0 [pid 342] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 337] <... futex resumed>) = 1 [pid 302] newfstatat(AT_FDCWD, "./1/file1", [pid 337] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 336] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 342] <... clone3 resumed> => {parent_tid=[359]}, 88) = 359 [ 26.754164][ T341] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 26.770735][ T343] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 26.778220][ T341] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 336] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 356] <... futex resumed>) = 0 [pid 342] rt_sigprocmask(SIG_SETMASK, [], [pid 336] <... futex resumed>) = 1 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 356] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 342] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 336] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 356] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 342] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... openat resumed>) = 4 [pid 356] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 302] newfstatat(4, "", [pid 356] <... futex resumed>) = 1 [pid 342] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 336] <... futex resumed>) = 0 [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 356] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 302] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 302] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 302] close(4) = 0 [pid 302] rmdir("./1/file1") = 0 [pid 302] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./1") = 0 [pid 302] mkdir("./2", 0777) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] close(3) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 360 ./strace-static-x86_64: Process 360 attached [pid 360] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 360] chdir("./2") = 0 [pid 360] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 360] setpgid(0, 0) = 0 [pid 360] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 360] write(3, "1000", 4) = 4 [pid 360] close(3) = 0 [pid 360] symlink("/dev/binderfs", "./binderfs") = 0 [pid 360] write(1, "executing program\n", 18./strace-static-x86_64: Process 359 attached executing program ) = 18 [pid 360] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 360] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 360] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 360] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 339] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 339] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 360] <... mmap resumed>) = 0x7fb08390e000 [pid 339] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 339] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 360] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE [pid 339] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 339] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 357] <... futex resumed>) = 0 [pid 339] <... futex resumed>) = 1 [pid 357] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 339] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 357] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 357] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 339] <... futex resumed>) = 0 [pid 357] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 360] <... mprotect resumed>) = 0 [pid 360] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 360] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[361]}, 88) = 361 [pid 360] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 360] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 360] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 361 attached [pid 361] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 361] rt_sigprocmask(SIG_SETMASK, [], [pid 359] set_robust_list(0x7fb08390d9a0, 24 [pid 361] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 361] memfd_create("syzkaller", 0) = 3 [pid 361] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 359] <... set_robust_list resumed>) = 0 [ 26.791520][ T344] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 26.805273][ T341] EXT4-fs (loop3): This should not happen!! Data will be lost [ 26.805273][ T341] [ 26.825450][ T343] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 26.827948][ T341] EXT4-fs (loop3): Total free blocks count 0 [ 26.843629][ T341] EXT4-fs (loop3): Free/Dirty block details [pid 359] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 342] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 337] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 359] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 342] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... mmap resumed>) = 0x20000000 [pid 358] <... futex resumed>) = 0 [pid 346] <... futex resumed>) = 0 [pid 342] <... futex resumed>) = 1 [pid 337] <... futex resumed>) = 1 [pid 359] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 342] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 359] <... futex resumed>) = 0 [pid 358] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 359] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 358] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 337] <... futex resumed>) = 0 [pid 358] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 361] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 341] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 361] munmap(0x7fb07b50e000, 138412032) = 0 [ 26.849743][ T341] EXT4-fs (loop3): free_blocks=2415919504 [ 26.850049][ T344] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 26.855757][ T341] EXT4-fs (loop3): dirty_blocks=32 [ 26.870442][ T346] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 26.872530][ T341] EXT4-fs (loop3): Block reservation details [ 26.893077][ T341] EXT4-fs (loop3): i_reserved_data_blocks=2 [pid 361] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 361] ioctl(4, LOOP_SET_FD, 3 [pid 356] <... futex resumed>) = ? [pid 356] +++ killed by SIGBUS +++ [pid 342] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 342] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... futex resumed>) = 0 [pid 342] <... futex resumed>) = 1 [pid 359] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 342] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 359] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 359] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 342] <... futex resumed>) = 0 [pid 359] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 361] <... ioctl resumed>) = 0 [pid 361] close(3) = 0 [ 26.896875][ T343] EXT4-fs (loop2): This should not happen!! Data will be lost [ 26.896875][ T343] [ 26.899333][ T344] EXT4-fs (loop0): This should not happen!! Data will be lost [ 26.899333][ T344] [ 26.911454][ T361] loop4: detected capacity change from 0 to 2048 [ 26.918410][ T344] EXT4-fs (loop0): Total free blocks count 0 [ 26.925393][ T346] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 26.930215][ T344] EXT4-fs (loop0): Free/Dirty block details [ 26.945189][ T343] EXT4-fs (loop2): Total free blocks count 0 [pid 361] close(4) = 0 [pid 361] mkdir("./file1", 0777) = 0 [ 26.949184][ T341] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 26.955901][ T343] EXT4-fs (loop2): Free/Dirty block details [ 26.966809][ T344] EXT4-fs (loop0): free_blocks=2415919504 [ 26.972416][ T346] EXT4-fs (loop1): This should not happen!! Data will be lost [ 26.972416][ T346] [ 26.976876][ T341] EXT4-fs (loop3): This should not happen!! Data will be lost [ 26.976876][ T341] [ 26.987514][ T346] EXT4-fs (loop1): Total free blocks count 0 [pid 361] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 341] +++ killed by SIGBUS +++ [pid 336] +++ killed by SIGBUS +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=336, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=17} --- [pid 301] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 26.995895][ T344] EXT4-fs (loop0): dirty_blocks=32 [ 26.995936][ T343] EXT4-fs (loop2): free_blocks=2415919504 [ 27.002758][ T346] EXT4-fs (loop1): Free/Dirty block details [ 27.018612][ T346] EXT4-fs (loop1): free_blocks=2415919504 [ 27.022664][ T343] EXT4-fs (loop2): dirty_blocks=32 [ 27.025552][ T346] EXT4-fs (loop1): dirty_blocks=32 [ 27.029536][ T344] EXT4-fs (loop0): Block reservation details [ 27.036242][ T346] EXT4-fs (loop1): Block reservation details [ 27.040810][ T344] EXT4-fs (loop0): i_reserved_data_blocks=2 [pid 301] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./1/binderfs") = 0 [pid 301] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 344] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 361] <... mount resumed>) = 0 [pid 361] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 361] chdir("./file1") = 0 [pid 361] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 361] ioctl(4, LOOP_CLR_FD) = 0 [pid 361] close(4) = 0 [pid 361] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... futex resumed>) = 0 [pid 360] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 360] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 361] <... futex resumed>) = 1 [pid 361] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 361] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... futex resumed>) = 0 [pid 360] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 360] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 361] <... futex resumed>) = 1 [pid 361] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 358] <... futex resumed>) = ? [pid 346] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 343] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 361] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 361] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 360] <... futex resumed>) = 0 [pid 359] <... futex resumed>) = ? [pid 358] +++ killed by SIGBUS +++ [pid 357] <... futex resumed>) = ? [pid 361] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 360] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] +++ killed by SIGBUS +++ [pid 357] +++ killed by SIGBUS +++ [pid 360] <... futex resumed>) = 0 [ 27.048674][ T361] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 27.052520][ T343] EXT4-fs (loop2): Block reservation details [ 27.067490][ T346] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 27.069263][ T343] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 27.084160][ T344] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 360] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 361] creat("./bus", 000 [pid 344] +++ killed by SIGBUS +++ [pid 337] +++ killed by SIGBUS +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=337, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=18} --- [pid 298] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./1/binderfs") = 0 [pid 298] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 361] <... creat resumed>) = 6 [pid 360] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 361] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 346] +++ killed by SIGBUS +++ [pid 342] +++ killed by SIGBUS +++ [pid 361] <... futex resumed>) = 0 [pid 360] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] +++ killed by SIGBUS +++ [pid 339] +++ killed by SIGBUS +++ [pid 361] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 361] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=339, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=18} --- [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=342, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11} --- [pid 361] <... futex resumed>) = 0 [pid 361] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL) = 0 [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 361] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 360] <... futex resumed>) = 1 [pid 360] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... restart_syscall resumed>) = 0 [pid 360] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... umount2 resumed>) = 0 [pid 360] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] <... futex resumed>) = 0 [pid 361] pwrite64(6, "+", 1, 0) = 1 [pid 361] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 361] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 360] <... futex resumed>) = 1 [pid 360] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 360] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] <... futex resumed>) = 0 [pid 361] open("./bus", O_RDONLY [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 299] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 361] <... open resumed>) = 7 [pid 361] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 361] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 360] <... futex resumed>) = 1 [pid 360] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 360] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] <... futex resumed>) = 0 [pid 361] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 360] <... futex resumed>) = 1 [pid 301] newfstatat(AT_FDCWD, "./1/file1", [pid 300] <... openat resumed>) = 3 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 361] <... copy_file_range resumed>) = 1 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] newfstatat(3, "", [pid 361] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 361] <... futex resumed>) = 0 [pid 301] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 361] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] <... openat resumed>) = 3 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] getdents64(3, [pid 299] newfstatat(3, "", [pid 360] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 300] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] getdents64(3, [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 360] <... futex resumed>) = 1 [pid 361] <... futex resumed>) = 0 [pid 300] newfstatat(AT_FDCWD, "./1/binderfs", [pid 299] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 361] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 301] <... openat resumed>) = 4 [pid 300] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] newfstatat(4, "", [pid 361] <... mmap resumed>) = 0x20000000 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] unlink("./1/binderfs" [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 361] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] getdents64(4, [pid 300] <... unlink resumed>) = 0 [pid 299] newfstatat(AT_FDCWD, "./1/binderfs", [pid 361] <... futex resumed>) = 1 [pid 300] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 361] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] unlink("./1/binderfs") = 0 [pid 299] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] <... futex resumed>) = 0 [pid 301] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 360] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] getdents64(4, [pid 360] <... futex resumed>) = 1 [pid 301] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 360] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] close(4) = 0 [pid 301] rmdir("./1/file1") = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 301] close(3 [pid 361] <... futex resumed>) = 0 [pid 301] <... close resumed>) = 0 [pid 301] rmdir("./1") = 0 [pid 301] mkdir("./2", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 364 ./strace-static-x86_64: Process 364 attached [pid 364] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 364] chdir("./2") = 0 [pid 364] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 364] setpgid(0, 0) = 0 [pid 364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 27.091064][ T343] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 27.096627][ T344] EXT4-fs (loop0): This should not happen!! Data will be lost [ 27.096627][ T344] [ 27.119851][ T346] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 27.132829][ T346] EXT4-fs (loop1): This should not happen!! Data will be lost [ 27.132829][ T346] [ 27.143437][ T343] EXT4-fs (loop2): This should not happen!! Data will be lost [ 27.143437][ T343] [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./1/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./1/file1") = 0 [pid 298] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./1"executing program ) = 0 [pid 298] mkdir("./2", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 365 ./strace-static-x86_64: Process 365 attached [pid 365] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 365] chdir("./2") = 0 [pid 365] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 365] setpgid(0, 0) = 0 [pid 365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 365] write(3, "1000", 4) = 4 [pid 365] close(3) = 0 [pid 365] symlink("/dev/binderfs", "./binderfs") = 0 [pid 365] write(1, "executing program\n", 18) = 18 [pid 365] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 365] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 365] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 365] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 365] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[366]}, 88) = 366 [pid 365] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 365] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 366 attached [pid 366] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 366] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 366] memfd_create("syzkaller", 0) = 3 [pid 366] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 364] write(3, "1000", 4) = 4 [pid 364] close(3) = 0 [pid 364] symlink("/dev/binderfs", "./binderfs") = 0 [pid 366] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 366] munmap(0x7fb07b50e000, 138412032) = 0 [pid 366] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 366] ioctl(4, LOOP_SET_FD, 3executing program [pid 364] write(1, "executing program\n", 18 [pid 360] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 299] <... umount2 resumed>) = 0 [pid 360] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 360] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 299] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./1/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./1/file1") = 0 [pid 299] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./1") = 0 [pid 299] mkdir("./2", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 367 [pid 366] <... ioctl resumed>) = 0 [pid 366] close(3) = 0 [pid 366] close(4 [pid 364] <... write resumed>) = 18 [pid 364] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [ 27.174827][ T361] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 27.205375][ T361] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 27.212057][ T366] loop0: detected capacity change from 0 to 2048 [pid 364] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 364] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 364] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 364] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 364] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[368]}, 88) = 368 [pid 364] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 364] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 368 attached [pid 368] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 368] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 368] memfd_create("syzkaller", 0) = 3 [pid 368] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 368] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 300] <... umount2 resumed>) = 0 [pid 300] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 367 attached [pid 367] set_robust_list(0x5555610ee6a0, 24 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 368] <... write resumed>) = 1048576 [pid 368] munmap(0x7fb07b50e000, 138412032) = 0 [pid 368] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 368] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 367] <... set_robust_list resumed>) = 0 [pid 300] newfstatat(AT_FDCWD, "./1/file1", [pid 368] close(3) = 0 [pid 368] close(4 [pid 367] chdir("./2") = 0 [pid 367] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 367] setpgid(0, 0) = 0 [pid 367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 367] write(3, "1000", 4) = 4 [pid 367] close(3) = 0 [pid 367] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 367] write(1, "executing program\n", 18) = 18 [pid 367] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 367] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 367] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 367] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 367] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 367] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 367] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[369]}, 88) = 369 [pid 367] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 367] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 367] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 300] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] newfstatat(4, "", [pid 366] <... close resumed>) = 0 [pid 366] mkdir("./file1", 0777) = 0 [pid 366] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./1/file1") = 0 [pid 300] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./1") = 0 [pid 300] mkdir("./2", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 369 attached ) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 370 [pid 369] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 369] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 369] memfd_create("syzkaller", 0) = 3 [pid 369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 ./strace-static-x86_64: Process 370 attached [pid 369] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [ 27.218178][ T361] EXT4-fs (loop4): This should not happen!! Data will be lost [ 27.218178][ T361] [ 27.242846][ T361] EXT4-fs (loop4): Total free blocks count 0 [ 27.244222][ T368] loop3: detected capacity change from 0 to 2048 [ 27.249442][ T361] EXT4-fs (loop4): Free/Dirty block details [ 27.260841][ T361] EXT4-fs (loop4): free_blocks=2415919504 [pid 369] munmap(0x7fb07b50e000, 138412032) = 0 [pid 369] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 369] ioctl(4, LOOP_SET_FD, 3executing program [pid 370] set_robust_list(0x5555610ee6a0, 24 [pid 361] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 360] <... mmap resumed>) = 0x7fb0838ed000 [pid 370] <... set_robust_list resumed>) = 0 [pid 360] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 370] chdir("./2" [pid 360] <... mprotect resumed>) = 0 [pid 370] <... chdir resumed>) = 0 [pid 360] rt_sigprocmask(SIG_BLOCK, ~[], [pid 370] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 360] <... rt_sigprocmask resumed>[], 8) = 0 [pid 370] <... prctl resumed>) = 0 [pid 360] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 370] setpgid(0, 0) = 0 [pid 360] <... clone3 resumed> => {parent_tid=[372]}, 88) = 372 [pid 370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 360] rt_sigprocmask(SIG_SETMASK, [], [pid 370] <... openat resumed>) = 3 [pid 360] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 370] write(3, "1000", 4 [pid 360] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... write resumed>) = 4 [pid 360] <... futex resumed>) = 0 [pid 370] close(3 [pid 360] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 370] <... close resumed>) = 0 [pid 370] symlink("/dev/binderfs", "./binderfs") = 0 [pid 370] write(1, "executing program\n", 18) = 18 [pid 370] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 370] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 370] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 370] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 370] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[373]}, 88) = 373 [pid 370] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 370] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 360] <... futex resumed>) = ? ./strace-static-x86_64: Process 372 attached ./strace-static-x86_64: Process 373 attached [pid 373] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 373] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 373] memfd_create("syzkaller", 0) = 3 [pid 373] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 369] <... ioctl resumed>) = 0 [pid 373] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 369] close(3) = 0 [pid 369] close(4 [pid 373] <... write resumed>) = 1048576 [pid 373] munmap(0x7fb07b50e000, 138412032 [pid 368] <... close resumed>) = 0 [pid 368] mkdir("./file1", 0777) = 0 [pid 368] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 373] <... munmap resumed>) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 373] ioctl(4, LOOP_SET_FD, 3 [pid 361] +++ killed by SIGBUS +++ [pid 366] <... mount resumed>) = 0 [pid 366] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 366] chdir("./file1") = 0 [pid 366] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 366] ioctl(4, LOOP_CLR_FD) = 0 [pid 366] close(4) = 0 [pid 366] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... futex resumed>) = 0 [pid 365] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 366] <... futex resumed>) = 1 [pid 366] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 373] <... ioctl resumed>) = 0 [pid 373] close(3) = 0 [pid 373] close(4 [pid 366] <... open resumed>) = 4 [pid 366] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 365] <... futex resumed>) = 0 [pid 365] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 366] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 366] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 365] <... futex resumed>) = 0 [pid 365] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 366] creat("./bus", 000) = 6 [pid 366] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 365] <... futex resumed>) = 0 [pid 365] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 366] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 366] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 365] <... futex resumed>) = 0 [pid 365] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 366] pwrite64(6, "+", 1, 0) = 1 [pid 366] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 365] <... futex resumed>) = 0 [pid 365] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 366] open("./bus", O_RDONLY) = 7 [pid 366] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... futex resumed>) = 0 [pid 365] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 366] <... futex resumed>) = 1 [pid 365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 366] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 365] <... mmap resumed>) = 0x7fb0838ed000 [pid 366] <... copy_file_range resumed>) = 1 [pid 365] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 366] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... mprotect resumed>) = 0 [pid 366] <... futex resumed>) = 0 [pid 365] rt_sigprocmask(SIG_BLOCK, ~[], [pid 366] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 365] <... rt_sigprocmask resumed>[], 8) = 0 [pid 365] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[376]}, 88) = 376 [pid 365] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 365] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 27.271506][ T361] EXT4-fs (loop4): dirty_blocks=32 [ 27.276751][ T361] EXT4-fs (loop4): Block reservation details [ 27.282555][ T361] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 27.287245][ T369] loop1: detected capacity change from 0 to 2048 [ 27.296434][ T366] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 27.307905][ T373] loop2: detected capacity change from 0 to 2048 [pid 365] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 376 attached [pid 372] +++ killed by SIGBUS +++ [pid 360] +++ killed by SIGBUS +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=360, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 302] restart_syscall(<... resuming interrupted clone ...> [pid 376] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 376] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 369] <... close resumed>) = 0 [pid 369] mkdir("./file1", 0777) = 0 [pid 369] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 376] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 365] <... futex resumed>) = 0 [pid 365] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 366] <... futex resumed>) = 0 [pid 365] <... futex resumed>) = 1 [pid 365] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... futex resumed>) = 1 [pid 376] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 302] <... restart_syscall resumed>) = 0 [pid 302] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 302] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./2/binderfs") = 0 [ 27.316402][ T372] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 27.331140][ T372] EXT4-fs (loop4): This should not happen!! Data will be lost [ 27.331140][ T372] [ 27.334522][ T368] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 27.350958][ T366] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 302] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 368] <... mount resumed>) = 0 [pid 368] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 368] chdir("./file1") = 0 [pid 368] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 368] ioctl(4, LOOP_CLR_FD) = 0 [pid 368] close(4) = 0 [pid 368] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... futex resumed>) = 0 [pid 364] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 368] <... futex resumed>) = 1 [pid 368] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 368] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... futex resumed>) = 0 [pid 364] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 368] <... futex resumed>) = 1 [pid 368] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 368] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... futex resumed>) = 0 [pid 364] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 368] <... futex resumed>) = 1 [pid 368] creat("./bus", 000) = 6 [pid 368] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... futex resumed>) = 0 [pid 364] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 368] <... futex resumed>) = 1 [pid 368] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 368] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... futex resumed>) = 0 [pid 364] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 368] <... futex resumed>) = 1 [pid 368] pwrite64(6, "+", 1, 0) = 1 [pid 368] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... futex resumed>) = 0 [pid 364] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 368] <... futex resumed>) = 1 [pid 368] open("./bus", O_RDONLY) = 7 [pid 368] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... futex resumed>) = 0 [pid 364] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 364] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 364] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 364] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[378]}, 88) = 378 [pid 364] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 364] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 368] <... futex resumed>) = 1 [pid 368] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 368] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 378 attached [pid 378] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 378] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 378] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 364] <... futex resumed>) = 0 [pid 364] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 364] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 368] <... futex resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 365] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 373] mkdir("./file1", 0777 [pid 365] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... futex resumed>) = 0 [pid 373] <... mkdir resumed>) = 0 [pid 365] <... futex resumed>) = 1 [pid 302] <... umount2 resumed>) = 0 [pid 302] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 302] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(4, [pid 376] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 373] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 365] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 376] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 302] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 302] close(4) = 0 [pid 302] rmdir("./2/file1") = 0 [pid 302] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 302] close(3 [pid 376] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 302] <... close resumed>) = 0 [pid 302] rmdir("./2") = 0 [pid 302] mkdir("./3", 0777) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 364] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 364] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 364] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 364] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 364] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] close(3) = 0 [ 27.373676][ T366] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 27.382843][ T368] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 27.385869][ T366] EXT4-fs (loop0): This should not happen!! Data will be lost [ 27.385869][ T366] [ 27.410159][ T366] EXT4-fs (loop0): Total free blocks count 0 [ 27.416689][ T366] EXT4-fs (loop0): Free/Dirty block details [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 380 ./strace-static-x86_64: Process 380 attached [pid 378] <... futex resumed>) = 1 [pid 378] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0) = -1 EBADF (Bad file descriptor) [pid 378] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = 1 [pid 378] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 380] set_robust_list(0x5555610ee6a0, 24 [pid 366] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- executing program [pid 380] <... set_robust_list resumed>) = 0 [pid 376] <... futex resumed>) = ? [pid 380] chdir("./3" [pid 376] +++ killed by SIGBUS +++ [pid 380] <... chdir resumed>) = 0 [pid 380] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 380] setpgid(0, 0) = 0 [pid 380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 380] write(3, "1000", 4) = 4 [pid 380] close(3) = 0 [pid 380] symlink("/dev/binderfs", "./binderfs") = 0 [pid 380] write(1, "executing program\n", 18) = 18 [pid 380] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 380] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 380] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 380] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 27.422779][ T366] EXT4-fs (loop0): free_blocks=2415919504 [ 27.428617][ T366] EXT4-fs (loop0): dirty_blocks=32 [ 27.433944][ T366] EXT4-fs (loop0): Block reservation details [ 27.440191][ T366] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 27.446492][ T368] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 27.458776][ T368] EXT4-fs (loop3): This should not happen!! Data will be lost [ 27.458776][ T368] [pid 380] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[383]}, 88) = 383 [pid 380] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 380] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 383 attached [pid 383] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 383] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 383] memfd_create("syzkaller", 0) = 3 [pid 383] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [ 27.461145][ T366] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 27.468288][ T368] EXT4-fs (loop3): Total free blocks count 0 [ 27.486675][ T368] EXT4-fs (loop3): Free/Dirty block details [ 27.487703][ T373] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 27.492428][ T368] EXT4-fs (loop3): free_blocks=2415919504 [ 27.492445][ T368] EXT4-fs (loop3): dirty_blocks=32 [ 27.513054][ T369] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 383] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 369] <... mount resumed>) = 0 [pid 369] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 369] chdir("./file1") = 0 [pid 369] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 369] ioctl(4, LOOP_CLR_FD) = 0 [pid 369] close(4) = 0 [pid 383] munmap(0x7fb07b50e000, 138412032 [pid 369] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 383] <... munmap resumed>) = 0 [pid 368] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 369] <... futex resumed>) = 1 [pid 369] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 383] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 378] <... futex resumed>) = ? [pid 367] <... futex resumed>) = 0 [pid 366] +++ killed by SIGBUS +++ [pid 365] +++ killed by SIGBUS +++ [pid 383] <... openat resumed>) = 4 [pid 378] +++ killed by SIGBUS +++ [pid 367] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=365, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 383] ioctl(4, LOOP_SET_FD, 3 [pid 298] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./2/binderfs") = 0 [pid 298] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 373] <... mount resumed>) = 0 [pid 373] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 373] chdir("./file1") = 0 [pid 373] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 373] ioctl(4, LOOP_CLR_FD) = 0 [pid 373] close(4) = 0 [pid 373] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... futex resumed>) = 1 [pid 373] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 373] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... futex resumed>) = 1 [pid 373] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 373] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... futex resumed>) = 1 [pid 373] creat("./bus", 000) = 6 [pid 373] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... futex resumed>) = 1 [pid 373] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 373] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... futex resumed>) = 1 [pid 373] pwrite64(6, "+", 1, 0) = 1 [pid 373] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... futex resumed>) = 1 [pid 373] open("./bus", O_RDONLY) = 7 [pid 373] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 370] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 370] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 369] <... futex resumed>) = 0 [pid 370] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 369] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 370] <... clone3 resumed> => {parent_tid=[386]}, 88) = 386 [pid 369] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] rt_sigprocmask(SIG_SETMASK, [], [pid 369] <... futex resumed>) = 0 [pid 370] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 369] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 370] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... futex resumed>) = 1 [pid 373] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 373] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 386 attached [pid 383] <... ioctl resumed>) = 0 [pid 367] <... futex resumed>) = 1 [ 27.513529][ T368] EXT4-fs (loop3): Block reservation details [ 27.541987][ T368] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 27.550201][ T366] EXT4-fs (loop0): This should not happen!! Data will be lost [ 27.550201][ T366] [ 27.564012][ T368] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 386] set_robust_list(0x7fb08390d9a0, 24 [pid 383] close(3 [pid 367] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 386] <... set_robust_list resumed>) = 0 [pid 383] <... close resumed>) = 0 [pid 367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 386] rt_sigprocmask(SIG_SETMASK, [], [pid 383] close(4 [pid 368] +++ killed by SIGBUS +++ [pid 367] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] +++ killed by SIGBUS +++ [pid 386] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 386] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 367] <... futex resumed>) = 1 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=364, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=18} --- [pid 369] <... futex resumed>) = 0 [pid 367] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 386] <... mmap resumed>) = 0x20000000 [pid 301] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 369] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 369] <... futex resumed>) = 1 [pid 301] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 386] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 367] <... futex resumed>) = 0 [pid 369] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] <... openat resumed>) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 386] <... futex resumed>) = 1 [pid 370] <... futex resumed>) = 0 [pid 367] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] getdents64(3, [pid 386] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 370] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 367] <... futex resumed>) = 1 [pid 369] <... futex resumed>) = 0 [pid 301] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 370] <... futex resumed>) = 1 [pid 367] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 370] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] creat("./bus", 000 [pid 373] <... futex resumed>) = 0 [pid 369] <... creat resumed>) = 6 [pid 369] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 367] <... futex resumed>) = 0 [pid 369] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 367] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 367] <... futex resumed>) = 0 [pid 369] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 367] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... futex resumed>) = 0 [pid 367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 369] pwrite64(6, "+", 1, 0 [pid 367] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... pwrite64 resumed>) = 1 [pid 367] <... futex resumed>) = 0 [pid 369] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 367] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... futex resumed>) = 0 [pid 367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 369] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 367] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 367] <... futex resumed>) = 0 [pid 369] open("./bus", O_RDONLY [pid 367] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... umount2 resumed>) = 0 [pid 369] <... open resumed>) = 7 [pid 369] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 367] <... futex resumed>) = 0 [pid 369] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 367] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 367] <... futex resumed>) = 0 [pid 369] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 367] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... copy_file_range resumed>) = 1 [pid 367] <... futex resumed>) = 0 [pid 369] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 367] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 369] <... futex resumed>) = 0 [pid 367] <... mmap resumed>) = 0x7fb0838ed000 [pid 369] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 367] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 367] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 367] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[387]}, 88) = 387 [pid 367] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 367] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 367] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 387 attached [pid 387] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 387] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 387] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 367] <... futex resumed>) = 0 [pid 367] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = 0 [pid 367] <... futex resumed>) = 1 [pid 383] <... close resumed>) = 0 [pid 367] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] mkdir("./file1", 0777 [pid 301] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 383] <... mkdir resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 383] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 301] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./2/binderfs") = 0 [pid 301] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [ 27.577422][ T383] loop4: detected capacity change from 0 to 2048 [ 27.584199][ T368] EXT4-fs (loop3): This should not happen!! Data will be lost [ 27.584199][ T368] [ 27.600270][ T373] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 298] rmdir("./2/file1") = 0 [pid 298] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./2") = 0 [pid 298] mkdir("./3", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 388 [pid 387] <... futex resumed>) = 1 [pid 387] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 388 attached [pid 388] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 388] chdir("./3") = 0 [pid 388] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 388] setpgid(0, 0) = 0 [pid 388] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 370] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 370] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 370] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 386] <... futex resumed>) = 0 [pid 370] <... futex resumed>) = 1 [pid 386] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 370] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 386] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 386] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 386] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 388] write(3, "1000", 4) = 4 [pid 388] close(3) = 0 [pid 388] symlink("/dev/binderfs", "./binderfs") = 0 [pid 388] write(1, "executing program\n", 18executing program ) = 18 [pid 388] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 388] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 388] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 388] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 388] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 388] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 388] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[390]}, 88) = 390 [pid 388] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 388] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 388] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 390 attached [pid 390] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 390] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 390] memfd_create("syzkaller", 0) = 3 [pid 390] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 390] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 383] <... mount resumed>) = 0 [pid 367] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 367] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] <... futex resumed>) = 0 [pid 367] <... futex resumed>) = 1 [pid 387] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 367] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 387] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 367] <... futex resumed>) = 0 [pid 387] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 390] <... write resumed>) = 1048576 [ 27.608437][ T369] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 27.615152][ T373] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 27.660420][ T383] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 390] munmap(0x7fb07b50e000, 138412032) = 0 [pid 390] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 390] ioctl(4, LOOP_SET_FD, 3 [pid 383] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 301] <... umount2 resumed>) = 0 [pid 383] <... openat resumed>) = 3 [pid 383] chdir("./file1") = 0 [pid 301] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 383] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 383] ioctl(4, LOOP_CLR_FD) = 0 [pid 301] newfstatat(AT_FDCWD, "./2/file1", [pid 383] close(4) = 0 [pid 390] <... ioctl resumed>) = 0 [pid 390] close(3) = 0 [pid 390] close(4 [pid 383] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 383] <... futex resumed>) = 1 [pid 380] <... futex resumed>) = 0 [pid 301] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 383] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 380] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 27.668449][ T369] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 27.671271][ T373] EXT4-fs (loop2): This should not happen!! Data will be lost [ 27.671271][ T373] [ 27.689166][ T390] loop0: detected capacity change from 0 to 2048 [ 27.703363][ T369] EXT4-fs (loop1): This should not happen!! Data will be lost [ 27.703363][ T369] [ 27.709605][ T373] EXT4-fs (loop2): Total free blocks count 0 [ 27.714762][ T369] EXT4-fs (loop1): Total free blocks count 0 [pid 383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 380] <... futex resumed>) = 0 [pid 301] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 383] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 380] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... openat resumed>) = 4 [pid 390] <... close resumed>) = 0 [pid 390] mkdir("./file1", 0777) = 0 [pid 390] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 383] <... open resumed>) = 4 [pid 301] newfstatat(4, "", [pid 383] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 383] <... futex resumed>) = 1 [pid 380] <... futex resumed>) = 0 [pid 301] getdents64(4, [pid 383] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 380] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 383] <... open resumed>) = 5 [pid 380] <... futex resumed>) = 0 [pid 301] getdents64(4, [pid 383] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 383] <... futex resumed>) = 0 [pid 380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] close(4 [pid 383] creat("./bus", 000 [pid 380] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... close resumed>) = 0 [pid 383] <... creat resumed>) = 6 [pid 380] <... futex resumed>) = 0 [pid 301] rmdir("./2/file1" [pid 383] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... rmdir resumed>) = 0 [pid 383] <... futex resumed>) = 0 [pid 380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] getdents64(3, [pid 383] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 380] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 383] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 380] <... futex resumed>) = 0 [pid 301] close(3 [pid 383] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... close resumed>) = 0 [pid 383] <... futex resumed>) = 0 [pid 380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] rmdir("./2" [pid 383] pwrite64(6, "+", 1, 0 [pid 380] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... rmdir resumed>) = 0 [pid 383] <... pwrite64 resumed>) = 1 [pid 380] <... futex resumed>) = 0 [pid 301] mkdir("./3", 0777 [pid 383] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... mkdir resumed>) = 0 [pid 383] <... futex resumed>) = 0 [pid 380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 383] open("./bus", O_RDONLY [pid 380] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 383] <... open resumed>) = 7 [pid 380] <... futex resumed>) = 0 [pid 383] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... openat resumed>) = 3 [pid 383] <... futex resumed>) = 0 [pid 380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 383] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 380] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] ioctl(3, LOOP_CLR_FD [pid 383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 380] <... futex resumed>) = 0 [pid 383] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 380] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 383] <... copy_file_range resumed>) = 1 [pid 380] <... futex resumed>) = 0 [pid 383] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 301] close(3 [pid 383] <... futex resumed>) = 0 [pid 380] <... mmap resumed>) = 0x7fb0838ed000 [pid 383] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 380] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 301] <... close resumed>) = 0 [pid 380] <... mprotect resumed>) = 0 [pid 380] rt_sigprocmask(SIG_BLOCK, ~[], [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 380] <... rt_sigprocmask resumed>[], 8) = 0 [pid 380] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0}./strace-static-x86_64: Process 393 attached ./strace-static-x86_64: Process 394 attached [pid 369] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 380] <... clone3 resumed> => {parent_tid=[394]}, 88) = 394 [pid 301] <... clone resumed>, child_tidptr=0x5555610ee690) = 393 [pid 380] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 380] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 393] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 393] chdir("./3" [pid 386] <... futex resumed>) = ? [pid 393] <... chdir resumed>) = 0 [pid 387] <... futex resumed>) = ? [pid 393] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 393] setpgid(0, 0) = 0 [pid 393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 393] write(3, "1000", 4) = 4 [pid 393] close(3) = 0 [pid 393] symlink("/dev/binderfs", "./binderfs") = 0 [pid 387] +++ killed by SIGBUS +++ [pid 394] set_robust_list(0x7fb08390d9a0, 24executing program [pid 393] write(1, "executing program\n", 18) = 18 [pid 393] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 393] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 393] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 393] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 393] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 393] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 27.718976][ T373] EXT4-fs (loop2): Free/Dirty block details [ 27.726031][ T369] EXT4-fs (loop1): Free/Dirty block details [ 27.730451][ T373] EXT4-fs (loop2): free_blocks=2415919504 [ 27.737439][ T369] EXT4-fs (loop1): free_blocks=2415919504 [ 27.741708][ T373] EXT4-fs (loop2): dirty_blocks=32 [ 27.748603][ T369] EXT4-fs (loop1): dirty_blocks=32 [ 27.752248][ T373] EXT4-fs (loop2): Block reservation details [ 27.760590][ T369] EXT4-fs (loop1): Block reservation details [ 27.764116][ T373] EXT4-fs (loop2): i_reserved_data_blocks=2 [pid 393] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[395]}, 88) = 395 [pid 393] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 393] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 393] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 395 attached [pid 395] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 395] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 395] memfd_create("syzkaller", 0) = 3 [pid 395] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 395] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 395] munmap(0x7fb07b50e000, 138412032) = 0 [pid 395] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 395] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 395] close(3) = 0 [pid 395] close(4 [pid 386] +++ killed by SIGBUS +++ [pid 394] <... set_robust_list resumed>) = 0 [pid 394] rt_sigprocmask(SIG_SETMASK, [], [pid 369] +++ killed by SIGBUS +++ [pid 367] +++ killed by SIGBUS +++ [pid 394] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=367, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 394] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 394] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... openat resumed>) = 3 [pid 394] <... futex resumed>) = 1 [pid 380] <... futex resumed>) = 0 [pid 299] newfstatat(3, "", [pid 394] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 380] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 27.769910][ T369] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 27.787412][ T369] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 27.796195][ T395] loop3: detected capacity change from 0 to 2048 [ 27.808878][ T369] EXT4-fs (loop1): This should not happen!! Data will be lost [ 27.808878][ T369] [pid 383] <... futex resumed>) = 0 [pid 380] <... futex resumed>) = 1 [pid 299] getdents64(3, [pid 380] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./2/binderfs") = 0 [pid 299] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 390] <... mount resumed>) = 0 [pid 373] +++ killed by SIGBUS +++ [pid 370] +++ killed by SIGBUS +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=370, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 300] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./2/binderfs") = 0 [pid 300] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 390] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 390] chdir("./file1") = 0 [pid 390] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 390] ioctl(4, LOOP_CLR_FD) = 0 [pid 390] close(4) = 0 [pid 390] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 388] <... futex resumed>) = 0 [pid 388] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 388] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 390] <... futex resumed>) = 1 [pid 390] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 390] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 388] <... futex resumed>) = 0 [pid 388] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 388] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 390] <... futex resumed>) = 1 [pid 390] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 390] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 388] <... futex resumed>) = 0 [pid 388] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 388] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 390] <... futex resumed>) = 1 [pid 390] creat("./bus", 000) = 6 [pid 390] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 388] <... futex resumed>) = 0 [pid 388] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 388] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 390] <... futex resumed>) = 1 [pid 390] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 390] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 388] <... futex resumed>) = 0 [pid 388] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 388] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 390] <... futex resumed>) = 1 [pid 390] pwrite64(6, "+", 1, 0 [pid 395] <... close resumed>) = 0 [pid 390] <... pwrite64 resumed>) = 1 [pid 390] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 388] <... futex resumed>) = 0 [pid 388] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 27.809202][ T373] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 27.828778][ T383] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 27.830506][ T373] EXT4-fs (loop2): This should not happen!! Data will be lost [ 27.830506][ T373] [ 27.850143][ T390] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 27.854710][ T383] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 388] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 390] <... futex resumed>) = 1 [pid 390] open("./bus", O_RDONLY) = 7 [pid 390] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 388] <... futex resumed>) = 0 [pid 388] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 388] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 388] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 388] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 388] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 388] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[398]}, 88) = 398 [pid 388] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 388] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 388] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 390] <... futex resumed>) = 1 [pid 390] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 390] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 390] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 398 attached [pid 398] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 398] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 398] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 395] mkdir("./file1", 0777 [pid 398] <... mmap resumed>) = 0x20000000 [pid 398] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 388] <... futex resumed>) = 0 [pid 388] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 388] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 390] <... futex resumed>) = 0 [pid 395] <... mkdir resumed>) = 0 [pid 380] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 380] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 394] <... futex resumed>) = 0 [pid 380] <... futex resumed>) = 1 [pid 394] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 380] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 394] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 394] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 380] <... futex resumed>) = 0 [pid 395] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 394] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 398] <... futex resumed>) = 1 [pid 398] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 383] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 394] <... futex resumed>) = ? [pid 394] +++ killed by SIGBUS +++ [ 27.876878][ T383] EXT4-fs (loop4): This should not happen!! Data will be lost [ 27.876878][ T383] [ 27.886603][ T383] EXT4-fs (loop4): Total free blocks count 0 [ 27.892599][ T383] EXT4-fs (loop4): Free/Dirty block details [ 27.895005][ T390] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 27.898941][ T383] EXT4-fs (loop4): free_blocks=2415919504 [pid 388] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 383] +++ killed by SIGBUS +++ [pid 380] +++ killed by SIGBUS +++ [pid 388] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 388] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=380, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=10} --- [pid 302] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 302] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./3/binderfs") = 0 [pid 302] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 398] <... futex resumed>) = 0 [pid 398] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0) = -1 EBADF (Bad file descriptor) [pid 398] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 388] <... futex resumed>) = 0 [pid 398] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] <... umount2 resumed>) = 0 [pid 300] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./2/file1") = 0 [pid 300] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./2") = 0 [pid 300] mkdir("./3", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 399 [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [ 27.915522][ T390] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 27.918422][ T383] EXT4-fs (loop4): dirty_blocks=32 [ 27.918438][ T383] EXT4-fs (loop4): Block reservation details [ 27.918449][ T383] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 27.921212][ T383] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 27.931423][ T390] EXT4-fs (loop0): This should not happen!! Data will be lost [ 27.931423][ T390] [ 27.935705][ T383] EXT4-fs (loop4): This should not happen!! Data will be lost [ 27.935705][ T383] executing program [pid 299] rmdir("./2/file1") = 0 [pid 299] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./2") = 0 [pid 299] mkdir("./3", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 400 ./strace-static-x86_64: Process 399 attached [pid 399] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 399] chdir("./3") = 0 [pid 399] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 399] setpgid(0, 0) = 0 [pid 399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 399] write(3, "1000", 4) = 4 [pid 399] close(3) = 0 [pid 399] symlink("/dev/binderfs", "./binderfs") = 0 [pid 399] write(1, "executing program\n", 18) = 18 [pid 399] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 399] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 399] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 399] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 399] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 399] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[401]}, 88) = 401 [pid 399] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 399] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 401 attached [pid 401] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 401] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 401] memfd_create("syzkaller", 0) = 3 [pid 401] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 401] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 400 attached [pid 400] set_robust_list(0x5555610ee6a0, 24 [pid 401] <... write resumed>) = 1048576 [pid 401] munmap(0x7fb07b50e000, 138412032) = 0 [pid 401] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 401] ioctl(4, LOOP_SET_FD, 3 [pid 400] <... set_robust_list resumed>) = 0 [pid 401] <... ioctl resumed>) = 0 [pid 401] close(3) = 0 [pid 401] close(4 [pid 400] chdir("./3") = 0 [pid 400] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 400] setpgid(0, 0) = 0 [pid 400] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 400] write(3, "1000", 4) = 4 [pid 400] close(3) = 0 [pid 400] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 400] write(1, "executing program\n", 18) = 18 [pid 400] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 400] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 400] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 400] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 400] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 400] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[402]}, 88) = 402 [pid 400] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 400] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 402 attached [pid 402] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 402] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 402] memfd_create("syzkaller", 0) = 3 [pid 402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 402] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 402] munmap(0x7fb07b50e000, 138412032) = 0 [pid 402] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 402] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 390] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 398] <... futex resumed>) = ? [pid 398] +++ killed by SIGBUS +++ [ 27.941815][ T390] EXT4-fs (loop0): Total free blocks count 0 [ 27.991407][ T390] EXT4-fs (loop0): Free/Dirty block details [ 27.996163][ T401] loop2: detected capacity change from 0 to 2048 [ 27.997555][ T390] EXT4-fs (loop0): free_blocks=2415919504 [ 28.008956][ T390] EXT4-fs (loop0): dirty_blocks=32 [ 28.013847][ T390] EXT4-fs (loop0): Block reservation details [ 28.020100][ T390] EXT4-fs (loop0): i_reserved_data_blocks=2 [pid 402] close(3 [pid 401] <... close resumed>) = 0 [pid 302] <... umount2 resumed>) = 0 [pid 302] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./3/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 302] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 302] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 302] close(4) = 0 [pid 302] rmdir("./3/file1") = 0 [pid 302] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./3") = 0 [pid 302] mkdir("./4", 0777 [pid 401] mkdir("./file1", 0777 [pid 302] <... mkdir resumed>) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] close(3) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 404 [pid 402] <... close resumed>) = 0 [pid 402] close(4./strace-static-x86_64: Process 404 attached [pid 404] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 404] chdir("./4") = 0 [pid 404] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 404] setpgid(0, 0) = 0 [pid 404] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 404] write(3, "1000", 4) = 4 [pid 404] close(3) = 0 [pid 404] symlink("/dev/binderfs", "./binderfs") = 0 [pid 401] <... mkdir resumed>) = 0 [pid 401] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 404] write(1, "executing program\n", 18 [pid 390] +++ killed by SIGBUS +++ [pid 388] +++ killed by SIGBUS +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=388, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=19} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./3/binderfs") = 0 [pid 298] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 404] <... write resumed>) = 18 [pid 404] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 404] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 404] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 404] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 404] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 404] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[406]}, 88) = 406 [pid 404] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 404] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 406 attached [pid 406] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 406] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 406] memfd_create("syzkaller", 0) = 3 [pid 406] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 395] <... mount resumed>) = 0 [pid 402] <... close resumed>) = 0 [pid 402] mkdir("./file1", 0777) = 0 [pid 402] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 406] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 406] munmap(0x7fb07b50e000, 138412032) = 0 [pid 406] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 406] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 406] close(3) = 0 [pid 406] close(4 [pid 395] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 395] chdir("./file1") = 0 [pid 395] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 395] ioctl(4, LOOP_CLR_FD) = 0 [pid 395] close(4) = 0 [pid 395] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = 0 [pid 393] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 393] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 395] <... futex resumed>) = 1 [pid 395] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 395] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = 0 [pid 393] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 393] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 395] <... futex resumed>) = 1 [pid 395] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 395] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = 0 [pid 393] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 393] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 395] <... futex resumed>) = 1 [pid 395] creat("./bus", 000) = 6 [pid 395] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = 0 [pid 393] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 393] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 395] <... futex resumed>) = 1 [pid 395] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 395] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = 0 [pid 393] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 393] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 395] <... futex resumed>) = 1 [pid 395] pwrite64(6, "+", 1, 0) = 1 [pid 395] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = 0 [pid 393] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 393] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 395] <... futex resumed>) = 1 [pid 395] open("./bus", O_RDONLY) = 7 [pid 395] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = 0 [pid 393] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 393] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 393] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 393] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 393] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 393] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[411]}, 88) = 411 [pid 393] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 393] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 393] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 395] <... futex resumed>) = 1 [ 28.023810][ T402] loop1: detected capacity change from 0 to 2048 [ 28.035180][ T390] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 28.047674][ T390] EXT4-fs (loop0): This should not happen!! Data will be lost [ 28.047674][ T390] [ 28.059220][ T395] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 395] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 395] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 395] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 411 attached [pid 411] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 411] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 411] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 393] <... futex resumed>) = 0 [pid 393] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] <... futex resumed>) = 0 [pid 393] <... futex resumed>) = 1 [pid 393] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 411] <... futex resumed>) = 1 [pid 411] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 402] <... mount resumed>) = 0 [pid 401] <... mount resumed>) = 0 [pid 401] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 401] chdir("./file1") = 0 [pid 401] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 401] ioctl(4, LOOP_CLR_FD) = 0 [pid 401] close(4) = 0 [pid 401] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 399] <... futex resumed>) = 0 [pid 401] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 399] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... open resumed>) = 4 [pid 399] <... futex resumed>) = 0 [pid 401] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... futex resumed>) = 0 [pid 399] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 401] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 399] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... open resumed>) = 5 [pid 399] <... futex resumed>) = 0 [pid 401] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... futex resumed>) = 0 [pid 399] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 401] creat("./bus", 000 [pid 399] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... creat resumed>) = 6 [pid 399] <... futex resumed>) = 0 [pid 401] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... futex resumed>) = 0 [pid 399] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 401] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 399] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 399] <... futex resumed>) = 0 [pid 401] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... futex resumed>) = 0 [pid 399] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 401] pwrite64(6, "+", 1, 0 [pid 399] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... pwrite64 resumed>) = 1 [pid 399] <... futex resumed>) = 0 [pid 401] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... futex resumed>) = 0 [pid 399] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 401] open("./bus", O_RDONLY [pid 399] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... open resumed>) = 7 [pid 399] <... futex resumed>) = 0 [pid 401] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... futex resumed>) = 0 [pid 399] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 401] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 399] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... copy_file_range resumed>) = 1 [pid 399] <... futex resumed>) = 0 [pid 401] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... futex resumed>) = 0 [pid 399] <... futex resumed>) = 0 [pid 401] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [ 28.084704][ T406] loop4: detected capacity change from 0 to 2048 [ 28.098745][ T401] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 28.099101][ T395] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 28.110007][ T402] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 399] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 399] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 399] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 399] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[412]}, 88) = 412 [pid 399] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 399] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 402] chdir("./file1") = 0 [pid 402] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 402] ioctl(4, LOOP_CLR_FD) = 0 [pid 402] close(4) = 0 [pid 402] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... futex resumed>) = 0 [pid 400] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... futex resumed>) = 1 [pid 402] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 402] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... futex resumed>) = 0 [pid 400] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... futex resumed>) = 1 [pid 402] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 402] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... futex resumed>) = 0 [pid 400] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... futex resumed>) = 1 [pid 402] creat("./bus", 000) = 6 [pid 402] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... futex resumed>) = 0 [pid 406] <... close resumed>) = 0 [pid 298] <... umount2 resumed>) = 0 [pid 400] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 400] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./3/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./3/file1") = 0 [pid 298] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./3") = 0 [pid 298] mkdir("./4", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 402] <... futex resumed>) = 1 [pid 298] close(3 [pid 402] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 298] <... close resumed>) = 0 [pid 402] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 406] mkdir("./file1", 0777 [pid 402] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 400] <... futex resumed>) = 0 [pid 298] <... clone resumed>, child_tidptr=0x5555610ee690) = 413 [pid 402] pwrite64(6, "+", 1, 0 [pid 400] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... pwrite64 resumed>) = 1 [pid 400] <... futex resumed>) = 0 [pid 402] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... futex resumed>) = 0 [pid 400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 402] open("./bus", O_RDONLY [pid 400] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... open resumed>) = 7 [pid 400] <... futex resumed>) = 0 [pid 402] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... futex resumed>) = 0 [pid 400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 402] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 400] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... copy_file_range resumed>) = 1 [pid 400] <... futex resumed>) = 0 [pid 402] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 412 attached [pid 402] <... futex resumed>) = 0 [pid 400] <... futex resumed>) = 0 [pid 412] set_robust_list(0x7fb08390d9a0, 24 [pid 402] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 400] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 412] <... set_robust_list resumed>) = 0 [pid 400] <... mmap resumed>) = 0x7fb0838ed000 [pid 412] rt_sigprocmask(SIG_SETMASK, [], [pid 400] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 412] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 400] <... mprotect resumed>) = 0 [pid 412] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 400] rt_sigprocmask(SIG_BLOCK, ~[], [pid 412] <... mmap resumed>) = 0x20000000 [pid 400] <... rt_sigprocmask resumed>[], 8) = 0 [pid 406] <... mkdir resumed>) = 0 [pid 400] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 412] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 400] <... clone3 resumed> => {parent_tid=[414]}, 88) = 414 [pid 399] <... futex resumed>) = 0 [pid 412] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 400] rt_sigprocmask(SIG_SETMASK, [], [pid 399] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 413 attached [pid 401] <... futex resumed>) = 0 [pid 400] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 399] <... futex resumed>) = 1 [pid 413] set_robust_list(0x5555610ee6a0, 24 [pid 406] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 400] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 393] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 413] <... set_robust_list resumed>) = 0 [pid 400] <... futex resumed>) = 0 [pid 413] chdir("./4" [pid 400] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] <... chdir resumed>) = 0 [pid 413] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 413] setpgid(0, 0) = 0 [pid 413] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 413] write(3, "1000", 4) = 4 [pid 413] close(3./strace-static-x86_64: Process 414 attached ) = 0 [ 28.125023][ T395] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 28.146326][ T395] EXT4-fs (loop3): This should not happen!! Data will be lost [ 28.146326][ T395] [ 28.156719][ T395] EXT4-fs (loop3): Total free blocks count 0 [ 28.162573][ T395] EXT4-fs (loop3): Free/Dirty block details [ 28.169149][ T395] EXT4-fs (loop3): free_blocks=2415919504 [pid 414] set_robust_list(0x7fb08390d9a0, 24 [pid 413] symlink("/dev/binderfs", "./binderfs" [pid 393] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... set_robust_list resumed>) = 0 [pid 413] <... symlink resumed>) = 0 executing program [pid 414] rt_sigprocmask(SIG_SETMASK, [], [pid 413] write(1, "executing program\n", 18 [pid 414] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 413] <... write resumed>) = 18 [pid 414] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 413] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... mmap resumed>) = 0x20000000 [pid 413] <... futex resumed>) = 0 [pid 413] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 413] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 413] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 413] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 414] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 413] rt_sigprocmask(SIG_BLOCK, ~[], [pid 414] <... futex resumed>) = 1 [pid 413] <... rt_sigprocmask resumed>[], 8) = 0 [pid 400] <... futex resumed>) = 0 [pid 414] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 413] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} [pid 400] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... futex resumed>) = 0 [pid 400] <... futex resumed>) = 1 [pid 413] <... clone3 resumed> => {parent_tid=[415]}, 88) = 415 [pid 411] <... futex resumed>) = 0 [pid 400] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 395] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 393] <... futex resumed>) = 1 [pid 413] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 413] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 413] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 415 attached [pid 415] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 415] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 415] memfd_create("syzkaller", 0) = 3 [pid 415] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 415] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 399] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 399] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = 0 [pid 399] <... futex resumed>) = 1 [pid 412] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 399] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 412] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 399] <... futex resumed>) = 0 [ 28.172195][ T401] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 28.175038][ T395] EXT4-fs (loop3): dirty_blocks=32 [ 28.194745][ T395] EXT4-fs (loop3): Block reservation details [ 28.200358][ T402] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 28.200677][ T395] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 28.221878][ T401] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 412] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 395] +++ killed by SIGBUS +++ [pid 415] <... write resumed>) = 1048576 [pid 400] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 400] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = 0 [pid 400] <... futex resumed>) = 1 [pid 414] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 400] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 414] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 414] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 400] <... futex resumed>) = 0 [pid 414] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 415] munmap(0x7fb07b50e000, 138412032) = 0 [ 28.234384][ T401] EXT4-fs (loop2): This should not happen!! Data will be lost [ 28.234384][ T401] [ 28.244007][ T401] EXT4-fs (loop2): Total free blocks count 0 [ 28.251535][ T411] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 28.255690][ T406] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 28.263729][ T401] EXT4-fs (loop2): Free/Dirty block details [pid 415] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 415] ioctl(4, LOOP_SET_FD, 3 [pid 411] +++ killed by SIGBUS +++ [pid 406] <... mount resumed>) = 0 [pid 401] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 393] +++ killed by SIGBUS +++ [pid 406] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 412] <... futex resumed>) = ? [pid 406] <... openat resumed>) = 3 [pid 406] chdir("./file1" [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=393, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [ 28.279840][ T411] EXT4-fs (loop3): This should not happen!! Data will be lost [ 28.279840][ T411] [ 28.292577][ T401] EXT4-fs (loop2): free_blocks=2415919504 [ 28.293705][ T402] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 28.299307][ T401] EXT4-fs (loop2): dirty_blocks=32 [ 28.315591][ T415] loop0: detected capacity change from 0 to 2048 [ 28.316483][ T401] EXT4-fs (loop2): Block reservation details [ 28.327676][ T401] EXT4-fs (loop2): i_reserved_data_blocks=2 [pid 415] <... ioctl resumed>) = 0 [pid 412] +++ killed by SIGBUS +++ [pid 415] close(3 [pid 406] <... chdir resumed>) = 0 [pid 301] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 415] <... close resumed>) = 0 [pid 406] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 406] <... openat resumed>) = 4 [pid 415] close(4 [pid 301] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 415] <... close resumed>) = 0 [pid 406] ioctl(4, LOOP_CLR_FD [pid 301] <... openat resumed>) = 3 [pid 415] mkdir("./file1", 0777 [pid 406] <... ioctl resumed>) = 0 [pid 301] newfstatat(3, "", [pid 415] <... mkdir resumed>) = 0 [pid 406] close(4 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 415] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 406] <... close resumed>) = 0 [pid 301] getdents64(3, [pid 406] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 406] <... futex resumed>) = 1 [pid 404] <... futex resumed>) = 0 [pid 404] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 301] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 406] <... open resumed>) = 4 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 406] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] newfstatat(AT_FDCWD, "./3/binderfs", [pid 406] <... futex resumed>) = 1 [pid 404] <... futex resumed>) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 406] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 404] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] unlink("./3/binderfs" [pid 406] <... open resumed>) = 5 [pid 404] <... futex resumed>) = 0 [pid 301] <... unlink resumed>) = 0 [pid 406] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 406] <... futex resumed>) = 0 [pid 404] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 406] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 404] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 404] <... futex resumed>) = 0 [pid 406] creat("./bus", 000 [pid 404] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] <... creat resumed>) = 6 [pid 406] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 404] <... futex resumed>) = 0 [pid 406] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 404] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 404] <... futex resumed>) = 0 [pid 406] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 404] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 406] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 404] <... futex resumed>) = 0 [pid 406] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 404] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 404] <... futex resumed>) = 0 [pid 406] pwrite64(6, "+", 1, 0 [pid 404] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] <... pwrite64 resumed>) = 1 [pid 406] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 404] <... futex resumed>) = 0 [pid 406] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 404] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 404] <... futex resumed>) = 0 [pid 406] open("./bus", O_RDONLY [pid 404] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] <... open resumed>) = 7 [pid 401] +++ killed by SIGBUS +++ [pid 399] +++ killed by SIGBUS +++ [pid 406] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=399, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 406] <... futex resumed>) = 1 [pid 404] <... futex resumed>) = 0 [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 406] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 404] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 404] <... futex resumed>) = 0 [pid 406] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 404] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... copy_file_range resumed>) = 1 [pid 404] <... futex resumed>) = 0 [pid 406] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 406] <... futex resumed>) = 0 [pid 404] <... mmap resumed>) = 0x7fb0838ed000 [pid 406] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 404] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 404] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 404] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[420]}, 88) = 420 [pid 404] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 404] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 420 attached [pid 300] <... restart_syscall resumed>) = 0 [pid 300] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./3/binderfs") = 0 [ 28.334121][ T402] EXT4-fs (loop1): This should not happen!! Data will be lost [ 28.334121][ T402] [ 28.346177][ T401] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 28.368428][ T402] EXT4-fs (loop1): Total free blocks count 0 [ 28.374616][ T401] EXT4-fs (loop2): This should not happen!! Data will be lost [ 28.374616][ T401] [pid 300] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 420] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 420] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 420] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 404] <... futex resumed>) = 0 [pid 404] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... futex resumed>) = 0 [pid 404] <... futex resumed>) = 1 [pid 404] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... umount2 resumed>) = 0 [pid 301] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./3/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./3/file1") = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./3") = 0 [pid 301] mkdir("./4", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 422 [pid 420] <... futex resumed>) = 1 [pid 420] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 422 attached [pid 422] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 422] chdir("./4") = 0 [pid 422] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 422] setpgid(0, 0) = 0 [pid 422] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 422] write(3, "1000", 4) = 4 [pid 422] close(3) = 0 [pid 422] symlink("/dev/binderfs", "./binderfs") = 0 [pid 422] write(1, "executing program\n", 18) = 18 [pid 422] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000executing program ) = 0 [ 28.390272][ T402] EXT4-fs (loop1): Free/Dirty block details [ 28.396481][ T402] EXT4-fs (loop1): free_blocks=2415919504 [ 28.402487][ T406] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 28.402737][ T402] EXT4-fs (loop1): dirty_blocks=32 [ 28.423282][ T402] EXT4-fs (loop1): Block reservation details [ 28.429856][ T402] EXT4-fs (loop1): i_reserved_data_blocks=2 [pid 422] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, [pid 402] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 300] <... umount2 resumed>) = 0 [pid 300] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./3/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./3/file1") = 0 [pid 300] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./3") = 0 [pid 300] mkdir("./4", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 423 [pid 422] <... rt_sigaction resumed>NULL, 8) = 0 [pid 422] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 422] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 422] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 422] rt_sigprocmask(SIG_BLOCK, ~[], [pid 404] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 422] <... rt_sigprocmask resumed>[], 8) = 0 [pid 404] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 422] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} [pid 404] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 404] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 422] <... clone3 resumed> => {parent_tid=[424]}, 88) = 424 [pid 404] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 422] rt_sigprocmask(SIG_SETMASK, [], [pid 404] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 420] <... futex resumed>) = 0 [pid 404] <... futex resumed>) = 1 [pid 422] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 420] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 404] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 422] <... futex resumed>) = 0 [pid 420] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 422] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 420] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 404] <... futex resumed>) = 0 [pid 420] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 415] <... mount resumed>) = 0 [pid 415] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 414] <... futex resumed>) = ? [pid 415] chdir("./file1") = 0 [pid 415] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 414] +++ killed by SIGBUS +++ [ 28.436943][ T406] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 28.437581][ T415] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 28.449288][ T406] EXT4-fs (loop4): This should not happen!! Data will be lost [ 28.449288][ T406] [ 28.474507][ T406] EXT4-fs (loop4): Total free blocks count 0 ./strace-static-x86_64: Process 424 attached ./strace-static-x86_64: Process 423 attached [pid 415] <... openat resumed>) = 4 [pid 424] set_robust_list(0x7fb08392e9a0, 24 [pid 423] set_robust_list(0x5555610ee6a0, 24 [pid 415] ioctl(4, LOOP_CLR_FD [pid 424] <... set_robust_list resumed>) = 0 [pid 423] <... set_robust_list resumed>) = 0 [pid 415] <... ioctl resumed>) = 0 [pid 424] rt_sigprocmask(SIG_SETMASK, [], [pid 423] chdir("./4" [pid 415] close(4 [pid 424] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 423] <... chdir resumed>) = 0 [pid 415] <... close resumed>) = 0 [pid 424] memfd_create("syzkaller", 0 [pid 423] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 415] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 424] <... memfd_create resumed>) = 3 [pid 423] <... prctl resumed>) = 0 [pid 415] <... futex resumed>) = 1 [pid 413] <... futex resumed>) = 0 [pid 424] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 423] setpgid(0, 0 [pid 415] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 413] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 424] <... mmap resumed>) = 0x7fb07b50e000 [pid 423] <... setpgid resumed>) = 0 [pid 415] <... open resumed>) = 4 [pid 413] <... futex resumed>) = 0 [pid 424] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 423] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 415] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 413] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 402] +++ killed by SIGBUS +++ [pid 400] +++ killed by SIGBUS +++ [pid 423] <... openat resumed>) = 3 [pid 420] <... futex resumed>) = ? [pid 415] <... futex resumed>) = 0 [pid 413] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 423] write(3, "1000", 4 [pid 420] +++ killed by SIGBUS +++ [pid 415] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 413] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=400, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 423] <... write resumed>) = 4 [pid 415] <... open resumed>) = 5 [pid 413] <... futex resumed>) = 0 [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 423] close(3 [pid 415] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 413] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 423] <... close resumed>) = 0 [pid 415] <... futex resumed>) = 0 [pid 413] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 423] symlink("/dev/binderfs", "./binderfs" [pid 415] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 413] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... restart_syscall resumed>) = 0 [pid 423] <... symlink resumed>) = 0 [pid 415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 413] <... futex resumed>) = 0 executing program [pid 423] write(1, "executing program\n", 18 [pid 415] creat("./bus", 000 [pid 413] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 423] <... write resumed>) = 18 [pid 415] <... creat resumed>) = 6 [pid 299] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 423] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 415] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 423] <... futex resumed>) = 0 [pid 415] <... futex resumed>) = 1 [pid 413] <... futex resumed>) = 0 [pid 299] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 423] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, [pid 415] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 413] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... openat resumed>) = 3 [pid 423] <... rt_sigaction resumed>NULL, 8) = 0 [pid 415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 413] <... futex resumed>) = 0 [pid 299] newfstatat(3, "", [pid 423] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 415] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 413] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 423] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 415] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 299] getdents64(3, [pid 423] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 415] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 423] <... mmap resumed>) = 0x7fb08390e000 [pid 415] <... futex resumed>) = 1 [pid 413] <... futex resumed>) = 0 [pid 299] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 423] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE [pid 415] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 413] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 423] <... mprotect resumed>) = 0 [pid 415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 413] <... futex resumed>) = 0 [pid 299] newfstatat(AT_FDCWD, "./3/binderfs", [pid 423] rt_sigprocmask(SIG_BLOCK, ~[], [pid 415] pwrite64(6, "+", 1, 0 [pid 413] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 423] <... rt_sigprocmask resumed>[], 8) = 0 [pid 415] <... pwrite64 resumed>) = 1 [pid 299] unlink("./3/binderfs" [pid 423] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} [pid 415] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... unlink resumed>) = 0 [pid 415] <... futex resumed>) = 1 [pid 413] <... futex resumed>) = 0 [pid 299] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 423] <... clone3 resumed> => {parent_tid=[425]}, 88) = 425 [pid 415] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 413] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] rt_sigprocmask(SIG_SETMASK, [], [pid 415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 413] <... futex resumed>) = 0 [pid 423] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 415] open("./bus", O_RDONLY [pid 413] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 423] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 415] <... open resumed>) = 7 [pid 423] <... futex resumed>) = 0 [pid 415] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 415] <... futex resumed>) = 1 [pid 413] <... futex resumed>) = 0 [pid 415] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 413] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 413] <... futex resumed>) = 0 [pid 415] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 413] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 415] <... copy_file_range resumed>) = 1 [pid 413] <... futex resumed>) = 0 [ 28.475920][ T402] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 28.480709][ T406] EXT4-fs (loop4): Free/Dirty block details [ 28.499056][ T406] EXT4-fs (loop4): free_blocks=2415919504 [ 28.502580][ T402] EXT4-fs (loop1): This should not happen!! Data will be lost [ 28.502580][ T402] [ 28.504916][ T406] EXT4-fs (loop4): dirty_blocks=32 [ 28.519382][ T406] EXT4-fs (loop4): Block reservation details [ 28.525258][ T406] EXT4-fs (loop4): i_reserved_data_blocks=2 [pid 415] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 413] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 415] <... futex resumed>) = 0 [pid 413] <... mmap resumed>) = 0x7fb0838ed000 [pid 415] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 413] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 413] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 413] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[426]}, 88) = 426 [pid 413] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 413] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 413] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] <... write resumed>) = 1048576 [pid 424] munmap(0x7fb07b50e000, 138412032) = 0 [pid 424] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 424] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 426 attached ./strace-static-x86_64: Process 425 attached [pid 406] +++ killed by SIGBUS +++ [pid 404] +++ killed by SIGBUS +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=404, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11} --- [pid 302] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 425] set_robust_list(0x7fb08392e9a0, 24 [pid 302] <... openat resumed>) = 3 [pid 425] <... set_robust_list resumed>) = 0 [pid 302] newfstatat(3, "", [pid 425] rt_sigprocmask(SIG_SETMASK, [], [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 425] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 302] getdents64(3, [pid 425] memfd_create("syzkaller", 0 [pid 302] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 425] <... memfd_create resumed>) = 3 [pid 302] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 426] set_robust_list(0x7fb08390d9a0, 24 [pid 425] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 426] <... set_robust_list resumed>) = 0 [pid 425] <... mmap resumed>) = 0x7fb07b50e000 [pid 302] newfstatat(AT_FDCWD, "./4/binderfs", [pid 426] rt_sigprocmask(SIG_SETMASK, [], [pid 302] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 426] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 302] unlink("./4/binderfs" [pid 426] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 302] <... unlink resumed>) = 0 [pid 302] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 426] <... mmap resumed>) = 0x20000000 [pid 426] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 426] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 413] <... futex resumed>) = 0 [pid 413] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 415] <... futex resumed>) = 0 [pid 425] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 425] munmap(0x7fb07b50e000, 138412032) = 0 [pid 425] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 425] ioctl(4, LOOP_SET_FD, 3 [pid 413] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 425] <... ioctl resumed>) = 0 [pid 425] close(3) = 0 [pid 425] close(4 [pid 424] <... ioctl resumed>) = 0 [pid 424] close(3) = 0 [ 28.534192][ T406] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 28.546586][ T406] EXT4-fs (loop4): This should not happen!! Data will be lost [ 28.546586][ T406] [ 28.555078][ T424] loop3: detected capacity change from 0 to 2048 [ 28.564765][ T415] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 28.569913][ T425] loop2: detected capacity change from 0 to 2048 [pid 424] close(4 [pid 425] <... close resumed>) = 0 [pid 424] <... close resumed>) = 0 [pid 413] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 302] <... umount2 resumed>) = 0 [pid 299] <... umount2 resumed>) = 0 [pid 413] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 426] <... futex resumed>) = 0 [pid 413] <... futex resumed>) = 1 [pid 426] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 413] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 426] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 426] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 413] <... futex resumed>) = 0 [pid 426] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./3/file1", [pid 302] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./4/file1", [pid 299] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] <... openat resumed>) = 4 [pid 302] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] getdents64(4, [pid 302] newfstatat(4, "", [pid 299] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, [pid 302] getdents64(4, [pid 299] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 302] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 299] close(4 [pid 302] getdents64(4, [pid 299] <... close resumed>) = 0 [pid 302] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 299] rmdir("./3/file1" [pid 302] close(4 [pid 299] <... rmdir resumed>) = 0 [pid 302] <... close resumed>) = 0 [pid 302] rmdir("./4/file1" [pid 299] getdents64(3, [pid 302] <... rmdir resumed>) = 0 [pid 299] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 425] mkdir("./file1", 0777 [pid 424] mkdir("./file1", 0777 [pid 302] getdents64(3, [pid 299] close(3 [pid 302] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 299] <... close resumed>) = 0 [pid 424] <... mkdir resumed>) = 0 [pid 302] close(3 [pid 299] rmdir("./3" [pid 425] <... mkdir resumed>) = 0 [pid 302] <... close resumed>) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 302] rmdir("./4" [pid 299] mkdir("./4", 0777 [pid 425] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 424] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 415] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 302] <... rmdir resumed>) = 0 [ 28.587380][ T415] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 28.599724][ T415] EXT4-fs (loop0): This should not happen!! Data will be lost [ 28.599724][ T415] [ 28.609495][ T415] EXT4-fs (loop0): Total free blocks count 0 [ 28.615502][ T415] EXT4-fs (loop0): Free/Dirty block details [ 28.621214][ T415] EXT4-fs (loop0): free_blocks=2415919504 [ 28.626826][ T415] EXT4-fs (loop0): dirty_blocks=32 [ 28.631718][ T415] EXT4-fs (loop0): Block reservation details [pid 302] mkdir("./5", 0777) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] close(3) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 427 ./strace-static-x86_64: Process 427 attached [pid 427] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 427] chdir("./5") = 0 [pid 427] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 427] setpgid(0, 0) = 0 [pid 427] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 427] write(3, "1000", 4) = 4 [pid 427] close(3) = 0 [pid 427] symlink("/dev/binderfs", "./binderfs") = 0 [pid 427] write(1, "executing program\n", 18executing program ) = 18 [pid 427] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 427] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 427] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 427] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 299] <... mkdir resumed>) = 0 [pid 426] <... futex resumed>) = ? [pid 427] <... mmap resumed>) = 0x7fb08390e000 [pid 427] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 427] rt_sigprocmask(SIG_BLOCK, ~[], [pid 426] +++ killed by SIGBUS +++ [pid 299] <... openat resumed>) = 3 [pid 427] <... rt_sigprocmask resumed>[], 8) = 0 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 427] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} [pid 299] close(3 [pid 427] <... clone3 resumed> => {parent_tid=[430]}, 88) = 430 ./strace-static-x86_64: Process 430 attached [pid 430] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 430] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 430] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 427] rt_sigprocmask(SIG_SETMASK, [], [pid 299] <... close resumed>) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 427] <... rt_sigprocmask resumed>NULL, 8) = 0 executing program [pid 427] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 431 attached [pid 431] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 431] chdir("./4") = 0 [pid 431] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 431] setpgid(0, 0) = 0 [pid 431] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 431] write(3, "1000", 4) = 4 [pid 431] close(3) = 0 [pid 431] symlink("/dev/binderfs", "./binderfs") = 0 [pid 431] write(1, "executing program\n", 18) = 18 [pid 431] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 431] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 431] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 431] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 431] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 431] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[432]}, 88) = 432 [pid 431] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 431] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 425] <... mount resumed>) = 0 [pid 425] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 425] chdir("./file1") = 0 [pid 425] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 425] ioctl(4, LOOP_CLR_FD) = 0 [pid 425] close(4) = 0 [pid 425] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 425] <... futex resumed>) = 1 [pid 425] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 425] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 425] <... futex resumed>) = 1 [pid 425] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 425] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 425] <... futex resumed>) = 1 [pid 425] creat("./bus", 000) = 6 [pid 425] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 427] <... futex resumed>) = 1 [pid 299] <... clone resumed>, child_tidptr=0x5555610ee690) = 431 [pid 430] <... futex resumed>) = 0 ./strace-static-x86_64: Process 432 attached [pid 427] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 430] memfd_create("syzkaller", 0 [pid 432] set_robust_list(0x7fb08392e9a0, 24 [pid 415] +++ killed by SIGBUS +++ [pid 413] +++ killed by SIGBUS +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=413, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./4/binderfs") = 0 [pid 298] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 425] <... futex resumed>) = 1 [pid 425] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 425] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 425] <... futex resumed>) = 1 [pid 425] pwrite64(6, "+", 1, 0) = 1 [pid 432] <... set_robust_list resumed>) = 0 [pid 430] <... memfd_create resumed>) = 3 [pid 432] rt_sigprocmask(SIG_SETMASK, [], [pid 425] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 430] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 425] <... futex resumed>) = 1 [pid 425] open("./bus", O_RDONLY) = 7 [pid 425] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] memfd_create("syzkaller", 0 [pid 423] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] <... mmap resumed>) = 0x7fb07b50e000 [pid 423] <... futex resumed>) = 0 [pid 423] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 423] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 432] <... memfd_create resumed>) = 3 [pid 423] <... mprotect resumed>) = 0 [pid 423] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 423] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[433]}, 88) = 433 [pid 423] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 423] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 425] <... futex resumed>) = 1 [pid 425] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 425] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 425] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 430] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 432] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 430] <... write resumed>) = 1048576 [pid 432] <... mmap resumed>) = 0x7fb07b50e000 [pid 432] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 433 attached [pid 430] munmap(0x7fb07b50e000, 138412032 [pid 433] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 430] <... munmap resumed>) = 0 [pid 433] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 430] openat(AT_FDCWD, "/dev/loop4", O_RDWR [ 28.638929][ T415] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 28.656993][ T425] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 28.657324][ T415] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 28.680043][ T415] EXT4-fs (loop0): This should not happen!! Data will be lost [ 28.680043][ T415] [pid 433] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 1048576 [pid 430] <... openat resumed>) = 4 [pid 433] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] ioctl(4, LOOP_SET_FD, 3 [pid 433] <... futex resumed>) = 1 [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 433] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 425] <... futex resumed>) = 0 [pid 423] <... futex resumed>) = 1 [pid 423] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] munmap(0x7fb07b50e000, 138412032 [pid 430] <... ioctl resumed>) = 0 [pid 424] <... mount resumed>) = 0 [pid 432] <... munmap resumed>) = 0 [pid 430] close(3 [pid 432] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 430] <... close resumed>) = 0 [pid 432] <... openat resumed>) = 4 [pid 430] close(4 [pid 432] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 432] close(3) = 0 [pid 432] close(4 [pid 424] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./4/file1") = 0 [pid 298] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./4") = 0 [pid 298] mkdir("./5", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 437 [pid 424] <... openat resumed>) = 3 [pid 424] chdir("./file1") = 0 [pid 424] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 424] ioctl(4, LOOP_CLR_FD) = 0 [pid 424] close(4) = 0 [pid 430] <... close resumed>) = 0 [pid 424] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] mkdir("./file1", 0777 [pid 422] <... futex resumed>) = 0 [pid 422] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] <... futex resumed>) = 1 [pid 424] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 424] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] <... futex resumed>) = 0 [pid 422] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] <... futex resumed>) = 1 [pid 424] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 424] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] <... futex resumed>) = 0 [pid 422] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] <... futex resumed>) = 1 [pid 424] creat("./bus", 000) = 6 [pid 424] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] <... futex resumed>) = 0 [pid 422] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] <... futex resumed>) = 1 [pid 424] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 424] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] <... futex resumed>) = 0 [pid 422] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] <... futex resumed>) = 1 [pid 424] pwrite64(6, "+", 1, 0) = 1 [pid 424] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] <... futex resumed>) = 0 [pid 422] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] <... futex resumed>) = 1 [pid 424] open("./bus", O_RDONLY) = 7 [pid 424] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] <... futex resumed>) = 0 [pid 422] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 422] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 422] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 422] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[438]}, 88) = 438 [pid 422] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 422] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] <... futex resumed>) = 1 [ 28.718023][ T424] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 28.729221][ T430] loop4: detected capacity change from 0 to 2048 [ 28.729978][ T425] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 28.740948][ T432] loop1: detected capacity change from 0 to 2048 [pid 424] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 424] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 424] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 438 attached [pid 438] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 438] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 438] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 ./strace-static-x86_64: Process 437 attached [pid 430] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 437] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 437] chdir("./5" [pid 438] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] <... futex resumed>) = 0 [pid 422] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 422] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] <... futex resumed>) = 0 [pid 423] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 423] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 433] <... futex resumed>) = 0 [pid 423] <... futex resumed>) = 1 [pid 433] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 423] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 433] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 423] <... futex resumed>) = 0 [pid 433] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 438] <... futex resumed>) = 1 [pid 438] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 437] <... chdir resumed>) = 0 [pid 437] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 437] setpgid(0, 0) = 0 [pid 437] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 437] write(3, "1000", 4) = 4 [pid 437] close(3) = 0 [pid 437] symlink("/dev/binderfs", "./binderfs") = 0 [pid 437] write(1, "executing program\n", 18executing program ) = 18 [pid 437] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] <... close resumed>) = 0 [pid 432] mkdir("./file1", 0777 [pid 437] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 437] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 437] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 437] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 437] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 437] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[439]}, 88) = 439 [pid 437] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 437] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 437] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 439 attached [pid 439] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 439] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 439] memfd_create("syzkaller", 0) = 3 [pid 439] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 432] <... mkdir resumed>) = 0 [pid 432] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 439] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 439] munmap(0x7fb07b50e000, 138412032) = 0 [ 28.757395][ T425] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 28.770330][ T425] EXT4-fs (loop2): This should not happen!! Data will be lost [ 28.770330][ T425] [ 28.780793][ T425] EXT4-fs (loop2): Total free blocks count 0 [ 28.782565][ T424] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 28.786944][ T425] EXT4-fs (loop2): Free/Dirty block details [ 28.807145][ T425] EXT4-fs (loop2): free_blocks=2415919504 [ 28.813570][ T425] EXT4-fs (loop2): dirty_blocks=32 [pid 439] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 439] ioctl(4, LOOP_SET_FD, 3 [pid 422] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 422] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = 0 [pid 422] <... futex resumed>) = 1 [pid 438] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 422] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 438] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 422] <... futex resumed>) = 0 [pid 438] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 439] <... ioctl resumed>) = 0 [pid 439] close(3) = 0 [pid 439] close(4) = 0 [pid 439] mkdir("./file1", 0777 [pid 425] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 439] <... mkdir resumed>) = 0 [pid 439] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 433] <... futex resumed>) = ? [ 28.819069][ T425] EXT4-fs (loop2): Block reservation details [ 28.823347][ T439] loop0: detected capacity change from 0 to 2048 [ 28.840881][ T425] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 28.846944][ T424] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 28.859579][ T424] EXT4-fs (loop3): This should not happen!! Data will be lost [ 28.859579][ T424] [pid 433] +++ killed by SIGBUS +++ [pid 430] <... mount resumed>) = 0 [pid 430] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 430] chdir("./file1") = 0 [pid 430] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 430] ioctl(4, LOOP_CLR_FD) = 0 [ 28.861254][ T432] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 28.869375][ T424] EXT4-fs (loop3): Total free blocks count 0 [ 28.880588][ T430] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 28.885476][ T424] EXT4-fs (loop3): Free/Dirty block details [ 28.901426][ T424] EXT4-fs (loop3): free_blocks=2415919504 [pid 430] close(4) = 0 [pid 430] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 427] <... futex resumed>) = 0 [pid 427] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 427] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 430] <... futex resumed>) = 1 [pid 430] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 430] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 427] <... futex resumed>) = 0 [pid 427] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 427] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 430] <... futex resumed>) = 1 [pid 430] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 430] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 427] <... futex resumed>) = 0 [pid 427] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 427] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 430] <... futex resumed>) = 1 [pid 430] creat("./bus", 000) = 6 [pid 430] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 427] <... futex resumed>) = 0 [pid 427] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 427] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 430] <... futex resumed>) = 1 [pid 430] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 430] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 432] <... mount resumed>) = 0 [pid 432] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 432] chdir("./file1") = 0 [pid 432] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 432] ioctl(4, LOOP_CLR_FD) = 0 [pid 432] close(4) = 0 [pid 432] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = 0 [pid 431] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 427] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 431] <... futex resumed>) = 0 [pid 431] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] <... futex resumed>) = 1 [pid 432] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 432] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = 0 [pid 431] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] <... futex resumed>) = 1 [pid 432] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 432] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 427] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = 0 [pid 431] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] <... futex resumed>) = 1 [pid 432] creat("./bus", 000) = 6 [pid 432] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = 0 [pid 431] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] <... futex resumed>) = 1 [pid 432] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 432] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = 0 [pid 431] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] <... futex resumed>) = 1 [pid 432] pwrite64(6, "+", 1, 0) = 1 [pid 432] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = 0 [pid 431] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] <... futex resumed>) = 1 [pid 432] open("./bus", O_RDONLY) = 7 [pid 432] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = 0 [pid 431] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 431] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 431] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 431] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[446]}, 88) = 446 [pid 431] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 431] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] <... futex resumed>) = 1 [pid 432] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 432] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 425] +++ killed by SIGBUS +++ [pid 423] +++ killed by SIGBUS +++ ./strace-static-x86_64: Process 446 attached [pid 439] <... mount resumed>) = 0 [pid 430] <... futex resumed>) = 0 [pid 427] <... futex resumed>) = 1 [pid 430] pwrite64(6, "+", 1, 0 [pid 427] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=423, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 430] <... pwrite64 resumed>) = 1 [pid 446] set_robust_list(0x7fb08390d9a0, 24 [pid 424] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 439] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 446] <... set_robust_list resumed>) = 0 [pid 439] <... openat resumed>) = 3 [pid 438] <... futex resumed>) = ? [pid 430] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 446] rt_sigprocmask(SIG_SETMASK, [], [pid 439] chdir("./file1" [pid 430] <... futex resumed>) = 1 [pid 427] <... futex resumed>) = 0 [pid 300] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 427] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 427] <... futex resumed>) = 0 [pid 438] +++ killed by SIGBUS +++ [pid 430] open("./bus", O_RDONLY [pid 427] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 430] <... open resumed>) = 7 [pid 446] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 439] <... chdir resumed>) = 0 [pid 300] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 430] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 430] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 446] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 300] <... openat resumed>) = 3 [pid 446] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = 0 [pid 431] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 431] <... futex resumed>) = 1 [ 28.908459][ T425] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 28.921228][ T424] EXT4-fs (loop3): dirty_blocks=32 [ 28.926460][ T425] EXT4-fs (loop2): This should not happen!! Data will be lost [ 28.926460][ T425] [ 28.936169][ T424] EXT4-fs (loop3): Block reservation details [ 28.946555][ T439] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 28.955433][ T424] EXT4-fs (loop3): i_reserved_data_blocks=2 [pid 439] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 431] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 427] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] newfstatat(3, "", [pid 446] <... futex resumed>) = 1 [pid 446] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 439] <... openat resumed>) = 4 [pid 430] <... futex resumed>) = 0 [pid 427] <... futex resumed>) = 1 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 439] ioctl(4, LOOP_CLR_FD [pid 430] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 427] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 424] +++ killed by SIGBUS +++ [pid 422] +++ killed by SIGBUS +++ [pid 300] getdents64(3, [pid 439] <... ioctl resumed>) = 0 [pid 430] <... copy_file_range resumed>) = 1 [pid 427] <... futex resumed>) = 0 [pid 300] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 439] close(4 [pid 430] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 427] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=422, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 300] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 439] <... close resumed>) = 0 [pid 430] <... futex resumed>) = 0 [pid 427] <... mmap resumed>) = 0x7fb0838ed000 [pid 301] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 439] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 427] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./4/binderfs", [pid 439] <... futex resumed>) = 1 [pid 437] <... futex resumed>) = 0 [pid 427] <... mprotect resumed>) = 0 [pid 301] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 300] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 439] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 437] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 427] rt_sigprocmask(SIG_BLOCK, ~[], [pid 301] <... openat resumed>) = 3 [pid 300] unlink("./4/binderfs" [pid 439] <... open resumed>) = 4 [pid 437] <... futex resumed>) = 0 [pid 427] <... rt_sigprocmask resumed>[], 8) = 0 [pid 301] newfstatat(3, "", [pid 300] <... unlink resumed>) = 0 [pid 439] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 437] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 427] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 28.967221][ T432] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 28.967571][ T424] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 28.982406][ T432] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 28.995318][ T424] EXT4-fs (loop3): This should not happen!! Data will be lost [ 28.995318][ T424] [pid 300] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 439] <... futex resumed>) = 0 [pid 437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] getdents64(3, [pid 437] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 437] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 427] <... clone3 resumed> => {parent_tid=[447]}, 88) = 447 [pid 301] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 439] <... open resumed>) = 5 [pid 427] rt_sigprocmask(SIG_SETMASK, [], [pid 301] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 439] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 427] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 439] <... futex resumed>) = 1 [pid 437] <... futex resumed>) = 0 [pid 427] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] newfstatat(AT_FDCWD, "./4/binderfs", ./strace-static-x86_64: Process 447 attached [pid 439] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 437] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 427] <... futex resumed>) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 437] <... futex resumed>) = 0 [pid 427] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] unlink("./4/binderfs" [pid 439] creat("./bus", 000 [pid 437] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... unlink resumed>) = 0 [pid 439] <... creat resumed>) = 6 [pid 301] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 439] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 447] set_robust_list(0x7fb08390d9a0, 24 [pid 439] <... futex resumed>) = 1 [pid 437] <... futex resumed>) = 0 [pid 431] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 439] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 437] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 437] <... futex resumed>) = 0 [pid 439] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 437] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 439] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 437] <... futex resumed>) = 0 [pid 439] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 437] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 437] <... futex resumed>) = 0 [pid 439] pwrite64(6, "+", 1, 0 [pid 437] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] <... pwrite64 resumed>) = 1 [pid 439] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 437] <... futex resumed>) = 0 [pid 439] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 437] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 437] <... futex resumed>) = 0 [pid 439] open("./bus", O_RDONLY [pid 437] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] <... open resumed>) = 7 [pid 439] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 437] <... futex resumed>) = 0 [pid 439] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 437] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 437] <... futex resumed>) = 0 [pid 439] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 437] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... copy_file_range resumed>) = 1 [pid 437] <... futex resumed>) = 0 [pid 439] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 437] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 439] <... futex resumed>) = 0 [pid 437] <... mmap resumed>) = 0x7fb0838ed000 [pid 447] <... set_robust_list resumed>) = 0 [pid 439] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 437] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 431] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 437] <... mprotect resumed>) = 0 [pid 437] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 437] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[448]}, 88) = 448 [pid 437] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 437] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 437] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 448 attached [pid 448] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 448] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 448] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 437] <... futex resumed>) = 0 [pid 437] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = 0 [pid 437] <... futex resumed>) = 1 [pid 447] rt_sigprocmask(SIG_SETMASK, [], [pid 446] <... futex resumed>) = 0 [pid 437] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... futex resumed>) = 1 [pid 448] <... futex resumed>) = 1 [ 29.006312][ T432] EXT4-fs (loop1): This should not happen!! Data will be lost [ 29.006312][ T432] [ 29.024807][ T432] EXT4-fs (loop1): Total free blocks count 0 [ 29.030939][ T432] EXT4-fs (loop1): Free/Dirty block details [ 29.037235][ T432] EXT4-fs (loop1): free_blocks=2415919504 [ 29.042948][ T432] EXT4-fs (loop1): dirty_blocks=32 [ 29.048432][ T432] EXT4-fs (loop1): Block reservation details [ 29.053223][ T439] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 448] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 447] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 446] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 432] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 431] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 447] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 446] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 447] <... mmap resumed>) = 0x20000000 [pid 446] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 431] <... futex resumed>) = 0 [pid 446] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 447] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 447] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 446] <... futex resumed>) = ? [pid 446] +++ killed by SIGBUS +++ [pid 427] <... futex resumed>) = 0 [pid 301] <... umount2 resumed>) = 0 [pid 300] <... umount2 resumed>) = 0 [pid 427] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 432] +++ killed by SIGBUS +++ [pid 431] +++ killed by SIGBUS +++ [pid 427] <... futex resumed>) = 1 [pid 427] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./4/file1") = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./4") = 0 [pid 301] mkdir("./5", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 449 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, [pid 430] <... futex resumed>) = 0 [pid 300] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./4/file1") = 0 [pid 300] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./4") = 0 [pid 300] mkdir("./5", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 450 ./strace-static-x86_64: Process 450 attached [pid 437] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 450] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 450] chdir("./5") = 0 [pid 450] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 450] setpgid(0, 0) = 0 [pid 450] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 450] write(3, "1000", 4) = 4 [pid 450] close(3) = 0 [pid 450] symlink("/dev/binderfs", "./binderfs") = 0 [pid 450] write(1, "executing program\n", 18executing program ) = 18 [pid 450] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 450] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 450] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 450] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 450] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 450] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 29.054702][ T432] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 29.070678][ T439] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 29.078565][ T432] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 29.099154][ T432] EXT4-fs (loop1): This should not happen!! Data will be lost [ 29.099154][ T432] [ 29.108292][ T439] EXT4-fs (loop0): This should not happen!! Data will be lost [ 29.108292][ T439] [pid 450] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[451]}, 88) = 451 [pid 450] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 450] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 450] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 451 attached [pid 451] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 451] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 451] memfd_create("syzkaller", 0) = 3 [pid 451] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 437] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 448] <... futex resumed>) = 0 [pid 448] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 437] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=431, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=17} --- [pid 448] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 299] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 448] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 448] <... futex resumed>) = 1 [pid 437] <... futex resumed>) = 0 [pid 299] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 448] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] <... openat resumed>) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./4/binderfs") = 0 [pid 299] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 451] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 449 attached [pid 449] set_robust_list(0x5555610ee6a0, 24 [pid 451] <... write resumed>) = 1048576 [pid 451] munmap(0x7fb07b50e000, 138412032) = 0 [pid 451] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 451] ioctl(4, LOOP_SET_FD, 3 [pid 449] <... set_robust_list resumed>) = 0 [pid 427] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 427] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 447] <... futex resumed>) = 0 [pid 427] <... futex resumed>) = 1 [pid 447] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 427] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 447] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 447] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 427] <... futex resumed>) = 0 [pid 447] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 451] <... ioctl resumed>) = 0 [pid 451] close(3) = 0 [pid 451] close(4 [pid 449] chdir("./5" [pid 299] <... umount2 resumed>) = 0 [ 29.123415][ T430] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 29.148405][ T430] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 29.151352][ T451] loop2: detected capacity change from 0 to 2048 [ 29.160528][ T439] EXT4-fs (loop0): Total free blocks count 0 [pid 449] <... chdir resumed>) = 0 [pid 299] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 449] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 449] <... prctl resumed>) = 0 [pid 299] newfstatat(AT_FDCWD, "./4/file1", [pid 451] <... close resumed>) = 0 [pid 449] setpgid(0, 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 451] mkdir("./file1", 0777) = 0 [pid 451] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue"executing program [pid 449] <... setpgid resumed>) = 0 [pid 439] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 299] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 449] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 449] <... openat resumed>) = 3 [pid 299] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 449] write(3, "1000", 4 [pid 299] <... openat resumed>) = 4 [pid 449] <... write resumed>) = 4 [pid 299] newfstatat(4, "", [pid 449] close(3 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 449] <... close resumed>) = 0 [pid 299] getdents64(4, [pid 449] symlink("/dev/binderfs", "./binderfs" [pid 299] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 449] <... symlink resumed>) = 0 [pid 299] getdents64(4, [pid 449] write(1, "executing program\n", 18 [pid 299] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 449] <... write resumed>) = 18 [pid 299] close(4 [pid 449] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... close resumed>) = 0 [pid 449] <... futex resumed>) = 0 [pid 299] rmdir("./4/file1" [pid 449] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, [pid 299] <... rmdir resumed>) = 0 [pid 449] <... rt_sigaction resumed>NULL, 8) = 0 [pid 299] getdents64(3, [pid 449] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 299] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 449] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 299] close(3 [pid 449] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 299] <... close resumed>) = 0 [pid 449] <... mmap resumed>) = 0x7fb08390e000 [pid 299] rmdir("./4" [pid 449] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE [pid 299] <... rmdir resumed>) = 0 [pid 449] <... mprotect resumed>) = 0 [pid 299] mkdir("./5", 0777 [pid 449] rt_sigprocmask(SIG_BLOCK, ~[], [pid 299] <... mkdir resumed>) = 0 [pid 449] <... rt_sigprocmask resumed>[], 8) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 449] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} [pid 299] <... openat resumed>) = 3 [pid 299] ioctl(3, LOOP_CLR_FD [pid 449] <... clone3 resumed> => {parent_tid=[452]}, 88) = 452 [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 449] rt_sigprocmask(SIG_SETMASK, [], [pid 299] close(3 [pid 449] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 299] <... close resumed>) = 0 [pid 449] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 449] <... futex resumed>) = 0 [pid 449] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 299] <... clone resumed>, child_tidptr=0x5555610ee690) = 453 [pid 448] <... futex resumed>) = ? [pid 448] +++ killed by SIGBUS +++ [ 29.170948][ T430] EXT4-fs (loop4): This should not happen!! Data will be lost [ 29.170948][ T430] [ 29.176531][ T439] EXT4-fs (loop0): Free/Dirty block details [ 29.183043][ T430] EXT4-fs (loop4): Total free blocks count 0 [ 29.187841][ T439] EXT4-fs (loop0): free_blocks=2415919504 [ 29.194461][ T430] EXT4-fs (loop4): Free/Dirty block details [ 29.204874][ T439] EXT4-fs (loop0): dirty_blocks=32 [ 29.206003][ T430] EXT4-fs (loop4): free_blocks=2415919504 [ 29.215868][ T439] EXT4-fs (loop0): Block reservation details ./strace-static-x86_64: Process 453 attached ./strace-static-x86_64: Process 452 attached [pid 453] set_robust_list(0x5555610ee6a0, 24 [pid 452] set_robust_list(0x7fb08392e9a0, 24 [pid 453] <... set_robust_list resumed>) = 0 [pid 452] <... set_robust_list resumed>) = 0 [pid 453] chdir("./5" [pid 452] rt_sigprocmask(SIG_SETMASK, [], [pid 430] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 453] <... chdir resumed>) = 0 [pid 452] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 452] memfd_create("syzkaller", 0 [pid 453] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 447] <... futex resumed>) = ? [pid 453] <... prctl resumed>) = 0 [pid 452] <... memfd_create resumed>) = 3 [pid 447] +++ killed by SIGBUS +++ [pid 439] +++ killed by SIGBUS +++ [pid 437] +++ killed by SIGBUS +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=437, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11} --- [ 29.218378][ T430] EXT4-fs (loop4): dirty_blocks=32 [ 29.221753][ T439] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 29.230269][ T439] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 29.233089][ T430] EXT4-fs (loop4): Block reservation details [ 29.245163][ T439] EXT4-fs (loop0): This should not happen!! Data will be lost [ 29.245163][ T439] [ 29.250788][ T430] EXT4-fs (loop4): i_reserved_data_blocks=2 [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 453] setpgid(0, 0 [pid 452] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 452] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 298] <... restart_syscall resumed>) = 0 [pid 298] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./5/binderfs") = 0 [pid 298] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 453] <... setpgid resumed>) = 0 [pid 452] <... write resumed>) = 1048576 [pid 452] munmap(0x7fb07b50e000, 138412032) = 0 [pid 452] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 452] ioctl(4, LOOP_SET_FD, 3 [pid 453] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 430] +++ killed by SIGBUS +++ [pid 427] +++ killed by SIGBUS +++ [pid 453] <... openat resumed>) = 3 [pid 453] write(3, "1000", 4 [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=427, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 453] <... write resumed>) = 4 [pid 302] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 453] close(3 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 453] <... close resumed>) = 0 [pid 302] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 453] symlink("/dev/binderfs", "./binderfs" [pid 302] <... openat resumed>) = 3 [pid 453] <... symlink resumed>) = 0 [pid 302] newfstatat(3, "", executing program [pid 453] write(1, "executing program\n", 18 [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 453] <... write resumed>) = 18 [pid 302] getdents64(3, [pid 453] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 453] <... futex resumed>) = 0 [pid 302] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 453] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 453] <... rt_sigaction resumed>NULL, 8) = 0 [pid 302] newfstatat(AT_FDCWD, "./5/binderfs", [pid 453] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 302] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 453] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 302] unlink("./5/binderfs" [pid 453] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 302] <... unlink resumed>) = 0 [pid 453] <... mmap resumed>) = 0x7fb08390e000 [pid 302] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 453] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 453] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 453] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[456]}, 88) = 456 [pid 453] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 453] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 453] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 452] <... ioctl resumed>) = 0 [pid 452] close(3) = 0 [pid 452] close(4 [pid 451] <... mount resumed>) = 0 [pid 451] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 451] chdir("./file1") = 0 [pid 451] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 ./strace-static-x86_64: Process 456 attached [pid 451] ioctl(4, LOOP_CLR_FD) = 0 [pid 451] close(4 [pid 456] set_robust_list(0x7fb08392e9a0, 24 [pid 451] <... close resumed>) = 0 [pid 451] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 450] <... futex resumed>) = 0 [pid 450] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... set_robust_list resumed>) = 0 [pid 451] <... futex resumed>) = 1 [pid 450] <... futex resumed>) = 0 [pid 450] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 456] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 451] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 456] memfd_create("syzkaller", 0) = 3 [pid 456] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 451] <... open resumed>) = 4 [pid 456] <... mmap resumed>) = 0x7fb07b50e000 [pid 451] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 450] <... futex resumed>) = 0 [pid 450] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 450] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] <... futex resumed>) = 1 [pid 451] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 451] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 450] <... futex resumed>) = 0 [pid 450] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 450] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] <... futex resumed>) = 1 [pid 451] creat("./bus", 000) = 6 [pid 451] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 450] <... futex resumed>) = 0 [pid 450] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 450] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] <... futex resumed>) = 1 [pid 451] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 451] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 450] <... futex resumed>) = 0 [pid 450] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 450] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] <... futex resumed>) = 1 [pid 451] pwrite64(6, "+", 1, 0) = 1 [pid 451] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 450] <... futex resumed>) = 0 [pid 450] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 450] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] <... futex resumed>) = 1 [pid 451] open("./bus", O_RDONLY) = 7 [pid 451] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 450] <... futex resumed>) = 0 [pid 450] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 450] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 450] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 450] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 450] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 450] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[457]}, 88) = 457 [pid 450] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 450] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 450] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] <... futex resumed>) = 1 [pid 451] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 451] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 451] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 457 attached [pid 457] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 457] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 457] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 450] <... futex resumed>) = 0 [pid 450] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 450] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] <... futex resumed>) = 0 [pid 457] <... futex resumed>) = 1 [pid 456] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 457] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] munmap(0x7fb07b50e000, 138412032) = 0 [pid 456] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 29.271369][ T430] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 29.284210][ T430] EXT4-fs (loop4): This should not happen!! Data will be lost [ 29.284210][ T430] [ 29.287452][ T452] loop3: detected capacity change from 0 to 2048 [ 29.302241][ T451] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 456] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 452] <... close resumed>) = 0 [pid 298] <... umount2 resumed>) = 0 [pid 452] mkdir("./file1", 0777) = 0 [pid 452] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 298] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./5/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./5/file1") = 0 [pid 298] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./5") = 0 [pid 298] mkdir("./6", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 458 [pid 456] close(3) = 0 [pid 456] close(4./strace-static-x86_64: Process 458 attached [pid 302] <... umount2 resumed>) = 0 [pid 302] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./5/file1", [pid 458] set_robust_list(0x5555610ee6a0, 24 [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 458] <... set_robust_list resumed>) = 0 [pid 458] chdir("./6") = 0 [pid 458] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 458] setpgid(0, 0) = 0 [pid 458] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 458] write(3, "1000", 4) = 4 [pid 458] close(3) = 0 [pid 458] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 458] write(1, "executing program\n", 18) = 18 [pid 458] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 458] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 458] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 458] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 458] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 458] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[459]}, 88) = 459 [pid 458] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 458] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 450] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 458] <... futex resumed>) = 0 [pid 450] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 457] <... futex resumed>) = 0 [pid 450] <... futex resumed>) = 1 ./strace-static-x86_64: Process 459 attached [pid 458] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 302] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 457] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0) = -1 EBADF (Bad file descriptor) [pid 457] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 457] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 450] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 459] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 459] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 459] memfd_create("syzkaller", 0) = 3 [pid 459] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 302] <... openat resumed>) = 4 [ 29.323316][ T451] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 29.333966][ T456] loop1: detected capacity change from 0 to 2048 [ 29.338480][ T451] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 29.360503][ T451] EXT4-fs (loop2): This should not happen!! Data will be lost [ 29.360503][ T451] [pid 302] newfstatat(4, "", [pid 459] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 302] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 459] <... write resumed>) = 1048576 [pid 459] munmap(0x7fb07b50e000, 138412032) = 0 [pid 459] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 459] ioctl(4, LOOP_SET_FD, 3 [pid 302] close(4 [pid 456] <... close resumed>) = 0 [pid 456] mkdir("./file1", 0777) = 0 [pid 456] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 459] <... ioctl resumed>) = 0 [pid 302] <... close resumed>) = 0 [pid 459] close(3) = 0 [pid 459] close(4 [pid 452] <... mount resumed>) = 0 [pid 302] rmdir("./5/file1" [pid 452] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 452] chdir("./file1") = 0 [pid 452] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 302] <... rmdir resumed>) = 0 [pid 302] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./5" [pid 452] <... openat resumed>) = 4 [pid 452] ioctl(4, LOOP_CLR_FD) = 0 [pid 452] close(4) = 0 [pid 452] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 449] <... futex resumed>) = 0 [pid 449] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 449] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 452] <... futex resumed>) = 1 [pid 452] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 452] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 449] <... futex resumed>) = 0 [pid 449] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 449] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 452] <... futex resumed>) = 1 [pid 452] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 452] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 449] <... futex resumed>) = 0 [pid 302] <... rmdir resumed>) = 0 [pid 449] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 449] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 452] <... futex resumed>) = 1 [pid 452] creat("./bus", 000 [pid 302] mkdir("./6", 0777 [pid 452] <... creat resumed>) = 6 [pid 302] <... mkdir resumed>) = 0 [pid 452] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 449] <... futex resumed>) = 0 [pid 449] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 449] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 452] <... futex resumed>) = 1 [pid 452] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 452] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 449] <... futex resumed>) = 0 [pid 449] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 449] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 452] <... futex resumed>) = 1 [pid 452] pwrite64(6, "+", 1, 0) = 1 [pid 452] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 451] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 452] <... futex resumed>) = 1 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 449] <... futex resumed>) = 0 [pid 457] <... futex resumed>) = ? [pid 449] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... openat resumed>) = 3 [ 29.371104][ T451] EXT4-fs (loop2): Total free blocks count 0 [ 29.377579][ T451] EXT4-fs (loop2): Free/Dirty block details [ 29.383677][ T451] EXT4-fs (loop2): free_blocks=2415919504 [ 29.390883][ T452] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 29.396371][ T459] loop0: detected capacity change from 0 to 2048 [ 29.401373][ T451] EXT4-fs (loop2): dirty_blocks=32 [ 29.417166][ T451] EXT4-fs (loop2): Block reservation details [pid 449] <... futex resumed>) = 0 [pid 457] +++ killed by SIGBUS +++ [pid 456] <... mount resumed>) = 0 [pid 452] open("./bus", O_RDONLY [pid 449] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] ioctl(3, LOOP_CLR_FD [pid 456] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 452] <... open resumed>) = 7 [pid 456] <... openat resumed>) = 3 [pid 456] chdir("./file1" [pid 302] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 456] <... chdir resumed>) = 0 [pid 452] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] close(3 [pid 449] <... futex resumed>) = 0 [pid 449] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 449] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 449] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 449] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 449] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 449] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[464]}, 88) = 464 [pid 449] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 449] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 449] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 456] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 302] <... close resumed>) = 0 [pid 452] <... futex resumed>) = 1 [pid 456] <... openat resumed>) = 4 [pid 452] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 456] ioctl(4, LOOP_CLR_FD) = 0 [pid 456] close(4) = 0 [pid 456] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 453] <... futex resumed>) = 0 [pid 453] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 453] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 456] <... futex resumed>) = 1 [pid 456] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 452] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 302] <... clone resumed>, child_tidptr=0x5555610ee690) = 465 [pid 456] <... open resumed>) = 4 [pid 456] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 453] <... futex resumed>) = 0 [pid 453] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 453] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 456] <... futex resumed>) = 1 [pid 456] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 456] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 453] <... futex resumed>) = 0 [pid 453] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 453] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 456] <... futex resumed>) = 1 [pid 456] creat("./bus", 000) = 6 [pid 456] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 453] <... futex resumed>) = 0 [pid 453] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 453] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 456] <... futex resumed>) = 1 [pid 456] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 456] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 453] <... futex resumed>) = 0 [pid 456] pwrite64(6, "+", 1, 0 [pid 453] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... pwrite64 resumed>) = 1 [pid 453] <... futex resumed>) = 0 [pid 459] <... close resumed>) = 0 [pid 456] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 453] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] mkdir("./file1", 0777 [pid 456] <... futex resumed>) = 0 [pid 453] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 459] <... mkdir resumed>) = 0 [pid 456] open("./bus", O_RDONLY [pid 453] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 456] <... open resumed>) = 7 [pid 453] <... futex resumed>) = 0 [pid 456] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 453] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 456] <... futex resumed>) = 0 [pid 453] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 456] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 453] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... copy_file_range resumed>) = 1 [pid 453] <... futex resumed>) = 0 [pid 456] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 453] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 453] <... futex resumed>) = 0 [pid 456] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 453] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 453] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 453] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 453] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[466]}, 88) = 466 [pid 453] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 453] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 453] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 464 attached [pid 451] +++ killed by SIGBUS +++ [pid 450] +++ killed by SIGBUS +++ ./strace-static-x86_64: Process 465 attached [pid 465] set_robust_list(0x5555610ee6a0, 24) = 0 ./strace-static-x86_64: Process 466 attached [pid 466] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 466] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=450, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 466] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 453] <... futex resumed>) = 0 [pid 453] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 453] <... futex resumed>) = 1 [pid 453] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] <... futex resumed>) = 1 [pid 466] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 464] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 464] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 464] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 449] <... futex resumed>) = 0 [pid 449] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] <... futex resumed>) = 0 [pid 449] <... futex resumed>) = 1 [pid 465] chdir("./6" [pid 449] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... restart_syscall resumed>) = 0 [pid 464] <... futex resumed>) = 1 [pid 464] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 465] <... chdir resumed>) = 0 [pid 453] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 453] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = 0 [pid 453] <... futex resumed>) = 1 [pid 466] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 453] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 466] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 453] <... futex resumed>) = 0 [ 29.478074][ T456] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 29.482674][ T452] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 29.505937][ T456] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 466] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 465] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 300] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 465] setpgid(0, 0 [pid 449] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 449] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... futex resumed>) = 0 [pid 449] <... futex resumed>) = 1 [pid 464] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 449] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 464] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 449] <... futex resumed>) = 0 [ 29.509563][ T452] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 29.529053][ T456] EXT4-fs (loop1): This should not happen!! Data will be lost [ 29.529053][ T456] [ 29.533654][ T452] EXT4-fs (loop3): This should not happen!! Data will be lost [ 29.533654][ T452] [ 29.541290][ T456] EXT4-fs (loop1): Total free blocks count 0 [ 29.550982][ T452] EXT4-fs (loop3): Total free blocks count 0 [ 29.557098][ T456] EXT4-fs (loop1): Free/Dirty block details [ 29.563018][ T459] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 464] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 465] <... setpgid resumed>) = 0 [pid 300] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 459] <... mount resumed>) = 0 [pid 459] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 459] chdir("./file1") = 0 [pid 459] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 459] ioctl(4, LOOP_CLR_FD) = 0 [pid 459] close(4) = 0 [pid 459] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] <... futex resumed>) = 0 [pid 458] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 465] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 300] <... openat resumed>) = 3 [pid 459] <... futex resumed>) = 1 [pid 459] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 459] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] <... futex resumed>) = 0 [pid 458] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] <... futex resumed>) = 1 [pid 459] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 459] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] <... futex resumed>) = 0 [pid 458] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] <... futex resumed>) = 1 [pid 459] creat("./bus", 000) = 6 [pid 459] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] <... futex resumed>) = 0 [pid 458] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] <... futex resumed>) = 1 [pid 459] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 459] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] <... futex resumed>) = 0 [pid 458] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] newfstatat(3, "", [pid 465] <... openat resumed>) = 3 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 465] write(3, "1000", 4) = 4 [pid 300] getdents64(3, [pid 465] close(3) = 0 [pid 300] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 465] symlink("/dev/binderfs", "./binderfs" [pid 300] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 465] <... symlink resumed>) = 0 [pid 465] write(1, "executing program\n", 18 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 459] <... futex resumed>) = 1 [pid 459] pwrite64(6, "+", 1, 0) = 1 executing program [pid 465] <... write resumed>) = 18 [pid 300] newfstatat(AT_FDCWD, "./5/binderfs", [pid 465] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 465] <... futex resumed>) = 0 [pid 300] unlink("./5/binderfs" [pid 465] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, [pid 300] <... unlink resumed>) = 0 [pid 465] <... rt_sigaction resumed>NULL, 8) = 0 [pid 300] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 465] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 465] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 465] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 465] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 465] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[469]}, 88) = 469 [pid 465] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 465] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 465] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 459] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] <... futex resumed>) = 0 [pid 458] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] <... futex resumed>) = 1 ./strace-static-x86_64: Process 469 attached [pid 456] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 469] set_robust_list(0x7fb08392e9a0, 24 [pid 459] open("./bus", O_RDONLY) = 7 [pid 459] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] <... futex resumed>) = 0 [pid 458] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 458] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 458] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 458] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[470]}, 88) = 470 [pid 458] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 459] <... futex resumed>) = 1 [pid 458] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 458] <... futex resumed>) = 0 [pid 459] <... copy_file_range resumed>) = 1 [pid 458] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... set_robust_list resumed>) = 0 [pid 466] <... futex resumed>) = ? [pid 459] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 459] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 470 attached [pid 470] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 470] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 470] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 458] <... futex resumed>) = 0 [pid 458] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] <... futex resumed>) = 0 [pid 458] <... futex resumed>) = 1 [pid 470] <... futex resumed>) = 1 [pid 469] rt_sigprocmask(SIG_SETMASK, [], [pid 458] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 469] memfd_create("syzkaller", 0) = 3 [pid 469] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 469] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 470] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 469] munmap(0x7fb07b50e000, 138412032) = 0 [pid 469] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 469] ioctl(4, LOOP_SET_FD, 3 [pid 466] +++ killed by SIGBUS +++ [pid 469] <... ioctl resumed>) = 0 [pid 469] close(3) = 0 [ 29.625952][ T459] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 29.626459][ T459] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 29.651696][ T469] loop4: detected capacity change from 0 to 2048 [ 29.653645][ T452] EXT4-fs (loop3): Block reservation details [ 29.664720][ T459] EXT4-fs (loop0): This should not happen!! Data will be lost [ 29.664720][ T459] [pid 469] close(4 [pid 300] <... umount2 resumed>) = 0 [pid 300] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./5/file1", [pid 458] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 456] +++ killed by SIGBUS +++ [pid 453] +++ killed by SIGBUS +++ [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=453, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 299] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./5/binderfs") = 0 [pid 299] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 469] <... close resumed>) = 0 [pid 458] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 300] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 470] <... futex resumed>) = 0 [pid 469] mkdir("./file1", 0777 [pid 464] <... futex resumed>) = ? [pid 458] <... futex resumed>) = 1 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 470] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0) = -1 EBADF (Bad file descriptor) [pid 470] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 469] <... mkdir resumed>) = 0 [pid 469] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 458] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 29.666304][ T456] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 29.674191][ T459] EXT4-fs (loop0): Total free blocks count 0 [ 29.700847][ T459] EXT4-fs (loop0): Free/Dirty block details [ 29.701110][ T456] EXT4-fs (loop1): This should not happen!! Data will be lost [ 29.701110][ T456] [ 29.707078][ T459] EXT4-fs (loop0): free_blocks=2415919504 [ 29.717371][ T452] EXT4-fs (loop3): i_reserved_data_blocks=2 [pid 300] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./5/file1") = 0 [pid 300] getdents64(3, [pid 464] +++ killed by SIGBUS +++ [pid 300] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./5") = 0 [pid 300] mkdir("./6", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 472 [pid 459] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 470] <... futex resumed>) = ? ./strace-static-x86_64: Process 472 attached [pid 472] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 472] chdir("./6") = 0 [pid 472] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 472] setpgid(0, 0) = 0 [pid 472] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 472] write(3, "1000", 4) = 4 [pid 472] close(3) = 0 executing program [pid 472] symlink("/dev/binderfs", "./binderfs") = 0 [pid 472] write(1, "executing program\n", 18) = 18 [pid 472] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 472] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 472] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 472] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 472] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 472] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[473]}, 88) = 473 [pid 472] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 472] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 473 attached [pid 473] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 473] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 473] memfd_create("syzkaller", 0) = 3 [pid 473] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 470] +++ killed by SIGBUS +++ [ 29.724019][ T459] EXT4-fs (loop0): dirty_blocks=32 [ 29.733600][ T459] EXT4-fs (loop0): Block reservation details [ 29.740196][ T459] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 29.741713][ T452] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 29.753502][ T452] EXT4-fs (loop3): This should not happen!! Data will be lost [ 29.753502][ T452] [pid 473] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 469] <... mount resumed>) = 0 [pid 452] +++ killed by SIGBUS +++ [pid 449] +++ killed by SIGBUS +++ [pid 469] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 469] chdir("./file1") = 0 [pid 469] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 469] ioctl(4, LOOP_CLR_FD) = 0 [pid 469] close(4) = 0 [pid 469] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 465] <... futex resumed>) = 0 [pid 469] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 465] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 469] <... open resumed>) = 4 [pid 465] <... futex resumed>) = 0 [pid 469] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 0 [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 469] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 465] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 469] <... open resumed>) = 5 [pid 465] <... futex resumed>) = 0 [pid 469] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 0 [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 469] creat("./bus", 000 [pid 465] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 469] <... creat resumed>) = 6 [pid 465] <... futex resumed>) = 0 [pid 469] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 0 [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 469] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 465] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 469] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 465] <... futex resumed>) = 0 [pid 469] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 0 [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 469] pwrite64(6, "+", 1, 0 [pid 465] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 469] <... pwrite64 resumed>) = 1 [pid 465] <... futex resumed>) = 0 [pid 469] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 0 [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 469] open("./bus", O_RDONLY [pid 465] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 469] <... open resumed>) = 7 [pid 465] <... futex resumed>) = 0 [pid 469] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 0 [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 469] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 465] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 469] <... copy_file_range resumed>) = 1 [pid 465] <... futex resumed>) = 0 [pid 469] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 469] <... futex resumed>) = 0 [pid 465] <... futex resumed>) = 0 [pid 469] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 465] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 465] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 465] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 465] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[476]}, 88) = 476 [pid 465] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 465] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 465] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] <... write resumed>) = 1048576 [pid 473] munmap(0x7fb07b50e000, 138412032) = 0 [pid 473] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 473] ioctl(4, LOOP_SET_FD, 3 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=449, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=17} --- ./strace-static-x86_64: Process 476 attached [pid 459] +++ killed by SIGBUS +++ [pid 458] +++ killed by SIGBUS +++ [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./5/file1", [pid 301] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] <... openat resumed>) = 3 [pid 299] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] newfstatat(3, "", [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] getdents64(3, [pid 299] <... openat resumed>) = 4 [pid 301] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 299] newfstatat(4, "", [pid 301] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] getdents64(4, [pid 301] newfstatat(AT_FDCWD, "./5/binderfs", [pid 299] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] getdents64(4, [pid 301] unlink("./5/binderfs" [pid 299] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 301] <... unlink resumed>) = 0 [pid 299] close(4 [pid 301] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... close resumed>) = 0 [pid 299] rmdir("./5/file1" [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=458, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 473] <... ioctl resumed>) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 299] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./5") = 0 [pid 299] mkdir("./6", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 298] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 299] <... clone resumed>, child_tidptr=0x5555610ee690) = 477 [pid 298] <... openat resumed>) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./6/binderfs"./strace-static-x86_64: Process 477 attached ) = 0 [pid 476] set_robust_list(0x7fb08390d9a0, 24 [pid 473] close(3 [pid 298] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 477] set_robust_list(0x5555610ee6a0, 24 [pid 476] <... set_robust_list resumed>) = 0 [pid 473] <... close resumed>) = 0 [pid 473] close(4 [pid 477] <... set_robust_list resumed>) = 0 [pid 476] rt_sigprocmask(SIG_SETMASK, [], [pid 477] chdir("./6") = 0 [pid 477] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 477] setpgid(0, 0) = 0 [pid 477] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 476] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 477] <... openat resumed>) = 3 [pid 477] write(3, "1000", 4 [pid 476] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 477] <... write resumed>) = 4 [pid 477] close(3) = 0 [pid 477] symlink("/dev/binderfs", "./binderfs") = 0 [pid 477] write(1, "executing program\n", 18executing program ) = 18 [pid 477] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 477] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 477] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 477] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 477] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 477] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 477] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[478]}, 88) = 478 [pid 477] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 477] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 477] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 478 attached [pid 478] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 478] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 476] <... mmap resumed>) = 0x20000000 [pid 478] memfd_create("syzkaller", 0 [pid 476] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... memfd_create resumed>) = 3 [pid 478] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [ 29.771936][ T469] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 29.772051][ T459] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 29.794681][ T459] EXT4-fs (loop0): This should not happen!! Data will be lost [ 29.794681][ T459] [ 29.804309][ T473] loop2: detected capacity change from 0 to 2048 [pid 476] <... futex resumed>) = 1 [pid 465] <... futex resumed>) = 0 [pid 465] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 469] <... futex resumed>) = 0 [pid 465] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 478] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 478] munmap(0x7fb07b50e000, 138412032) = 0 [pid 478] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 478] ioctl(4, LOOP_SET_FD, 3 [pid 476] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 478] <... ioctl resumed>) = 0 [pid 478] close(3) = 0 [pid 478] close(4 [pid 301] <... umount2 resumed>) = 0 [pid 301] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./5/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./5/file1") = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./5") = 0 [pid 301] mkdir("./6", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 479 ./strace-static-x86_64: Process 479 attached [pid 479] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 473] <... close resumed>) = 0 [pid 479] chdir("./6") = 0 [pid 479] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 479] setpgid(0, 0) = 0 [pid 479] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 479] write(3, "1000", 4) = 4 [pid 479] close(3) = 0 [pid 479] symlink("/dev/binderfs", "./binderfs") = 0 [pid 479] write(1, "executing program\n", 18executing program [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 473] mkdir("./file1", 0777 [pid 298] rmdir("./6/file1") = 0 [pid 473] <... mkdir resumed>) = 0 [pid 298] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./6") = 0 [pid 298] mkdir("./7", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 478] <... close resumed>) = 0 [pid 478] mkdir("./file1", 0777) = 0 [pid 478] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 473] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 298] <... openat resumed>) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 480 [pid 479] <... write resumed>) = 18 [pid 479] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 479] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 479] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 479] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 479] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 479] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[481]}, 88) = 481 [pid 479] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 29.827791][ T469] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 29.836481][ T478] loop1: detected capacity change from 0 to 2048 [ 29.843279][ T469] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 29.861239][ T469] EXT4-fs (loop4): This should not happen!! Data will be lost [ 29.861239][ T469] [ 29.871903][ T469] EXT4-fs (loop4): Total free blocks count 0 [pid 479] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 465] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 479] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 465] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 481 attached ./strace-static-x86_64: Process 480 attached [pid 476] <... futex resumed>) = 0 [pid 469] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 465] <... futex resumed>) = 1 [pid 481] set_robust_list(0x7fb08392e9a0, 24 [pid 480] set_robust_list(0x5555610ee6a0, 24 [pid 481] <... set_robust_list resumed>) = 0 [pid 480] <... set_robust_list resumed>) = 0 [pid 481] rt_sigprocmask(SIG_SETMASK, [], [pid 480] chdir("./7" [pid 481] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 480] <... chdir resumed>) = 0 [pid 481] memfd_create("syzkaller", 0 [pid 480] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 481] <... memfd_create resumed>) = 3 [pid 480] <... prctl resumed>) = 0 [pid 481] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 480] setpgid(0, 0 [pid 476] +++ killed by SIGBUS +++ executing program [pid 481] <... mmap resumed>) = 0x7fb07b50e000 [pid 480] <... setpgid resumed>) = 0 [pid 481] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 480] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 480] write(3, "1000", 4) = 4 [pid 480] close(3) = 0 [pid 480] symlink("/dev/binderfs", "./binderfs") = 0 [pid 480] write(1, "executing program\n", 18) = 18 [pid 480] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 480] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 480] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 480] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 480] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 480] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 480] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[486]}, 88) = 486 [pid 480] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 480] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 29.877990][ T469] EXT4-fs (loop4): Free/Dirty block details [ 29.884143][ T469] EXT4-fs (loop4): free_blocks=2415919504 [ 29.889870][ T469] EXT4-fs (loop4): dirty_blocks=32 [ 29.894982][ T469] EXT4-fs (loop4): Block reservation details [ 29.900996][ T469] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 29.912599][ T469] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 480] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 481] <... write resumed>) = 1048576 [pid 481] munmap(0x7fb07b50e000, 138412032) = 0 [pid 481] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 481] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 486 attached [pid 478] <... mount resumed>) = 0 [pid 473] <... mount resumed>) = 0 [pid 481] <... ioctl resumed>) = 0 [pid 481] close(3) = 0 [pid 481] close(4 [pid 486] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 486] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 486] memfd_create("syzkaller", 0) = 3 [pid 486] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 486] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 478] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 473] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 478] chdir("./file1" [pid 469] +++ killed by SIGBUS +++ [pid 473] <... openat resumed>) = 3 [pid 465] +++ killed by SIGBUS +++ [pid 478] <... chdir resumed>) = 0 [pid 473] chdir("./file1" [pid 478] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=465, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 473] <... chdir resumed>) = 0 [pid 478] <... openat resumed>) = 4 [pid 473] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 302] restart_syscall(<... resuming interrupted clone ...> [pid 478] ioctl(4, LOOP_CLR_FD [pid 473] <... openat resumed>) = 4 [pid 478] <... ioctl resumed>) = 0 [pid 473] ioctl(4, LOOP_CLR_FD [pid 478] close(4 [pid 473] <... ioctl resumed>) = 0 [pid 478] <... close resumed>) = 0 [pid 473] close(4 [pid 478] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... close resumed>) = 0 [pid 478] <... futex resumed>) = 1 [pid 477] <... futex resumed>) = 0 [pid 473] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 477] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = 1 [pid 478] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 477] <... futex resumed>) = 0 [pid 473] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] <... futex resumed>) = 0 [pid 486] <... write resumed>) = 1048576 [pid 478] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 478] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 478] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 477] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 477] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... futex resumed>) = 0 [pid 477] <... futex resumed>) = 1 [pid 486] munmap(0x7fb07b50e000, 138412032 [pid 472] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 477] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 478] <... open resumed>) = 5 [pid 478] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 477] <... futex resumed>) = 0 [pid 478] creat("./bus", 000 [pid 477] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... creat resumed>) = 6 [pid 477] <... futex resumed>) = 0 [pid 472] <... futex resumed>) = 1 [pid 473] <... futex resumed>) = 0 [pid 478] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 477] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 472] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 478] <... futex resumed>) = 0 [pid 477] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 473] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 478] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 477] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 477] <... futex resumed>) = 0 [pid 478] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 477] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] <... open resumed>) = 4 [pid 478] <... futex resumed>) = 0 [pid 477] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 473] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 477] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 477] <... futex resumed>) = 0 [pid 473] <... futex resumed>) = 1 [pid 472] <... futex resumed>) = 0 [pid 478] pwrite64(6, "+", 1, 0 [pid 477] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... pwrite64 resumed>) = 1 [pid 473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 478] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 472] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 478] <... futex resumed>) = 1 [pid 477] <... futex resumed>) = 0 [pid 473] <... open resumed>) = 5 [pid 478] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 477] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 477] <... futex resumed>) = 0 [pid 473] <... futex resumed>) = 1 [pid 472] <... futex resumed>) = 0 [pid 478] open("./bus", O_RDONLY [pid 477] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... open resumed>) = 7 [pid 473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 478] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] creat("./bus", 000 [pid 472] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 478] <... futex resumed>) = 1 [pid 477] <... futex resumed>) = 0 [pid 473] <... creat resumed>) = 6 [pid 486] <... munmap resumed>) = 0 [pid 478] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 477] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... restart_syscall resumed>) = 0 [pid 478] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 477] <... futex resumed>) = 0 [pid 473] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 477] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = 1 [pid 472] <... futex resumed>) = 0 [pid 486] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 478] <... copy_file_range resumed>) = 1 [pid 477] <... futex resumed>) = 0 [pid 473] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 477] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 302] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 486] <... openat resumed>) = 4 [pid 478] <... futex resumed>) = 0 [pid 477] <... mmap resumed>) = 0x7fb0838ed000 [pid 473] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 472] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 486] ioctl(4, LOOP_SET_FD, 3 [pid 478] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 477] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 473] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 477] <... mprotect resumed>) = 0 [pid 473] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 477] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 477] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[487]}, 88) = 487 [pid 477] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 477] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 477] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 487 attached [pid 487] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 487] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 487] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 477] <... futex resumed>) = 0 [pid 477] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... futex resumed>) = 0 [pid 477] <... futex resumed>) = 1 [pid 487] <... futex resumed>) = 1 [pid 486] <... ioctl resumed>) = 0 [pid 477] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] <... futex resumed>) = 1 [pid 472] <... futex resumed>) = 0 [pid 302] <... openat resumed>) = 3 [pid 472] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] newfstatat(3, "", [pid 472] <... futex resumed>) = 0 [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 472] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 302] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./6/binderfs") = 0 [pid 302] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 486] close(3) = 0 [pid 486] close(4 [pid 473] pwrite64(6, "+", 1, 0) = 1 [pid 487] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 473] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 472] <... futex resumed>) = 0 [pid 472] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] <... futex resumed>) = 1 [pid 473] open("./bus", O_RDONLY) = 7 [pid 473] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 472] <... futex resumed>) = 0 [pid 472] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 472] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 472] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 472] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[488]}, 88) = 488 [pid 472] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 472] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] <... futex resumed>) = 1 [pid 473] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [ 29.915173][ T473] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 29.937110][ T478] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 29.937670][ T481] loop3: detected capacity change from 0 to 2048 [ 29.948642][ T469] EXT4-fs (loop4): This should not happen!! Data will be lost [ 29.948642][ T469] [pid 473] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 473] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 488 attached [pid 488] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 488] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 488] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 472] <... futex resumed>) = 0 [pid 472] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] <... futex resumed>) = 0 [pid 488] <... futex resumed>) = 1 [pid 481] <... close resumed>) = 0 [pid 488] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 481] mkdir("./file1", 0777) = 0 [ 29.976386][ T486] loop0: detected capacity change from 0 to 2048 [ 29.978916][ T478] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 29.992347][ T473] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 29.998285][ T478] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 481] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 486] <... close resumed>) = 0 [pid 477] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 472] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 486] mkdir("./file1", 0777 [pid 477] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 472] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 487] <... futex resumed>) = 0 [pid 486] <... mkdir resumed>) = 0 [pid 477] <... futex resumed>) = 1 [pid 472] <... futex resumed>) = 1 [pid 488] <... futex resumed>) = 0 [pid 488] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0) = -1 EBADF (Bad file descriptor) [pid 488] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 478] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [ 30.012186][ T473] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 30.035805][ T478] EXT4-fs (loop1): This should not happen!! Data will be lost [ 30.035805][ T478] [ 30.035829][ T478] EXT4-fs (loop1): Total free blocks count 0 [ 30.035844][ T478] EXT4-fs (loop1): Free/Dirty block details [ 30.035855][ T478] EXT4-fs (loop1): free_blocks=2415919504 [ 30.035867][ T478] EXT4-fs (loop1): dirty_blocks=32 [ 30.045685][ T473] EXT4-fs (loop2): This should not happen!! Data will be lost [ 30.045685][ T473] [pid 486] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 472] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 487] +++ killed by SIGBUS +++ [pid 302] <... umount2 resumed>) = 0 [pid 472] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 302] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 302] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 302] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 302] close(4) = 0 [pid 302] rmdir("./6/file1") = 0 [pid 302] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [ 30.054032][ T478] EXT4-fs (loop1): Block reservation details [ 30.057817][ T473] EXT4-fs (loop2): Total free blocks count 0 [ 30.064690][ T478] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 30.068476][ T473] EXT4-fs (loop2): Free/Dirty block details [ 30.099053][ T481] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 30.100331][ T473] EXT4-fs (loop2): free_blocks=2415919504 [ 30.116228][ T473] EXT4-fs (loop2): dirty_blocks=32 [pid 302] close(3) = 0 [pid 302] rmdir("./6") = 0 [pid 302] mkdir("./7", 0777) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] close(3) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 481] <... mount resumed>) = 0 [pid 473] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 481] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 488] <... futex resumed>) = ? [pid 481] <... openat resumed>) = 3 [pid 478] +++ killed by SIGBUS +++ [pid 477] +++ killed by SIGBUS +++ [pid 488] +++ killed by SIGBUS +++ [pid 481] chdir("./file1" [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=477, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=10} --- [pid 299] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 299] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./6/binderfs") = 0 [pid 299] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 481] <... chdir resumed>) = 0 [pid 481] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 302] <... clone resumed>, child_tidptr=0x5555610ee690) = 492 ./strace-static-x86_64: Process 492 attached [pid 481] <... openat resumed>) = 4 [pid 473] +++ killed by SIGBUS +++ [pid 472] +++ killed by SIGBUS +++ [pid 481] ioctl(4, LOOP_CLR_FD) = 0 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=472, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=19} --- [pid 481] close(4 [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 481] <... close resumed>) = 0 [pid 481] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 479] <... futex resumed>) = 0 [pid 481] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 479] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 481] <... open resumed>) = 4 [pid 479] <... futex resumed>) = 0 [pid 481] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 481] <... futex resumed>) = 0 [pid 479] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 481] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 479] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 481] <... open resumed>) = 5 [pid 479] <... futex resumed>) = 0 [pid 481] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 481] <... futex resumed>) = 0 [pid 479] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 481] creat("./bus", 000 [pid 479] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 481] <... creat resumed>) = 6 [pid 479] <... futex resumed>) = 0 [pid 481] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 481] <... futex resumed>) = 0 [pid 479] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 481] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 479] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 481] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 479] <... futex resumed>) = 0 [pid 481] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 481] <... futex resumed>) = 0 [pid 479] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 481] pwrite64(6, "+", 1, 0 [pid 479] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 481] <... pwrite64 resumed>) = 1 [pid 479] <... futex resumed>) = 0 [pid 481] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 481] <... futex resumed>) = 0 [pid 479] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 481] open("./bus", O_RDONLY [pid 479] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 481] <... open resumed>) = 7 [pid 479] <... futex resumed>) = 0 [pid 481] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 481] <... futex resumed>) = 0 [pid 479] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 481] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 479] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 481] <... copy_file_range resumed>) = 1 [pid 479] <... futex resumed>) = 0 [pid 481] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 481] <... futex resumed>) = 0 [pid 479] <... futex resumed>) = 0 [pid 481] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 479] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 479] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 479] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 479] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[494]}, 88) = 494 [pid 479] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 479] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 492] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 492] chdir("./7") = 0 [pid 492] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 492] setpgid(0, 0) = 0 [pid 492] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 492] write(3, "1000", 4) = 4 [pid 492] close(3) = 0 [pid 492] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 492] write(1, "executing program\n", 18) = 18 [pid 492] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 492] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 492] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 492] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 492] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 492] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[495]}, 88) = 495 [pid 492] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 492] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 495 attached [pid 495] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 495] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 495] memfd_create("syzkaller", 0 [pid 300] <... restart_syscall resumed>) = 0 [pid 495] <... memfd_create resumed>) = 3 [pid 495] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 300] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 495] <... mmap resumed>) = 0x7fb07b50e000 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./6/binderfs") = 0 [pid 300] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 495] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [ 30.116485][ T478] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 30.121161][ T473] EXT4-fs (loop2): Block reservation details [ 30.139248][ T473] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 30.145293][ T478] EXT4-fs (loop1): This should not happen!! Data will be lost [ 30.145293][ T478] [ 30.156825][ T473] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 30.170328][ T473] EXT4-fs (loop2): This should not happen!! Data will be lost [ 30.170328][ T473] [pid 495] munmap(0x7fb07b50e000, 138412032) = 0 [pid 495] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 495] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 494 attached [pid 494] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 494] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 494] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 479] <... futex resumed>) = 0 [pid 479] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 481] <... futex resumed>) = 0 [pid 479] <... futex resumed>) = 1 [pid 495] <... ioctl resumed>) = 0 [pid 494] <... futex resumed>) = 1 [pid 486] <... mount resumed>) = 0 [pid 479] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 495] close(3) = 0 [pid 495] close(4 [pid 486] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 494] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 486] <... openat resumed>) = 3 [pid 486] chdir("./file1") = 0 [pid 486] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 486] ioctl(4, LOOP_CLR_FD) = 0 [pid 486] close(4) = 0 [pid 486] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] <... futex resumed>) = 0 [pid 480] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 480] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 486] <... futex resumed>) = 1 [pid 486] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 486] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] <... futex resumed>) = 0 [pid 480] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 480] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 486] <... futex resumed>) = 1 [pid 486] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 486] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] <... futex resumed>) = 0 [pid 480] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 480] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 486] <... futex resumed>) = 1 [pid 486] creat("./bus", 000) = 6 [pid 486] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] <... futex resumed>) = 0 [pid 480] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 480] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 486] <... futex resumed>) = 1 [pid 486] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 486] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] <... futex resumed>) = 0 [pid 480] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 480] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 486] <... futex resumed>) = 1 [pid 486] pwrite64(6, "+", 1, 0) = 1 [pid 486] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] <... futex resumed>) = 0 [pid 480] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 480] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 486] <... futex resumed>) = 1 [pid 486] open("./bus", O_RDONLY) = 7 [pid 486] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] <... futex resumed>) = 0 [pid 480] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 480] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 480] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 480] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 480] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 480] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[496]}, 88) = 496 [pid 480] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 480] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 480] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 486] <... futex resumed>) = 1 [pid 486] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 486] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 486] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 496 attached [pid 496] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 496] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 496] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 480] <... futex resumed>) = 0 [pid 480] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 480] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 486] <... futex resumed>) = 0 [ 30.198623][ T495] loop4: detected capacity change from 0 to 2048 [ 30.199433][ T486] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 30.206711][ T481] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 30.230064][ T481] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 479] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 300] <... umount2 resumed>) = 0 [pid 299] <... umount2 resumed>) = 0 [pid 479] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 494] <... futex resumed>) = 0 [pid 479] <... futex resumed>) = 1 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 494] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 479] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] newfstatat(AT_FDCWD, "./6/file1", [pid 299] newfstatat(AT_FDCWD, "./6/file1", [pid 494] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 494] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 494] <... futex resumed>) = 1 [pid 479] <... futex resumed>) = 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 494] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 299] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 300] <... openat resumed>) = 4 [pid 299] <... openat resumed>) = 4 [pid 300] newfstatat(4, "", [pid 299] newfstatat(4, "", [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(4, [pid 299] getdents64(4, [pid 300] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 299] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, [pid 299] getdents64(4, [pid 300] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 299] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 300] close(4 [pid 299] close(4 [pid 300] <... close resumed>) = 0 [pid 300] rmdir("./6/file1" [pid 299] <... close resumed>) = 0 [pid 300] <... rmdir resumed>) = 0 [pid 299] rmdir("./6/file1" [pid 300] getdents64(3, [pid 299] <... rmdir resumed>) = 0 [pid 300] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 299] getdents64(3, [pid 300] close(3 [pid 299] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 300] <... close resumed>) = 0 [pid 299] close(3 [pid 496] <... futex resumed>) = 1 [pid 496] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 495] <... close resumed>) = 0 [pid 480] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 300] rmdir("./6" [pid 299] <... close resumed>) = 0 [ 30.239118][ T486] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 30.256490][ T481] EXT4-fs (loop3): This should not happen!! Data will be lost [ 30.256490][ T481] [ 30.256510][ T481] EXT4-fs (loop3): Total free blocks count 0 [ 30.256523][ T481] EXT4-fs (loop3): Free/Dirty block details [ 30.256555][ T481] EXT4-fs (loop3): free_blocks=2415919504 [ 30.283417][ T481] EXT4-fs (loop3): dirty_blocks=32 [pid 495] mkdir("./file1", 0777 [pid 480] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... rmdir resumed>) = 0 [pid 299] rmdir("./6" [pid 496] <... futex resumed>) = 0 [pid 495] <... mkdir resumed>) = 0 [pid 480] <... futex resumed>) = 1 [pid 299] <... rmdir resumed>) = 0 [pid 496] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 495] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 480] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] mkdir("./7", 0777 [pid 299] mkdir("./7", 0777 [pid 496] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 300] <... mkdir resumed>) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 496] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 496] <... futex resumed>) = 1 [pid 480] <... futex resumed>) = 0 [pid 300] <... openat resumed>) = 3 [pid 299] <... openat resumed>) = 3 [pid 496] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] ioctl(3, LOOP_CLR_FD [pid 299] ioctl(3, LOOP_CLR_FD [pid 300] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 300] close(3 [pid 299] close(3 [pid 481] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 300] <... close resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 300] <... clone resumed>, child_tidptr=0x5555610ee690) = 497 [pid 299] <... clone resumed>, child_tidptr=0x5555610ee690) = 498 ./strace-static-x86_64: Process 497 attached ./strace-static-x86_64: Process 498 attached [pid 498] set_robust_list(0x5555610ee6a0, 24 [pid 497] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 498] <... set_robust_list resumed>) = 0 [pid 498] chdir("./7" [pid 497] chdir("./7" [pid 498] <... chdir resumed>) = 0 [pid 497] <... chdir resumed>) = 0 [pid 498] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 497] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 498] <... prctl resumed>) = 0 [pid 498] setpgid(0, 0 [pid 497] <... prctl resumed>) = 0 [pid 497] setpgid(0, 0 [pid 498] <... setpgid resumed>) = 0 [pid 497] <... setpgid resumed>) = 0 [pid 497] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 498] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 497] <... openat resumed>) = 3 [pid 498] <... openat resumed>) = 3 [pid 497] write(3, "1000", 4) = 4 [pid 498] write(3, "1000", 4) = 4 [pid 497] close(3 [pid 498] close(3 [pid 497] <... close resumed>) = 0 [pid 498] <... close resumed>) = 0 [pid 497] symlink("/dev/binderfs", "./binderfs" [pid 498] symlink("/dev/binderfs", "./binderfs" [pid 497] <... symlink resumed>) = 0 [pid 498] <... symlink resumed>) = 0 executing program [pid 498] write(1, "executing program\n", 18) = 18 [pid 498] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] write(1, "executing program\n", 18 [pid 498] <... futex resumed>) = 0 [pid 494] <... futex resumed>) = ? [pid 494] +++ killed by SIGBUS +++ executing program [pid 498] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, [pid 497] <... write resumed>) = 18 [pid 498] <... rt_sigaction resumed>NULL, 8) = 0 [pid 497] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 498] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 497] <... futex resumed>) = 0 [pid 497] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 498] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE [pid 497] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 498] <... mprotect resumed>) = 0 [pid 497] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 497] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 497] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 498] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 498] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} [pid 497] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 497] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} [pid 498] <... clone3 resumed> => {parent_tid=[500]}, 88) = 500 [pid 497] <... clone3 resumed> => {parent_tid=[501]}, 88) = 501 [pid 498] rt_sigprocmask(SIG_SETMASK, [], [pid 497] rt_sigprocmask(SIG_SETMASK, [], [pid 498] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 497] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 498] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] <... futex resumed>) = 0 [pid 497] <... futex resumed>) = 0 [pid 498] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 497] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 501 attached [pid 501] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 501] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 501] memfd_create("syzkaller", 0) = 3 [pid 501] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 ./strace-static-x86_64: Process 500 attached [pid 500] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 500] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 500] memfd_create("syzkaller", 0) = 3 [pid 500] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [ 30.284268][ T486] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 30.289194][ T481] EXT4-fs (loop3): Block reservation details [ 30.301066][ T486] EXT4-fs (loop0): This should not happen!! Data will be lost [ 30.301066][ T486] [ 30.306393][ T481] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 30.321770][ T486] EXT4-fs (loop0): Total free blocks count 0 [ 30.336384][ T481] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 481] +++ killed by SIGBUS +++ [pid 479] +++ killed by SIGBUS +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=479, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 301] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./6/binderfs") = 0 [pid 301] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 500] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 501] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 486] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 496] <... futex resumed>) = ? [pid 495] <... mount resumed>) = 0 [pid 496] +++ killed by SIGBUS +++ [pid 495] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 500] <... write resumed>) = 1048576 [pid 500] munmap(0x7fb07b50e000, 138412032) = 0 [pid 500] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 30.353513][ T481] EXT4-fs (loop3): This should not happen!! Data will be lost [ 30.353513][ T481] [ 30.365992][ T486] EXT4-fs (loop0): Free/Dirty block details [ 30.368133][ T495] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 30.371754][ T486] EXT4-fs (loop0): free_blocks=2415919504 [ 30.388282][ T486] EXT4-fs (loop0): dirty_blocks=32 [ 30.393420][ T486] EXT4-fs (loop0): Block reservation details [pid 500] ioctl(4, LOOP_SET_FD, 3 [pid 501] <... write resumed>) = 1048576 [pid 495] <... openat resumed>) = 3 [pid 301] <... umount2 resumed>) = 0 [pid 301] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 501] munmap(0x7fb07b50e000, 138412032 [pid 495] chdir("./file1" [pid 301] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 501] <... munmap resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 501] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 495] <... chdir resumed>) = 0 [pid 501] <... openat resumed>) = 4 [pid 495] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 486] +++ killed by SIGBUS +++ [pid 480] +++ killed by SIGBUS +++ [pid 501] ioctl(4, LOOP_SET_FD, 3 [pid 500] <... ioctl resumed>) = 0 [pid 495] <... openat resumed>) = 4 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=480, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 301] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./6/file1") = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./6") = 0 [pid 301] mkdir("./7", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3 [pid 501] <... ioctl resumed>) = 0 [pid 500] close(3 [pid 495] ioctl(4, LOOP_CLR_FD [pid 301] <... close resumed>) = 0 [pid 298] <... restart_syscall resumed>) = 0 [pid 495] <... ioctl resumed>) = 0 [pid 495] close(4) = 0 [pid 298] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 495] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 495] <... futex resumed>) = 1 [pid 492] <... futex resumed>) = 0 [pid 298] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 495] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 492] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... openat resumed>) = 3 [pid 495] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 492] <... futex resumed>) = 0 [pid 298] newfstatat(3, "", [pid 495] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 492] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 495] <... open resumed>) = 4 [pid 298] getdents64(3, [pid 495] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 495] <... futex resumed>) = 1 [pid 492] <... futex resumed>) = 0 [pid 298] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 495] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 492] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 495] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 492] <... futex resumed>) = 0 [pid 298] newfstatat(AT_FDCWD, "./7/binderfs", [pid 495] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 492] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 495] <... open resumed>) = 5 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] unlink("./7/binderfs" [pid 495] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... unlink resumed>) = 0 [pid 495] <... futex resumed>) = 1 [pid 492] <... futex resumed>) = 0 [pid 298] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 495] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 492] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] close(3 [pid 500] <... close resumed>) = 0 [pid 495] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 492] <... futex resumed>) = 0 [pid 495] creat("./bus", 000 [pid 492] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 503 attached [pid 503] set_robust_list(0x5555610ee6a0, 24 [pid 495] <... creat resumed>) = 6 [pid 503] <... set_robust_list resumed>) = 0 [pid 495] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... clone resumed>, child_tidptr=0x5555610ee690) = 503 [pid 495] <... futex resumed>) = 1 [pid 492] <... futex resumed>) = 0 [pid 495] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 492] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 495] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 492] <... futex resumed>) = 0 [pid 495] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 492] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 495] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 495] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 495] pwrite64(6, "+", 1, 0 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 495] <... pwrite64 resumed>) = 1 [pid 495] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] chdir("./7" [pid 495] <... futex resumed>) = 1 [pid 492] <... futex resumed>) = 0 [pid 501] <... close resumed>) = 0 [pid 500] close(4 [pid 495] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 492] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 495] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 492] <... futex resumed>) = 0 [pid 495] open("./bus", O_RDONLY [pid 492] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 495] <... open resumed>) = 7 [pid 495] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 495] <... futex resumed>) = 1 [pid 492] <... futex resumed>) = 0 [pid 503] <... chdir resumed>) = 0 [pid 501] close(4 [pid 495] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 492] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 495] <... copy_file_range resumed>) = 1 [pid 492] <... futex resumed>) = 0 [pid 503] <... prctl resumed>) = 0 [pid 495] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 495] <... futex resumed>) = 0 [pid 495] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 492] <... mmap resumed>) = 0x7fb0838ed000 [pid 503] setpgid(0, 0) = 0 [pid 503] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 503] write(3, "1000", 4) = 4 [pid 503] close(3) = 0 [pid 503] symlink("/dev/binderfs", "./binderfs" [pid 492] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 298] <... umount2 resumed>) = 0 [pid 503] <... symlink resumed>) = 0 [pid 492] <... mprotect resumed>) = 0 [pid 298] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 503] write(1, "executing program\n", 18 [pid 492] rt_sigprocmask(SIG_BLOCK, ~[], [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 492] <... rt_sigprocmask resumed>[], 8) = 0 [pid 492] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 298] newfstatat(AT_FDCWD, "./7/file1", [pid 492] <... clone3 resumed> => {parent_tid=[504]}, 88) = 504 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 492] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 298] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 492] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 492] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", executing program ./strace-static-x86_64: Process 504 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./7/file1" [pid 504] set_robust_list(0x7fb08390d9a0, 24 [pid 503] <... write resumed>) = 18 [pid 298] <... rmdir resumed>) = 0 [pid 504] <... set_robust_list resumed>) = 0 [pid 503] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 504] rt_sigprocmask(SIG_SETMASK, [], [pid 503] <... futex resumed>) = 0 [pid 504] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 503] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, [pid 504] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 503] <... rt_sigaction resumed>NULL, 8) = 0 [pid 503] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 298] getdents64(3, [pid 503] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 298] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 503] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 298] close(3 [pid 503] <... mmap resumed>) = 0x7fb08390e000 [pid 504] <... mmap resumed>) = 0x20000000 [pid 298] <... close resumed>) = 0 [pid 503] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE [pid 298] rmdir("./7" [pid 504] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] <... mprotect resumed>) = 0 [pid 504] <... futex resumed>) = 1 [pid 492] <... futex resumed>) = 0 [pid 298] <... rmdir resumed>) = 0 [pid 503] rt_sigprocmask(SIG_BLOCK, ~[], [pid 492] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 495] <... futex resumed>) = 0 [pid 492] <... futex resumed>) = 1 [pid 504] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 503] <... rt_sigprocmask resumed>[], 8) = 0 [pid 492] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] mkdir("./8", 0777 [pid 503] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} [pid 298] <... mkdir resumed>) = 0 [pid 503] <... clone3 resumed> => {parent_tid=[505]}, 88) = 505 [pid 503] rt_sigprocmask(SIG_SETMASK, [], [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 503] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 298] <... openat resumed>) = 3 [pid 503] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] ioctl(3, LOOP_CLR_FD [pid 503] <... futex resumed>) = 0 [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 503] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 506 ./strace-static-x86_64: Process 506 attached [pid 506] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 506] chdir("./8") = 0 ./strace-static-x86_64: Process 505 attached [pid 505] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 506] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 505] rt_sigprocmask(SIG_SETMASK, [], [pid 506] <... prctl resumed>) = 0 [pid 505] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 506] setpgid(0, 0 [pid 505] memfd_create("syzkaller", 0 [pid 506] <... setpgid resumed>) = 0 [pid 506] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 505] <... memfd_create resumed>) = 3 [pid 506] <... openat resumed>) = 3 [pid 505] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [ 30.399548][ T486] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 30.407705][ T486] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 30.410305][ T500] loop1: detected capacity change from 0 to 2048 [ 30.421286][ T486] EXT4-fs (loop0): This should not happen!! Data will be lost [ 30.421286][ T486] [ 30.436965][ T501] loop2: detected capacity change from 0 to 2048 [pid 506] write(3, "1000", 4) = 4 [pid 506] close(3) = 0 [pid 506] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 506] write(1, "executing program\n", 18) = 18 [pid 506] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 506] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 506] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 506] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 506] rt_sigprocmask(SIG_BLOCK, ~[], [pid 501] <... close resumed>) = 0 [pid 500] <... close resumed>) = 0 [pid 506] <... rt_sigprocmask resumed>[], 8) = 0 [pid 506] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[507]}, 88) = 507 [pid 506] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 506] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 505] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 501] mkdir("./file1", 0777 [pid 500] mkdir("./file1", 0777 [pid 501] <... mkdir resumed>) = 0 [pid 500] <... mkdir resumed>) = 0 [pid 501] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 500] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue"./strace-static-x86_64: Process 507 attached [pid 507] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 507] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 507] memfd_create("syzkaller", 0) = 3 [pid 507] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 505] <... write resumed>) = 1048576 [pid 507] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 505] munmap(0x7fb07b50e000, 138412032) = 0 [pid 505] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 505] ioctl(4, LOOP_SET_FD, 3 [pid 492] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 492] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 504] <... futex resumed>) = 0 [pid 492] <... futex resumed>) = 1 [pid 504] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [ 30.473646][ T495] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 30.489290][ T495] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 30.501621][ T495] EXT4-fs (loop4): This should not happen!! Data will be lost [ 30.501621][ T495] [ 30.512101][ T495] EXT4-fs (loop4): Total free blocks count 0 [pid 492] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 504] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 504] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 492] <... futex resumed>) = 0 [pid 504] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 507] <... write resumed>) = 1048576 [pid 505] <... ioctl resumed>) = 0 [pid 495] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 505] close(3) = 0 [pid 505] close(4 [pid 507] munmap(0x7fb07b50e000, 138412032) = 0 [pid 507] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 507] ioctl(4, LOOP_SET_FD, 3 [pid 504] <... futex resumed>) = ? [pid 507] <... ioctl resumed>) = 0 [pid 507] close(3) = 0 [pid 507] close(4 [pid 501] <... mount resumed>) = 0 [pid 501] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 501] chdir("./file1") = 0 [pid 501] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 501] ioctl(4, LOOP_CLR_FD) = 0 [pid 501] close(4) = 0 [pid 501] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 30.513560][ T505] loop3: detected capacity change from 0 to 2048 [ 30.518164][ T495] EXT4-fs (loop4): Free/Dirty block details [ 30.529849][ T495] EXT4-fs (loop4): free_blocks=2415919504 [ 30.536017][ T495] EXT4-fs (loop4): dirty_blocks=32 [ 30.541053][ T495] EXT4-fs (loop4): Block reservation details [ 30.547513][ T495] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 30.548632][ T501] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 30.562777][ T507] loop0: detected capacity change from 0 to 2048 [pid 501] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 504] +++ killed by SIGBUS +++ [pid 500] <... mount resumed>) = 0 [pid 497] <... futex resumed>) = 0 [pid 497] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 497] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 500] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 501] <... futex resumed>) = 0 [pid 500] <... openat resumed>) = 3 [pid 501] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 500] chdir("./file1") = 0 [pid 500] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 500] ioctl(4, LOOP_CLR_FD) = 0 [pid 500] close(4) = 0 [pid 500] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] <... futex resumed>) = 0 [pid 498] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 500] <... futex resumed>) = 1 [pid 500] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 501] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] <... futex resumed>) = 0 [pid 497] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] <... futex resumed>) = 1 [pid 501] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 501] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] <... open resumed>) = 4 [pid 497] <... futex resumed>) = 0 [pid 497] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] <... futex resumed>) = 1 [pid 501] creat("./bus", 000) = 6 [pid 501] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] <... futex resumed>) = 0 [pid 497] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] <... futex resumed>) = 1 [pid 501] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 501] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] <... futex resumed>) = 0 [pid 497] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] <... futex resumed>) = 1 [pid 498] <... futex resumed>) = 0 [pid 498] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] pwrite64(6, "+", 1, 0 [pid 500] <... futex resumed>) = 1 [pid 500] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 501] <... pwrite64 resumed>) = 1 [pid 500] <... open resumed>) = 5 [pid 500] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] <... futex resumed>) = 0 [pid 498] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] <... futex resumed>) = 1 [pid 500] creat("./bus", 000 [pid 497] <... futex resumed>) = 0 [pid 497] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 500] <... creat resumed>) = 6 [pid 501] <... futex resumed>) = 1 [pid 501] open("./bus", O_RDONLY) = 7 [pid 501] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] <... futex resumed>) = 0 [pid 497] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 497] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 497] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 497] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[512]}, 88) = 512 [pid 497] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 495] +++ killed by SIGBUS +++ [pid 492] +++ killed by SIGBUS +++ ./strace-static-x86_64: Process 512 attached [pid 500] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... futex resumed>) = 1 [pid 497] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=492, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11} --- [pid 497] <... futex resumed>) = 0 [pid 302] restart_syscall(<... resuming interrupted clone ...> [pid 497] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 512] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 512] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 512] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 500] <... futex resumed>) = 1 [pid 498] <... futex resumed>) = 0 [pid 498] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 500] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 512] <... mmap resumed>) = 0x20000000 [pid 507] <... close resumed>) = 0 [pid 505] <... close resumed>) = 0 [pid 500] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 507] mkdir("./file1", 0777 [pid 505] mkdir("./file1", 0777 [pid 507] <... mkdir resumed>) = 0 [pid 505] <... mkdir resumed>) = 0 [pid 507] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 505] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 512] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 512] <... futex resumed>) = 1 [pid 512] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 500] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 501] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000c0} --- [pid 512] <... futex resumed>) = ? [pid 302] <... restart_syscall resumed>) = 0 [pid 498] <... futex resumed>) = 0 [pid 302] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 498] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 500] <... futex resumed>) = 0 [pid 498] <... futex resumed>) = 1 [pid 302] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 500] pwrite64(6, "+", 1, 0 [pid 498] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... openat resumed>) = 3 [pid 500] <... pwrite64 resumed>) = 1 [pid 302] newfstatat(3, "", [pid 497] <... futex resumed>) = ? [pid 500] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] <... futex resumed>) = 0 [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 500] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 498] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] getdents64(3, [pid 500] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 498] <... futex resumed>) = 0 [pid 500] open("./bus", O_RDONLY [pid 498] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 500] <... open resumed>) = 7 [pid 302] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 500] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] <... futex resumed>) = 0 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 500] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 498] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] newfstatat(AT_FDCWD, "./7/binderfs", [pid 500] <... copy_file_range resumed>) = 1 [pid 498] <... futex resumed>) = 0 [pid 302] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 500] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] <... futex resumed>) = 0 [pid 498] <... futex resumed>) = 0 [pid 500] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 498] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 498] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 498] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 498] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[513]}, 88) = 513 [pid 498] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 498] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 512] +++ killed by SIGBUS +++ [pid 501] +++ killed by SIGBUS +++ [pid 302] unlink("./7/binderfs") = 0 [pid 302] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 497] +++ killed by SIGBUS +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=497, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 300] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 513 attached [pid 513] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 513] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 513] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 498] <... futex resumed>) = 0 [pid 498] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] <... futex resumed>) = 0 [pid 498] <... futex resumed>) = 1 [pid 513] <... futex resumed>) = 1 [pid 498] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... restart_syscall resumed>) = 0 [pid 300] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./7/binderfs") = 0 [ 30.565597][ T500] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 30.579805][ T495] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 30.593126][ T495] EXT4-fs (loop4): This should not happen!! Data will be lost [ 30.593126][ T495] [ 30.604966][ T501] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 300] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 513] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 507] <... mount resumed>) = 0 [pid 505] <... mount resumed>) = 0 [pid 505] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 505] chdir("./file1") = 0 [pid 505] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 505] ioctl(4, LOOP_CLR_FD) = 0 [ 30.630538][ T500] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 30.646060][ T500] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 30.648319][ T505] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 30.659264][ T507] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 505] close(4 [pid 507] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 498] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 498] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 513] <... futex resumed>) = 0 [pid 498] <... futex resumed>) = 1 [pid 513] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 498] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 513] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] <... futex resumed>) = 0 [pid 513] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 507] chdir("./file1" [pid 505] <... close resumed>) = 0 [pid 505] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] <... futex resumed>) = 0 [pid 503] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 503] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] <... futex resumed>) = 1 [pid 505] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 505] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] <... futex resumed>) = 0 [pid 503] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 503] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] <... chdir resumed>) = 0 [pid 505] <... futex resumed>) = 1 [pid 505] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 505] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] <... futex resumed>) = 0 [pid 503] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 503] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] <... futex resumed>) = 1 [pid 505] creat("./bus", 000) = 6 [pid 505] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] <... futex resumed>) = 0 [pid 503] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 503] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] <... futex resumed>) = 1 [pid 505] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 505] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] <... futex resumed>) = 0 [pid 503] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 503] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] <... futex resumed>) = 1 [pid 505] pwrite64(6, "+", 1, 0) = 1 [pid 505] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] <... futex resumed>) = 0 [pid 503] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 503] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] <... futex resumed>) = 1 [pid 505] open("./bus", O_RDONLY) = 7 [pid 505] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] <... futex resumed>) = 0 [pid 503] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 503] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 503] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 503] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 503] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 503] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 507] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 503] <... clone3 resumed> => {parent_tid=[518]}, 88) = 518 [pid 503] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 503] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 503] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] <... futex resumed>) = 1 [pid 505] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 505] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 505] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 518 attached [pid 518] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 518] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 518] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 503] <... futex resumed>) = 0 [pid 503] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 503] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] <... futex resumed>) = 0 [ 30.679589][ T500] EXT4-fs (loop1): This should not happen!! Data will be lost [ 30.679589][ T500] [ 30.689827][ T500] EXT4-fs (loop1): Total free blocks count 0 [ 30.695973][ T500] EXT4-fs (loop1): Free/Dirty block details [ 30.702178][ T500] EXT4-fs (loop1): free_blocks=2415919504 [ 30.708144][ T500] EXT4-fs (loop1): dirty_blocks=32 [ 30.713329][ T505] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 518] <... futex resumed>) = 1 [pid 507] <... openat resumed>) = 4 [pid 505] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 503] <... futex resumed>) = ? [pid 518] +++ killed by SIGBUS +++ [pid 507] ioctl(4, LOOP_CLR_FD [pid 302] <... umount2 resumed>) = 0 [pid 300] <... umount2 resumed>) = 0 [pid 300] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./7/file1", [pid 302] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 302] newfstatat(AT_FDCWD, "./7/file1", [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 302] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] <... openat resumed>) = 4 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 300] newfstatat(4, "", [pid 302] <... openat resumed>) = 4 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 302] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(4, [pid 300] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 302] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 300] close(4) = 0 [pid 300] rmdir("./7/file1" [pid 302] getdents64(4, [pid 300] <... rmdir resumed>) = 0 [pid 302] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 302] close(4) = 0 [pid 302] rmdir("./7/file1") = 0 [pid 300] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 302] getdents64(3, [pid 300] close(3 [pid 302] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 302] close(3 [pid 300] <... close resumed>) = 0 [pid 302] <... close resumed>) = 0 [pid 302] rmdir("./7" [pid 300] rmdir("./7" [pid 302] <... rmdir resumed>) = 0 [pid 300] <... rmdir resumed>) = 0 [pid 300] mkdir("./8", 0777) = 0 [pid 302] mkdir("./8", 0777) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] close(3 [pid 300] close(3 [pid 302] <... close resumed>) = 0 [pid 300] <... close resumed>) = 0 [ 30.713413][ T505] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 30.713437][ T505] EXT4-fs (loop3): This should not happen!! Data will be lost [ 30.713437][ T505] [ 30.713449][ T505] EXT4-fs (loop3): Total free blocks count 0 [ 30.713460][ T505] EXT4-fs (loop3): Free/Dirty block details [ 30.713471][ T505] EXT4-fs (loop3): free_blocks=2415919504 [ 30.713483][ T505] EXT4-fs (loop3): dirty_blocks=32 [ 30.713494][ T505] EXT4-fs (loop3): Block reservation details [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 521 [pid 300] <... clone resumed>, child_tidptr=0x5555610ee690) = 520 [pid 507] <... ioctl resumed>) = 0 [pid 500] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- ./strace-static-x86_64: Process 520 attached ./strace-static-x86_64: Process 521 attached [pid 521] set_robust_list(0x5555610ee6a0, 24 [pid 520] set_robust_list(0x5555610ee6a0, 24 [pid 521] <... set_robust_list resumed>) = 0 [pid 520] <... set_robust_list resumed>) = 0 [pid 521] chdir("./8" [pid 520] chdir("./8") = 0 [pid 521] <... chdir resumed>) = 0 [pid 521] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 520] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 521] <... prctl resumed>) = 0 [pid 520] <... prctl resumed>) = 0 [pid 520] setpgid(0, 0 [pid 521] setpgid(0, 0) = 0 [pid 520] <... setpgid resumed>) = 0 [pid 520] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 521] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 520] <... openat resumed>) = 3 [pid 520] write(3, "1000", 4) = 4 [pid 521] write(3, "1000", 4 [pid 520] close(3 [pid 521] <... write resumed>) = 4 [pid 520] <... close resumed>) = 0 [pid 521] close(3) = 0 [pid 520] symlink("/dev/binderfs", "./binderfs") = 0 [pid 521] symlink("/dev/binderfs", "./binderfs") = 0 [pid 521] write(1, "executing program\n", 18executing program executing program ) = 18 [pid 521] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 520] write(1, "executing program\n", 18) = 18 [pid 521] <... futex resumed>) = 0 [pid 520] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, [pid 507] close(4 [pid 513] <... futex resumed>) = ? [pid 521] <... rt_sigaction resumed>NULL, 8) = 0 [pid 520] <... futex resumed>) = 0 [pid 507] <... close resumed>) = 0 [pid 505] +++ killed by SIGBUS +++ [pid 503] +++ killed by SIGBUS +++ [pid 520] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, [pid 513] +++ killed by SIGBUS +++ [ 30.713503][ T505] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 30.728513][ T500] EXT4-fs (loop1): Block reservation details [ 30.746023][ T505] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 30.749847][ T500] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 30.808124][ T505] EXT4-fs (loop3): This should not happen!! Data will be lost [ 30.808124][ T505] [pid 507] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=503, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9} --- [pid 521] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 520] <... rt_sigaction resumed>NULL, 8) = 0 [pid 507] <... futex resumed>) = 1 [pid 506] <... futex resumed>) = 0 [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 521] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 506] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... restart_syscall resumed>) = 0 [pid 521] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 506] <... futex resumed>) = 0 [pid 521] <... mmap resumed>) = 0x7fb08390e000 [pid 506] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE [pid 301] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 521] <... mprotect resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 521] rt_sigprocmask(SIG_BLOCK, ~[], [pid 301] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 521] <... rt_sigprocmask resumed>[], 8) = 0 [pid 301] <... openat resumed>) = 3 [pid 521] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 521] <... clone3 resumed> => {parent_tid=[522]}, 88) = 522 [pid 301] getdents64(3, [pid 521] rt_sigprocmask(SIG_SETMASK, [], [pid 301] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 521] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 301] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 521] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 521] <... futex resumed>) = 0 [pid 301] newfstatat(AT_FDCWD, "./7/binderfs", [pid 521] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./7/binderfs") = 0 [pid 301] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 522 attached [pid 522] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 522] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 522] memfd_create("syzkaller", 0) = 3 [pid 522] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 522] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 520] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 507] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 520] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 520] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 507] <... open resumed>) = 4 [pid 520] <... mmap resumed>) = 0x7fb08390e000 [pid 507] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 520] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE [pid 507] <... futex resumed>) = 1 [pid 506] <... futex resumed>) = 0 [pid 507] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 506] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 507] <... open resumed>) = 5 [pid 506] <... futex resumed>) = 0 [pid 507] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] <... futex resumed>) = 0 [pid 506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 507] creat("./bus", 000 [pid 506] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 507] <... creat resumed>) = 6 [pid 506] <... futex resumed>) = 0 [pid 520] <... mprotect resumed>) = 0 [pid 507] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 520] rt_sigprocmask(SIG_BLOCK, ~[], [pid 507] <... futex resumed>) = 0 [pid 506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 507] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 506] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 507] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 506] <... futex resumed>) = 0 [pid 507] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] <... futex resumed>) = 0 [pid 506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 507] pwrite64(6, "+", 1, 0 [pid 506] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 507] <... pwrite64 resumed>) = 1 [pid 506] <... futex resumed>) = 0 [pid 520] <... rt_sigprocmask resumed>[], 8) = 0 [pid 507] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] <... futex resumed>) = 0 [pid 506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 507] open("./bus", O_RDONLY [pid 506] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 507] <... open resumed>) = 7 [pid 506] <... futex resumed>) = 0 [pid 507] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] <... futex resumed>) = 0 [pid 506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 507] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 506] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 507] <... copy_file_range resumed>) = 1 [pid 506] <... futex resumed>) = 0 [pid 507] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 507] <... futex resumed>) = 0 [pid 506] <... futex resumed>) = 0 [pid 507] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 506] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 506] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 506] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 506] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[523]}, 88) = 523 [pid 506] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 506] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 500] +++ killed by SIGBUS +++ [pid 498] +++ killed by SIGBUS +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=498, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=19} --- [pid 299] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 523 attached [pid 523] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 523] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 523] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 520] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[524]}, 88) = 524 [pid 520] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 520] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 520] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 523] <... mmap resumed>) = 0x20000000 [pid 523] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = 0 [pid 506] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 507] <... futex resumed>) = 0 [pid 506] <... futex resumed>) = 1 ./strace-static-x86_64: Process 524 attached [pid 523] <... futex resumed>) = 1 [pid 522] <... write resumed>) = 1048576 [pid 506] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 522] munmap(0x7fb07b50e000, 138412032) = 0 [pid 522] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 522] ioctl(4, LOOP_SET_FD, 3 [pid 299] <... restart_syscall resumed>) = 0 [pid 524] set_robust_list(0x7fb08392e9a0, 24 [pid 523] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 524] <... set_robust_list resumed>) = 0 [pid 524] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 524] memfd_create("syzkaller", 0) = 3 [pid 524] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 524] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 522] <... ioctl resumed>) = 0 [pid 522] close(3 [pid 524] <... write resumed>) = 1048576 [pid 524] munmap(0x7fb07b50e000, 138412032) = 0 [pid 524] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 30.820957][ T500] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 30.833081][ T500] EXT4-fs (loop1): This should not happen!! Data will be lost [ 30.833081][ T500] [ 30.851758][ T507] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 30.857301][ T522] loop4: detected capacity change from 0 to 2048 [pid 524] ioctl(4, LOOP_SET_FD, 3 [pid 522] <... close resumed>) = 0 [pid 301] <... umount2 resumed>) = 0 [pid 299] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 506] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 506] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] <... futex resumed>) = 0 [pid 506] <... futex resumed>) = 1 [pid 523] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 506] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 523] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 523] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 506] <... futex resumed>) = 0 [pid 523] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 524] <... ioctl resumed>) = 0 [pid 524] close(3) = 0 [pid 524] close(4 [pid 522] close(4 [pid 301] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./7/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] getdents64(4, [pid 299] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./7/file1") = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./7") = 0 [pid 301] mkdir("./8", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] <... openat resumed>) = 3 [pid 301] <... clone resumed>, child_tidptr=0x5555610ee690) = 525 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 525 attached [pid 299] getdents64(3, [pid 525] set_robust_list(0x5555610ee6a0, 24 [pid 299] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 525] <... set_robust_list resumed>) = 0 [pid 299] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./7/binderfs" [pid 525] chdir("./8" [pid 299] <... unlink resumed>) = 0 executing program [pid 299] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 525] <... chdir resumed>) = 0 [pid 525] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 525] setpgid(0, 0) = 0 [pid 525] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 525] write(3, "1000", 4) = 4 [pid 525] close(3) = 0 [pid 525] symlink("/dev/binderfs", "./binderfs") = 0 [pid 525] write(1, "executing program\n", 18) = 18 [pid 525] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 525] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 525] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 525] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 525] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 525] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 525] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[526]}, 88) = 526 [pid 525] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 525] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 525] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 526 attached [pid 526] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 526] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 526] memfd_create("syzkaller", 0) = 3 [pid 526] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 526] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 526] munmap(0x7fb07b50e000, 138412032) = 0 [pid 526] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 30.867953][ T507] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 30.884605][ T507] EXT4-fs (loop0): This should not happen!! Data will be lost [ 30.884605][ T507] [ 30.887217][ T524] loop2: detected capacity change from 0 to 2048 [ 30.894304][ T507] EXT4-fs (loop0): Total free blocks count 0 [ 30.906306][ T507] EXT4-fs (loop0): Free/Dirty block details [ 30.912574][ T507] EXT4-fs (loop0): free_blocks=2415919504 [ 30.923004][ T507] EXT4-fs (loop0): dirty_blocks=32 [pid 526] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 526] close(3) = 0 [pid 526] close(4 [pid 524] <... close resumed>) = 0 [pid 522] <... close resumed>) = 0 [pid 524] mkdir("./file1", 0777 [pid 522] mkdir("./file1", 0777 [pid 524] <... mkdir resumed>) = 0 [pid 522] <... mkdir resumed>) = 0 [pid 524] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 522] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 299] <... umount2 resumed>) = 0 [pid 507] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 523] <... futex resumed>) = ? [pid 523] +++ killed by SIGBUS +++ [pid 299] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./7/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./7/file1") = 0 [pid 299] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./7") = 0 [pid 299] mkdir("./8", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 528 ./strace-static-x86_64: Process 528 attached [pid 528] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 528] chdir("./8") = 0 [pid 528] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 528] setpgid(0, 0) = 0 [pid 528] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 528] write(3, "1000", 4) = 4 [pid 528] close(3) = 0 [pid 528] symlink("/dev/binderfs", "./binderfs") = 0 [pid 528] write(1, "executing program\n", 18executing program ) = 18 [pid 528] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 526] <... close resumed>) = 0 [pid 526] mkdir("./file1", 0777) = 0 [pid 526] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 528] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 528] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 528] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 507] +++ killed by SIGBUS +++ [pid 506] +++ killed by SIGBUS +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=506, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 528] <... mmap resumed>) = 0x7fb08390e000 [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 528] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 528] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 528] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[532]}, 88) = 532 [pid 528] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 528] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 528] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 532 attached [pid 532] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 532] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 532] memfd_create("syzkaller", 0) = 3 [pid 532] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 532] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 298] <... restart_syscall resumed>) = 0 [pid 532] munmap(0x7fb07b50e000, 138412032) = 0 [pid 532] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 30.928466][ T507] EXT4-fs (loop0): Block reservation details [ 30.934500][ T526] loop3: detected capacity change from 0 to 2048 [ 30.934808][ T507] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 30.954850][ T507] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 30.967203][ T507] EXT4-fs (loop0): This should not happen!! Data will be lost [ 30.967203][ T507] [pid 532] ioctl(4, LOOP_SET_FD, 3 [pid 524] <... mount resumed>) = 0 [pid 522] <... mount resumed>) = 0 [pid 298] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./8/binderfs") = 0 [pid 298] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 522] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 524] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 522] chdir("./file1") = 0 [pid 524] chdir("./file1" [pid 522] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 524] <... chdir resumed>) = 0 [pid 522] <... openat resumed>) = 4 [pid 524] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 522] ioctl(4, LOOP_CLR_FD) = 0 [pid 524] ioctl(4, LOOP_CLR_FD [pid 522] close(4 [pid 524] <... ioctl resumed>) = 0 [pid 522] <... close resumed>) = 0 [pid 524] close(4 [pid 532] <... ioctl resumed>) = 0 [pid 524] <... close resumed>) = 0 [pid 522] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] close(3) = 0 [pid 532] close(4 [pid 521] <... futex resumed>) = 0 [pid 521] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 522] <... futex resumed>) = 1 [pid 522] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 524] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 524] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 522] <... open resumed>) = 4 [pid 522] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 520] <... futex resumed>) = 0 [pid 521] <... futex resumed>) = 0 [pid 520] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 520] <... futex resumed>) = 1 [pid 521] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 520] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 522] <... futex resumed>) = 1 [pid 522] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 522] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = 0 [pid 521] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 522] <... futex resumed>) = 1 [pid 522] creat("./bus", 000) = 6 [pid 522] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = 0 [pid 521] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 522] <... futex resumed>) = 1 [pid 522] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 522] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = 0 [pid 521] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 522] <... futex resumed>) = 1 [pid 522] pwrite64(6, "+", 1, 0) = 1 [pid 522] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = 0 [pid 521] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 522] <... futex resumed>) = 1 [pid 522] open("./bus", O_RDONLY) = 7 [pid 522] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = 0 [pid 521] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 521] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 521] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 521] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[533]}, 88) = 533 [pid 521] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 521] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 522] <... futex resumed>) = 1 [pid 522] copy_file_range(7, NULL, 5, [65536], 6, 0./strace-static-x86_64: Process 533 attached [pid 524] <... futex resumed>) = 0 [pid 522] <... copy_file_range resumed>) = 1 [pid 522] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 522] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 533] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 533] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 533] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 524] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 533] <... mmap resumed>) = 0x20000000 [pid 533] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = 0 [pid 521] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 521] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 522] <... futex resumed>) = 0 [pid 533] <... futex resumed>) = 1 [pid 533] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 524] <... open resumed>) = 4 [pid 524] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 520] <... futex resumed>) = 0 [pid 524] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 524] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 524] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 524] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 524] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL) = 0 [pid 520] <... futex resumed>) = 1 [pid 524] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 520] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 524] <... futex resumed>) = 0 [pid 520] <... futex resumed>) = 1 [pid 524] creat("./bus", 000 [pid 520] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 524] <... creat resumed>) = 6 [pid 524] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 520] <... futex resumed>) = 0 [pid 524] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 524] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 520] <... futex resumed>) = 0 [pid 524] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 520] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 524] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 524] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 520] <... futex resumed>) = 0 [pid 524] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 524] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 520] <... futex resumed>) = 0 [pid 524] pwrite64(6, "+", 1, 0 [pid 520] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 524] <... pwrite64 resumed>) = 1 [pid 524] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 520] <... futex resumed>) = 0 [pid 524] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 524] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 520] <... futex resumed>) = 0 [pid 524] open("./bus", O_RDONLY [pid 520] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 524] <... open resumed>) = 7 [pid 524] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 520] <... futex resumed>) = 0 [pid 524] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 524] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 520] <... futex resumed>) = 0 [pid 524] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 520] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 524] <... copy_file_range resumed>) = 1 [pid 520] <... futex resumed>) = 0 [pid 524] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 520] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 524] <... futex resumed>) = 0 [pid 520] <... mmap resumed>) = 0x7fb0838ed000 [pid 524] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 520] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 520] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[534]}, 88) = 534 [pid 520] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 520] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 520] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 534 attached [pid 534] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 534] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 534] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 520] <... futex resumed>) = 0 [pid 520] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 524] <... futex resumed>) = 0 [pid 520] <... futex resumed>) = 1 [pid 520] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 534] <... futex resumed>) = 1 [ 30.979147][ T522] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 30.990774][ T524] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 30.991565][ T532] loop1: detected capacity change from 0 to 2048 [pid 534] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 521] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 520] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 298] <... umount2 resumed>) = 0 [pid 520] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 534] <... futex resumed>) = 0 [pid 520] <... futex resumed>) = 1 [pid 534] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 520] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 534] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 534] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 520] <... futex resumed>) = 0 [pid 534] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 298] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./8/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./8/file1") = 0 [pid 298] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./8") = 0 [pid 298] mkdir("./9", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 537 ./strace-static-x86_64: Process 537 attached [pid 537] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 537] chdir("./9") = 0 [pid 537] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 31.018142][ T522] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 31.032143][ T524] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 31.034042][ T522] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 31.047287][ T524] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 31.061575][ T526] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 537] setpgid(0, 0 [pid 532] <... close resumed>) = 0 [pid 521] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] mkdir("./file1", 0777 [pid 533] <... futex resumed>) = 0 [pid 521] <... futex resumed>) = 1 [pid 533] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 532] <... mkdir resumed>) = 0 [pid 521] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 533] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 521] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 533] <... futex resumed>) = 0 [pid 533] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 537] <... setpgid resumed>) = 0 [pid 537] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 537] write(3, "1000", 4) = 4 [pid 537] close(3) = 0 [pid 537] symlink("/dev/binderfs", "./binderfs") = 0 [pid 537] write(1, "executing program\n", 18executing program ) = 18 [pid 537] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 537] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [ 31.071194][ T524] EXT4-fs (loop2): This should not happen!! Data will be lost [ 31.071194][ T524] [ 31.091503][ T524] EXT4-fs (loop2): Total free blocks count 0 [ 31.104712][ T522] EXT4-fs (loop4): This should not happen!! Data will be lost [ 31.104712][ T522] [ 31.110984][ T524] EXT4-fs (loop2): Free/Dirty block details [ 31.121521][ T524] EXT4-fs (loop2): free_blocks=2415919504 [ 31.127595][ T524] EXT4-fs (loop2): dirty_blocks=32 [pid 537] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 537] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 537] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 524] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 534] <... futex resumed>) = ? [pid 526] <... mount resumed>) = 0 [pid 537] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 537] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[539]}, 88) = 539 [pid 537] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 537] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 537] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 526] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 524] +++ killed by SIGBUS +++ [pid 526] chdir("./file1") = 0 [pid 526] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 ./strace-static-x86_64: Process 539 attached [pid 539] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 539] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 539] memfd_create("syzkaller", 0 [pid 526] ioctl(4, LOOP_CLR_FD [pid 539] <... memfd_create resumed>) = 3 [pid 539] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 526] <... ioctl resumed>) = 0 [pid 526] close(4) = 0 [pid 526] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 525] <... futex resumed>) = 0 [pid 526] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 525] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 525] <... futex resumed>) = 0 [pid 526] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 525] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 526] <... open resumed>) = 4 [pid 526] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 525] <... futex resumed>) = 0 [pid 539] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 526] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [ 31.133283][ T524] EXT4-fs (loop2): Block reservation details [ 31.140148][ T524] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 31.146994][ T522] EXT4-fs (loop4): Total free blocks count 0 [ 31.154077][ T522] EXT4-fs (loop4): Free/Dirty block details [ 31.162709][ T534] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 31.175167][ T522] EXT4-fs (loop4): free_blocks=2415919504 [pid 525] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 525] <... futex resumed>) = 0 [pid 539] <... write resumed>) = 1048576 [pid 539] munmap(0x7fb07b50e000, 138412032) = 0 [pid 539] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 539] ioctl(4, LOOP_SET_FD, 3 [pid 526] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 525] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 532] <... mount resumed>) = 0 [pid 532] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 532] chdir("./file1") = 0 [pid 532] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 532] ioctl(4, LOOP_CLR_FD) = 0 [pid 532] close(4 [pid 539] <... ioctl resumed>) = 0 [pid 534] +++ killed by SIGBUS +++ [pid 532] <... close resumed>) = 0 [pid 526] <... open resumed>) = 5 [pid 522] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 520] +++ killed by SIGBUS +++ [pid 526] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 525] <... futex resumed>) = 0 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=520, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=17} --- [pid 526] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 525] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 539] close(3 [pid 526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 525] <... futex resumed>) = 0 [pid 526] creat("./bus", 000 [pid 525] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 533] <... futex resumed>) = ? [pid 532] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 528] <... futex resumed>) = 0 [pid 528] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 528] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 532] <... futex resumed>) = 1 [pid 532] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 533] +++ killed by SIGBUS +++ [pid 532] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 528] <... futex resumed>) = 0 [pid 528] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 528] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 532] <... futex resumed>) = 1 [pid 532] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 532] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 528] <... futex resumed>) = 0 [pid 528] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 528] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 532] <... futex resumed>) = 1 [pid 532] creat("./bus", 000) = 6 [pid 532] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 528] <... futex resumed>) = 0 [pid 528] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 528] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 532] <... futex resumed>) = 1 [pid 532] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 532] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 528] <... futex resumed>) = 0 [pid 528] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 528] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 532] <... futex resumed>) = 1 [pid 532] pwrite64(6, "+", 1, 0) = 1 [pid 532] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 528] <... futex resumed>) = 0 [pid 528] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 528] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 532] <... futex resumed>) = 1 [pid 532] open("./bus", O_RDONLY) = 7 [pid 532] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 528] <... futex resumed>) = 0 [pid 528] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 528] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 528] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 528] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 528] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 528] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[541]}, 88) = 541 [pid 528] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 528] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 528] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 532] <... futex resumed>) = 1 [pid 532] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 532] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 539] <... close resumed>) = 0 [pid 539] close(4 [pid 526] <... creat resumed>) = 6 [pid 526] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 526] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./8/binderfs") = 0 [pid 300] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 541 attached [pid 541] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 541] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 541] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 528] <... futex resumed>) = 0 [pid 528] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 528] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 532] <... futex resumed>) = 0 [ 31.180634][ T532] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 31.181081][ T522] EXT4-fs (loop4): dirty_blocks=32 [ 31.192362][ T534] EXT4-fs (loop2): This should not happen!! Data will be lost [ 31.192362][ T534] [ 31.196561][ T522] EXT4-fs (loop4): Block reservation details [ 31.210730][ T539] loop0: detected capacity change from 0 to 2048 [ 31.212047][ T522] EXT4-fs (loop4): i_reserved_data_blocks=2 [pid 525] <... futex resumed>) = 0 [pid 525] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] <... futex resumed>) = 0 [pid 525] <... futex resumed>) = 1 [pid 526] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 525] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 526] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 526] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 525] <... futex resumed>) = 0 [pid 526] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 525] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 525] <... futex resumed>) = 0 [pid 526] pwrite64(6, "+", 1, 0 [pid 525] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 526] <... pwrite64 resumed>) = 1 [pid 526] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 525] <... futex resumed>) = 0 [pid 526] open("./bus", O_RDONLY [pid 525] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] <... open resumed>) = 7 [pid 525] <... futex resumed>) = 0 [pid 526] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 525] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 526] <... futex resumed>) = 0 [pid 525] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 526] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 525] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] <... copy_file_range resumed>) = 1 [pid 525] <... futex resumed>) = 0 [pid 526] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 525] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] <... futex resumed>) = 0 [pid 525] <... futex resumed>) = 0 [pid 526] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 525] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 525] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 525] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 525] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[542]}, 88) = 542 [pid 525] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 525] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 525] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] <... futex resumed>) = 1 [pid 541] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 542 attached [pid 542] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 542] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 542] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 525] <... futex resumed>) = 0 [pid 525] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] <... futex resumed>) = 0 [pid 525] <... futex resumed>) = 1 [ 31.230485][ T522] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 31.238087][ T532] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 31.243704][ T522] EXT4-fs (loop4): This should not happen!! Data will be lost [ 31.243704][ T522] [ 31.257284][ T532] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 542] <... futex resumed>) = 1 [pid 539] <... close resumed>) = 0 [pid 532] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 528] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 525] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 522] +++ killed by SIGBUS +++ [pid 521] +++ killed by SIGBUS +++ [pid 539] mkdir("./file1", 0777 [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=521, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 539] <... mkdir resumed>) = 0 [pid 539] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 302] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 302] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./8/binderfs") = 0 [pid 302] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 542] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 541] <... futex resumed>) = ? [pid 532] +++ killed by SIGBUS +++ [pid 541] +++ killed by SIGBUS +++ [pid 528] +++ killed by SIGBUS +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=528, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8} --- [pid 299] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 299] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./8/binderfs") = 0 [ 31.272273][ T526] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 31.292870][ T532] EXT4-fs (loop1): This should not happen!! Data will be lost [ 31.292870][ T532] [ 31.292892][ T532] EXT4-fs (loop1): Total free blocks count 0 [ 31.292905][ T532] EXT4-fs (loop1): Free/Dirty block details [ 31.292916][ T532] EXT4-fs (loop1): free_blocks=2415919504 [ 31.292928][ T532] EXT4-fs (loop1): dirty_blocks=32 [ 31.292939][ T532] EXT4-fs (loop1): Block reservation details [pid 299] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 525] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 525] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] <... futex resumed>) = 0 [pid 525] <... futex resumed>) = 1 [pid 542] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 525] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 542] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 542] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 525] <... futex resumed>) = 0 [ 31.292949][ T532] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 31.301229][ T541] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 31.303860][ T526] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 31.309069][ T541] EXT4-fs (loop1): This should not happen!! Data will be lost [ 31.309069][ T541] [ 31.314036][ T526] EXT4-fs (loop3): This should not happen!! Data will be lost [ 31.314036][ T526] [pid 542] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 539] <... mount resumed>) = 0 [pid 539] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 539] chdir("./file1") = 0 [pid 539] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 539] ioctl(4, LOOP_CLR_FD) = 0 [pid 539] close(4) = 0 [pid 526] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 539] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 539] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 542] <... futex resumed>) = ? [pid 537] <... futex resumed>) = 0 [pid 537] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 537] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... umount2 resumed>) = 0 [pid 300] <... umount2 resumed>) = 0 [pid 539] <... futex resumed>) = 0 [pid 302] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./8/file1", [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] newfstatat(AT_FDCWD, "./8/file1", [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 542] +++ killed by SIGBUS +++ [pid 300] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 302] <... openat resumed>) = 4 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 302] newfstatat(4, "", [pid 300] <... openat resumed>) = 4 [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] newfstatat(4, "", [pid 302] getdents64(4, [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, [pid 302] getdents64(4, [pid 300] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 302] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 300] close(4 [pid 302] close(4 [pid 300] <... close resumed>) = 0 [pid 302] <... close resumed>) = 0 [pid 300] rmdir("./8/file1" [pid 302] rmdir("./8/file1" [pid 300] <... rmdir resumed>) = 0 [pid 302] <... rmdir resumed>) = 0 [pid 300] getdents64(3, [pid 302] getdents64(3, [pid 300] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 302] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 300] close(3) = 0 [pid 302] rmdir("./8" [pid 300] rmdir("./8" [pid 302] <... rmdir resumed>) = 0 [pid 300] <... rmdir resumed>) = 0 [pid 300] mkdir("./9", 0777 [pid 302] mkdir("./9", 0777 [pid 300] <... mkdir resumed>) = 0 [pid 539] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 302] <... mkdir resumed>) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 302] ioctl(3, LOOP_CLR_FD [pid 300] <... openat resumed>) = 3 [pid 302] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 302] close(3) = 0 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 300] <... close resumed>) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 546 [ 31.379568][ T526] EXT4-fs (loop3): Total free blocks count 0 [ 31.385474][ T526] EXT4-fs (loop3): Free/Dirty block details [ 31.391126][ T526] EXT4-fs (loop3): free_blocks=2415919504 [ 31.396718][ T526] EXT4-fs (loop3): dirty_blocks=32 [ 31.401613][ T526] EXT4-fs (loop3): Block reservation details [ 31.406777][ T539] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 31.407458][ T526] EXT4-fs (loop3): i_reserved_data_blocks=2 [pid 302] <... clone resumed>, child_tidptr=0x5555610ee690) = 545 [pid 539] <... open resumed>) = 4 [pid 299] <... umount2 resumed>) = 0 [pid 539] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 539] <... futex resumed>) = 1 [pid 537] <... futex resumed>) = 0 [pid 539] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 537] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 539] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 537] <... futex resumed>) = 0 [pid 299] newfstatat(AT_FDCWD, "./8/file1", [pid 539] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 537] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 539] <... open resumed>) = 5 [pid 299] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 539] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 539] <... futex resumed>) = 1 [pid 537] <... futex resumed>) = 0 [pid 299] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 539] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 537] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 539] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 537] <... futex resumed>) = 0 [pid 299] <... openat resumed>) = 4 [pid 539] creat("./bus", 000 [pid 537] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] newfstatat(4, "", ./strace-static-x86_64: Process 546 attached ./strace-static-x86_64: Process 545 attached [pid 539] <... creat resumed>) = 6 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 539] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] getdents64(4, [pid 539] <... futex resumed>) = 1 [pid 537] <... futex resumed>) = 0 [pid 299] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 539] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 537] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] getdents64(4, [pid 539] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 537] <... futex resumed>) = 0 [pid 299] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 539] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] close(4 [pid 539] <... futex resumed>) = 0 [pid 537] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 539] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 537] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... close resumed>) = 0 [pid 539] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 537] <... futex resumed>) = 0 [pid 299] rmdir("./8/file1" [pid 539] pwrite64(6, "+", 1, 0 [pid 537] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}executing program [pid 546] set_robust_list(0x5555610ee6a0, 24 [pid 545] set_robust_list(0x5555610ee6a0, 24 [pid 539] <... pwrite64 resumed>) = 1 [pid 299] <... rmdir resumed>) = 0 [pid 299] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./8") = 0 [pid 299] mkdir("./9", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 547 [pid 539] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 537] <... futex resumed>) = 0 [pid 537] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 537] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 539] open("./bus", O_RDONLY) = 7 [pid 539] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 537] <... futex resumed>) = 0 [pid 537] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 537] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 537] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 537] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 537] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 537] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[548]}, 88) = 548 [pid 537] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 537] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 539] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 537] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 539] <... copy_file_range resumed>) = 1 [pid 539] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 539] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 546] <... set_robust_list resumed>) = 0 [pid 546] chdir("./9") = 0 [pid 546] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 546] setpgid(0, 0) = 0 [pid 546] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 546] write(3, "1000", 4) = 4 [pid 546] close(3) = 0 [pid 546] symlink("/dev/binderfs", "./binderfs") = 0 [pid 546] write(1, "executing program\n", 18) = 18 [pid 546] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 546] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 546] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 546] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 546] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 546] rt_sigprocmask(SIG_BLOCK, ~[], [pid 545] <... set_robust_list resumed>) = 0 [pid 545] chdir("./9" [pid 546] <... rt_sigprocmask resumed>[], 8) = 0 [ 31.444378][ T526] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 31.460937][ T526] EXT4-fs (loop3): This should not happen!! Data will be lost [ 31.460937][ T526] [ 31.472426][ T30] kauditd_printk_skb: 3 callbacks suppressed [pid 546] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0}executing program [pid 545] <... chdir resumed>) = 0 [pid 545] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 545] setpgid(0, 0 [pid 546] <... clone3 resumed> => {parent_tid=[549]}, 88) = 549 [pid 546] rt_sigprocmask(SIG_SETMASK, [], [pid 545] <... setpgid resumed>) = 0 [pid 546] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 545] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 546] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 546] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 545] <... openat resumed>) = 3 [pid 545] write(3, "1000", 4) = 4 [pid 545] close(3) = 0 [pid 545] symlink("/dev/binderfs", "./binderfs") = 0 [pid 545] write(1, "executing program\n", 18) = 18 [pid 545] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 545] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 545] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 545] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 545] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 545] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 545] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[550]}, 88) = 550 [pid 545] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 545] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 545] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 548 attached [pid 548] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 548] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 548] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 547] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 547] chdir("./9" [pid 549] <... memfd_create resumed>) = 3 [pid 547] <... chdir resumed>) = 0 [pid 549] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 547] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 549] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 547] setpgid(0, 0) = 0 [pid 547] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 547] write(3, "1000", 4) = 4 [pid 547] close(3 [pid 548] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 547] <... close resumed>) = 0 [pid 537] <... futex resumed>) = 0 [pid 537] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 539] <... futex resumed>) = 0 [pid 537] <... futex resumed>) = 1 [pid 537] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 548] <... futex resumed>) = 1 [pid 547] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 550 attached [pid 548] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 547] <... symlink resumed>) = 0 [pid 550] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 550] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 550] memfd_create("syzkaller", 0) = 3 [pid 550] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 547] write(1, "executing program\n", 18 [pid 550] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576executing program [pid 547] <... write resumed>) = 18 [pid 547] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 547] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 547] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 547] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 547] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 547] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 547] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[551]}, 88) = 551 [pid 547] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 547] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 547] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 551 attached [pid 551] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 551] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 551] memfd_create("syzkaller", 0) = 3 [pid 551] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 550] <... write resumed>) = 1048576 [pid 526] +++ killed by SIGBUS +++ [pid 525] +++ killed by SIGBUS +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=525, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=20} --- [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 549] <... write resumed>) = 1048576 [pid 549] munmap(0x7fb07b50e000, 138412032) = 0 [pid 549] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 551] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [ 31.472442][ T30] audit: type=1400 audit(1735705953.315:79): avc: denied { remove_name } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.488581][ T539] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 31.500800][ T30] audit: type=1400 audit(1735705953.315:80): avc: denied { rename } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [pid 549] ioctl(4, LOOP_SET_FD, 3 [pid 301] <... restart_syscall resumed>) = 0 [pid 301] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./8/binderfs") = 0 [pid 301] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 551] <... write resumed>) = 1048576 [pid 550] munmap(0x7fb07b50e000, 138412032) = 0 [pid 550] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 550] ioctl(4, LOOP_SET_FD, 3 [pid 537] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 537] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 548] <... futex resumed>) = 0 [pid 537] <... futex resumed>) = 1 [pid 548] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 537] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 548] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 548] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 537] <... futex resumed>) = 0 [pid 548] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 551] munmap(0x7fb07b50e000, 138412032) = 0 [pid 551] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 551] ioctl(4, LOOP_SET_FD, 3 [pid 549] <... ioctl resumed>) = 0 [pid 549] close(3) = 0 [pid 549] close(4) = 0 [pid 550] <... ioctl resumed>) = 0 [pid 549] mkdir("./file1", 0777 [pid 550] close(3 [pid 549] <... mkdir resumed>) = 0 [pid 550] <... close resumed>) = 0 [ 31.537674][ T539] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 31.546711][ T549] loop2: detected capacity change from 0 to 2048 [ 31.550525][ T539] EXT4-fs (loop0): This should not happen!! Data will be lost [ 31.550525][ T539] [ 31.566039][ T539] EXT4-fs (loop0): Total free blocks count 0 [ 31.569468][ T550] loop4: detected capacity change from 0 to 2048 [ 31.572379][ T539] EXT4-fs (loop0): Free/Dirty block details [ 31.583900][ T539] EXT4-fs (loop0): free_blocks=2415919504 [pid 550] close(4 [pid 551] <... ioctl resumed>) = 0 [pid 550] <... close resumed>) = 0 [pid 550] mkdir("./file1", 0777) = 0 [pid 549] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 550] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 551] close(3 [pid 539] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 551] <... close resumed>) = 0 [pid 551] close(4 [pid 548] <... futex resumed>) = ? [pid 548] +++ killed by SIGBUS +++ [ 31.586174][ T551] loop1: detected capacity change from 0 to 2048 [ 31.589958][ T539] EXT4-fs (loop0): dirty_blocks=32 [ 31.600907][ T539] EXT4-fs (loop0): Block reservation details [ 31.608326][ T539] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 31.620604][ T539] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 31.625941][ T550] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 301] <... umount2 resumed>) = 0 [pid 301] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./8/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./8/file1") = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./8") = 0 [pid 301] mkdir("./9", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3 [pid 550] <... mount resumed>) = 0 [pid 550] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 551] <... close resumed>) = 0 [pid 301] <... close resumed>) = 0 [pid 551] mkdir("./file1", 0777 [pid 539] +++ killed by SIGBUS +++ [pid 537] +++ killed by SIGBUS +++ [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=537, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 551] <... mkdir resumed>) = 0 [pid 550] chdir("./file1" [pid 549] <... mount resumed>) = 0 ./strace-static-x86_64: Process 556 attached [pid 551] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 550] <... chdir resumed>) = 0 [pid 549] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 301] <... clone resumed>, child_tidptr=0x5555610ee690) = 556 [pid 298] <... restart_syscall resumed>) = 0 [pid 556] set_robust_list(0x5555610ee6a0, 24 [pid 550] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 298] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 550] <... openat resumed>) = 4 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./9/binderfs" [pid 550] ioctl(4, LOOP_CLR_FD [pid 298] <... unlink resumed>) = 0 [pid 556] <... set_robust_list resumed>) = 0 [pid 298] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 549] <... openat resumed>) = 3 [pid 549] chdir("./file1") = 0 [pid 549] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 549] ioctl(4, LOOP_CLR_FD) = 0 [pid 549] close(4) = 0 [pid 549] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] <... futex resumed>) = 0 [pid 546] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 546] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 549] <... futex resumed>) = 1 [pid 549] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 550] <... ioctl resumed>) = 0 [pid 550] close(4) = 0 [pid 550] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] <... futex resumed>) = 0 [pid 545] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 545] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 550] <... futex resumed>) = 1 [pid 550] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 556] chdir("./9" [pid 550] <... open resumed>) = 4 [pid 550] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 550] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 545] <... futex resumed>) = 0 [pid 545] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 550] <... futex resumed>) = 0 [pid 545] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 550] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 556] <... chdir resumed>) = 0 [pid 556] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 550] <... open resumed>) = 5 [pid 549] <... open resumed>) = 4 [pid 556] <... prctl resumed>) = 0 [pid 550] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 549] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 550] <... futex resumed>) = 1 [pid 545] <... futex resumed>) = 0 [pid 550] creat("./bus", 000 [pid 545] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 550] <... creat resumed>) = 6 [pid 545] <... futex resumed>) = 0 [pid 550] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 550] <... futex resumed>) = 0 [pid 545] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 550] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 545] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 550] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 545] <... futex resumed>) = 0 [pid 550] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 550] <... futex resumed>) = 0 [pid 545] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 550] pwrite64(6, "+", 1, 0 [pid 545] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 550] <... pwrite64 resumed>) = 1 [pid 545] <... futex resumed>) = 0 [pid 550] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 550] <... futex resumed>) = 0 [pid 545] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 550] open("./bus", O_RDONLY [pid 545] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 550] <... open resumed>) = 7 [pid 545] <... futex resumed>) = 0 [pid 550] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 550] <... futex resumed>) = 0 [pid 545] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 550] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 545] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 550] <... copy_file_range resumed>) = 1 [pid 545] <... futex resumed>) = 0 [pid 556] setpgid(0, 0 [pid 550] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 550] <... futex resumed>) = 0 [pid 545] <... futex resumed>) = 0 [pid 550] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 545] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 556] <... setpgid resumed>) = 0 [pid 549] <... futex resumed>) = 1 [pid 546] <... futex resumed>) = 0 [pid 546] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 546] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 550] <... mmap resumed>) = 0x20000000 [pid 556] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 550] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 549] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 550] <... futex resumed>) = 1 [pid 545] <... futex resumed>) = 0 [pid 556] <... openat resumed>) = 3 [pid 549] <... open resumed>) = 5 [pid 545] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 556] write(3, "1000", 4) = 4 [pid 556] close(3) = 0 [pid 549] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 556] symlink("/dev/binderfs", "./binderfs" [pid 549] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 556] <... symlink resumed>) = 0 executing program [pid 556] write(1, "executing program\n", 18) = 18 [pid 556] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 556] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 556] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 556] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 556] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 556] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 556] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[557]}, 88) = 557 [pid 556] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 556] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 556] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 545] <... futex resumed>) = 0 [pid 545] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] <... futex resumed>) = 0 [pid 546] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 549] <... futex resumed>) = 0 [pid 546] <... futex resumed>) = 1 [pid 549] creat("./bus", 000 [pid 546] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 549] <... creat resumed>) = 6 [pid 549] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 546] <... futex resumed>) = 0 [pid 549] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 546] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 549] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 546] <... futex resumed>) = 0 [pid 549] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 549] <... futex resumed>) = 0 [pid 546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 549] pwrite64(6, "+", 1, 0 [pid 546] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 549] <... pwrite64 resumed>) = 1 [pid 546] <... futex resumed>) = 0 [pid 549] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 549] <... futex resumed>) = 0 [pid 546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 549] open("./bus", O_RDONLY [pid 546] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 549] <... open resumed>) = 7 [pid 546] <... futex resumed>) = 0 [pid 549] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 549] <... futex resumed>) = 0 [pid 546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 549] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 546] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 549] <... copy_file_range resumed>) = 1 [pid 546] <... futex resumed>) = 0 [pid 549] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 549] <... futex resumed>) = 0 [pid 546] <... futex resumed>) = 0 [pid 549] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 546] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 546] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 546] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 546] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[558]}, 88) = 558 [pid 546] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 546] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 546] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 557 attached [pid 557] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 557] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 557] memfd_create("syzkaller", 0) = 3 [pid 557] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 557] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 557] munmap(0x7fb07b50e000, 138412032) = 0 [pid 557] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 557] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 557] close(3) = 0 [ 31.633481][ T539] EXT4-fs (loop0): This should not happen!! Data will be lost [ 31.633481][ T539] [ 31.644814][ T549] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 31.676368][ T550] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 557] close(4./strace-static-x86_64: Process 558 attached [pid 298] <... umount2 resumed>) = 0 [pid 558] set_robust_list(0x7fb08390d9a0, 24 [pid 298] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 558] <... set_robust_list resumed>) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 558] rt_sigprocmask(SIG_SETMASK, [], [pid 298] newfstatat(AT_FDCWD, "./9/file1", [pid 558] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 558] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 298] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 558] <... mmap resumed>) = 0x20000000 [pid 298] newfstatat(4, "", [pid 558] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 558] <... futex resumed>) = 1 [pid 546] <... futex resumed>) = 0 [pid 558] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 546] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] getdents64(4, [pid 549] <... futex resumed>) = 0 [pid 546] <... futex resumed>) = 1 [pid 298] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 546] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 298] getdents64(4, [pid 545] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 545] <... futex resumed>) = 0 [pid 298] close(4 [pid 545] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 298] <... close resumed>) = 0 [pid 298] rmdir("./9/file1") = 0 [pid 298] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./9") = 0 [ 31.698616][ T557] loop3: detected capacity change from 0 to 2048 [ 31.706493][ T550] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 31.722949][ T549] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 31.723244][ T550] EXT4-fs (loop4): This should not happen!! Data will be lost [ 31.723244][ T550] [pid 298] mkdir("./10", 0777 [pid 557] <... close resumed>) = 0 [pid 557] mkdir("./file1", 0777) = 0 [pid 557] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 298] <... mkdir resumed>) = 0 [pid 551] <... mount resumed>) = 0 [pid 551] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 551] chdir("./file1") = 0 [pid 551] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 551] ioctl(4, LOOP_CLR_FD) = 0 [pid 551] close(4) = 0 [pid 551] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 551] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 563 [pid 547] <... futex resumed>) = 0 [pid 546] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 547] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 547] <... futex resumed>) = 1 [pid 558] <... futex resumed>) = 0 [pid 547] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] <... futex resumed>) = 1 [pid 558] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 546] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 558] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 558] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 546] <... futex resumed>) = 0 [pid 558] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 551] <... futex resumed>) = 0 [pid 551] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 551] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 547] <... futex resumed>) = 0 [pid 547] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 551] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 551] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 551] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 563 attached [pid 563] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 563] chdir("./10") = 0 [pid 563] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 563] setpgid(0, 0) = 0 [pid 563] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 563] write(3, "1000", 4) = 4 [pid 563] close(3) = 0 [pid 563] symlink("/dev/binderfs", "./binderfs" [pid 551] <... futex resumed>) = 0 [pid 547] <... futex resumed>) = 1 [pid 551] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULLexecuting program [pid 563] <... symlink resumed>) = 0 [pid 563] write(1, "executing program\n", 18) = 18 [pid 563] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 563] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 563] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 563] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [ 31.753370][ T551] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 31.753621][ T550] EXT4-fs (loop4): Total free blocks count 0 [ 31.765084][ T549] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 31.781802][ T549] EXT4-fs (loop2): This should not happen!! Data will be lost [ 31.781802][ T549] [ 31.791197][ T557] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 563] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 563] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 563] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[565]}, 88) = 565 [pid 563] rt_sigprocmask(SIG_SETMASK, [], [pid 547] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 563] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 547] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 563] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 547] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 565 attached [pid 563] <... futex resumed>) = 0 [pid 557] <... mount resumed>) = 0 [pid 547] <... futex resumed>) = 1 [pid 551] <... futex resumed>) = 0 [pid 551] creat("./bus", 000) = 6 [pid 551] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 551] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 565] set_robust_list(0x7fb08392e9a0, 24 [pid 563] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 557] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 547] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 565] <... set_robust_list resumed>) = 0 [pid 557] <... openat resumed>) = 3 [pid 547] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 565] rt_sigprocmask(SIG_SETMASK, [], [pid 557] chdir("./file1" [pid 547] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 565] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 557] <... chdir resumed>) = 0 [pid 547] <... futex resumed>) = 1 [pid 565] memfd_create("syzkaller", 0 [pid 557] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 547] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 565] <... memfd_create resumed>) = 3 [pid 557] <... openat resumed>) = 4 [pid 565] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 557] ioctl(4, LOOP_CLR_FD [pid 565] <... mmap resumed>) = 0x7fb07b50e000 [pid 557] <... ioctl resumed>) = 0 [pid 565] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 557] close(4) = 0 [pid 551] <... futex resumed>) = 0 [pid 557] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 556] <... futex resumed>) = 0 [pid 557] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 556] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] <... open resumed>) = 4 [pid 556] <... futex resumed>) = 0 [pid 551] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 557] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 556] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 557] <... futex resumed>) = 0 [pid 556] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 557] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 556] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] <... open resumed>) = 5 [pid 556] <... futex resumed>) = 0 [pid 557] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 556] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 557] <... futex resumed>) = 0 [pid 556] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 556] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 556] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 557] creat("./bus", 000) = 6 [pid 557] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 556] <... futex resumed>) = 0 [pid 556] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 556] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 557] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 557] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 556] <... futex resumed>) = 0 [pid 557] pwrite64(6, "+", 1, 0 [pid 556] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] <... pwrite64 resumed>) = 1 [pid 556] <... futex resumed>) = 0 [pid 557] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 556] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 557] <... futex resumed>) = 0 [pid 556] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 557] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 556] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 556] <... futex resumed>) = 0 [pid 557] open("./bus", O_RDONLY [pid 556] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 557] <... open resumed>) = 7 [pid 557] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 556] <... futex resumed>) = 0 [pid 557] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 556] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 31.804788][ T550] EXT4-fs (loop4): Free/Dirty block details [ 31.810711][ T550] EXT4-fs (loop4): free_blocks=2415919504 [ 31.816768][ T549] EXT4-fs (loop2): Total free blocks count 0 [ 31.817601][ T550] EXT4-fs (loop4): dirty_blocks=32 [ 31.822707][ T549] EXT4-fs (loop2): Free/Dirty block details [ 31.828655][ T550] EXT4-fs (loop4): Block reservation details [ 31.834144][ T549] EXT4-fs (loop2): free_blocks=2415919504 [ 31.845034][ T549] EXT4-fs (loop2): dirty_blocks=32 [pid 556] <... futex resumed>) = 0 [pid 557] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 556] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 551] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 549] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 557] <... copy_file_range resumed>) = 1 [pid 556] <... futex resumed>) = 0 [pid 557] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 556] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 557] <... futex resumed>) = 0 [pid 556] <... mmap resumed>) = 0x7fb0838ed000 [pid 557] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 556] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 556] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 556] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[566]}, 88) = 566 [pid 556] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 556] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 556] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 565] <... write resumed>) = 1048576 [pid 565] munmap(0x7fb07b50e000, 138412032) = 0 [pid 565] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 565] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 565] close(3) = 0 [pid 565] close(4) = 0 [pid 565] mkdir("./file1", 0777) = 0 ./strace-static-x86_64: Process 566 attached [pid 566] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 566] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 566] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 551] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 547] <... futex resumed>) = 0 [pid 558] <... futex resumed>) = ? [pid 547] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 558] +++ killed by SIGBUS +++ [pid 551] pwrite64(6, "+", 1, 0 [pid 547] <... futex resumed>) = 0 [pid 566] <... mmap resumed>) = 0x20000000 [pid 565] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 551] <... pwrite64 resumed>) = 1 [pid 550] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 545] <... mmap resumed>) = 0x7fb0838ed000 [pid 551] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 551] <... futex resumed>) = 0 [pid 545] <... mprotect resumed>) = 0 [pid 551] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 545] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 545] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[567]}, 88) = 567 [pid 545] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 545] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 545] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = ? [pid 547] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 547] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 551] <... futex resumed>) = 0 [pid 547] <... futex resumed>) = 1 [pid 551] open("./bus", O_RDONLY [pid 547] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 566] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 556] <... futex resumed>) = 0 [pid 556] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 551] <... open resumed>) = 7 [pid 557] <... futex resumed>) = 0 [ 31.850688][ T549] EXT4-fs (loop2): Block reservation details [ 31.856985][ T549] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 31.864704][ T550] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 31.870562][ T565] loop0: detected capacity change from 0 to 2048 [ 31.879441][ T549] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 556] <... futex resumed>) = 1 [pid 551] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 567 attached [pid 556] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 566] <... futex resumed>) = 1 [pid 566] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 551] <... futex resumed>) = 1 [pid 549] +++ killed by SIGBUS +++ [pid 546] +++ killed by SIGBUS +++ [pid 551] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=546, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 300] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./9/binderfs") = 0 [pid 300] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 567] +++ killed by SIGBUS +++ [pid 547] <... futex resumed>) = 0 [pid 547] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 547] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 547] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 547] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 547] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 547] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[570]}, 88) = 570 [pid 547] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 547] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 31.892949][ T557] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 31.907830][ T549] EXT4-fs (loop2): This should not happen!! Data will be lost [ 31.907830][ T549] [ 31.909007][ T557] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 31.924662][ T550] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 31.929452][ T557] EXT4-fs (loop3): This should not happen!! Data will be lost [ 31.929452][ T557] [pid 547] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 570 attached [pid 565] <... mount resumed>) = 0 [pid 551] <... futex resumed>) = 0 [pid 570] set_robust_list(0x7fb08390d9a0, 24 [pid 556] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 551] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 570] <... set_robust_list resumed>) = 0 [pid 556] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 551] <... copy_file_range resumed>) = 1 [pid 570] rt_sigprocmask(SIG_SETMASK, [], [pid 566] <... futex resumed>) = 0 [pid 556] <... futex resumed>) = 1 [pid 551] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 566] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 556] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 551] <... futex resumed>) = 0 [pid 570] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 566] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 551] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 570] <... mmap resumed>) = 0x20000000 [pid 566] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 1 [pid 556] <... futex resumed>) = 0 [pid 570] <... futex resumed>) = 1 [pid 566] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 565] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 547] <... futex resumed>) = 0 [pid 570] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 565] <... openat resumed>) = 3 [pid 547] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 565] chdir("./file1" [pid 551] <... futex resumed>) = 0 [pid 547] <... futex resumed>) = 1 [pid 565] <... chdir resumed>) = 0 [pid 547] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 565] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 565] ioctl(4, LOOP_CLR_FD) = 0 [pid 565] close(4) = 0 [pid 565] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 563] <... futex resumed>) = 0 [pid 565] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 563] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 565] <... open resumed>) = 4 [pid 563] <... futex resumed>) = 0 [pid 565] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 563] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 565] <... futex resumed>) = 0 [pid 563] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 565] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 563] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 565] <... open resumed>) = 5 [pid 563] <... futex resumed>) = 0 [pid 565] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 563] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 565] <... futex resumed>) = 0 [pid 563] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 565] creat("./bus", 000 [pid 563] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 565] <... creat resumed>) = 6 [pid 563] <... futex resumed>) = 0 [pid 565] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 563] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 565] <... futex resumed>) = 0 [pid 563] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 565] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 563] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 565] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 563] <... futex resumed>) = 0 [pid 565] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 563] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 565] <... futex resumed>) = 0 [pid 563] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 565] pwrite64(6, "+", 1, 0 [pid 563] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 565] <... pwrite64 resumed>) = 1 [pid 563] <... futex resumed>) = 0 [pid 565] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 563] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 565] <... futex resumed>) = 0 [pid 563] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 565] open("./bus", O_RDONLY [pid 563] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 565] <... open resumed>) = 7 [pid 563] <... futex resumed>) = 0 [pid 565] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 563] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 565] <... futex resumed>) = 0 [pid 563] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 565] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 563] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 565] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 563] <... futex resumed>) = 0 [pid 565] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 563] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 565] <... copy_file_range resumed>) = 1 [pid 563] <... futex resumed>) = 0 [pid 565] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 563] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 565] <... futex resumed>) = 0 [pid 563] <... mmap resumed>) = 0x7fb0838ed000 [pid 565] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 563] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 563] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 563] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[571]}, 88) = 571 [pid 563] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 563] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 563] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 571 attached [pid 571] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 571] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 31.943112][ T565] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 31.954037][ T557] EXT4-fs (loop3): Total free blocks count 0 [ 31.962364][ T550] EXT4-fs (loop4): This should not happen!! Data will be lost [ 31.962364][ T550] [ 31.967358][ T557] EXT4-fs (loop3): Free/Dirty block details [ 31.982628][ T551] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 31.982764][ T557] EXT4-fs (loop3): free_blocks=2415919504 [pid 571] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 563] <... futex resumed>) = 0 [pid 563] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 565] <... futex resumed>) = 0 [pid 563] <... futex resumed>) = 1 [pid 563] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 557] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 550] +++ killed by SIGBUS +++ [pid 545] +++ killed by SIGBUS +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=545, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 302] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 302] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./9/binderfs") = 0 [pid 302] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 571] <... futex resumed>) = 1 [pid 571] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 547] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 300] <... umount2 resumed>) = 0 [pid 566] <... futex resumed>) = ? [ 32.003101][ T557] EXT4-fs (loop3): dirty_blocks=32 [ 32.008094][ T557] EXT4-fs (loop3): Block reservation details [ 32.014213][ T557] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 32.015639][ T565] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 32.020628][ T551] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 547] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... futex resumed>) = 0 [pid 566] +++ killed by SIGBUS +++ [pid 547] <... futex resumed>) = 1 [pid 570] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 563] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 547] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 570] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 563] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 571] <... futex resumed>) = 0 [pid 570] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 563] <... futex resumed>) = 1 [pid 571] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 570] <... futex resumed>) = 1 [pid 563] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 547] <... futex resumed>) = 0 [pid 571] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 570] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 571] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 563] <... futex resumed>) = 0 [pid 571] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./9/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./9/file1") = 0 [pid 300] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./9") = 0 [pid 300] mkdir("./10", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 572 executing program ./strace-static-x86_64: Process 572 attached [pid 572] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 572] chdir("./10") = 0 [pid 572] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 572] setpgid(0, 0) = 0 [pid 572] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 572] write(3, "1000", 4) = 4 [pid 572] close(3) = 0 [pid 572] symlink("/dev/binderfs", "./binderfs") = 0 [pid 572] write(1, "executing program\n", 18) = 18 [pid 572] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 572] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 572] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 572] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 572] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 572] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 32.037627][ T565] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 32.046852][ T551] EXT4-fs (loop1): This should not happen!! Data will be lost [ 32.046852][ T551] [ 32.068380][ T551] EXT4-fs (loop1): Total free blocks count 0 [ 32.070450][ T557] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 32.074537][ T551] EXT4-fs (loop1): Free/Dirty block details [ 32.092764][ T551] EXT4-fs (loop1): free_blocks=2415919504 [ 32.098661][ T551] EXT4-fs (loop1): dirty_blocks=32 [pid 572] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[573]}, 88) = 573 [pid 572] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 572] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 572] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 573 attached [pid 551] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 302] <... umount2 resumed>) = 0 [pid 302] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./9/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 302] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 302] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 302] close(4) = 0 [pid 302] rmdir("./9/file1" [pid 573] set_robust_list(0x7fb08392e9a0, 24 [pid 570] <... futex resumed>) = ? [pid 302] <... rmdir resumed>) = 0 [pid 302] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./9") = 0 [pid 302] mkdir("./10", 0777) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] close(3) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 574 [pid 573] <... set_robust_list resumed>) = 0 executing program [pid 573] rt_sigprocmask(SIG_SETMASK, [], [pid 570] +++ killed by SIGBUS +++ ./strace-static-x86_64: Process 574 attached [pid 574] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 574] chdir("./10") = 0 [pid 574] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 574] setpgid(0, 0) = 0 [pid 574] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 574] write(3, "1000", 4) = 4 [pid 574] close(3) = 0 [pid 574] symlink("/dev/binderfs", "./binderfs") = 0 [pid 574] write(1, "executing program\n", 18) = 18 [pid 574] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 574] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 574] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 574] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 574] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 574] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 574] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[575]}, 88) = 575 [pid 574] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 574] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 574] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 573] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 557] +++ killed by SIGBUS +++ [pid 556] +++ killed by SIGBUS +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=556, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=17} --- [pid 301] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 301] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./9/binderfs") = 0 [ 32.103804][ T551] EXT4-fs (loop1): Block reservation details [ 32.109924][ T551] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 32.110625][ T557] EXT4-fs (loop3): This should not happen!! Data will be lost [ 32.110625][ T557] [ 32.116099][ T565] EXT4-fs (loop0): This should not happen!! Data will be lost [ 32.116099][ T565] [ 32.135633][ T565] EXT4-fs (loop0): Total free blocks count 0 [ 32.142032][ T565] EXT4-fs (loop0): Free/Dirty block details [ 32.148596][ T565] EXT4-fs (loop0): free_blocks=2415919504 [pid 301] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 575 attached [pid 573] memfd_create("syzkaller", 0 [pid 575] set_robust_list(0x7fb08392e9a0, 24 [pid 573] <... memfd_create resumed>) = 3 [pid 551] +++ killed by SIGBUS +++ [pid 547] +++ killed by SIGBUS +++ [pid 575] <... set_robust_list resumed>) = 0 [pid 573] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 575] rt_sigprocmask(SIG_SETMASK, [], [pid 573] <... mmap resumed>) = 0x7fb07b50e000 [pid 575] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 573] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 575] memfd_create("syzkaller", 0) = 3 [pid 575] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=547, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 575] <... mmap resumed>) = 0x7fb07b50e000 [pid 575] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 299] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 565] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 575] <... write resumed>) = 1048576 [pid 573] <... write resumed>) = 1048576 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 575] munmap(0x7fb07b50e000, 138412032 [pid 299] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 575] <... munmap resumed>) = 0 [pid 575] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 575] ioctl(4, LOOP_SET_FD, 3 [pid 301] <... umount2 resumed>) = 0 [pid 299] <... openat resumed>) = 3 [pid 299] newfstatat(3, "", [pid 575] <... ioctl resumed>) = 0 [pid 575] close(3) = 0 [pid 575] close(4 [pid 573] munmap(0x7fb07b50e000, 138412032 [pid 571] <... futex resumed>) = ? [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 573] <... munmap resumed>) = 0 [pid 573] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 573] ioctl(4, LOOP_SET_FD, 3 [pid 571] +++ killed by SIGBUS +++ [pid 299] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./9/file1", [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./9/binderfs" [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 32.149348][ T551] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 32.156853][ T565] EXT4-fs (loop0): dirty_blocks=32 [ 32.166895][ T551] EXT4-fs (loop1): This should not happen!! Data will be lost [ 32.166895][ T551] [ 32.174736][ T565] EXT4-fs (loop0): Block reservation details [ 32.187904][ T565] EXT4-fs (loop0): i_reserved_data_blocks=2 [pid 301] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... unlink resumed>) = 0 [pid 573] <... ioctl resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./9/file1") = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./9") = 0 [pid 301] mkdir("./10", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 576 [pid 573] close(3) = 0 [pid 573] close(4./strace-static-x86_64: Process 576 attached [pid 576] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 576] chdir("./10") = 0 [pid 576] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 576] setpgid(0, 0 [pid 565] +++ killed by SIGBUS +++ [pid 563] +++ killed by SIGBUS +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=563, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 298] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./10/binderfs") = 0 [pid 298] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 576] <... setpgid resumed>) = 0 [pid 576] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 576] write(3, "1000", 4) = 4 [pid 576] close(3) = 0 [pid 576] symlink("/dev/binderfs", "./binderfs") = 0 [pid 576] write(1, "executing program\n", 18executing program ) = 18 [pid 576] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 576] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 576] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 576] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 576] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 576] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[577]}, 88) = 577 [pid 576] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 576] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 577 attached [pid 577] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 577] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 577] memfd_create("syzkaller", 0) = 3 [pid 577] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 575] <... close resumed>) = 0 [pid 575] mkdir("./file1", 0777) = 0 [pid 575] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 577] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 573] <... close resumed>) = 0 [pid 573] mkdir("./file1", 0777) = 0 [pid 573] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 577] <... write resumed>) = 1048576 [pid 577] munmap(0x7fb07b50e000, 138412032) = 0 [pid 577] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 577] ioctl(4, LOOP_SET_FD, 3 [pid 299] <... umount2 resumed>) = 0 [pid 298] <... umount2 resumed>) = 0 [pid 299] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./9/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] newfstatat(AT_FDCWD, "./10/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", [pid 299] newfstatat(4, "", [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, [pid 299] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 298] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 299] getdents64(4, [pid 298] close(4 [pid 299] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 298] <... close resumed>) = 0 [pid 299] close(4) = 0 [pid 298] rmdir("./10/file1") = 0 [pid 299] rmdir("./9/file1" [pid 577] <... ioctl resumed>) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 298] getdents64(3, [pid 299] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./9") = 0 [pid 299] mkdir("./10", 0777 [pid 298] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 577] close(3 [pid 299] <... mkdir resumed>) = 0 [pid 298] close(3 [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [ 32.205206][ T575] loop4: detected capacity change from 0 to 2048 [ 32.215222][ T565] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 32.217978][ T573] loop2: detected capacity change from 0 to 2048 [ 32.227694][ T565] EXT4-fs (loop0): This should not happen!! Data will be lost [ 32.227694][ T565] [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program [pid 298] <... close resumed>) = 0 [pid 299] <... clone resumed>, child_tidptr=0x5555610ee690) = 580 [pid 298] rmdir("./10"./strace-static-x86_64: Process 580 attached [pid 580] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 580] chdir("./10") = 0 [pid 580] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 580] setpgid(0, 0) = 0 [pid 580] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 580] write(3, "1000", 4) = 4 [pid 580] close(3) = 0 [pid 580] symlink("/dev/binderfs", "./binderfs") = 0 [pid 580] write(1, "executing program\n", 18) = 18 [pid 580] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 580] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 580] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 580] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 580] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 580] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 580] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[581]}, 88) = 581 [pid 580] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 580] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 580] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 581 attached [pid 581] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 581] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 581] memfd_create("syzkaller", 0) = 3 [pid 581] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 581] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 298] <... rmdir resumed>) = 0 [pid 581] <... write resumed>) = 1048576 [pid 581] munmap(0x7fb07b50e000, 138412032 [pid 298] mkdir("./11", 0777 [pid 581] <... munmap resumed>) = 0 [pid 581] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 581] ioctl(4, LOOP_SET_FD, 3 [pid 298] <... mkdir resumed>) = 0 [pid 577] <... close resumed>) = 0 [pid 573] <... mount resumed>) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 577] close(4 [pid 298] <... openat resumed>) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 582 [pid 573] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 573] chdir("./file1") = 0 [pid 573] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 582 attached [pid 581] <... ioctl resumed>) = 0 [pid 582] set_robust_list(0x5555610ee6a0, 24 [pid 581] close(3 [pid 573] <... openat resumed>) = 4 [pid 573] ioctl(4, LOOP_CLR_FD [pid 582] <... set_robust_list resumed>) = 0 [pid 581] <... close resumed>) = 0 [pid 573] <... ioctl resumed>) = 0 [pid 582] chdir("./11") = 0 [pid 582] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 582] setpgid(0, 0) = 0 [pid 582] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 582] write(3, "1000", 4) = 4 [pid 582] close(3) = 0 [pid 582] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 582] write(1, "executing program\n", 18) = 18 [pid 582] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 582] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 582] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 582] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 582] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 582] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 582] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} [pid 581] close(4) = 0 [pid 581] mkdir("./file1", 0777./strace-static-x86_64: Process 583 attached [pid 573] close(4 [pid 582] <... clone3 resumed> => {parent_tid=[583]}, 88) = 583 [pid 573] <... close resumed>) = 0 [pid 582] rt_sigprocmask(SIG_SETMASK, [], [pid 583] set_robust_list(0x7fb08392e9a0, 24 [pid 573] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 582] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 583] <... set_robust_list resumed>) = 0 [pid 583] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 583] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 582] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... futex resumed>) = 1 [pid 572] <... futex resumed>) = 0 [pid 583] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 583] memfd_create("syzkaller", 0 [pid 573] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 582] <... futex resumed>) = 0 [pid 572] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] <... memfd_create resumed>) = 3 [pid 583] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 573] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 572] <... futex resumed>) = 0 [pid 572] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 582] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 573] <... open resumed>) = 4 [pid 573] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 572] <... futex resumed>) = 0 [pid 572] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 572] <... futex resumed>) = 0 [pid 572] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 572] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 573] <... futex resumed>) = 0 [pid 572] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] creat("./bus", 000 [pid 572] <... futex resumed>) = 0 [pid 572] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] <... creat resumed>) = 6 [pid 573] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 572] <... futex resumed>) = 0 [pid 573] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 572] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 572] <... futex resumed>) = 0 [pid 573] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 572] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 573] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 573] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 572] <... futex resumed>) = 0 [pid 572] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 573] <... futex resumed>) = 0 [pid 572] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] pwrite64(6, "+", 1, 0) = 1 [pid 573] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 572] <... futex resumed>) = 0 [pid 573] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 572] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 572] <... futex resumed>) = 0 [pid 573] open("./bus", O_RDONLY [pid 572] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] <... open resumed>) = 7 [pid 573] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 572] <... futex resumed>) = 0 [pid 573] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 572] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 572] <... futex resumed>) = 0 [pid 573] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 572] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... copy_file_range resumed>) = 1 [pid 572] <... futex resumed>) = 0 [pid 573] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 572] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 573] <... futex resumed>) = 0 [pid 572] <... mmap resumed>) = 0x7fb0838ed000 [pid 573] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 572] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 572] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 572] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0}./strace-static-x86_64: Process 585 attached [pid 581] <... mkdir resumed>) = 0 [pid 572] <... clone3 resumed> => {parent_tid=[585]}, 88) = 585 [pid 585] set_robust_list(0x7fb08390d9a0, 24 [pid 581] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 572] rt_sigprocmask(SIG_SETMASK, [], [pid 583] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 583] munmap(0x7fb07b50e000, 138412032) = 0 [pid 583] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 583] ioctl(4, LOOP_SET_FD, 3 [pid 585] <... set_robust_list resumed>) = 0 [pid 575] <... mount resumed>) = 0 [pid 572] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 585] rt_sigprocmask(SIG_SETMASK, [], [pid 572] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 585] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 572] <... futex resumed>) = 0 [pid 585] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 572] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 585] <... mmap resumed>) = 0x20000000 [ 32.258781][ T577] loop3: detected capacity change from 0 to 2048 [ 32.268630][ T573] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 32.280804][ T581] loop1: detected capacity change from 0 to 2048 [pid 585] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 572] <... futex resumed>) = 0 [pid 572] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... futex resumed>) = 0 [pid 572] <... futex resumed>) = 1 [pid 572] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 585] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 575] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 583] <... ioctl resumed>) = 0 [pid 583] close(3) = 0 [pid 583] close(4 [pid 575] chdir("./file1") = 0 [pid 575] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 575] ioctl(4, LOOP_CLR_FD) = 0 [pid 575] close(4) = 0 [pid 575] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] <... futex resumed>) = 0 [pid 574] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 574] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 575] <... futex resumed>) = 1 [pid 575] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 575] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] <... futex resumed>) = 0 [pid 574] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 574] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 575] <... futex resumed>) = 1 [pid 575] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 575] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] <... futex resumed>) = 0 [pid 574] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 574] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 575] <... futex resumed>) = 1 [pid 575] creat("./bus", 000) = 6 [pid 575] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] <... futex resumed>) = 0 [pid 574] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 574] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 575] <... futex resumed>) = 1 [pid 575] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 575] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] <... futex resumed>) = 0 [pid 574] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 574] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 575] <... futex resumed>) = 1 [pid 575] pwrite64(6, "+", 1, 0) = 1 [pid 575] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] <... futex resumed>) = 0 [pid 574] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 574] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 575] <... futex resumed>) = 1 [pid 575] open("./bus", O_RDONLY) = 7 [pid 575] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] <... futex resumed>) = 0 [pid 574] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 574] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 574] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 574] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 574] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 574] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[587]}, 88) = 587 [pid 574] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 574] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 574] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 575] <... futex resumed>) = 1 [pid 575] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 575] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 575] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 587 attached [pid 587] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 587] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 587] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 574] <... futex resumed>) = 0 [pid 574] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 574] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 575] <... futex resumed>) = 0 [pid 577] <... close resumed>) = 0 [pid 577] mkdir("./file1", 0777) = 0 [pid 577] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 587] <... futex resumed>) = 1 [pid 587] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 574] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 572] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 574] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 587] <... futex resumed>) = 0 [pid 574] <... futex resumed>) = 1 [pid 587] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0) = -1 EBADF (Bad file descriptor) [pid 587] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 587] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 574] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 583] <... close resumed>) = 0 [pid 583] mkdir("./file1", 0777) = 0 [pid 572] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 585] <... futex resumed>) = 0 [pid 572] <... futex resumed>) = 1 [pid 585] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0) = -1 EBADF (Bad file descriptor) [pid 585] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 32.338849][ T575] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 32.347219][ T573] EXT4-fs (loop2): This should not happen!! Data will be lost [ 32.347219][ T573] [ 32.371891][ T575] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 32.384191][ T573] EXT4-fs (loop2): Total free blocks count 0 [ 32.390217][ T573] EXT4-fs (loop2): Free/Dirty block details [ 32.396342][ T573] EXT4-fs (loop2): free_blocks=2415919504 [ 32.402069][ T573] EXT4-fs (loop2): dirty_blocks=32 [pid 585] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 572] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 577] <... mount resumed>) = 0 [pid 577] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 577] chdir("./file1") = 0 [pid 577] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 577] ioctl(4, LOOP_CLR_FD) = 0 [pid 577] close(4) = 0 [pid 577] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] <... futex resumed>) = 1 [pid 577] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 573] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 577] <... open resumed>) = 4 [pid 577] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] <... futex resumed>) = 1 [pid 577] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 577] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] <... futex resumed>) = 1 [pid 577] creat("./bus", 000) = 6 [pid 577] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] <... futex resumed>) = 1 [pid 585] <... futex resumed>) = ? [ 32.403747][ T575] EXT4-fs (loop4): This should not happen!! Data will be lost [ 32.403747][ T575] [ 32.407603][ T573] EXT4-fs (loop2): Block reservation details [ 32.418063][ T577] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 32.422942][ T573] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 32.438672][ T575] EXT4-fs (loop4): Total free blocks count 0 [ 32.444586][ T575] EXT4-fs (loop4): Free/Dirty block details [ 32.450313][ T575] EXT4-fs (loop4): free_blocks=2415919504 [pid 585] +++ killed by SIGBUS +++ [pid 577] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 577] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] <... futex resumed>) = 1 [pid 577] pwrite64(6, "+", 1, 0) = 1 [pid 577] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] <... futex resumed>) = 1 [pid 577] open("./bus", O_RDONLY) = 7 [pid 577] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 576] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 576] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 576] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[592]}, 88) = 592 [pid 576] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 576] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] <... futex resumed>) = 1 [pid 577] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 577] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 577] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 592 attached [pid 592] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 592] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 32.455819][ T575] EXT4-fs (loop4): dirty_blocks=32 [ 32.460263][ T573] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 32.460817][ T575] EXT4-fs (loop4): Block reservation details [ 32.478730][ T575] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 32.484680][ T573] EXT4-fs (loop2): This should not happen!! Data will be lost [ 32.484680][ T573] [ 32.485647][ T581] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 592] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 587] <... futex resumed>) = -1 (errno 18446744073709551414) [pid 587] +++ killed by SIGBUS +++ [pid 576] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=572, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 576] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./10/binderfs") = 0 [pid 300] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 577] <... futex resumed>) = 0 [pid 592] <... futex resumed>) = 0 [pid 583] <... mount resumed>) = 0 [pid 581] <... mount resumed>) = 0 [pid 575] +++ killed by SIGBUS +++ [pid 574] +++ killed by SIGBUS +++ [pid 581] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 581] chdir("./file1") = 0 [pid 581] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 581] ioctl(4, LOOP_CLR_FD) = 0 [pid 581] close(4) = 0 [pid 581] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 580] <... futex resumed>) = 0 [pid 581] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 580] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 581] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 580] <... futex resumed>) = 0 [pid 581] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 580] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 581] <... open resumed>) = 4 [pid 581] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 580] <... futex resumed>) = 0 [pid 581] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 580] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 581] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 580] <... futex resumed>) = 0 [pid 581] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 580] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 592] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 583] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 581] <... open resumed>) = 5 [pid 583] <... openat resumed>) = 3 [pid 581] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] chdir("./file1" [pid 581] <... futex resumed>) = 1 [pid 580] <... futex resumed>) = 0 [pid 583] <... chdir resumed>) = 0 [pid 581] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 580] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 581] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 580] <... futex resumed>) = 0 [pid 583] <... openat resumed>) = 4 [pid 581] creat("./bus", 000 [pid 580] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 583] ioctl(4, LOOP_CLR_FD [pid 581] <... creat resumed>) = 6 [pid 583] <... ioctl resumed>) = 0 [pid 581] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] close(4 [pid 581] <... futex resumed>) = 1 [pid 580] <... futex resumed>) = 0 [pid 583] <... close resumed>) = 0 [pid 581] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 580] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 581] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 580] <... futex resumed>) = 0 [pid 583] <... futex resumed>) = 1 [pid 582] <... futex resumed>) = 0 [pid 581] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 580] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 583] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 582] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 581] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 583] <... open resumed>) = 4 [pid 582] <... futex resumed>) = 0 [pid 581] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 582] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 581] <... futex resumed>) = 1 [pid 580] <... futex resumed>) = 0 [pid 583] <... futex resumed>) = 0 [pid 582] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 581] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 580] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 582] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 581] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 580] <... futex resumed>) = 0 [pid 583] <... open resumed>) = 5 [pid 582] <... futex resumed>) = 0 [pid 581] pwrite64(6, "+", 1, 0 [pid 580] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 583] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 582] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 581] <... pwrite64 resumed>) = 1 [pid 583] <... futex resumed>) = 0 [pid 582] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 581] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] creat("./bus", 000 [pid 582] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 581] <... futex resumed>) = 1 [pid 580] <... futex resumed>) = 0 [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=574, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 583] <... creat resumed>) = 6 [pid 582] <... futex resumed>) = 0 [pid 581] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 580] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 582] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 581] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 580] <... futex resumed>) = 0 [pid 583] <... futex resumed>) = 0 [pid 582] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 581] open("./bus", O_RDONLY [pid 580] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 583] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 582] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 581] <... open resumed>) = 7 [pid 583] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 582] <... futex resumed>) = 0 [pid 581] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 582] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 581] <... futex resumed>) = 1 [pid 580] <... futex resumed>) = 0 [pid 583] <... futex resumed>) = 0 [pid 582] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 581] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 580] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 582] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 581] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 580] <... futex resumed>) = 0 [pid 583] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 582] <... futex resumed>) = 0 [pid 581] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 580] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 583] pwrite64(6, "+", 1, 0 [pid 582] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 581] <... copy_file_range resumed>) = 1 [pid 580] <... futex resumed>) = 0 [pid 583] <... pwrite64 resumed>) = 1 [pid 581] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 580] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 583] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 581] <... futex resumed>) = 0 [pid 580] <... mmap resumed>) = 0x7fb0838ed000 [pid 583] <... futex resumed>) = 1 [pid 582] <... futex resumed>) = 0 [pid 581] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 580] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 302] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 583] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 582] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 580] <... mprotect resumed>) = 0 [pid 583] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 582] <... futex resumed>) = 0 [pid 580] rt_sigprocmask(SIG_BLOCK, ~[], [pid 302] <... openat resumed>) = 3 [pid 583] open("./bus", O_RDONLY [pid 582] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 580] <... rt_sigprocmask resumed>[], 8) = 0 [pid 583] <... open resumed>) = 7 [pid 580] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 302] newfstatat(3, "", [pid 583] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 582] <... futex resumed>) = 0 [pid 580] <... clone3 resumed> => {parent_tid=[595]}, 88) = 595 [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 583] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 582] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 580] rt_sigprocmask(SIG_SETMASK, [], [pid 583] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 582] <... futex resumed>) = 0 [pid 580] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 302] getdents64(3, [pid 583] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 582] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 580] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] <... copy_file_range resumed>) = 1 [pid 582] <... futex resumed>) = 0 [pid 580] <... futex resumed>) = 0 [pid 302] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 583] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 582] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 580] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 583] <... futex resumed>) = 0 [pid 582] <... mmap resumed>) = 0x7fb0838ed000 [pid 302] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 583] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 582] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 582] rt_sigprocmask(SIG_BLOCK, ~[], [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 582] <... rt_sigprocmask resumed>[], 8) = 0 [pid 582] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 302] newfstatat(AT_FDCWD, "./10/binderfs", [pid 582] <... clone3 resumed> => {parent_tid=[596]}, 88) = 596 [pid 582] rt_sigprocmask(SIG_SETMASK, [], [pid 302] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 582] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 302] unlink("./10/binderfs" [pid 582] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 582] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... unlink resumed>) = 0 [ 32.507508][ T583] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 32.507733][ T575] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 32.530325][ T575] EXT4-fs (loop4): This should not happen!! Data will be lost [ 32.530325][ T575] [ 32.537453][ T577] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 302] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 596 attached ./strace-static-x86_64: Process 595 attached [pid 596] set_robust_list(0x7fb08390d9a0, 24 [pid 595] set_robust_list(0x7fb08390d9a0, 24 [pid 596] <... set_robust_list resumed>) = 0 [pid 595] <... set_robust_list resumed>) = 0 [pid 596] rt_sigprocmask(SIG_SETMASK, [], [pid 595] rt_sigprocmask(SIG_SETMASK, [], [pid 576] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 300] <... umount2 resumed>) = 0 [pid 596] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 595] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 576] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 596] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 595] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 592] <... futex resumed>) = 0 [pid 576] <... futex resumed>) = 1 [pid 596] <... mmap resumed>) = 0x20000000 [pid 595] <... mmap resumed>) = 0x20000000 [pid 592] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 576] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 592] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 592] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] <... futex resumed>) = 0 [pid 596] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 596] <... futex resumed>) = 1 [pid 595] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 582] <... futex resumed>) = 0 [pid 596] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 595] <... futex resumed>) = 1 [pid 582] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 580] <... futex resumed>) = 0 [pid 595] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 583] <... futex resumed>) = 0 [pid 582] <... futex resumed>) = 1 [pid 580] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 582] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 580] <... futex resumed>) = 1 [ 32.565539][ T577] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 32.582746][ T577] EXT4-fs (loop3): This should not happen!! Data will be lost [ 32.582746][ T577] [ 32.592545][ T577] EXT4-fs (loop3): Total free blocks count 0 [ 32.598206][ T583] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 581] <... futex resumed>) = 0 [pid 580] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... umount2 resumed>) = 0 [pid 302] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./10/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 302] newfstatat(4, "", [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] newfstatat(AT_FDCWD, "./10/file1", [pid 302] getdents64(4, [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 300] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 302] getdents64(4, [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 300] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 302] close(4 [pid 300] <... openat resumed>) = 4 [pid 302] <... close resumed>) = 0 [pid 300] newfstatat(4, "", [pid 302] rmdir("./10/file1" [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] <... rmdir resumed>) = 0 [pid 300] getdents64(4, [pid 302] getdents64(3, [pid 300] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 302] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 300] getdents64(4, [pid 302] close(3 [pid 300] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 302] <... close resumed>) = 0 [pid 300] close(4 [pid 302] rmdir("./10" [pid 300] <... close resumed>) = 0 [pid 302] <... rmdir resumed>) = 0 [pid 300] rmdir("./10/file1" [pid 302] mkdir("./11", 0777 [pid 300] <... rmdir resumed>) = 0 [pid 302] <... mkdir resumed>) = 0 [pid 300] getdents64(3, [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 300] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 302] <... openat resumed>) = 3 [pid 300] close(3 [pid 302] ioctl(3, LOOP_CLR_FD [pid 300] <... close resumed>) = 0 [pid 302] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 300] rmdir("./10" [pid 302] close(3 [pid 300] <... rmdir resumed>) = 0 [pid 577] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 302] <... close resumed>) = 0 [pid 300] mkdir("./11", 0777 [pid 592] <... futex resumed>) = ? [pid 592] +++ killed by SIGBUS +++ [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 300] <... mkdir resumed>) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 302] <... clone resumed>, child_tidptr=0x5555610ee690) = 597 [pid 300] <... openat resumed>) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3 [pid 582] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 300] <... close resumed>) = 0 [pid 582] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 596] <... futex resumed>) = 0 [pid 582] <... futex resumed>) = 1 [pid 596] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 582] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 596] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 596] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 582] <... futex resumed>) = 0 [pid 596] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] <... clone resumed>, child_tidptr=0x5555610ee690) = 598 ./strace-static-x86_64: Process 597 attached [pid 597] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 597] chdir("./11"./strace-static-x86_64: Process 598 attached [pid 598] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 597] <... chdir resumed>) = 0 [pid 598] chdir("./11" [pid 597] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 597] setpgid(0, 0) = 0 [pid 598] <... chdir resumed>) = 0 [pid 598] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 32.600945][ T577] EXT4-fs (loop3): Free/Dirty block details [ 32.617445][ T581] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 32.618793][ T577] EXT4-fs (loop3): free_blocks=2415919504 [ 32.639129][ T577] EXT4-fs (loop3): dirty_blocks=32 [ 32.644078][ T577] EXT4-fs (loop3): Block reservation details [ 32.649959][ T577] EXT4-fs (loop3): i_reserved_data_blocks=2 [pid 598] setpgid(0, 0) = 0 [pid 598] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 597] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 598] <... openat resumed>) = 3 [pid 597] write(3, "1000", 4 [pid 598] write(3, "1000", 4) = 4 [pid 597] <... write resumed>) = 4 [pid 598] close(3 [pid 597] close(3 [pid 598] <... close resumed>) = 0 [pid 597] <... close resumed>) = 0 [pid 598] symlink("/dev/binderfs", "./binderfs" [pid 597] symlink("/dev/binderfs", "./binderfs"executing program executing program [pid 598] <... symlink resumed>) = 0 [pid 597] <... symlink resumed>) = 0 [pid 598] write(1, "executing program\n", 18 [pid 597] write(1, "executing program\n", 18 [pid 598] <... write resumed>) = 18 [pid 597] <... write resumed>) = 18 [pid 598] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 597] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] <... futex resumed>) = 0 [pid 597] <... futex resumed>) = 0 [pid 598] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 597] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, [pid 598] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 597] <... rt_sigaction resumed>NULL, 8) = 0 [pid 598] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 597] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 598] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 597] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 580] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 598] <... mmap resumed>) = 0x7fb08390e000 [pid 597] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 580] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE [pid 597] <... mmap resumed>) = 0x7fb08390e000 [pid 595] <... futex resumed>) = 0 [pid 580] <... futex resumed>) = 1 [pid 598] <... mprotect resumed>) = 0 [pid 597] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE [pid 595] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 580] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 598] rt_sigprocmask(SIG_BLOCK, ~[], [pid 597] <... mprotect resumed>) = 0 [pid 595] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 598] <... rt_sigprocmask resumed>[], 8) = 0 [pid 597] rt_sigprocmask(SIG_BLOCK, ~[], [pid 595] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} [pid 597] <... rt_sigprocmask resumed>[], 8) = 0 [pid 595] <... futex resumed>) = 1 [pid 580] <... futex resumed>) = 0 [pid 597] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} [pid 595] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 598] <... clone3 resumed> => {parent_tid=[599]}, 88) = 599 [pid 598] rt_sigprocmask(SIG_SETMASK, [], [pid 597] <... clone3 resumed> => {parent_tid=[600]}, 88) = 600 [pid 598] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 597] rt_sigprocmask(SIG_SETMASK, [], [pid 598] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 597] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 598] <... futex resumed>) = 0 [pid 597] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 597] <... futex resumed>) = 0 [pid 597] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 600 attached [pid 600] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 600] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 600] memfd_create("syzkaller", 0) = 3 [pid 600] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 ./strace-static-x86_64: Process 599 attached [pid 600] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 577] +++ killed by SIGBUS +++ [pid 576] +++ killed by SIGBUS +++ [pid 599] set_robust_list(0x7fb08392e9a0, 24 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=576, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 599] <... set_robust_list resumed>) = 0 [pid 599] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 301] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 599] memfd_create("syzkaller", 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 599] <... memfd_create resumed>) = 3 [pid 301] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 599] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 301] <... openat resumed>) = 3 [pid 599] <... mmap resumed>) = 0x7fb07b50e000 [pid 301] newfstatat(3, "", [pid 599] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./10/binderfs") = 0 [ 32.658709][ T583] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 32.672145][ T577] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 32.684967][ T577] EXT4-fs (loop3): This should not happen!! Data will be lost [ 32.684967][ T577] [ 32.697063][ T583] EXT4-fs (loop0): This should not happen!! Data will be lost [ 32.697063][ T583] [pid 301] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 599] <... write resumed>) = 1048576 [pid 599] munmap(0x7fb07b50e000, 138412032) = 0 [pid 599] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 599] ioctl(4, LOOP_SET_FD, 3 [pid 600] <... write resumed>) = 1048576 [pid 600] munmap(0x7fb07b50e000, 138412032) = 0 [pid 600] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 600] ioctl(4, LOOP_SET_FD, 3 [pid 599] <... ioctl resumed>) = 0 [pid 600] <... ioctl resumed>) = 0 [pid 600] close(3) = 0 [pid 600] close(4) = 0 [pid 600] mkdir("./file1", 0777 [pid 599] close(3 [pid 600] <... mkdir resumed>) = 0 [pid 599] <... close resumed>) = 0 [ 32.697263][ T581] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 32.721033][ T583] EXT4-fs (loop0): Total free blocks count 0 [ 32.725862][ T599] loop2: detected capacity change from 0 to 2048 [ 32.727627][ T583] EXT4-fs (loop0): Free/Dirty block details [ 32.736111][ T600] loop4: detected capacity change from 0 to 2048 [ 32.739458][ T583] EXT4-fs (loop0): free_blocks=2415919504 [ 32.751320][ T581] EXT4-fs (loop1): This should not happen!! Data will be lost [ 32.751320][ T581] [ 32.752889][ T583] EXT4-fs (loop0): dirty_blocks=32 [pid 600] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 599] close(4 [pid 301] <... umount2 resumed>) = 0 [pid 301] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 583] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./10/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./10/file1") = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./10") = 0 [pid 301] mkdir("./11", 0777) = 0 executing program [pid 596] <... futex resumed>) = ? [pid 596] +++ killed by SIGBUS +++ [pid 583] +++ killed by SIGBUS +++ [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 603 ./strace-static-x86_64: Process 603 attached [pid 603] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 603] chdir("./11") = 0 [pid 603] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 603] setpgid(0, 0) = 0 [pid 603] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 603] write(3, "1000", 4) = 4 [pid 603] close(3) = 0 [pid 603] symlink("/dev/binderfs", "./binderfs") = 0 [pid 603] write(1, "executing program\n", 18) = 18 [pid 603] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 603] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 603] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 603] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 603] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 603] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 603] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[604]}, 88) = 604 [pid 603] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 603] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 603] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 604 attached [pid 604] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 604] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 604] memfd_create("syzkaller", 0) = 3 [pid 604] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 604] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 604] munmap(0x7fb07b50e000, 138412032) = 0 [pid 604] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 32.761482][ T581] EXT4-fs (loop1): Total free blocks count 0 [ 32.766675][ T583] EXT4-fs (loop0): Block reservation details [ 32.779801][ T581] EXT4-fs (loop1): Free/Dirty block details [ 32.784634][ T583] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 32.786014][ T581] EXT4-fs (loop1): free_blocks=2415919504 [ 32.797078][ T581] EXT4-fs (loop1): dirty_blocks=32 [ 32.804164][ T582] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 604] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 604] close(3) = 0 [pid 604] close(4 [pid 599] <... close resumed>) = 0 [pid 599] mkdir("./file1", 0777) = 0 [pid 599] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 582] +++ killed by SIGBUS +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=582, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./11/binderfs") = 0 [pid 298] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 581] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 595] <... futex resumed>) = ? [pid 600] <... mount resumed>) = 0 [pid 600] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 600] chdir("./file1") = 0 [pid 600] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 600] ioctl(4, LOOP_CLR_FD) = 0 [pid 600] close(4) = 0 [pid 600] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 597] <... futex resumed>) = 0 [pid 597] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 600] <... futex resumed>) = 1 [pid 600] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 595] +++ killed by SIGBUS +++ [pid 600] <... open resumed>) = 4 [pid 600] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 600] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 597] <... futex resumed>) = 0 [pid 597] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 597] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 600] <... futex resumed>) = 0 [pid 600] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [ 32.811801][ T604] loop3: detected capacity change from 0 to 2048 [ 32.816918][ T581] EXT4-fs (loop1): Block reservation details [ 32.823574][ T582] EXT4-fs (loop0): This should not happen!! Data will be lost [ 32.823574][ T582] [ 32.829932][ T600] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 32.840304][ T581] EXT4-fs (loop1): i_reserved_data_blocks=2 [pid 600] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 597] <... futex resumed>) = 0 [pid 597] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 600] <... futex resumed>) = 1 [pid 600] creat("./bus", 000) = 6 [pid 600] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 597] <... futex resumed>) = 0 [pid 597] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 600] <... futex resumed>) = 1 [pid 600] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 600] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 597] <... futex resumed>) = 0 [pid 597] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 600] <... futex resumed>) = 1 [pid 600] pwrite64(6, "+", 1, 0) = 1 [pid 600] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 597] <... futex resumed>) = 0 [pid 597] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 600] <... futex resumed>) = 1 [pid 600] open("./bus", O_RDONLY) = 7 [pid 600] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 597] <... futex resumed>) = 0 [pid 597] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 597] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 597] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 597] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[606]}, 88) = 606 [pid 597] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 597] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 600] <... futex resumed>) = 1 [pid 600] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 600] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 600] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 606 attached [pid 606] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 606] rt_sigprocmask(SIG_SETMASK, [], [pid 604] <... close resumed>) = 0 [pid 581] +++ killed by SIGBUS +++ [pid 580] +++ killed by SIGBUS +++ [pid 604] mkdir("./file1", 0777) = 0 [pid 604] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=580, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 299] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./10/binderfs") = 0 [pid 299] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 606] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 606] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 597] <... futex resumed>) = 0 [pid 597] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 600] <... futex resumed>) = 0 [pid 597] <... futex resumed>) = 1 [pid 597] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 599] <... mount resumed>) = 0 [pid 599] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 599] chdir("./file1") = 0 [pid 599] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 599] ioctl(4, LOOP_CLR_FD) = 0 [pid 599] close(4) = 0 [pid 599] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] <... futex resumed>) = 0 [pid 598] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 598] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 599] <... futex resumed>) = 1 [ 32.861075][ T581] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 32.873506][ T581] EXT4-fs (loop1): This should not happen!! Data will be lost [ 32.873506][ T581] [ 32.896554][ T599] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 599] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 599] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] <... futex resumed>) = 0 [pid 598] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 598] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 599] <... futex resumed>) = 1 [pid 599] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 599] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] <... futex resumed>) = 0 [pid 598] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 598] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 599] <... futex resumed>) = 1 [pid 599] creat("./bus", 000) = 6 [pid 599] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] <... futex resumed>) = 0 [pid 598] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 598] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 599] <... futex resumed>) = 1 [pid 599] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 599] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] <... futex resumed>) = 0 [pid 598] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 598] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 599] <... futex resumed>) = 1 [pid 599] pwrite64(6, "+", 1, 0) = 1 [pid 599] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] <... futex resumed>) = 0 [pid 598] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 598] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 599] <... futex resumed>) = 1 [pid 599] open("./bus", O_RDONLY) = 7 [pid 599] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] <... futex resumed>) = 0 [pid 598] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 598] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 598] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 598] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 598] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 598] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[611]}, 88) = 611 [pid 598] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 598] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 598] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 599] <... futex resumed>) = 1 [pid 599] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 599] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 599] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 611 attached [pid 600] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 597] <... futex resumed>) = -1 (errno 18446744073709551414) [pid 298] <... umount2 resumed>) = 0 [pid 606] <... futex resumed>) = ? [pid 606] +++ killed by SIGBUS +++ [ 32.905415][ T600] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 32.922514][ T600] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 32.934698][ T600] EXT4-fs (loop4): This should not happen!! Data will be lost [ 32.934698][ T600] [ 32.944658][ T600] EXT4-fs (loop4): Total free blocks count 0 [ 32.944861][ T604] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 32.950485][ T600] EXT4-fs (loop4): Free/Dirty block details [pid 611] set_robust_list(0x7fb08390d9a0, 24 [pid 604] <... mount resumed>) = 0 [pid 298] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 604] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 611] <... set_robust_list resumed>) = 0 [pid 604] <... openat resumed>) = 3 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 611] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 298] newfstatat(AT_FDCWD, "./11/file1", [pid 299] <... umount2 resumed>) = 0 [pid 598] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 299] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 598] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 598] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] <... futex resumed>) = 0 [pid 598] <... futex resumed>) = 1 [pid 599] write(-1, "\x30\x78\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65983 [pid 598] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 599] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 599] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 598] <... futex resumed>) = 0 [pid 599] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 598] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 598] <... futex resumed>) = 0 [pid 599] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 598] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 599] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 599] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 598] <... futex resumed>) = 0 [pid 599] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] newfstatat(AT_FDCWD, "./10/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./10/file1") = 0 [pid 299] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./10") = 0 [pid 299] mkdir("./11", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 611] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 604] chdir("./file1" [pid 299] <... openat resumed>) = 3 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 611] <... mmap resumed>) = 0x20000000 [pid 604] <... chdir resumed>) = 0 [pid 604] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 299] ioctl(3, LOOP_CLR_FD [pid 298] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 604] <... openat resumed>) = 4 [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 604] ioctl(4, LOOP_CLR_FD [pid 299] close(3 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 604] <... ioctl resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 611] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] close(4 [pid 600] +++ killed by SIGBUS +++ [pid 597] +++ killed by SIGBUS +++ [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 611] <... futex resumed>) = 0 [pid 604] <... close resumed>) = 0 [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=597, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 611] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 302] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 612 attached [pid 604] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] exit_group(0 [pid 298] <... openat resumed>) = 4 [pid 612] set_robust_list(0x5555610ee6a0, 24 [pid 611] <... futex resumed>) = ? [pid 604] <... futex resumed>) = 1 [pid 603] <... futex resumed>) = 0 [pid 599] <... futex resumed>) = ? [pid 598] <... exit_group resumed>) = ? [pid 299] <... clone resumed>, child_tidptr=0x5555610ee690) = 612 [pid 298] newfstatat(4, "", [pid 612] <... set_robust_list resumed>) = 0 [pid 611] +++ exited with 0 +++ [pid 604] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 603] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] +++ exited with 0 +++ [pid 302] <... restart_syscall resumed>) = 0 [pid 302] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 302] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./11/binderfs") = 0 [pid 302] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./11/file1") = 0 [pid 298] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [ 32.950498][ T600] EXT4-fs (loop4): free_blocks=2415919504 [ 32.950511][ T600] EXT4-fs (loop4): dirty_blocks=32 [ 32.950522][ T600] EXT4-fs (loop4): Block reservation details [ 32.950531][ T600] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 32.971703][ T600] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 33.001538][ T600] EXT4-fs (loop4): This should not happen!! Data will be lost [ 33.001538][ T600] [pid 298] rmdir("./11") = 0 [pid 298] mkdir("./12", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3 [pid 612] chdir("./11" [pid 604] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 603] <... futex resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 613 [pid 612] <... chdir resumed>) = 0 [pid 612] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 604] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 603] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 612] <... prctl resumed>) = 0 [pid 612] setpgid(0, 0 [pid 604] <... open resumed>) = 4 ./strace-static-x86_64: Process 613 attached [pid 612] <... setpgid resumed>) = 0 [pid 612] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 612] write(3, "1000", 4) = 4 [pid 612] close(3) = 0 [pid 612] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 612] write(1, "executing program\n", 18) = 18 [pid 612] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 612] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 612] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 612] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 612] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[614]}, 88) = 614 [pid 612] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 612] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 604] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] set_robust_list(0x5555610ee6a0, 24./strace-static-x86_64: Process 614 attached [pid 604] <... futex resumed>) = 1 [pid 613] <... set_robust_list resumed>) = 0 [pid 603] <... futex resumed>) = 0 [pid 604] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 614] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 614] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 614] memfd_create("syzkaller", 0) = 3 [pid 614] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 613] chdir("./12" [pid 604] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 603] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 614] munmap(0x7fb07b50e000, 138412032 [pid 604] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 603] <... futex resumed>) = 0 [pid 604] <... open resumed>) = 5 [pid 603] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] <... chdir resumed>) = 0 [pid 604] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... munmap resumed>) = 0 [pid 614] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 33.016403][ T598] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 33.031611][ T598] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 33.045060][ T598] EXT4-fs (loop2): This should not happen!! Data will be lost [ 33.045060][ T598] [ 33.054970][ T598] EXT4-fs (loop2): Total free blocks count 0 [ 33.060968][ T598] EXT4-fs (loop2): Free/Dirty block details [pid 614] ioctl(4, LOOP_SET_FD, 3 [pid 613] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 604] <... futex resumed>) = 0 [pid 603] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 614] <... ioctl resumed>) = 0 [pid 614] close(3) = 0 [pid 614] close(4 [pid 613] <... prctl resumed>) = 0 [pid 604] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 603] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... close resumed>) = 0 [pid 614] mkdir("./file1", 0777) = 0 [pid 614] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 613] setpgid(0, 0 [pid 604] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 603] <... futex resumed>) = 0 [pid 613] <... setpgid resumed>) = 0 [pid 613] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 613] write(3, "1000", 4) = 4 [pid 613] close(3) = 0 [pid 613] symlink("/dev/binderfs", "./binderfs") = 0 [pid 604] creat("./bus", 000 [pid 603] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 598] +++ exited with 0 +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=598, si_uid=0, si_status=0, si_utime=0, si_stime=8} --- [pid 613] write(1, "executing program\n", 18 executing program [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 613] <... write resumed>) = 18 [pid 613] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 613] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 613] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 613] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 604] <... creat resumed>) = 6 [pid 613] <... mmap resumed>) = 0x7fb08390e000 [pid 613] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 604] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] rt_sigprocmask(SIG_BLOCK, ~[], [pid 603] <... futex resumed>) = 0 [pid 604] <... futex resumed>) = 1 [pid 613] <... rt_sigprocmask resumed>[], 8) = 0 [pid 603] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 603] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 604] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 604] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 603] <... futex resumed>) = 0 [pid 604] pwrite64(6, "+", 1, 0 [pid 603] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] <... pwrite64 resumed>) = 1 [pid 603] <... futex resumed>) = 0 [pid 604] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 603] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 604] <... futex resumed>) = 0 [pid 603] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 604] open("./bus", O_RDONLY [pid 603] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] <... open resumed>) = 7 [pid 603] <... futex resumed>) = 0 [pid 604] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 603] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 604] <... futex resumed>) = 0 [pid 603] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 604] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 603] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] <... copy_file_range resumed>) = 1 [pid 603] <... futex resumed>) = 0 [pid 604] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 603] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] <... futex resumed>) = 0 [pid 603] <... futex resumed>) = 0 [pid 604] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 603] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 603] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 603] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 302] <... umount2 resumed>) = 0 [pid 613] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} [pid 603] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 300] <... restart_syscall resumed>) = 0 [pid 603] <... clone3 resumed> => {parent_tid=[615]}, 88) = 615 [pid 613] <... clone3 resumed> => {parent_tid=[616]}, 88) = 616 [pid 603] rt_sigprocmask(SIG_SETMASK, [], [pid 613] rt_sigprocmask(SIG_SETMASK, [], [pid 603] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 302] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 613] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 603] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 603] <... futex resumed>) = 0 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW [pid 603] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 613] <... futex resumed>) = 0 [pid 302] newfstatat(AT_FDCWD, "./11/file1", [pid 300] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 613] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] <... openat resumed>) = 3 [pid 302] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] newfstatat(3, "", [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, [pid 302] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 300] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 302] <... openat resumed>) = 4 [pid 300] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 302] newfstatat(4, "", [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] newfstatat(AT_FDCWD, "./11/binderfs", [pid 302] getdents64(4, [pid 300] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 300] unlink("./11/binderfs" [pid 302] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 300] <... unlink resumed>) = 0 [pid 302] close(4 [pid 300] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 302] <... close resumed>) = 0 [pid 302] rmdir("./11/file1"./strace-static-x86_64: Process 616 attached ./strace-static-x86_64: Process 615 attached [ 33.067132][ T598] EXT4-fs (loop2): free_blocks=2415919504 [ 33.068515][ T614] loop1: detected capacity change from 0 to 2048 [ 33.072744][ T598] EXT4-fs (loop2): dirty_blocks=32 [ 33.084007][ T598] EXT4-fs (loop2): Block reservation details [ 33.090031][ T598] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 33.105476][ T10] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 616] set_robust_list(0x7fb08392e9a0, 24 [pid 615] set_robust_list(0x7fb08390d9a0, 24 [pid 302] <... rmdir resumed>) = 0 [pid 302] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./11") = 0 [pid 302] mkdir("./12", 0777) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] close(3) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 619 ./strace-static-x86_64: Process 619 attached [pid 619] set_robust_list(0x5555610ee6a0, 24 [pid 616] <... set_robust_list resumed>) = 0 [pid 615] <... set_robust_list resumed>) = 0 [pid 619] <... set_robust_list resumed>) = 0 executing program [pid 619] chdir("./12" [pid 616] rt_sigprocmask(SIG_SETMASK, [], [pid 615] rt_sigprocmask(SIG_SETMASK, [], [pid 619] <... chdir resumed>) = 0 [pid 619] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 619] setpgid(0, 0) = 0 [pid 619] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 619] write(3, "1000", 4) = 4 [pid 619] close(3) = 0 [pid 619] symlink("/dev/binderfs", "./binderfs") = 0 [pid 619] write(1, "executing program\n", 18) = 18 [pid 619] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 619] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 619] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 619] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 619] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 619] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 619] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[620]}, 88) = 620 [pid 619] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 619] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 619] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 616] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 616] memfd_create("syzkaller", 0) = 3 [pid 616] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 616] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 615] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 615] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 603] <... futex resumed>) = 0 [pid 603] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] <... futex resumed>) = 0 [pid 603] <... futex resumed>) = 1 [pid 615] <... futex resumed>) = 1 [pid 615] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 620 attached [pid 620] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 620] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 620] memfd_create("syzkaller", 0) = 3 [pid 620] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 620] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 603] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 616] <... write resumed>) = 1048576 [pid 614] <... mount resumed>) = 0 [pid 614] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 614] chdir("./file1") = 0 [pid 614] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 614] ioctl(4, LOOP_CLR_FD) = 0 [ 33.117834][ T10] EXT4-fs (loop2): This should not happen!! Data will be lost [ 33.117834][ T10] [ 33.129740][ T614] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 33.138692][ T604] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 33.154681][ T604] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 614] close(4) = 0 [pid 614] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] <... futex resumed>) = 0 [pid 612] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 614] <... futex resumed>) = 1 [pid 614] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 614] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] <... futex resumed>) = 0 [pid 612] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 614] <... futex resumed>) = 1 [pid 614] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 614] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] <... futex resumed>) = 0 [pid 612] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 614] <... futex resumed>) = 1 [pid 614] creat("./bus", 000) = 6 [pid 614] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] <... futex resumed>) = 0 [pid 612] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 614] <... futex resumed>) = 1 [pid 614] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 614] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] <... futex resumed>) = 0 [pid 612] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 614] <... futex resumed>) = 1 [pid 614] pwrite64(6, "+", 1, 0) = 1 [pid 614] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] <... futex resumed>) = 0 [pid 612] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 614] <... futex resumed>) = 1 [pid 614] open("./bus", O_RDONLY) = 7 [pid 614] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] <... futex resumed>) = 0 [pid 612] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 612] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 612] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 612] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[621]}, 88) = 621 [pid 612] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 612] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 614] <... futex resumed>) = 1 [pid 614] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 616] munmap(0x7fb07b50e000, 138412032) = 0 [pid 614] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 616] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 616] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 621 attached [pid 621] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 621] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 621] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 1048576 [pid 621] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] <... futex resumed>) = 0 [pid 612] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 612] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 614] <... futex resumed>) = 0 [pid 604] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 620] munmap(0x7fb07b50e000, 138412032 [pid 616] <... ioctl resumed>) = 0 [pid 621] <... futex resumed>) = 1 [pid 615] <... futex resumed>) = ? [pid 603] <... futex resumed>) = ? [ 33.166765][ T604] EXT4-fs (loop3): This should not happen!! Data will be lost [ 33.166765][ T604] [ 33.176421][ T604] EXT4-fs (loop3): Total free blocks count 0 [ 33.182149][ T604] EXT4-fs (loop3): Free/Dirty block details [ 33.187935][ T604] EXT4-fs (loop3): free_blocks=2415919504 [ 33.193440][ T604] EXT4-fs (loop3): dirty_blocks=32 [ 33.198446][ T604] EXT4-fs (loop3): Block reservation details [ 33.203343][ T616] loop0: detected capacity change from 0 to 2048 [ 33.204192][ T604] EXT4-fs (loop3): i_reserved_data_blocks=2 [pid 616] close(3 [pid 615] +++ killed by SIGBUS +++ [pid 620] <... munmap resumed>) = 0 [pid 616] <... close resumed>) = 0 [pid 621] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 620] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 616] close(4 [pid 604] +++ killed by SIGBUS +++ [pid 603] +++ killed by SIGBUS +++ [pid 620] <... openat resumed>) = 4 [ 33.216968][ T614] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 33.218283][ T604] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 33.232844][ T614] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 33.243569][ T604] EXT4-fs (loop3): This should not happen!! Data will be lost [ 33.243569][ T604] [pid 620] ioctl(4, LOOP_SET_FD, 3 [pid 612] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 620] <... ioctl resumed>) = 0 [pid 620] close(3) = 0 [pid 620] close(4 [pid 612] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 612] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=603, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=17} --- [pid 301] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./11/binderfs") = 0 [pid 301] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 621] <... futex resumed>) = 0 [pid 621] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0) = -1 EBADF (Bad file descriptor) [pid 621] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 612] <... futex resumed>) = 0 [pid 621] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] <... umount2 resumed>) = 0 [pid 300] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./11/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./11/file1") = 0 [pid 300] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./11") = 0 [pid 300] mkdir("./12", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 622 ./strace-static-x86_64: Process 622 attached [pid 622] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 622] chdir("./12") = 0 [pid 622] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 622] setpgid(0, 0) = 0 [pid 622] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 622] write(3, "1000", 4) = 4 [pid 622] close(3) = 0 [pid 622] symlink("/dev/binderfs", "./binderfs") = 0 [pid 622] write(1, "executing program\n", 18executing program ) = 18 [pid 622] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 622] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 620] <... close resumed>) = 0 [pid 616] <... close resumed>) = 0 [pid 620] mkdir("./file1", 0777 [pid 616] mkdir("./file1", 0777 [pid 622] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 620] <... mkdir resumed>) = 0 [pid 616] <... mkdir resumed>) = 0 [pid 614] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 620] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 616] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 622] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 621] <... futex resumed>) = ? [pid 622] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 622] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 622] rt_sigprocmask(SIG_BLOCK, ~[], [pid 621] +++ killed by SIGBUS +++ [pid 622] <... rt_sigprocmask resumed>[], 8) = 0 [pid 622] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[623]}, 88) = 623 [pid 622] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 622] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 622] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 623 attached [pid 623] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 623] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 623] memfd_create("syzkaller", 0) = 3 [pid 623] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [ 33.256959][ T614] EXT4-fs (loop1): This should not happen!! Data will be lost [ 33.256959][ T614] [ 33.266082][ T620] loop4: detected capacity change from 0 to 2048 [ 33.275517][ T614] EXT4-fs (loop1): Total free blocks count 0 [ 33.286584][ T614] EXT4-fs (loop1): Free/Dirty block details [ 33.292388][ T614] EXT4-fs (loop1): free_blocks=2415919504 [ 33.297982][ T614] EXT4-fs (loop1): dirty_blocks=32 [ 33.303140][ T614] EXT4-fs (loop1): Block reservation details [ 33.309366][ T614] EXT4-fs (loop1): i_reserved_data_blocks=2 [pid 623] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 623] munmap(0x7fb07b50e000, 138412032) = 0 [pid 623] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 623] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 623] close(3) = 0 [pid 623] close(4executing program [pid 614] +++ killed by SIGBUS +++ [pid 612] +++ killed by SIGBUS +++ [pid 301] <... umount2 resumed>) = 0 [pid 301] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./11/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./11/file1") = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./11") = 0 [pid 301] mkdir("./12", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 626 ./strace-static-x86_64: Process 626 attached [pid 626] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 626] chdir("./12") = 0 [pid 626] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 626] setpgid(0, 0) = 0 [pid 626] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 626] write(3, "1000", 4) = 4 [pid 626] close(3) = 0 [pid 626] symlink("/dev/binderfs", "./binderfs") = 0 [pid 626] write(1, "executing program\n", 18) = 18 [pid 626] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 626] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 626] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 626] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 626] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 626] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 626] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[627]}, 88) = 627 [pid 626] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 626] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 626] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 627 attached [pid 627] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 627] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 627] memfd_create("syzkaller", 0) = 3 [pid 627] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=612, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 299] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 620] <... mount resumed>) = 0 [pid 299] <... openat resumed>) = 3 [pid 620] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 620] <... openat resumed>) = 3 [pid 299] getdents64(3, [pid 620] chdir("./file1" [pid 299] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 620] <... chdir resumed>) = 0 [pid 299] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 620] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./11/binderfs", [pid 620] <... openat resumed>) = 4 [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 620] ioctl(4, LOOP_CLR_FD [pid 299] unlink("./11/binderfs" [pid 620] <... ioctl resumed>) = 0 [pid 299] <... unlink resumed>) = 0 [pid 620] close(4 [pid 299] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 620] <... close resumed>) = 0 [pid 627] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 620] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 619] <... futex resumed>) = 0 [pid 619] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 620] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 619] <... futex resumed>) = 0 [pid 619] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 620] <... open resumed>) = 4 [pid 620] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 619] <... futex resumed>) = 0 [pid 619] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 619] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 620] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 620] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] <... futex resumed>) = 0 [pid 620] <... futex resumed>) = 1 [pid 619] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 619] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 620] creat("./bus", 000) = 6 [pid 620] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 619] <... futex resumed>) = 0 [pid 619] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 619] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 620] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 620] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 619] <... futex resumed>) = 0 [pid 619] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 619] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 620] pwrite64(6, "+", 1, 0) = 1 [pid 620] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] <... futex resumed>) = 0 [pid 620] <... futex resumed>) = 1 [pid 619] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 619] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 620] open("./bus", O_RDONLY) = 7 [pid 620] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 619] <... futex resumed>) = 0 [pid 619] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 619] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] <... close resumed>) = 0 [pid 619] <... futex resumed>) = 0 [pid 623] mkdir("./file1", 0777 [pid 619] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 620] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 623] <... mkdir resumed>) = 0 [pid 619] <... mmap resumed>) = 0x7fb0838ed000 [pid 619] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 620] <... copy_file_range resumed>) = 1 [pid 620] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 620] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 619] <... mprotect resumed>) = 0 [pid 623] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 619] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 619] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[630]}, 88) = 630 [pid 619] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 619] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 619] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 627] <... write resumed>) = 1048576 [pid 627] munmap(0x7fb07b50e000, 138412032) = 0 [pid 627] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 627] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 627] close(3) = 0 [pid 627] close(4./strace-static-x86_64: Process 630 attached [pid 630] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 630] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 33.319381][ T614] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 33.331183][ T623] loop2: detected capacity change from 0 to 2048 [ 33.332334][ T614] EXT4-fs (loop1): This should not happen!! Data will be lost [ 33.332334][ T614] [ 33.340740][ T620] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 630] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 627] <... close resumed>) = 0 [pid 627] mkdir("./file1", 0777) = 0 [pid 627] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 619] <... futex resumed>) = 0 [pid 619] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 620] <... futex resumed>) = 0 [pid 619] <... futex resumed>) = 1 [pid 299] <... umount2 resumed>) = 0 [pid 619] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 616] <... mount resumed>) = 0 [ 33.381231][ T627] loop3: detected capacity change from 0 to 2048 [ 33.388621][ T616] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 33.405527][ T620] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 299] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 616] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 616] <... openat resumed>) = 3 [pid 299] newfstatat(AT_FDCWD, "./11/file1", [pid 619] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 619] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 619] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 630] <... futex resumed>) = 0 [pid 619] <... futex resumed>) = 1 [pid 630] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 619] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 630] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 630] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 619] <... futex resumed>) = 0 [pid 630] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 616] chdir("./file1" [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 616] <... chdir resumed>) = 0 [pid 299] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 616] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 616] <... openat resumed>) = 4 [pid 299] newfstatat(4, "", [pid 616] ioctl(4, LOOP_CLR_FD [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 627] <... mount resumed>) = 0 [pid 627] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 627] chdir("./file1") = 0 [pid 627] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 627] ioctl(4, LOOP_CLR_FD) = 0 [pid 627] close(4) = 0 [pid 616] <... ioctl resumed>) = 0 [pid 299] getdents64(4, [pid 627] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 626] <... futex resumed>) = 0 [pid 627] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 626] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 627] <... open resumed>) = 4 [pid 626] <... futex resumed>) = 0 [pid 627] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 626] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 627] <... futex resumed>) = 0 [pid 626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 627] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 626] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 627] <... open resumed>) = 5 [pid 626] <... futex resumed>) = 0 [pid 627] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 626] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 627] <... futex resumed>) = 0 [pid 626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 627] creat("./bus", 000 [pid 626] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 627] <... creat resumed>) = 6 [pid 626] <... futex resumed>) = 0 [pid 627] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 626] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 627] <... futex resumed>) = 0 [pid 626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 627] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 626] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 627] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 626] <... futex resumed>) = 0 [pid 627] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 626] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 627] <... futex resumed>) = 0 [pid 626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 627] pwrite64(6, "+", 1, 0 [pid 626] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 627] <... pwrite64 resumed>) = 1 [pid 626] <... futex resumed>) = 0 [pid 627] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 626] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 627] <... futex resumed>) = 0 [pid 626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 627] open("./bus", O_RDONLY [pid 626] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 627] <... open resumed>) = 7 [pid 626] <... futex resumed>) = 0 [pid 627] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 626] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 627] <... futex resumed>) = 0 [pid 626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 627] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 626] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 627] <... copy_file_range resumed>) = 1 [pid 626] <... futex resumed>) = 0 [pid 627] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 626] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 627] <... futex resumed>) = 0 [pid 626] <... futex resumed>) = 0 [pid 627] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 626] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 626] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 626] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 626] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[635]}, 88) = 635 [pid 626] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 626] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 626] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 616] close(4 [pid 299] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 616] <... close resumed>) = 0 [pid 299] getdents64(4, ./strace-static-x86_64: Process 635 attached [pid 635] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 635] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 635] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 616] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 616] <... futex resumed>) = 1 [pid 613] <... futex resumed>) = 0 [pid 613] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] close(4 [pid 613] <... futex resumed>) = 0 [pid 616] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 613] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 635] <... mmap resumed>) = 0x20000000 [pid 635] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] <... open resumed>) = 4 [pid 299] <... close resumed>) = 0 [pid 626] <... futex resumed>) = 0 [pid 626] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 627] <... futex resumed>) = 0 [ 33.422056][ T620] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 33.426677][ T623] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 33.435010][ T620] EXT4-fs (loop4): This should not happen!! Data will be lost [ 33.435010][ T620] [ 33.454386][ T620] EXT4-fs (loop4): Total free blocks count 0 [ 33.460995][ T620] EXT4-fs (loop4): Free/Dirty block details [ 33.467790][ T620] EXT4-fs (loop4): free_blocks=2415919504 [ 33.474096][ T620] EXT4-fs (loop4): dirty_blocks=32 [pid 626] <... futex resumed>) = 1 [pid 623] <... mount resumed>) = 0 [pid 620] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 616] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] rmdir("./11/file1" [pid 623] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 616] <... futex resumed>) = 1 [pid 613] <... futex resumed>) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 623] <... openat resumed>) = 3 [pid 616] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 613] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] getdents64(3, [pid 623] chdir("./file1" [pid 616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 613] <... futex resumed>) = 0 [pid 299] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 623] <... chdir resumed>) = 0 [pid 616] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 613] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] close(3 [pid 623] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 616] <... open resumed>) = 5 [pid 299] <... close resumed>) = 0 [pid 623] <... openat resumed>) = 4 [pid 616] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] rmdir("./11" [pid 623] ioctl(4, LOOP_CLR_FD [pid 616] <... futex resumed>) = 1 [pid 613] <... futex resumed>) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 623] <... ioctl resumed>) = 0 [pid 616] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 613] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] mkdir("./12", 0777 [pid 623] close(4 [pid 616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 613] <... futex resumed>) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 630] <... futex resumed>) = ? [pid 626] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 623] <... close resumed>) = 0 [pid 616] creat("./bus", 000 [pid 613] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 635] <... futex resumed>) = 1 [pid 623] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] <... creat resumed>) = 6 [pid 299] <... openat resumed>) = 3 [pid 635] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 623] <... futex resumed>) = 1 [pid 622] <... futex resumed>) = 0 [pid 616] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] ioctl(3, LOOP_CLR_FD [pid 623] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 622] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] <... futex resumed>) = 1 [pid 613] <... futex resumed>) = 0 [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 623] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 622] <... futex resumed>) = 0 [pid 616] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 613] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] close(3 [pid 630] +++ killed by SIGBUS +++ [pid 623] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 622] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 613] <... futex resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 627] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 623] <... open resumed>) = 4 [pid 626] <... futex resumed>) = ? [pid 616] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 616] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 33.479550][ T620] EXT4-fs (loop4): Block reservation details [ 33.487350][ T627] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 33.487381][ T620] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 33.508119][ T627] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 33.520233][ T627] EXT4-fs (loop3): This should not happen!! Data will be lost [ 33.520233][ T627] [pid 616] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 613] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 613] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] <... futex resumed>) = 0 [pid 613] <... futex resumed>) = 1 [pid 616] pwrite64(6, "+", 1, 0 [pid 613] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 616] <... pwrite64 resumed>) = 1 [pid 616] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 613] <... futex resumed>) = 0 [pid 616] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 613] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 613] <... futex resumed>) = 0 [pid 616] open("./bus", O_RDONLY [pid 613] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 616] <... open resumed>) = 7 [pid 616] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 613] <... futex resumed>) = 0 [pid 616] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 613] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 613] <... futex resumed>) = 0 [pid 616] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 613] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] <... copy_file_range resumed>) = 1 [pid 613] <... futex resumed>) = 0 [pid 616] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 616] <... futex resumed>) = 0 [pid 613] <... mmap resumed>) = 0x7fb0838ed000 [pid 616] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 613] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 613] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 613] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[636]}, 88) = 636 [pid 613] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 613] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 613] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 637 [pid 635] <... futex resumed>) = ? [pid 623] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 623] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 636 attached [pid 636] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 636] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 613] <... futex resumed>) = 0 [pid 613] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] <... futex resumed>) = 0 [pid 613] <... futex resumed>) = 1 ./strace-static-x86_64: Process 637 attached [pid 622] <... futex resumed>) = 0 [pid 637] set_robust_list(0x5555610ee6a0, 24 [pid 627] +++ killed by SIGBUS +++ [pid 622] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... set_robust_list resumed>) = 0 [pid 623] <... futex resumed>) = 0 [pid 622] <... futex resumed>) = 1 [pid 637] chdir("./12" [pid 623] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 622] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] <... chdir resumed>) = 0 [pid 623] <... open resumed>) = 5 [pid 637] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 623] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... prctl resumed>) = 0 [pid 623] <... futex resumed>) = 1 [pid 622] <... futex resumed>) = 0 [pid 637] setpgid(0, 0 [pid 623] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 622] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... setpgid resumed>) = 0 [pid 623] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 622] <... futex resumed>) = 0 [pid 637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 623] creat("./bus", 000 [pid 622] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] <... openat resumed>) = 3 [pid 623] <... creat resumed>) = 6 [pid 637] write(3, "1000", 4 [pid 623] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... write resumed>) = 4 [pid 623] <... futex resumed>) = 1 [pid 622] <... futex resumed>) = 0 [pid 637] close(3 [pid 623] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 622] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... close resumed>) = 0 [pid 623] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 622] <... futex resumed>) = 0 [pid 637] symlink("/dev/binderfs", "./binderfs" [pid 623] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 622] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] <... symlink resumed>) = 0 executing program [pid 623] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 637] write(1, "executing program\n", 18 [pid 623] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... write resumed>) = 18 [pid 623] <... futex resumed>) = 1 [pid 622] <... futex resumed>) = 0 [pid 637] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 622] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... futex resumed>) = 0 [pid 623] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 622] <... futex resumed>) = 0 [pid 637] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, [pid 623] pwrite64(6, "+", 1, 0 [pid 622] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] <... rt_sigaction resumed>NULL, 8) = 0 [pid 623] <... pwrite64 resumed>) = 1 [pid 637] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 623] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 623] <... futex resumed>) = 1 [pid 622] <... futex resumed>) = 0 [pid 637] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 623] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 622] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... mmap resumed>) = 0x7fb08390e000 [pid 623] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 622] <... futex resumed>) = 0 [pid 637] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE [pid 623] open("./bus", O_RDONLY [pid 622] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] <... mprotect resumed>) = 0 [pid 623] <... open resumed>) = 7 [pid 637] rt_sigprocmask(SIG_BLOCK, ~[], [pid 623] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... rt_sigprocmask resumed>[], 8) = 0 [pid 623] <... futex resumed>) = 1 [pid 622] <... futex resumed>) = 0 [pid 637] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} [pid 623] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 622] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 622] <... futex resumed>) = 0 [pid 637] <... clone3 resumed> => {parent_tid=[638]}, 88) = 638 [pid 623] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 622] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] rt_sigprocmask(SIG_SETMASK, [], [pid 623] <... copy_file_range resumed>) = 1 [pid 622] <... futex resumed>) = 0 [pid 637] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 636] <... futex resumed>) = 1 [pid 623] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 622] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 620] +++ killed by SIGBUS +++ [pid 619] +++ killed by SIGBUS +++ [pid 637] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 623] <... futex resumed>) = 0 [pid 622] <... mmap resumed>) = 0x7fb0838ed000 [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=619, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 637] <... futex resumed>) = 0 [pid 623] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 622] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 302] restart_syscall(<... resuming interrupted clone ...> [pid 637] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 622] <... mprotect resumed>) = 0 [pid 302] <... restart_syscall resumed>) = 0 [pid 622] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 622] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 302] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 622] <... clone3 resumed> => {parent_tid=[639]}, 88) = 639 [pid 302] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 622] rt_sigprocmask(SIG_SETMASK, [], [pid 302] <... openat resumed>) = 3 [pid 622] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 302] newfstatat(3, "", [pid 622] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 622] <... futex resumed>) = 0 [pid 302] getdents64(3, [pid 622] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 302] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 638 attached [pid 302] unlink("./12/binderfs" [pid 638] set_robust_list(0x7fb08392e9a0, 24 [pid 302] <... unlink resumed>) = 0 [pid 638] <... set_robust_list resumed>) = 0 [pid 302] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 638] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 638] memfd_create("syzkaller", 0) = 3 [pid 638] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 638] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 639 attached [pid 639] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 639] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 639] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 622] <... futex resumed>) = 0 [pid 622] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] <... futex resumed>) = 0 [pid 622] <... futex resumed>) = 1 [pid 635] +++ killed by SIGBUS +++ [pid 622] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] <... futex resumed>) = 1 [pid 639] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 638] <... write resumed>) = 1048576 [pid 638] munmap(0x7fb07b50e000, 138412032) = 0 [pid 638] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 33.546008][ T616] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, [ 33.548615][ T620] EXT4-fs (loop4): This should not happen!! Data will be lost [ 33.548615][ T620] [ 33.553841][ T616] block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 33.586797][ T623] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, [ 33.595467][ T626] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 33.602216][ T623] block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 638] ioctl(4, LOOP_SET_FD, 3 [pid 626] +++ killed by SIGBUS +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=626, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=10} --- [pid 301] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./12/binderfs") = 0 [pid 301] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 638] <... ioctl resumed>) = 0 [pid 638] close(3) = 0 [pid 638] close(4 [pid 616] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 613] <... futex resumed>) = ? [pid 636] <... futex resumed>) = ? [pid 636] +++ killed by SIGBUS +++ [ 33.611072][ T626] EXT4-fs (loop3): This should not happen!! Data will be lost [ 33.611072][ T626] [ 33.628014][ T638] loop1: detected capacity change from 0 to 2048 [ 33.633159][ T616] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 33.642916][ T623] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 33.658434][ T616] EXT4-fs (loop0): This should not happen!! Data will be lost [ 33.658434][ T616] [pid 622] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 622] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 622] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 616] +++ killed by SIGBUS +++ [pid 613] +++ killed by SIGBUS +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=613, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 639] <... futex resumed>) = 0 [pid 639] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0) = -1 EBADF (Bad file descriptor) [pid 639] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 622] <... futex resumed>) = 0 [pid 639] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 298] <... restart_syscall resumed>) = 0 [pid 298] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./12/binderfs") = 0 [pid 298] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 638] <... close resumed>) = 0 [pid 638] mkdir("./file1", 0777) = 0 [ 33.658456][ T616] EXT4-fs (loop0): Total free blocks count 0 [ 33.658469][ T616] EXT4-fs (loop0): Free/Dirty block details [ 33.658481][ T616] EXT4-fs (loop0): free_blocks=2415919504 [ 33.658493][ T616] EXT4-fs (loop0): dirty_blocks=32 [ 33.658504][ T616] EXT4-fs (loop0): Block reservation details [ 33.658514][ T616] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 33.661646][ T616] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 638] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 623] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 639] <... futex resumed>) = ? [pid 639] +++ killed by SIGBUS +++ [ 33.672531][ T623] EXT4-fs (loop2): This should not happen!! Data will be lost [ 33.672531][ T623] [ 33.680110][ T616] EXT4-fs (loop0): This should not happen!! Data will be lost [ 33.680110][ T616] [ 33.687064][ T623] EXT4-fs (loop2): Total free blocks count 0 [ 33.750895][ T623] EXT4-fs (loop2): Free/Dirty block details [ 33.756648][ T623] EXT4-fs (loop2): free_blocks=2415919504 [ 33.762249][ T623] EXT4-fs (loop2): dirty_blocks=32 [ 33.767593][ T623] EXT4-fs (loop2): Block reservation details [ 33.773349][ T623] EXT4-fs (loop2): i_reserved_data_blocks=2 [pid 623] +++ killed by SIGBUS +++ [pid 622] +++ killed by SIGBUS +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=622, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=19} --- [pid 300] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 300] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 executing program [pid 301] <... umount2 resumed>) = 0 [pid 300] newfstatat(3, "", [pid 301] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./12/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./12/file1") = 0 [pid 302] <... umount2 resumed>) = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./12") = 0 [pid 301] mkdir("./13", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 641 ./strace-static-x86_64: Process 641 attached [pid 641] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 641] chdir("./13") = 0 [pid 641] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 641] setpgid(0, 0) = 0 [pid 641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 641] write(3, "1000", 4) = 4 [pid 641] close(3) = 0 [pid 641] symlink("/dev/binderfs", "./binderfs") = 0 [pid 641] write(1, "executing program\n", 18) = 18 [pid 641] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 641] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 641] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 641] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 641] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 641] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 641] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[642]}, 88) = 642 [pid 641] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 641] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 641] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 642 attached [pid 642] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 642] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 642] memfd_create("syzkaller", 0) = 3 [pid 642] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 298] <... umount2 resumed>) = 0 [pid 642] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] unlink("./12/binderfs" [pid 642] <... write resumed>) = 1048576 [pid 642] munmap(0x7fb07b50e000, 138412032 [pid 300] <... unlink resumed>) = 0 [pid 642] <... munmap resumed>) = 0 [pid 300] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 642] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./12/file1", [pid 642] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 642] close(3) = 0 [pid 642] close(4) = 0 [pid 642] mkdir("./file1", 0777) = 0 [pid 302] newfstatat(AT_FDCWD, "./12/file1", [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 642] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 302] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 302] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 302] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 302] close(4) = 0 [pid 302] rmdir("./12/file1") = 0 [pid 302] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./12") = 0 [pid 302] mkdir("./13", 0777) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] close(3) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 645 ./strace-static-x86_64: Process 645 attached [pid 645] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 645] chdir("./13") = 0 [pid 645] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 645] setpgid(0, 0) = 0 [pid 645] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 645] write(3, "1000", 4) = 4 [ 33.780707][ T623] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 33.792901][ T623] EXT4-fs (loop2): This should not happen!! Data will be lost [ 33.792901][ T623] [ 33.822230][ T642] loop3: detected capacity change from 0 to 2048 [pid 645] close(3) = 0 [pid 645] symlink("/dev/binderfs", "./binderfs") = 0 [pid 645] write(1, "executing program\n", 18executing program ) = 18 [pid 645] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 645] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 645] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 645] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 645] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 645] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 645] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[646]}, 88) = 646 [pid 645] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 645] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 645] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 646 attached [pid 646] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 646] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 646] memfd_create("syzkaller", 0) = 3 [pid 646] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 646] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 298] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 646] <... write resumed>) = 1048576 [pid 646] munmap(0x7fb07b50e000, 138412032) = 0 [pid 298] rmdir("./12/file1" [pid 646] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 298] <... rmdir resumed>) = 0 [pid 646] <... openat resumed>) = 4 [pid 298] getdents64(3, [pid 646] ioctl(4, LOOP_SET_FD, 3 [pid 300] <... umount2 resumed>) = 0 [pid 298] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 300] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] close(3 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... close resumed>) = 0 [pid 300] newfstatat(AT_FDCWD, "./12/file1", [pid 298] rmdir("./12" [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] <... rmdir resumed>) = 0 [pid 300] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 646] <... ioctl resumed>) = 0 [pid 646] close(3) = 0 [pid 646] close(4 [pid 638] <... mount resumed>) = 0 [pid 638] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 298] mkdir("./13", 0777 [pid 638] <... openat resumed>) = 3 [pid 638] chdir("./file1" [pid 298] <... mkdir resumed>) = 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 638] <... chdir resumed>) = 0 [pid 300] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 638] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 300] <... openat resumed>) = 4 [pid 298] <... openat resumed>) = 3 [pid 300] newfstatat(4, "", [pid 298] ioctl(3, LOOP_CLR_FD [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 300] getdents64(4, [pid 298] close(3) = 0 [pid 300] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 638] <... openat resumed>) = 4 [pid 638] ioctl(4, LOOP_CLR_FD [pid 300] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 298] <... clone resumed>, child_tidptr=0x5555610ee690) = 649 [pid 300] close(4) = 0 [pid 638] <... ioctl resumed>) = 0 [pid 638] close(4) = 0 [pid 300] rmdir("./12/file1" [pid 638] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... futex resumed>) = 0 [pid 637] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 637] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 638] <... futex resumed>) = 1 [pid 638] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 638] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... futex resumed>) = 0 [pid 637] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 637] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 638] <... futex resumed>) = 1 [pid 638] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 638] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... futex resumed>) = 0 [pid 637] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 637] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 638] <... futex resumed>) = 1 [pid 638] creat("./bus", 000) = 6 [pid 638] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... futex resumed>) = 0 [pid 637] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 637] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 638] <... futex resumed>) = 1 [pid 638] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 638] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... futex resumed>) = 0 [pid 637] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 637] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 638] <... futex resumed>) = 1 [pid 638] pwrite64(6, "+", 1, 0) = 1 [pid 638] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... futex resumed>) = 0 [pid 637] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 637] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 638] <... futex resumed>) = 1 [pid 638] open("./bus", O_RDONLY) = 7 [pid 638] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... futex resumed>) = 0 [pid 637] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 637] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 637] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 637] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 637] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[650]}, 88) = 650 [pid 637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 637] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 637] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 638] <... futex resumed>) = 1 [pid 638] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 638] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 638] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 649 attached [pid 649] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 649] chdir("./13") = 0 [pid 649] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 650 attached [pid 300] <... rmdir resumed>) = 0 [pid 650] set_robust_list(0x7fb08390d9a0, 24 [pid 642] <... mount resumed>) = 0 [pid 300] getdents64(3, [pid 650] <... set_robust_list resumed>) = 0 [pid 649] <... prctl resumed>) = 0 [pid 650] rt_sigprocmask(SIG_SETMASK, [], [pid 300] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 650] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 300] close(3 [pid 642] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 650] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 300] <... close resumed>) = 0 [pid 300] rmdir("./12" [pid 642] <... openat resumed>) = 3 [pid 642] chdir("./file1") = 0 [pid 642] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 300] <... rmdir resumed>) = 0 [pid 300] mkdir("./13", 0777 [pid 642] <... openat resumed>) = 4 [pid 642] ioctl(4, LOOP_CLR_FD) = 0 [pid 642] close(4) = 0 [pid 642] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 641] <... futex resumed>) = 0 [pid 641] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... mkdir resumed>) = 0 [pid 641] <... futex resumed>) = 0 [pid 641] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 642] <... futex resumed>) = 1 [pid 300] <... openat resumed>) = 3 [pid 642] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 642] <... open resumed>) = 4 [pid 642] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 641] <... futex resumed>) = 0 [pid 641] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 641] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 642] <... futex resumed>) = 1 [pid 642] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 642] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 641] <... futex resumed>) = 0 [pid 641] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 650] <... mmap resumed>) = 0x20000000 [pid 641] <... futex resumed>) = 0 [pid 300] <... clone resumed>, child_tidptr=0x5555610ee690) = 651 [pid 641] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 650] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 642] <... futex resumed>) = 1 [pid 650] <... futex resumed>) = 1 [pid 637] <... futex resumed>) = 0 [pid 637] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 638] <... futex resumed>) = 0 [pid 637] <... futex resumed>) = 1 [ 33.833970][ T638] EXT4-fs mount: 1 callbacks suppressed [ 33.833988][ T638] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 33.865204][ T646] loop4: detected capacity change from 0 to 2048 ./strace-static-x86_64: Process 651 attached [pid 650] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 649] setpgid(0, 0 [pid 642] creat("./bus", 000 [pid 637] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 649] <... setpgid resumed>) = 0 [pid 649] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 649] write(3, "1000", 4) = 4 [pid 649] close(3) = 0 executing program [pid 649] symlink("/dev/binderfs", "./binderfs") = 0 [pid 649] write(1, "executing program\n", 18) = 18 [pid 649] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 649] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 649] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 649] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 649] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 649] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[652]}, 88) = 652 [pid 649] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 649] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] set_robust_list(0x5555610ee6a0, 24 [pid 649] <... futex resumed>) = 0 [pid 651] <... set_robust_list resumed>) = 0 [pid 649] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 642] <... creat resumed>) = 6 [pid 651] chdir("./13" [pid 642] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] <... chdir resumed>) = 0 [pid 642] <... futex resumed>) = 1 [pid 651] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 642] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 651] <... prctl resumed>) = 0 [pid 651] setpgid(0, 0) = 0 [pid 651] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 651] write(3, "1000", 4) = 4 [pid 651] close(3) = 0 [pid 651] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 651] write(1, "executing program\n", 18) = 18 [pid 651] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 651] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 651] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 651] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 651] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 651] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 651] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[653]}, 88) = 653 [pid 651] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 651] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 651] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 653 attached [pid 653] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 653] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 653] memfd_create("syzkaller", 0) = 3 [pid 653] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 641] <... futex resumed>) = 0 ./strace-static-x86_64: Process 652 attached [pid 641] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 652] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 642] <... futex resumed>) = 0 [pid 641] <... futex resumed>) = 1 [pid 653] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 653] munmap(0x7fb07b50e000, 138412032) = 0 [pid 653] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 653] ioctl(4, LOOP_SET_FD, 3 [pid 652] rt_sigprocmask(SIG_SETMASK, [], [pid 642] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 641] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 653] <... ioctl resumed>) = 0 [pid 653] close(3) = 0 [pid 653] close(4 [pid 652] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 652] memfd_create("syzkaller", 0) = 3 [pid 652] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 652] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 642] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 646] <... close resumed>) = 0 [pid 642] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 646] mkdir("./file1", 0777 [pid 642] <... futex resumed>) = 1 [pid 641] <... futex resumed>) = 0 [pid 652] <... write resumed>) = 1048576 [pid 652] munmap(0x7fb07b50e000, 138412032) = 0 [pid 652] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 33.878586][ T642] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 33.893467][ T638] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 33.908690][ T638] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 33.918505][ T653] loop2: detected capacity change from 0 to 2048 [ 33.921150][ T638] EXT4-fs (loop1): This should not happen!! Data will be lost [pid 652] ioctl(4, LOOP_SET_FD, 3 [pid 646] <... mkdir resumed>) = 0 [pid 642] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 641] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 652] <... ioctl resumed>) = 0 [pid 652] close(3) = 0 [pid 652] close(4 [pid 646] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 642] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 642] pwrite64(6, "+", 1, 0) = 1 [pid 642] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 642] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL) = 0 [pid 641] <... futex resumed>) = 1 [pid 642] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 641] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 641] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 642] <... futex resumed>) = 0 [pid 641] <... futex resumed>) = 1 [pid 642] open("./bus", O_RDONLY [pid 641] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 642] <... open resumed>) = 7 [pid 642] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 641] <... futex resumed>) = 0 [pid 642] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 641] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 642] <... copy_file_range resumed>) = 1 [pid 641] <... futex resumed>) = 0 [pid 642] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 641] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 642] <... futex resumed>) = 0 [pid 641] <... futex resumed>) = 0 [pid 642] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 641] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 641] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 641] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 641] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[654]}, 88) = 654 [pid 641] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 641] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 641] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 654 attached [pid 654] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 654] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 654] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 641] <... futex resumed>) = 0 [pid 641] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 642] <... futex resumed>) = 0 [pid 641] <... futex resumed>) = 1 [pid 641] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 637] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 650] <... futex resumed>) = 0 [pid 637] <... futex resumed>) = 1 [pid 650] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 637] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 650] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 650] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 637] <... futex resumed>) = 0 [pid 650] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 654] <... futex resumed>) = 1 [ 33.921150][ T638] [ 33.936931][ T638] EXT4-fs (loop1): Total free blocks count 0 [ 33.940821][ T652] loop0: detected capacity change from 0 to 2048 [ 33.943703][ T638] EXT4-fs (loop1): Free/Dirty block details [ 33.954977][ T638] EXT4-fs (loop1): free_blocks=2415919504 [ 33.958622][ T642] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 33.960778][ T638] EXT4-fs (loop1): dirty_blocks=32 [pid 654] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 653] <... close resumed>) = 0 [pid 653] mkdir("./file1", 0777) = 0 [pid 653] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 652] <... close resumed>) = 0 [pid 652] mkdir("./file1", 0777) = 0 [pid 641] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 641] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 654] <... futex resumed>) = 0 [pid 641] <... futex resumed>) = 1 [pid 654] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 641] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 654] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 654] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 641] <... futex resumed>) = 0 [pid 654] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 652] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 638] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 650] <... futex resumed>) = ? [pid 650] +++ killed by SIGBUS +++ [ 33.975307][ T642] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 33.983547][ T638] EXT4-fs (loop1): Block reservation details [ 33.997908][ T642] EXT4-fs (loop3): This should not happen!! Data will be lost [ 33.997908][ T642] [ 34.010458][ T638] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 34.016789][ T642] EXT4-fs (loop3): Total free blocks count 0 [ 34.017810][ T653] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 653] <... mount resumed>) = 0 [pid 642] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 653] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 653] chdir("./file1") = 0 [pid 653] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 653] ioctl(4, LOOP_CLR_FD) = 0 [pid 653] close(4) = 0 [pid 653] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 651] <... futex resumed>) = 0 [pid 653] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 651] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] <... open resumed>) = 4 [pid 651] <... futex resumed>) = 0 [pid 653] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 653] <... futex resumed>) = 0 [pid 651] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 653] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 651] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] <... open resumed>) = 5 [pid 651] <... futex resumed>) = 0 [pid 653] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 653] <... futex resumed>) = 0 [pid 651] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 653] creat("./bus", 000 [pid 651] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] <... creat resumed>) = 6 [pid 651] <... futex resumed>) = 0 [pid 653] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 653] <... futex resumed>) = 0 [pid 651] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 653] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 651] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 651] <... futex resumed>) = 0 [pid 653] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 653] <... futex resumed>) = 0 [pid 651] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 653] pwrite64(6, "+", 1, 0 [pid 651] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] <... pwrite64 resumed>) = 1 [pid 651] <... futex resumed>) = 0 [pid 653] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 653] <... futex resumed>) = 0 [pid 651] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 653] open("./bus", O_RDONLY [pid 651] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] <... open resumed>) = 7 [pid 651] <... futex resumed>) = 0 [pid 653] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 653] <... futex resumed>) = 0 [pid 651] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 653] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 651] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] <... copy_file_range resumed>) = 1 [pid 651] <... futex resumed>) = 0 [pid 653] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] <... futex resumed>) = 0 [pid 651] <... futex resumed>) = 0 [pid 653] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 651] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 651] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 651] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 651] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[659]}, 88) = 659 [pid 651] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 651] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 651] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 654] <... futex resumed>) = ? [pid 654] +++ killed by SIGBUS +++ ./strace-static-x86_64: Process 659 attached [pid 646] <... mount resumed>) = 0 [pid 642] +++ killed by SIGBUS +++ [pid 641] +++ killed by SIGBUS +++ [pid 659] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 659] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 659] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 651] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] <... futex resumed>) = 0 [pid 651] <... futex resumed>) = 1 [pid 651] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 646] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=641, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9} --- [pid 646] chdir("./file1" [pid 301] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW [pid 659] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 646] <... chdir resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 646] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 301] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 646] <... openat resumed>) = 4 [pid 301] <... openat resumed>) = 3 [pid 646] ioctl(4, LOOP_CLR_FD [pid 301] newfstatat(3, "", [pid 646] <... ioctl resumed>) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 646] close(4 [pid 301] getdents64(3, [pid 646] <... close resumed>) = 0 [pid 301] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 646] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 646] <... futex resumed>) = 1 [pid 645] <... futex resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 646] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 645] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] newfstatat(AT_FDCWD, "./13/binderfs", [pid 646] <... open resumed>) = 4 [pid 645] <... futex resumed>) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 645] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 646] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] unlink("./13/binderfs" [pid 646] <... futex resumed>) = 1 [pid 645] <... futex resumed>) = 0 [pid 301] <... unlink resumed>) = 0 [pid 645] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 645] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 646] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 301] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 646] <... open resumed>) = 5 [pid 646] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 645] <... futex resumed>) = 0 [pid 645] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 646] creat("./bus", 000 [pid 645] <... futex resumed>) = 0 [pid 646] <... creat resumed>) = 6 [pid 645] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 646] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 645] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 646] <... futex resumed>) = 0 [pid 645] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 646] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 645] <... futex resumed>) = 0 [pid 646] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 645] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 646] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 645] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 646] <... futex resumed>) = 0 [pid 645] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 646] pwrite64(6, "+", 1, 0 [pid 645] <... futex resumed>) = 0 [pid 646] <... pwrite64 resumed>) = 1 [pid 645] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 646] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 645] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 646] <... futex resumed>) = 0 [pid 645] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 646] open("./bus", O_RDONLY [pid 645] <... futex resumed>) = 0 [pid 646] <... open resumed>) = 7 [pid 645] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 646] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 645] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 646] <... futex resumed>) = 0 [pid 645] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 646] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 645] <... futex resumed>) = 0 [pid 646] <... copy_file_range resumed>) = 1 [pid 645] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 646] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 645] <... futex resumed>) = 0 [pid 646] <... futex resumed>) = 0 [pid 645] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 646] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 645] <... mmap resumed>) = 0x7fb0838ed000 [pid 645] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 645] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 645] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[661]}, 88) = 661 [pid 645] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 645] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 34.057872][ T646] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 34.061801][ T642] EXT4-fs (loop3): This should not happen!! Data will be lost [ 34.061801][ T642] [ 34.067634][ T638] EXT4-fs (loop1): This should not happen!! Data will be lost [ 34.067634][ T638] [ 34.087529][ T653] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 645] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 661 attached [pid 661] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 661] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 661] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 645] <... futex resumed>) = 0 [pid 645] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 646] <... futex resumed>) = 0 [pid 645] <... futex resumed>) = 1 [pid 645] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 661] <... futex resumed>) = 1 [pid 661] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 651] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 651] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] <... futex resumed>) = 0 [pid 651] <... futex resumed>) = 1 [pid 659] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 651] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 659] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 651] <... futex resumed>) = 0 [ 34.129338][ T653] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 34.141672][ T653] EXT4-fs (loop2): This should not happen!! Data will be lost [ 34.141672][ T653] [ 34.151316][ T653] EXT4-fs (loop2): Total free blocks count 0 [ 34.155318][ T646] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 34.157200][ T653] EXT4-fs (loop2): Free/Dirty block details [ 34.177424][ T653] EXT4-fs (loop2): free_blocks=2415919504 [pid 659] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 653] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 638] +++ killed by SIGBUS +++ [pid 637] +++ killed by SIGBUS +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=637, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=19} --- [pid 299] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./12/binderfs") = 0 [pid 299] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 652] <... mount resumed>) = 0 [pid 652] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 652] chdir("./file1") = 0 [pid 652] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 652] ioctl(4, LOOP_CLR_FD) = 0 [pid 652] close(4 [pid 659] <... futex resumed>) = ? [pid 645] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 645] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 661] <... futex resumed>) = 0 [pid 645] <... futex resumed>) = 1 [pid 661] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 645] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 661] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 661] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 645] <... futex resumed>) = 0 [pid 661] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 652] <... close resumed>) = 0 [pid 652] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 652] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 649] <... futex resumed>) = 0 [pid 649] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 649] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 652] <... futex resumed>) = 0 [pid 652] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 652] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... futex resumed>) = 0 [pid 649] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 652] <... futex resumed>) = 1 [pid 652] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 652] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... futex resumed>) = 0 [pid 649] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 652] <... futex resumed>) = 1 [pid 659] +++ killed by SIGBUS +++ [pid 652] creat("./bus", 000) = 6 [pid 652] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... futex resumed>) = 0 [pid 649] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 652] <... futex resumed>) = 1 [pid 652] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 652] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... futex resumed>) = 0 [pid 649] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 652] <... futex resumed>) = 1 [pid 652] pwrite64(6, "+", 1, 0) = 1 [pid 652] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... futex resumed>) = 0 [pid 649] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 652] <... futex resumed>) = 1 [pid 652] open("./bus", O_RDONLY) = 7 [pid 652] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... futex resumed>) = 0 [pid 649] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 649] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 649] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 649] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[663]}, 88) = 663 [pid 649] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 649] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 652] <... futex resumed>) = 1 [pid 652] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 652] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 34.182976][ T653] EXT4-fs (loop2): dirty_blocks=32 [ 34.183467][ T652] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 34.187961][ T653] EXT4-fs (loop2): Block reservation details [ 34.187975][ T653] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 34.188320][ T646] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 34.222195][ T646] EXT4-fs (loop4): This should not happen!! Data will be lost [ 34.222195][ T646] [pid 652] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 663 attached [pid 663] set_robust_list(0x7fb08390d9a0, 24 [pid 653] +++ killed by SIGBUS +++ [pid 651] +++ killed by SIGBUS +++ [pid 663] <... set_robust_list resumed>) = 0 [pid 663] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 663] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 649] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 649] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 663] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] <... umount2 resumed>) = 0 [pid 301] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./13/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [ 34.233578][ T653] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 34.239722][ T646] EXT4-fs (loop4): Total free blocks count 0 [ 34.246016][ T653] EXT4-fs (loop2): This should not happen!! Data will be lost [ 34.246016][ T653] [ 34.252334][ T646] EXT4-fs (loop4): Free/Dirty block details [pid 301] rmdir("./13/file1"executing program [pid 652] <... futex resumed>) = 0 [pid 301] <... rmdir resumed>) = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./13") = 0 [pid 301] mkdir("./14", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 664 ./strace-static-x86_64: Process 664 attached [pid 664] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 664] chdir("./14") = 0 [pid 664] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 664] setpgid(0, 0) = 0 [pid 664] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 299] <... umount2 resumed>) = 0 [pid 664] <... openat resumed>) = 3 [pid 664] write(3, "1000", 4) = 4 [pid 664] close(3) = 0 [pid 664] symlink("/dev/binderfs", "./binderfs") = 0 [pid 664] write(1, "executing program\n", 18) = 18 [pid 664] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 664] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 664] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 664] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 664] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 664] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 664] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[665]}, 88) = 665 [pid 664] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 664] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 664] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 665 attached [pid 665] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 665] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 665] memfd_create("syzkaller", 0) = 3 [pid 665] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=651, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 665] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 665] munmap(0x7fb07b50e000, 138412032) = 0 [pid 665] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 665] ioctl(4, LOOP_SET_FD, 3 [pid 300] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./13/binderfs") = 0 [pid 300] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./12/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./12/file1" [pid 649] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 649] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 649] <... futex resumed>) = 1 [pid 663] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 649] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 663] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 663] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 649] <... futex resumed>) = 0 [pid 663] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] <... rmdir resumed>) = 0 [pid 299] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./12") = 0 [pid 299] mkdir("./13", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 666 ./strace-static-x86_64: Process 666 attached [ 34.274601][ T652] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 34.283990][ T665] loop3: detected capacity change from 0 to 2048 [ 34.289252][ T652] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 34.307566][ T652] EXT4-fs (loop0): This should not happen!! Data will be lost [ 34.307566][ T652] [ 34.317079][ T652] EXT4-fs (loop0): Total free blocks count 0 [ 34.323024][ T652] EXT4-fs (loop0): Free/Dirty block details [ 34.329263][ T652] EXT4-fs (loop0): free_blocks=2415919504 [pid 666] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 665] <... ioctl resumed>) = 0 [pid 665] close(3) = 0 [pid 665] close(4 [pid 666] chdir("./13") = 0 [pid 652] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 665] <... close resumed>) = 0 [pid 665] mkdir("./file1", 0777) = 0 [pid 665] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 666] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 663] <... futex resumed>) = ? [pid 666] <... prctl resumed>) = 0 [pid 663] +++ killed by SIGBUS +++ [pid 666] setpgid(0, 0) = 0 [pid 646] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 666] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 300] <... umount2 resumed>) = 0 [pid 300] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./13/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [ 34.330357][ T646] EXT4-fs (loop4): free_blocks=2415919504 [ 34.335056][ T652] EXT4-fs (loop0): dirty_blocks=32 [ 34.345495][ T652] EXT4-fs (loop0): Block reservation details [ 34.351707][ T652] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 34.357837][ T646] EXT4-fs (loop4): dirty_blocks=32 [ 34.362767][ T646] EXT4-fs (loop4): Block reservation details [ 34.369104][ T646] EXT4-fs (loop4): i_reserved_data_blocks=2 [pid 300] rmdir("./13/file1") = 0 [pid 300] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./13") = 0 [pid 300] mkdir("./14", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD [pid 666] <... openat resumed>) = 3 [pid 661] <... futex resumed>) = ? [pid 661] +++ killed by SIGBUS +++ [pid 666] write(3, "1000", 4) = 4 [pid 300] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 669 ./strace-static-x86_64: Process 669 attached [pid 669] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 669] chdir("./14") = 0 [pid 669] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 669] setpgid(0, 0) = 0 [pid 669] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 669] write(3, "1000", 4) = 4 [pid 669] close(3) = 0 [pid 669] symlink("/dev/binderfs", "./binderfs") = 0 [pid 669] write(1, "executing program\n", 18executing program ) = 18 [pid 669] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 666] close(3 [pid 665] <... mount resumed>) = 0 [pid 666] <... close resumed>) = 0 [pid 665] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 669] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 669] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 669] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 669] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 669] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 669] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[670]}, 88) = 670 [pid 669] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 669] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 669] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 670 attached [pid 670] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 670] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 670] memfd_create("syzkaller", 0 [pid 666] symlink("/dev/binderfs", "./binderfs" [pid 665] <... openat resumed>) = 3 [pid 670] <... memfd_create resumed>) = 3 [pid 670] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0executing program [pid 665] chdir("./file1" [pid 666] <... symlink resumed>) = 0 [pid 665] <... chdir resumed>) = 0 [pid 666] write(1, "executing program\n", 18 [pid 665] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 666] <... write resumed>) = 18 [pid 665] <... openat resumed>) = 4 [pid 666] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 665] ioctl(4, LOOP_CLR_FD [pid 666] <... futex resumed>) = 0 [pid 665] <... ioctl resumed>) = 0 [pid 646] +++ killed by SIGBUS +++ [pid 666] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, [pid 645] +++ killed by SIGBUS +++ [pid 665] close(4 [pid 666] <... rt_sigaction resumed>NULL, 8) = 0 [pid 670] <... mmap resumed>) = 0x7fb07b50e000 [pid 670] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 670] munmap(0x7fb07b50e000, 138412032) = 0 [pid 670] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 666] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 665] <... close resumed>) = 0 [pid 652] +++ killed by SIGBUS +++ [pid 649] +++ killed by SIGBUS +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=645, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 666] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=649, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 666] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 666] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE [pid 298] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW [pid 666] <... mprotect resumed>) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 666] rt_sigprocmask(SIG_BLOCK, ~[], [pid 298] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 666] <... rt_sigprocmask resumed>[], 8) = 0 [pid 298] <... openat resumed>) = 3 [pid 666] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 666] <... clone3 resumed> => {parent_tid=[671]}, 88) = 671 [pid 298] getdents64(3, [pid 666] rt_sigprocmask(SIG_SETMASK, [], [pid 298] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 666] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 298] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 666] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 666] <... futex resumed>) = 0 [pid 298] newfstatat(AT_FDCWD, "./13/binderfs", [pid 666] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./13/binderfs") = 0 [pid 298] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 665] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] restart_syscall(<... resuming interrupted clone ...> [pid 670] <... openat resumed>) = 4 [pid 670] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 671 attached [pid 665] <... futex resumed>) = 1 [pid 664] <... futex resumed>) = 0 [pid 302] <... restart_syscall resumed>) = 0 [pid 671] set_robust_list(0x7fb08392e9a0, 24 [pid 670] <... ioctl resumed>) = 0 [pid 665] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 664] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] close(3) = 0 [pid 670] close(4 [pid 671] <... set_robust_list resumed>) = 0 [pid 671] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 664] <... futex resumed>) = 0 [ 34.375830][ T652] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 34.377167][ T665] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 34.400962][ T646] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 34.413772][ T646] EXT4-fs (loop4): This should not happen!! Data will be lost [ 34.413772][ T646] [ 34.425020][ T652] EXT4-fs (loop0): This should not happen!! Data will be lost [ 34.425020][ T652] [pid 671] memfd_create("syzkaller", 0 [pid 665] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 670] <... close resumed>) = 0 [pid 664] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 671] <... memfd_create resumed>) = 3 [pid 665] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 671] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 670] mkdir("./file1", 0777 [pid 302] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW [pid 665] <... open resumed>) = 4 [pid 665] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 671] <... mmap resumed>) = 0x7fb07b50e000 [pid 665] <... futex resumed>) = 1 [pid 664] <... futex resumed>) = 0 [pid 302] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 670] <... mkdir resumed>) = 0 [pid 664] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... openat resumed>) = 3 [pid 670] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 665] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 664] <... futex resumed>) = 0 [pid 302] newfstatat(3, "", [pid 665] <... open resumed>) = 5 [pid 664] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 664] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 665] <... futex resumed>) = 0 [pid 664] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] getdents64(3, [pid 665] creat("./bus", 000 [pid 664] <... futex resumed>) = 0 [pid 302] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 665] <... creat resumed>) = 6 [pid 664] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 664] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 665] <... futex resumed>) = 0 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 665] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 664] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] newfstatat(AT_FDCWD, "./13/binderfs", [pid 665] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 664] <... futex resumed>) = 0 [pid 665] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 664] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] <... futex resumed>) = 0 [pid 302] unlink("./13/binderfs" [pid 664] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 665] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 302] <... unlink resumed>) = 0 [pid 664] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 665] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 664] <... futex resumed>) = 0 [pid 302] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 665] pwrite64(6, "+", 1, 0 [pid 664] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] <... pwrite64 resumed>) = 1 [pid 665] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 664] <... futex resumed>) = 0 [pid 664] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 665] open("./bus", O_RDONLY [pid 664] <... futex resumed>) = 0 [pid 665] <... open resumed>) = 7 [pid 664] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 665] <... futex resumed>) = 0 [pid 664] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 665] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 664] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 665] <... copy_file_range resumed>) = 1 [pid 664] <... futex resumed>) = 0 [pid 664] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 665] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] <... mmap resumed>) = 0x7fb0838ed000 [pid 665] <... futex resumed>) = 0 [pid 664] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 665] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 664] <... mprotect resumed>) = 0 [pid 664] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 664] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[672]}, 88) = 672 [pid 664] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 664] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 664] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 672 attached [pid 672] set_robust_list(0x7fb08390d9a0, 24 [pid 671] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 672] <... set_robust_list resumed>) = 0 [pid 672] rt_sigprocmask(SIG_SETMASK, [], [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./13/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, [pid 671] <... write resumed>) = 1048576 [pid 298] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 672] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 671] munmap(0x7fb07b50e000, 138412032 [pid 298] close(4) = 0 [pid 298] rmdir("./13/file1" [pid 672] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 671] <... munmap resumed>) = 0 [pid 298] <... rmdir resumed>) = 0 [pid 298] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./13") = 0 [pid 298] mkdir("./14", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 671] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 298] <... openat resumed>) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 671] <... openat resumed>) = 4 [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 672] <... mmap resumed>) = 0x20000000 [pid 671] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 673 attached [pid 298] <... clone resumed>, child_tidptr=0x5555610ee690) = 673 [pid 673] set_robust_list(0x5555610ee6a0, 24 [pid 672] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 673] <... set_robust_list resumed>) = 0 [pid 673] chdir("./14" [pid 672] <... futex resumed>) = 1 [pid 672] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 673] <... chdir resumed>) = 0 [pid 673] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 673] setpgid(0, 0) = 0 [pid 673] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 673] write(3, "1000", 4) = 4 [pid 673] close(3) = 0 [pid 673] symlink("/dev/binderfs", "./binderfs") = 0 [pid 673] write(1, "executing program\n", 18executing program ) = 18 [pid 673] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 673] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 671] <... ioctl resumed>) = 0 [pid 664] <... futex resumed>) = 0 [pid 664] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 665] <... futex resumed>) = 0 [pid 664] <... futex resumed>) = 1 [pid 673] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 671] close(3 [pid 673] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 671] <... close resumed>) = 0 [pid 673] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 671] close(4 [pid 673] <... mmap resumed>) = 0x7fb08390e000 [pid 673] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 673] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 673] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[674]}, 88) = 674 [pid 673] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 673] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 673] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 664] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 674 attached [pid 674] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 674] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 674] memfd_create("syzkaller", 0) = 3 [pid 674] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 674] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 674] munmap(0x7fb07b50e000, 138412032) = 0 [pid 674] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 34.438664][ T670] loop2: detected capacity change from 0 to 2048 [ 34.473108][ T671] loop1: detected capacity change from 0 to 2048 [pid 674] ioctl(4, LOOP_SET_FD, 3 [pid 302] <... umount2 resumed>) = 0 [pid 674] <... ioctl resumed>) = 0 [pid 674] close(3) = 0 [pid 674] close(4 [pid 302] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./13/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 302] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 302] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 302] close(4) = 0 [pid 302] rmdir("./13/file1") = 0 [pid 302] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./13") = 0 [pid 302] mkdir("./14", 0777) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] close(3) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 675 ./strace-static-x86_64: Process 675 attached [pid 675] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 675] chdir("./14") = 0 [pid 675] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 675] setpgid(0, 0) = 0 [pid 675] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 675] write(3, "1000", 4) = 4 [pid 675] close(3) = 0 [pid 675] symlink("/dev/binderfs", "./binderfs") = 0 [pid 675] write(1, "executing program\n", 18executing program ) = 18 [pid 675] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 675] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 675] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 675] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 675] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 675] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 675] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[676]}, 88) = 676 [pid 675] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 675] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 671] <... close resumed>) = 0 [pid 671] mkdir("./file1", 0777) = 0 [pid 671] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 675] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 676 attached [pid 676] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 676] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 664] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 664] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 664] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 672] <... futex resumed>) = 0 [pid 664] <... futex resumed>) = 1 [pid 672] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 664] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 672] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 672] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 664] <... futex resumed>) = 0 [pid 672] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 676] memfd_create("syzkaller", 0) = 3 [pid 676] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 676] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 674] <... close resumed>) = 0 [pid 674] mkdir("./file1", 0777) = 0 [ 34.479755][ T665] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 34.496097][ T674] loop0: detected capacity change from 0 to 2048 [ 34.497815][ T665] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 34.515659][ T665] EXT4-fs (loop3): This should not happen!! Data will be lost [ 34.515659][ T665] [ 34.525521][ T665] EXT4-fs (loop3): Total free blocks count 0 [ 34.531348][ T665] EXT4-fs (loop3): Free/Dirty block details [pid 674] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 676] <... write resumed>) = 1048576 [pid 676] munmap(0x7fb07b50e000, 138412032) = 0 [pid 676] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 676] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 676] close(3) = 0 [pid 676] close(4 [pid 670] <... mount resumed>) = 0 [pid 671] <... mount resumed>) = 0 [pid 671] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 671] chdir("./file1") = 0 [pid 671] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 671] ioctl(4, LOOP_CLR_FD) = 0 [pid 671] close(4) = 0 [pid 671] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 666] <... futex resumed>) = 0 [pid 666] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 666] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 671] <... futex resumed>) = 1 [pid 671] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 671] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 666] <... futex resumed>) = 0 [pid 666] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 666] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 671] <... futex resumed>) = 1 [pid 670] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 665] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 671] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 670] <... openat resumed>) = 3 [pid 672] <... futex resumed>) = ? [pid 670] chdir("./file1" [pid 671] <... open resumed>) = 5 [pid 670] <... chdir resumed>) = 0 [pid 672] +++ killed by SIGBUS +++ [pid 670] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 671] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 670] <... openat resumed>) = 4 [pid 666] <... futex resumed>) = 0 [pid 671] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 670] ioctl(4, LOOP_CLR_FD [pid 671] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 670] <... ioctl resumed>) = 0 [pid 666] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 671] creat("./bus", 000 [pid 670] close(4) = 0 [pid 666] <... futex resumed>) = 0 [pid 671] <... creat resumed>) = 6 [pid 670] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 671] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... futex resumed>) = 1 [pid 669] <... futex resumed>) = 0 [pid 666] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 671] <... futex resumed>) = 0 [pid 670] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 669] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 671] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 670] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 669] <... futex resumed>) = 0 [pid 670] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 669] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 666] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 671] <... futex resumed>) = 0 [pid 670] <... open resumed>) = 4 [pid 666] <... futex resumed>) = 1 [pid 671] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 670] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 671] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 670] <... futex resumed>) = 1 [pid 669] <... futex resumed>) = 0 [pid 666] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 671] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 669] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 671] <... futex resumed>) = 0 [pid 670] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 669] <... futex resumed>) = 0 [pid 671] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 670] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 669] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 666] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 666] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 671] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 671] pwrite64(6, "+", 1, 0) = 1 [pid 671] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 666] <... futex resumed>) = 0 [pid 666] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 666] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 671] <... futex resumed>) = 1 [pid 671] open("./bus", O_RDONLY) = 7 [ 34.537749][ T665] EXT4-fs (loop3): free_blocks=2415919504 [ 34.543370][ T665] EXT4-fs (loop3): dirty_blocks=32 [ 34.550091][ T670] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 34.551144][ T676] loop4: detected capacity change from 0 to 2048 [ 34.560655][ T665] EXT4-fs (loop3): Block reservation details [ 34.569501][ T671] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 34.573087][ T665] EXT4-fs (loop3): i_reserved_data_blocks=2 [pid 671] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 666] <... futex resumed>) = 0 [pid 666] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 666] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 666] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 666] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 666] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 666] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[681]}, 88) = 681 [pid 666] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 666] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 666] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 671] <... futex resumed>) = 1 [pid 671] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 670] <... open resumed>) = 5 [pid 671] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 671] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 670] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 669] <... futex resumed>) = 0 [pid 670] creat("./bus", 000 [pid 669] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... creat resumed>) = 6 [pid 669] <... futex resumed>) = 0 [pid 669] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 670] <... futex resumed>) = 0 [pid 669] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 669] <... futex resumed>) = 0 [pid 670] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 669] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 681 attached [pid 670] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 670] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 681] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 681] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 681] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 669] <... futex resumed>) = 0 [pid 665] +++ killed by SIGBUS +++ [pid 664] +++ killed by SIGBUS +++ [pid 681] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] mkdir("./file1", 0777 [pid 669] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=664, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 681] <... futex resumed>) = 1 [pid 676] <... mkdir resumed>) = 0 [pid 670] <... futex resumed>) = 0 [pid 669] <... futex resumed>) = 1 [pid 666] <... futex resumed>) = 0 [pid 681] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 676] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 670] pwrite64(6, "+", 1, 0 [pid 669] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 671] <... futex resumed>) = 0 [pid 670] <... pwrite64 resumed>) = 1 [pid 666] <... futex resumed>) = 1 [pid 301] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW [pid 670] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 666] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 670] <... futex resumed>) = 1 [pid 669] <... futex resumed>) = 0 [pid 301] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 670] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 669] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... openat resumed>) = 3 [pid 670] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 669] <... futex resumed>) = 0 [pid 301] newfstatat(3, "", [pid 670] open("./bus", O_RDONLY [pid 669] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 670] <... open resumed>) = 7 [pid 301] getdents64(3, [pid 670] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 670] <... futex resumed>) = 1 [pid 669] <... futex resumed>) = 0 [pid 301] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 670] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 669] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 670] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 669] <... futex resumed>) = 0 [pid 301] newfstatat(AT_FDCWD, "./14/binderfs", [pid 670] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 669] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 670] <... copy_file_range resumed>) = 1 [pid 669] <... futex resumed>) = 0 [pid 301] unlink("./14/binderfs" [pid 670] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 669] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 301] <... unlink resumed>) = 0 [pid 670] <... futex resumed>) = 0 [pid 669] <... mmap resumed>) = 0x7fb0838ed000 [pid 301] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 670] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 669] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 669] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 669] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[682]}, 88) = 682 [pid 669] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 669] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 669] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 682 attached [pid 682] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 682] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 682] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 669] <... futex resumed>) = 0 [pid 669] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... futex resumed>) = 0 [pid 669] <... futex resumed>) = 1 [pid 669] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 666] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 681] <... futex resumed>) = 0 [pid 666] <... futex resumed>) = 1 [pid 682] <... futex resumed>) = 1 [pid 682] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 681] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 666] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 681] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 681] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 666] <... futex resumed>) = 0 [pid 681] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 674] <... mount resumed>) = 0 [pid 674] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 674] chdir("./file1") = 0 [pid 674] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 674] ioctl(4, LOOP_CLR_FD) = 0 [ 34.636826][ T670] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 34.638056][ T671] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 34.652597][ T670] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 34.668411][ T674] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 674] close(4) = 0 [pid 674] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 673] <... futex resumed>) = 0 [pid 674] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 673] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 673] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 674] <... open resumed>) = 4 [pid 674] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 673] <... futex resumed>) = 0 [pid 674] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 673] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 673] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 674] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 674] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 674] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 673] <... futex resumed>) = 0 [pid 673] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 673] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 674] creat("./bus", 000) = 6 [pid 674] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 673] <... futex resumed>) = 0 [pid 674] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 673] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 674] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 673] <... futex resumed>) = 0 [pid 673] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 674] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 673] <... futex resumed>) = 0 [pid 673] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 673] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 674] pwrite64(6, "+", 1, 0) = 1 [pid 674] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 673] <... futex resumed>) = 0 [pid 673] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 674] open("./bus", O_RDONLY [pid 673] <... futex resumed>) = 0 [pid 673] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 674] <... open resumed>) = 7 [pid 674] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 673] <... futex resumed>) = 0 [pid 674] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 673] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 674] <... futex resumed>) = 0 [pid 673] <... futex resumed>) = 1 [pid 674] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 673] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 673] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 674] <... copy_file_range resumed>) = 1 [pid 673] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 674] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 673] <... mprotect resumed>) = 0 [pid 674] <... futex resumed>) = 0 [pid 673] rt_sigprocmask(SIG_BLOCK, ~[], [pid 674] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 673] <... rt_sigprocmask resumed>[], 8) = 0 [pid 673] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0}./strace-static-x86_64: Process 687 attached => {parent_tid=[687]}, 88) = 687 [pid 673] rt_sigprocmask(SIG_SETMASK, [], [pid 687] set_robust_list(0x7fb08390d9a0, 24 [pid 673] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 673] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 669] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 673] <... futex resumed>) = 0 [ 34.687996][ T671] EXT4-fs (loop1): This should not happen!! Data will be lost [ 34.687996][ T671] [ 34.700950][ T671] EXT4-fs (loop1): Total free blocks count 0 [ 34.707062][ T671] EXT4-fs (loop1): Free/Dirty block details [ 34.725288][ T671] EXT4-fs (loop1): free_blocks=2415919504 [ 34.730889][ T671] EXT4-fs (loop1): dirty_blocks=32 [ 34.730961][ T670] EXT4-fs (loop2): This should not happen!! Data will be lost [pid 673] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 687] <... set_robust_list resumed>) = 0 [pid 669] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 682] <... futex resumed>) = 0 [pid 669] <... futex resumed>) = 1 [pid 687] rt_sigprocmask(SIG_SETMASK, [], [pid 682] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 669] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 687] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 682] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 687] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 301] <... umount2 resumed>) = 0 [pid 687] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 682] <... futex resumed>) = 1 [pid 676] <... mount resumed>) = 0 [pid 669] <... futex resumed>) = 0 [pid 301] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./14/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./14/file1") = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./14") = 0 [pid 301] mkdir("./15", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 689 [pid 687] <... futex resumed>) = 1 [pid 682] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 676] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 673] <... futex resumed>) = 0 [pid 671] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 681] <... futex resumed>) = ? [pid 687] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 673] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... openat resumed>) = 3 [ 34.730961][ T670] [ 34.746853][ T676] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 34.747155][ T671] EXT4-fs (loop1): Block reservation details [ 34.770341][ T670] EXT4-fs (loop2): Total free blocks count 0 [ 34.775318][ T671] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 34.782571][ T670] EXT4-fs (loop2): Free/Dirty block details [pid 674] <... futex resumed>) = 0 [pid 673] <... futex resumed>) = 1 [pid 681] +++ killed by SIGBUS +++ [pid 671] +++ killed by SIGBUS +++ ./strace-static-x86_64: Process 689 attached [pid 676] chdir("./file1" [ 34.783306][ T674] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 34.789314][ T670] EXT4-fs (loop2): free_blocks=2415919504 [ 34.805894][ T666] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 34.809622][ T670] EXT4-fs (loop2): dirty_blocks=32 [ 34.824737][ T666] EXT4-fs (loop1): This should not happen!! Data will be lost [ 34.824737][ T666] [ 34.826536][ T670] EXT4-fs (loop2): Block reservation details [pid 673] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 689] set_robust_list(0x5555610ee6a0, 24 [pid 676] <... chdir resumed>) = 0 [pid 689] <... set_robust_list resumed>) = 0 [pid 676] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 666] +++ killed by SIGBUS +++ [pid 670] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 689] chdir("./15") = 0 [pid 689] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 689] setpgid(0, 0) = 0 [pid 689] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 689] write(3, "1000", 4) = 4 [pid 689] close(3) = 0 [pid 689] symlink("/dev/binderfs", "./binderfs") = 0 [pid 689] write(1, "executing program\n", 18executing program ) = 18 [pid 689] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 689] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 689] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 689] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 689] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 689] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 689] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[690]}, 88) = 690 [pid 689] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 689] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 689] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 676] <... openat resumed>) = 4 [pid 676] ioctl(4, LOOP_CLR_FD) = 0 [pid 676] close(4) = 0 [pid 676] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 675] <... futex resumed>) = 0 [pid 676] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 675] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... open resumed>) = 4 [pid 675] <... futex resumed>) = 0 [pid 676] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 675] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 676] <... futex resumed>) = 0 [pid 675] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 676] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 675] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... open resumed>) = 5 [pid 675] <... futex resumed>) = 0 [pid 676] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 675] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 676] <... futex resumed>) = 0 [pid 675] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 676] creat("./bus", 000 [pid 675] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... creat resumed>) = 6 [pid 675] <... futex resumed>) = 0 [pid 676] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 675] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 676] <... futex resumed>) = 0 [pid 675] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 676] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 675] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 675] <... futex resumed>) = 0 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=666, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 676] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 675] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 676] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 676] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 675] <... futex resumed>) = 0 [pid 676] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 675] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 675] <... futex resumed>) = 0 [pid 676] pwrite64(6, "+", 1, 0 [pid 675] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 676] <... pwrite64 resumed>) = 1 [pid 676] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 675] <... futex resumed>) = 0 [pid 676] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 675] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 675] <... futex resumed>) = 0 [pid 676] open("./bus", O_RDONLY [pid 675] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 676] <... open resumed>) = 7 [pid 676] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 675] <... futex resumed>) = 0 [pid 676] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 675] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 675] <... futex resumed>) = 0 [pid 676] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 675] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... copy_file_range resumed>) = 1 [pid 675] <... futex resumed>) = 0 [pid 676] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 675] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 676] <... futex resumed>) = 0 [pid 675] <... mmap resumed>) = 0x7fb0838ed000 [pid 676] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 675] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 675] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 675] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[691]}, 88) = 691 [pid 675] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 675] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 675] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 691 attached ./strace-static-x86_64: Process 690 attached [pid 682] <... futex resumed>) = ? [pid 691] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 691] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 691] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 675] <... futex resumed>) = 0 [pid 675] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 675] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 691] <... futex resumed>) = 1 [pid 691] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 690] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 690] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 690] memfd_create("syzkaller", 0) = 3 [pid 690] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 682] +++ killed by SIGBUS +++ [pid 676] <... futex resumed>) = 0 [pid 690] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 673] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 673] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 687] <... futex resumed>) = 0 [pid 673] <... futex resumed>) = 1 [pid 687] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 673] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 687] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 687] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 673] <... futex resumed>) = 0 [ 34.836507][ T674] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 34.841782][ T670] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 34.854384][ T674] EXT4-fs (loop0): This should not happen!! Data will be lost [ 34.854384][ T674] [ 34.874538][ T674] EXT4-fs (loop0): Total free blocks count 0 [ 34.881069][ T674] EXT4-fs (loop0): Free/Dirty block details [pid 687] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./13/binderfs") = 0 [pid 299] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 690] <... write resumed>) = 1048576 [pid 690] munmap(0x7fb07b50e000, 138412032) = 0 [pid 690] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 690] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 690] close(3) = 0 [pid 690] close(4 [pid 675] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 675] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 691] <... futex resumed>) = 0 [pid 675] <... futex resumed>) = 1 [pid 691] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0) = -1 EBADF (Bad file descriptor) [pid 691] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 691] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 675] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [ 34.887339][ T676] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 34.891853][ T690] loop3: detected capacity change from 0 to 2048 [ 34.903312][ T670] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 34.920382][ T674] EXT4-fs (loop0): free_blocks=2415919504 [ 34.926126][ T674] EXT4-fs (loop0): dirty_blocks=32 [ 34.931064][ T674] EXT4-fs (loop0): Block reservation details [pid 690] <... close resumed>) = 0 [pid 690] mkdir("./file1", 0777) = 0 [pid 690] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 674] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 670] +++ killed by SIGBUS +++ [pid 669] +++ killed by SIGBUS +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=669, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=19} --- [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 687] <... futex resumed>) = ? [pid 687] +++ killed by SIGBUS +++ [pid 300] <... restart_syscall resumed>) = 0 [pid 300] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./14/binderfs") = 0 [ 34.935103][ T676] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 34.937365][ T670] EXT4-fs (loop2): This should not happen!! Data will be lost [ 34.937365][ T670] [ 34.949985][ T676] EXT4-fs (loop4): This should not happen!! Data will be lost [ 34.949985][ T676] [ 34.958581][ T674] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 34.971014][ T676] EXT4-fs (loop4): Total free blocks count 0 [ 34.977908][ T674] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 300] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 674] +++ killed by SIGBUS +++ [pid 673] +++ killed by SIGBUS +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=673, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 298] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 690] <... mount resumed>) = 0 [pid 298] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 690] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 690] chdir("./file1") = 0 [pid 690] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 690] ioctl(4, LOOP_CLR_FD) = 0 [pid 690] close(4) = 0 [pid 690] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] <... futex resumed>) = 0 [pid 689] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 689] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] <... futex resumed>) = 1 [pid 690] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 298] <... openat resumed>) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./14/binderfs") = 0 [pid 298] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 676] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 691] <... futex resumed>) = ? [pid 299] newfstatat(AT_FDCWD, "./13/file1", [pid 690] <... open resumed>) = 4 [pid 691] +++ killed by SIGBUS +++ [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 690] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 690] <... futex resumed>) = 1 [pid 689] <... futex resumed>) = 0 [pid 689] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] newfstatat(4, "", [pid 689] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 34.980149][ T676] EXT4-fs (loop4): Free/Dirty block details [ 34.993861][ T674] EXT4-fs (loop0): This should not happen!! Data will be lost [ 34.993861][ T674] [ 34.998590][ T690] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 35.008056][ T676] EXT4-fs (loop4): free_blocks=2415919504 [ 35.023564][ T676] EXT4-fs (loop4): dirty_blocks=32 [ 35.030260][ T676] EXT4-fs (loop4): Block reservation details [ 35.036741][ T676] EXT4-fs (loop4): i_reserved_data_blocks=2 [pid 690] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 299] getdents64(4, [pid 690] <... open resumed>) = 5 [pid 299] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 690] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] getdents64(4, [pid 690] <... futex resumed>) = 1 [pid 299] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 690] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] close(4) = 0 [pid 299] rmdir("./13/file1") = 0 [pid 299] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./13") = 0 [pid 299] mkdir("./14", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3 [pid 689] <... futex resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 694 [pid 300] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 694 attached [pid 689] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] +++ killed by SIGBUS +++ [pid 675] +++ killed by SIGBUS +++ [pid 300] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 689] <... futex resumed>) = 1 [pid 694] set_robust_list(0x5555610ee6a0, 24 [pid 689] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 694] <... set_robust_list resumed>) = 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 694] chdir("./14" [pid 690] <... futex resumed>) = 0 [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=675, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 300] newfstatat(AT_FDCWD, "./14/file1", [pid 694] <... chdir resumed>) = 0 [pid 690] creat("./bus", 000 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 694] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 690] <... creat resumed>) = 6 [pid 300] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 694] <... prctl resumed>) = 0 [pid 690] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 694] setpgid(0, 0 [pid 690] <... futex resumed>) = 1 [pid 689] <... futex resumed>) = 0 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] <... openat resumed>) = 4 [pid 694] <... setpgid resumed>) = 0 [pid 690] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 689] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 300] newfstatat(4, "", [pid 694] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 690] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 689] <... futex resumed>) = 0 [pid 302] <... openat resumed>) = 3 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 694] <... openat resumed>) = 3 [pid 690] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 689] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] newfstatat(3, "", [pid 300] getdents64(4, [pid 694] write(3, "1000", 4 [pid 690] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 690] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] getdents64(3, [pid 300] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 690] <... futex resumed>) = 1 [pid 302] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 690] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 302] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./14/binderfs" [pid 694] <... write resumed>) = 4 [pid 694] close(3 [pid 689] <... futex resumed>) = 0 [pid 300] getdents64(4, [pid 689] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 694] <... close resumed>) = 0 [pid 690] <... futex resumed>) = 0 [pid 689] <... futex resumed>) = 1 [pid 300] close(4 [pid 694] symlink("/dev/binderfs", "./binderfs" [pid 690] pwrite64(6, "+", 1, 0 [pid 689] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] <... pwrite64 resumed>) = 1 [pid 300] <... close resumed>) = 0 [pid 690] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] rmdir("./14/file1" [pid 690] <... futex resumed>) = 1 [pid 689] <... futex resumed>) = 0 [pid 690] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 689] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 690] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 689] <... futex resumed>) = 0 [pid 690] open("./bus", O_RDONLY [pid 689] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] <... open resumed>) = 7 [pid 690] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... rmdir resumed>) = 0 [pid 300] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./14") = 0 [pid 300] mkdir("./15", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3 [pid 694] <... symlink resumed>) = 0 [pid 690] <... futex resumed>) = 1 [pid 689] <... futex resumed>) = 0 executing program [pid 302] <... unlink resumed>) = 0 [pid 300] <... close resumed>) = 0 [pid 298] <... umount2 resumed>) = 0 [pid 694] write(1, "executing program\n", 18 [pid 690] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 689] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 694] <... write resumed>) = 18 [pid 690] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 689] <... futex resumed>) = 0 [pid 300] <... clone resumed>, child_tidptr=0x5555610ee690) = 695 [pid 690] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 689] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 694] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 690] <... copy_file_range resumed>) = 1 [pid 689] <... futex resumed>) = 0 [pid 298] newfstatat(AT_FDCWD, "./14/file1", [pid 690] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 694] <... futex resumed>) = 0 [pid 690] <... futex resumed>) = 0 [pid 694] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, [pid 690] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 689] <... mmap resumed>) = 0x7fb0838ed000 [pid 298] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 694] <... rt_sigaction resumed>NULL, 8) = 0 [pid 689] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 695 attached [pid 694] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 689] <... mprotect resumed>) = 0 [pid 298] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 695] set_robust_list(0x5555610ee6a0, 24 [pid 694] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 689] rt_sigprocmask(SIG_BLOCK, ~[], [pid 298] <... openat resumed>) = 4 [pid 695] <... set_robust_list resumed>) = 0 [pid 694] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 689] <... rt_sigprocmask resumed>[], 8) = 0 [pid 298] newfstatat(4, "", [pid 695] chdir("./15" [pid 694] <... mmap resumed>) = 0x7fb08390e000 [pid 689] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 695] <... chdir resumed>) = 0 [pid 694] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE [pid 298] getdents64(4, ./strace-static-x86_64: Process 696 attached [pid 695] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 694] <... mprotect resumed>) = 0 [pid 689] <... clone3 resumed> => {parent_tid=[696]}, 88) = 696 [pid 298] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 696] set_robust_list(0x7fb08390d9a0, 24 [pid 694] rt_sigprocmask(SIG_BLOCK, ~[], [pid 689] rt_sigprocmask(SIG_SETMASK, [], [pid 298] getdents64(4, [pid 694] <... rt_sigprocmask resumed>[], 8) = 0 [pid 689] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 694] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} [pid 689] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 696] <... set_robust_list resumed>) = 0 [pid 696] rt_sigprocmask(SIG_SETMASK, [], [pid 689] <... futex resumed>) = 0 [pid 298] close(4 [pid 694] <... clone3 resumed> => {parent_tid=[697]}, 88) = 697 [pid 689] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 694] rt_sigprocmask(SIG_SETMASK, [], [pid 298] <... close resumed>) = 0 [pid 694] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 298] rmdir("./14/file1" [pid 694] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 696] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 696] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 695] <... prctl resumed>) = 0 [pid 694] <... futex resumed>) = 0 [pid 298] <... rmdir resumed>) = 0 [pid 697] set_robust_list(0x7fb08392e9a0, 24 [pid 696] <... mmap resumed>) = 0x20000000 [pid 695] setpgid(0, 0 [pid 694] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 298] getdents64(3, [pid 697] <... set_robust_list resumed>) = 0 [pid 695] <... setpgid resumed>) = 0 [pid 298] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 697] rt_sigprocmask(SIG_SETMASK, [], [pid 696] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 696] <... futex resumed>) = 1 [pid 696] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 298] close(3) = 0 [pid 298] rmdir("./14" [pid 697] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 695] <... openat resumed>) = 3 [pid 689] <... futex resumed>) = 0 [pid 298] <... rmdir resumed>) = 0 [pid 689] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] mkdir("./15", 0777 [ 35.047276][ T676] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 35.059792][ T676] EXT4-fs (loop4): This should not happen!! Data will be lost [ 35.059792][ T676] [pid 697] memfd_create("syzkaller", 0 [pid 695] write(3, "1000", 4 [pid 690] <... futex resumed>) = 0 [pid 689] <... futex resumed>) = 1 [pid 298] <... mkdir resumed>) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 698 [pid 697] <... memfd_create resumed>) = 3 [pid 697] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 697] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 697] munmap(0x7fb07b50e000, 138412032) = 0 [pid 697] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 697] ioctl(4, LOOP_SET_FD, 3 [pid 689] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 698 attached [pid 695] <... write resumed>) = 4 [pid 698] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 698] chdir("./15") = 0 [pid 698] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 698] setpgid(0, 0) = 0 [pid 698] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 695] close(3 [pid 697] <... ioctl resumed>) = 0 [pid 698] <... openat resumed>) = 3 [pid 698] write(3, "1000", 4) = 4 [pid 698] close(3) = 0 [pid 698] symlink("/dev/binderfs", "./binderfs") = 0 [pid 697] close(3 [pid 695] <... close resumed>) = 0 executing program [pid 698] write(1, "executing program\n", 18) = 18 [pid 698] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 698] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 698] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 698] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 698] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 698] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 698] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} [pid 695] symlink("/dev/binderfs", "./binderfs" [pid 697] <... close resumed>) = 0 [pid 698] <... clone3 resumed> => {parent_tid=[699]}, 88) = 699 [pid 698] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 698] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 695] <... symlink resumed>) = 0 [pid 697] close(4 [pid 698] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 699 attached [pid 699] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 699] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 695] write(1, "executing program\n", 18executing program ) = 18 [pid 699] memfd_create("syzkaller", 0) = 3 [pid 699] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 302] <... umount2 resumed>) = 0 [pid 302] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./14/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 302] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 302] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 302] close(4) = 0 [pid 302] rmdir("./14/file1") = 0 [pid 302] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./14") = 0 [pid 302] mkdir("./15", 0777) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] close(3) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 700 [pid 699] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576executing program [pid 695] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 700 attached [pid 700] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 700] chdir("./15") = 0 [pid 700] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 700] setpgid(0, 0) = 0 [pid 700] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 700] write(3, "1000", 4) = 4 [pid 700] close(3) = 0 [pid 700] symlink("/dev/binderfs", "./binderfs") = 0 [pid 700] write(1, "executing program\n", 18) = 18 [pid 700] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 700] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 700] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 700] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 700] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 700] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 700] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[701]}, 88) = 701 [pid 700] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 700] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 700] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 699] <... write resumed>) = 1048576 [pid 699] munmap(0x7fb07b50e000, 138412032) = 0 [pid 699] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 699] ioctl(4, LOOP_SET_FD, 3 [pid 695] <... futex resumed>) = 0 [pid 695] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 695] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 695] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 695] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 695] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 695] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[702]}, 88) = 702 [pid 695] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 695] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 695] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 701 attached [pid 701] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 701] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 35.097221][ T690] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 35.107142][ T697] loop1: detected capacity change from 0 to 2048 [ 35.122302][ T690] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 35.134902][ T690] EXT4-fs (loop3): This should not happen!! Data will be lost [ 35.134902][ T690] [pid 701] memfd_create("syzkaller", 0) = 3 [pid 701] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 697] <... close resumed>) = 0 ./strace-static-x86_64: Process 702 attached [pid 697] mkdir("./file1", 0777 [pid 701] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 702] set_robust_list(0x7fb08392e9a0, 24 [pid 697] <... mkdir resumed>) = 0 [pid 699] <... ioctl resumed>) = 0 [pid 699] close(3) = 0 [pid 699] close(4 [pid 689] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 689] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 689] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 701] <... write resumed>) = 1048576 [pid 701] munmap(0x7fb07b50e000, 138412032) = 0 [pid 701] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 701] ioctl(4, LOOP_SET_FD, 3 [pid 696] <... futex resumed>) = 0 [pid 702] <... set_robust_list resumed>) = 0 [pid 697] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 696] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 702] rt_sigprocmask(SIG_SETMASK, [], [pid 696] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 701] <... ioctl resumed>) = 0 [pid 701] close(3) = 0 [pid 701] close(4 [pid 702] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 702] memfd_create("syzkaller", 0) = 3 [pid 702] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 696] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 689] <... futex resumed>) = 0 [pid 702] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 696] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 702] munmap(0x7fb07b50e000, 138412032 [pid 690] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 696] <... futex resumed>) = ? [pid 696] +++ killed by SIGBUS +++ [pid 702] <... munmap resumed>) = 0 [pid 702] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 702] ioctl(4, LOOP_SET_FD, 3 [pid 699] <... close resumed>) = 0 [pid 699] mkdir("./file1", 0777) = 0 [pid 699] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 702] <... ioctl resumed>) = 0 [pid 702] close(3) = 0 [ 35.142869][ T699] loop0: detected capacity change from 0 to 2048 [ 35.144536][ T690] EXT4-fs (loop3): Total free blocks count 0 [ 35.156880][ T690] EXT4-fs (loop3): Free/Dirty block details [ 35.163265][ T690] EXT4-fs (loop3): free_blocks=2415919504 [ 35.169073][ T690] EXT4-fs (loop3): dirty_blocks=32 [ 35.169510][ T701] loop4: detected capacity change from 0 to 2048 [ 35.174514][ T690] EXT4-fs (loop3): Block reservation details [ 35.186416][ T690] EXT4-fs (loop3): i_reserved_data_blocks=2 [pid 702] close(4 [pid 690] +++ killed by SIGBUS +++ [pid 689] +++ killed by SIGBUS +++ [pid 701] <... close resumed>) = 0 [pid 701] mkdir("./file1", 0777) = 0 [pid 701] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 697] <... mount resumed>) = 0 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=689, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 301] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 697] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 301] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 697] <... openat resumed>) = 3 [pid 301] <... openat resumed>) = 3 [pid 697] chdir("./file1") = 0 [pid 697] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 697] ioctl(4, LOOP_CLR_FD [pid 301] newfstatat(3, "", [pid 697] <... ioctl resumed>) = 0 [pid 697] close(4 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 697] <... close resumed>) = 0 [pid 301] getdents64(3, [pid 697] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 697] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 694] <... futex resumed>) = 0 [pid 694] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 694] <... futex resumed>) = 1 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 697] <... futex resumed>) = 0 [pid 694] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 697] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 301] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./15/binderfs") = 0 [pid 301] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 697] <... open resumed>) = 4 [pid 697] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] <... futex resumed>) = 0 [pid 694] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 694] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 697] <... futex resumed>) = 1 [pid 697] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 697] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] <... futex resumed>) = 0 [pid 694] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 694] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 697] <... futex resumed>) = 1 [pid 697] creat("./bus", 000) = 6 [pid 697] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] <... futex resumed>) = 0 [pid 694] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 694] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 697] <... futex resumed>) = 1 [pid 697] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 697] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] <... futex resumed>) = 0 [pid 694] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 694] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 697] <... futex resumed>) = 1 [pid 697] pwrite64(6, "+", 1, 0) = 1 [pid 697] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] <... futex resumed>) = 0 [pid 694] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 694] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 697] <... futex resumed>) = 1 [pid 697] open("./bus", O_RDONLY) = 7 [pid 697] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] <... futex resumed>) = 0 [pid 694] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 694] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 694] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 694] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 694] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 694] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 697] <... futex resumed>) = 1 [pid 697] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 694] <... clone3 resumed> => {parent_tid=[707]}, 88) = 707 [pid 697] <... copy_file_range resumed>) = 1 [pid 694] rt_sigprocmask(SIG_SETMASK, [], [pid 697] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 697] <... futex resumed>) = 0 [pid 694] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 697] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 694] <... futex resumed>) = 0 [pid 694] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 707 attached [pid 707] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 707] rt_sigprocmask(SIG_SETMASK, [], [pid 699] <... mount resumed>) = 0 [pid 707] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 699] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 707] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 699] <... openat resumed>) = 3 [pid 699] chdir("./file1") = 0 [pid 699] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 707] <... mmap resumed>) = 0x20000000 [pid 699] ioctl(4, LOOP_CLR_FD) = 0 [pid 699] close(4) = 0 [pid 699] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 699] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 698] <... futex resumed>) = 0 [pid 707] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 707] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 698] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 698] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] <... futex resumed>) = 0 [pid 699] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 694] <... futex resumed>) = 0 [pid 694] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 35.197080][ T702] loop2: detected capacity change from 0 to 2048 [ 35.197358][ T690] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 35.216120][ T690] EXT4-fs (loop3): This should not happen!! Data will be lost [ 35.216120][ T690] [ 35.217184][ T697] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 694] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] <... open resumed>) = 4 [pid 699] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 698] <... futex resumed>) = 0 [pid 698] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 698] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] <... futex resumed>) = 1 [pid 699] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 699] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 698] <... futex resumed>) = 0 [pid 698] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 698] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] <... futex resumed>) = 1 [pid 699] creat("./bus", 000) = 6 [pid 699] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 698] <... futex resumed>) = 0 [pid 698] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 698] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] <... futex resumed>) = 1 [pid 699] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 699] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 698] <... futex resumed>) = 0 [pid 698] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 698] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] <... futex resumed>) = 1 [pid 699] pwrite64(6, "+", 1, 0) = 1 [pid 699] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 698] <... futex resumed>) = 0 [pid 698] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 702] <... close resumed>) = 0 [pid 698] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] mkdir("./file1", 0777 [pid 701] <... mount resumed>) = 0 [pid 699] <... futex resumed>) = 1 [pid 697] <... futex resumed>) = 0 [pid 702] <... mkdir resumed>) = 0 [pid 702] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 701] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 701] chdir("./file1") = 0 [pid 701] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 701] ioctl(4, LOOP_CLR_FD) = 0 [pid 701] close(4) = 0 [pid 701] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 701] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 699] open("./bus", O_RDONLY) = 7 [pid 699] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 698] <... futex resumed>) = 0 [pid 698] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 698] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 698] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 699] <... futex resumed>) = 1 [pid 698] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 699] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 698] <... mprotect resumed>) = 0 [pid 699] <... copy_file_range resumed>) = 1 [pid 698] rt_sigprocmask(SIG_BLOCK, ~[], [pid 699] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 698] <... rt_sigprocmask resumed>[], 8) = 0 [pid 699] <... futex resumed>) = 0 [pid 698] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 699] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 698] <... clone3 resumed> => {parent_tid=[710]}, 88) = 710 [pid 698] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 698] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 698] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 700] <... futex resumed>) = 0 [pid 700] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 701] <... futex resumed>) = 0 [pid 700] <... futex resumed>) = 1 [pid 701] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 700] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 701] <... open resumed>) = 4 [pid 701] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 700] <... futex resumed>) = 0 [pid 701] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 700] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 701] <... open resumed>) = 5 [pid 700] <... futex resumed>) = 0 [pid 701] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 701] <... futex resumed>) = 0 [pid 700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 701] creat("./bus", 000 [pid 700] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 701] <... creat resumed>) = 6 [pid 700] <... futex resumed>) = 0 [pid 701] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 701] <... futex resumed>) = 0 [pid 700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 701] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 700] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 701] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 700] <... futex resumed>) = 0 [pid 701] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 701] <... futex resumed>) = 0 [pid 700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 701] pwrite64(6, "+", 1, 0 [pid 700] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 701] <... pwrite64 resumed>) = 1 [pid 700] <... futex resumed>) = 0 [pid 701] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 701] <... futex resumed>) = 0 [pid 700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 701] open("./bus", O_RDONLY [pid 700] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 701] <... open resumed>) = 7 [pid 700] <... futex resumed>) = 0 [pid 701] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 701] <... futex resumed>) = 0 [pid 700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 701] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 700] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 701] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 700] <... futex resumed>) = 0 [pid 701] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 700] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 701] <... copy_file_range resumed>) = 1 [pid 700] <... futex resumed>) = 0 [pid 701] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 701] <... futex resumed>) = 0 [pid 700] <... mmap resumed>) = 0x7fb0838ed000 [pid 701] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 700] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 700] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 700] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[711]}, 88) = 711 [pid 700] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 700] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 700] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 710 attached [pid 710] set_robust_list(0x7fb08390d9a0, 24) = 0 [ 35.240344][ T699] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 35.254986][ T701] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 35.266081][ T697] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 35.282221][ T697] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 710] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 710] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 698] <... futex resumed>) = 0 [pid 698] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] <... futex resumed>) = 0 [pid 698] <... futex resumed>) = 1 [pid 698] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 710] <... futex resumed>) = 1 [pid 710] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 711 attached [pid 694] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 301] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 711] set_robust_list(0x7fb08390d9a0, 24 [pid 700] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 694] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 694] <... futex resumed>) = 1 [pid 700] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 698] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 701] <... futex resumed>) = 0 [pid 700] <... futex resumed>) = 1 [pid 698] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] <... futex resumed>) = 0 [pid 701] write(-1, "\x30\x78\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65983 [pid 700] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 698] <... futex resumed>) = 1 [pid 710] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 701] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 698] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 710] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 701] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 701] <... futex resumed>) = 1 [pid 700] <... futex resumed>) = 0 [pid 710] <... futex resumed>) = 1 [pid 701] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 700] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 698] <... futex resumed>) = 0 [pid 710] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 701] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 700] <... futex resumed>) = 0 [pid 701] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 700] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 701] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 711] <... set_robust_list resumed>) = 0 [pid 707] <... futex resumed>) = 0 [pid 701] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] newfstatat(AT_FDCWD, "./15/file1", [pid 711] rt_sigprocmask(SIG_SETMASK, [], [pid 707] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 701] <... futex resumed>) = 1 [pid 700] <... futex resumed>) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 707] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 711] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 701] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 711] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 707] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 707] <... futex resumed>) = 1 [pid 694] <... futex resumed>) = 0 [pid 711] <... mmap resumed>) = 0x20000000 [pid 707] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 711] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [ 35.284060][ T699] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 35.295146][ T697] EXT4-fs (loop1): This should not happen!! Data will be lost [ 35.295146][ T697] [ 35.310132][ T699] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 35.334399][ T699] EXT4-fs (loop0): This should not happen!! Data will be lost [ 35.334399][ T699] [pid 301] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 711] <... futex resumed>) = 0 [pid 301] <... openat resumed>) = 4 [pid 711] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] newfstatat(4, "", [pid 700] exit_group(0 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 711] <... futex resumed>) = ? [pid 701] <... futex resumed>) = ? [pid 700] <... exit_group resumed>) = ? [pid 301] getdents64(4, [pid 711] +++ exited with 0 +++ [pid 701] +++ exited with 0 +++ [pid 699] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 710] <... futex resumed>) = ? [pid 710] +++ killed by SIGBUS +++ [ 35.345204][ T699] EXT4-fs (loop0): Total free blocks count 0 [ 35.351531][ T699] EXT4-fs (loop0): Free/Dirty block details [ 35.358320][ T699] EXT4-fs (loop0): free_blocks=2415919504 [ 35.364687][ T699] EXT4-fs (loop0): dirty_blocks=32 [ 35.369165][ T697] EXT4-fs (loop1): Total free blocks count 0 [ 35.370373][ T699] EXT4-fs (loop0): Block reservation details [ 35.381498][ T699] EXT4-fs (loop0): i_reserved_data_blocks=2 [pid 301] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, [pid 699] +++ killed by SIGBUS +++ [pid 698] +++ killed by SIGBUS +++ [pid 702] <... mount resumed>) = 0 [pid 301] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [ 35.383336][ T700] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 35.389539][ T699] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 35.404367][ T702] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 35.414299][ T699] EXT4-fs (loop0): This should not happen!! Data will be lost [ 35.414299][ T699] [ 35.425268][ T697] EXT4-fs (loop1): Free/Dirty block details [pid 702] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 301] close(4 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=698, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 702] <... openat resumed>) = 3 [pid 301] <... close resumed>) = 0 [pid 298] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW [pid 702] chdir("./file1" [pid 301] rmdir("./15/file1" [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 702] <... chdir resumed>) = 0 [pid 697] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 301] <... rmdir resumed>) = 0 [pid 298] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 702] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 301] getdents64(3, [pid 298] <... openat resumed>) = 3 [pid 702] <... openat resumed>) = 4 [pid 301] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 298] newfstatat(3, "", [pid 702] ioctl(4, LOOP_CLR_FD [pid 301] close(3 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 702] <... ioctl resumed>) = 0 [pid 301] <... close resumed>) = 0 [pid 298] getdents64(3, [pid 702] close(4 [pid 301] rmdir("./15" [pid 298] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 702] <... close resumed>) = 0 [pid 301] <... rmdir resumed>) = 0 [pid 298] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 702] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] mkdir("./16", 0777 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 702] <... futex resumed>) = 1 [pid 695] <... futex resumed>) = 0 [pid 301] <... mkdir resumed>) = 0 [pid 298] newfstatat(AT_FDCWD, "./15/binderfs", [pid 702] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 695] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 702] <... open resumed>) = 4 [pid 695] <... futex resumed>) = 0 [pid 301] <... openat resumed>) = 3 [pid 298] unlink("./15/binderfs" [pid 702] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] ioctl(3, LOOP_CLR_FD [pid 298] <... unlink resumed>) = 0 [ 35.434522][ T700] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 35.440889][ T697] EXT4-fs (loop1): free_blocks=2415919504 [ 35.452619][ T700] EXT4-fs (loop4): This should not happen!! Data will be lost [ 35.452619][ T700] [ 35.458103][ T697] EXT4-fs (loop1): dirty_blocks=32 [ 35.467794][ T700] EXT4-fs (loop4): Total free blocks count 0 [ 35.472886][ T697] EXT4-fs (loop1): Block reservation details [ 35.478915][ T700] EXT4-fs (loop4): Free/Dirty block details [ 35.484545][ T697] EXT4-fs (loop1): i_reserved_data_blocks=2 [pid 702] <... futex resumed>) = 0 [pid 695] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 298] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 702] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 695] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] close(3 [pid 702] <... open resumed>) = 5 [pid 695] <... futex resumed>) = 0 [pid 301] <... close resumed>) = 0 [pid 702] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 702] <... futex resumed>) = 0 [pid 695] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 702] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 695] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 695] <... futex resumed>) = 0 [pid 702] creat("./bus", 000 [pid 695] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... clone resumed>, child_tidptr=0x5555610ee690) = 714 [pid 702] <... creat resumed>) = 6 [pid 702] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 695] <... futex resumed>) = 0 [pid 702] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 695] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 695] <... futex resumed>) = 0 [pid 702] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 695] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 702] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 695] <... futex resumed>) = 0 [pid 702] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 695] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 695] <... futex resumed>) = 0 [pid 702] pwrite64(6, "+", 1, 0 [pid 695] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] <... pwrite64 resumed>) = 1 [pid 702] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 695] <... futex resumed>) = 0 [pid 702] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 695] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 695] <... futex resumed>) = 0 ./strace-static-x86_64: Process 714 attached [pid 707] <... futex resumed>) = ? [pid 702] open("./bus", O_RDONLY [pid 695] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] <... open resumed>) = 7 [pid 702] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 695] <... futex resumed>) = 0 [pid 702] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 695] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 695] <... futex resumed>) = 0 [pid 702] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 695] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... copy_file_range resumed>) = 1 [pid 695] <... futex resumed>) = 0 [pid 702] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 702] <... futex resumed>) = 0 [pid 695] <... mmap resumed>) = 0x7fb0838ed000 [pid 702] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 695] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 695] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 695] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[715]}, 88) = 715 [pid 695] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 695] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 695] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 715 attached [pid 714] set_robust_list(0x5555610ee6a0, 24 [pid 707] +++ killed by SIGBUS +++ [pid 715] set_robust_list(0x7fb08390d9a0, 24 [pid 714] <... set_robust_list resumed>) = 0 [pid 700] +++ exited with 0 +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=700, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- [pid 302] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 302] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./15/binderfs") = 0 [pid 302] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 715] <... set_robust_list resumed>) = 0 [pid 715] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 715] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 695] <... futex resumed>) = 0 [pid 695] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = 0 [ 35.490340][ T700] EXT4-fs (loop4): free_blocks=2415919504 [ 35.501315][ T700] EXT4-fs (loop4): dirty_blocks=32 [ 35.508324][ T700] EXT4-fs (loop4): Block reservation details [ 35.515663][ T700] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 35.522503][ T697] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 executing program [pid 695] <... futex resumed>) = 1 [pid 714] chdir("./16") = 0 [pid 714] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 714] setpgid(0, 0) = 0 [pid 714] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 714] write(3, "1000", 4) = 4 [pid 714] close(3) = 0 [pid 714] symlink("/dev/binderfs", "./binderfs") = 0 [pid 714] write(1, "executing program\n", 18) = 18 [pid 714] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 715] <... futex resumed>) = 1 [pid 714] <... futex resumed>) = 0 [pid 715] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 714] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 714] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 714] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 714] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 714] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 714] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[717]}, 88) = 717 [pid 714] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 714] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 714] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 717 attached [pid 717] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 717] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 717] memfd_create("syzkaller", 0) = 3 [pid 717] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 717] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 695] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 717] <... write resumed>) = 1048576 [pid 697] +++ killed by SIGBUS +++ [pid 694] +++ killed by SIGBUS +++ [pid 717] munmap(0x7fb07b50e000, 138412032) = 0 [pid 717] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 35.532582][ T702] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 35.552086][ T8] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 35.552086][ T702] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 35.552117][ T702] EXT4-fs (loop2): This should not happen!! Data will be lost [ 35.552117][ T702] [ 35.572846][ T8] EXT4-fs (loop4): This should not happen!! Data will be lost [ 35.572846][ T8] [pid 717] ioctl(4, LOOP_SET_FD, 3 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=694, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=17} --- [pid 299] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... umount2 resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./15/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./15/file1" [pid 299] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] <... rmdir resumed>) = 0 [pid 298] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./15") = 0 [pid 298] mkdir("./16", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 718 ./strace-static-x86_64: Process 718 attached [pid 299] <... openat resumed>) = 3 [pid 718] set_robust_list(0x5555610ee6a0, 24 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 718] <... set_robust_list resumed>) = 0 [pid 299] getdents64(3, [pid 702] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 717] <... ioctl resumed>) = 0 [pid 717] close(3) = 0 [pid 717] close(4 [pid 718] chdir("./16" [pid 715] <... futex resumed>) = ? [pid 695] <... futex resumed>) = ? [pid 299] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 718] <... chdir resumed>) = 0 [pid 715] +++ killed by SIGBUS +++ [pid 299] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 718] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 718] <... prctl resumed>) = 0 [pid 299] newfstatat(AT_FDCWD, "./14/binderfs", [pid 718] setpgid(0, 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 718] <... setpgid resumed>) = 0 [pid 299] unlink("./14/binderfs" [pid 718] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 299] <... unlink resumed>) = 0 [pid 718] <... openat resumed>) = 3 [pid 299] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 718] write(3, "1000", 4) = 4 [pid 718] close(3) = 0 [pid 718] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 718] write(1, "executing program\n", 18) = 18 [pid 718] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 718] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 718] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 718] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 718] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 718] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 718] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[719]}, 88) = 719 [pid 718] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 718] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 718] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 719 attached [pid 719] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 719] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 719] memfd_create("syzkaller", 0) = 3 [pid 719] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [ 35.577307][ T702] EXT4-fs (loop2): Total free blocks count 0 [ 35.595342][ T697] EXT4-fs (loop1): This should not happen!! Data will be lost [ 35.595342][ T697] [ 35.596362][ T717] loop3: detected capacity change from 0 to 2048 [ 35.601600][ T702] EXT4-fs (loop2): Free/Dirty block details [ 35.622572][ T702] EXT4-fs (loop2): free_blocks=2415919504 [ 35.628789][ T702] EXT4-fs (loop2): dirty_blocks=32 [ 35.634023][ T702] EXT4-fs (loop2): Block reservation details [ 35.640271][ T702] EXT4-fs (loop2): i_reserved_data_blocks=2 [pid 719] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 719] munmap(0x7fb07b50e000, 138412032) = 0 [pid 719] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 719] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 719] close(3) = 0 [pid 719] close(4executing program [pid 302] <... umount2 resumed>) = 0 [pid 302] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./15/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 302] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 302] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 302] close(4) = 0 [pid 302] rmdir("./15/file1") = 0 [pid 302] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./15") = 0 [pid 302] mkdir("./16", 0777) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] close(3) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 720 ./strace-static-x86_64: Process 720 attached [pid 720] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 720] chdir("./16") = 0 [pid 720] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 720] setpgid(0, 0) = 0 [pid 720] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 720] write(3, "1000", 4) = 4 [pid 720] close(3) = 0 [pid 720] symlink("/dev/binderfs", "./binderfs") = 0 [pid 720] write(1, "executing program\n", 18) = 18 [pid 720] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 720] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 720] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 720] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 720] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 720] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 720] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[721]}, 88) = 721 [pid 720] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 720] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 720] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 721 attached [pid 721] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 721] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 721] memfd_create("syzkaller", 0 [pid 719] <... close resumed>) = 0 [pid 717] <... close resumed>) = 0 [pid 721] <... memfd_create resumed>) = 3 [pid 721] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 719] mkdir("./file1", 0777 [pid 717] mkdir("./file1", 0777 [pid 721] <... mmap resumed>) = 0x7fb07b50e000 [pid 717] <... mkdir resumed>) = 0 [pid 719] <... mkdir resumed>) = 0 [pid 719] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 717] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 702] +++ killed by SIGBUS +++ [pid 695] +++ killed by SIGBUS +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=695, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 721] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./14/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 721] <... write resumed>) = 1048576 [pid 721] munmap(0x7fb07b50e000, 138412032) = 0 [pid 721] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 721] ioctl(4, LOOP_SET_FD, 3 [pid 717] <... mount resumed>) = 0 [pid 300] <... restart_syscall resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 35.659283][ T702] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 35.671446][ T719] loop0: detected capacity change from 0 to 2048 [ 35.678198][ T702] EXT4-fs (loop2): This should not happen!! Data will be lost [ 35.678198][ T702] [ 35.697838][ T717] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 721] <... ioctl resumed>) = 0 [pid 717] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 299] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 717] <... openat resumed>) = 3 [pid 717] chdir("./file1" [pid 299] <... openat resumed>) = 4 [pid 717] <... chdir resumed>) = 0 [pid 299] newfstatat(4, "", [pid 717] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 300] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW [pid 717] <... openat resumed>) = 4 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 717] ioctl(4, LOOP_CLR_FD [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 717] <... ioctl resumed>) = 0 [pid 299] getdents64(4, [pid 300] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 717] close(4) = 0 [pid 300] <... openat resumed>) = 3 [pid 299] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 717] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] newfstatat(3, "", [pid 299] getdents64(4, [pid 717] <... futex resumed>) = 1 [pid 714] <... futex resumed>) = 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 717] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 714] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] getdents64(3, [pid 299] close(4 [pid 717] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 714] <... futex resumed>) = 0 [pid 300] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 714] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... close resumed>) = 0 [pid 717] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 300] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] rmdir("./14/file1" [pid 717] <... open resumed>) = 4 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... rmdir resumed>) = 0 [pid 717] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] newfstatat(AT_FDCWD, "./15/binderfs", [pid 299] getdents64(3, [pid 717] <... futex resumed>) = 1 [pid 714] <... futex resumed>) = 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 717] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 714] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] unlink("./15/binderfs" [pid 299] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 717] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 714] <... futex resumed>) = 0 [pid 717] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 714] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... unlink resumed>) = 0 [pid 299] close(3 [pid 717] <... open resumed>) = 5 [pid 717] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... close resumed>) = 0 [pid 717] <... futex resumed>) = 1 [pid 714] <... futex resumed>) = 0 [pid 717] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 714] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] rmdir("./14" [pid 717] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 714] <... futex resumed>) = 0 [pid 717] creat("./bus", 000 [pid 714] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... rmdir resumed>) = 0 [pid 717] <... creat resumed>) = 6 [pid 299] mkdir("./15", 0777 [pid 717] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 714] <... futex resumed>) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 717] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 714] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 717] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 714] <... futex resumed>) = 0 [pid 717] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 714] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... openat resumed>) = 3 [pid 717] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 299] ioctl(3, LOOP_CLR_FD [pid 717] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 717] <... futex resumed>) = 1 [pid 714] <... futex resumed>) = 0 [pid 299] close(3 [pid 717] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 714] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 717] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 714] <... futex resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 717] pwrite64(6, "+", 1, 0 [pid 714] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 717] <... pwrite64 resumed>) = 1 [pid 717] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 714] <... futex resumed>) = 0 [pid 299] <... clone resumed>, child_tidptr=0x5555610ee690) = 725 [pid 717] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 714] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 717] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 714] <... futex resumed>) = 0 [pid 717] open("./bus", O_RDONLY [pid 714] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 717] <... open resumed>) = 7 [pid 717] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 714] <... futex resumed>) = 0 [pid 717] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 714] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 717] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 714] <... futex resumed>) = 0 [pid 717] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 714] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 717] <... copy_file_range resumed>) = 1 [pid 714] <... futex resumed>) = 0 [pid 717] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 714] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 717] <... futex resumed>) = 0 [pid 714] <... mmap resumed>) = 0x7fb0838ed000 [pid 717] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 714] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 714] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 714] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[727]}, 88) = 727 [pid 714] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 714] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 721] close(3 [pid 714] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 721] <... close resumed>) = 0 ./strace-static-x86_64: Process 725 attached [pid 725] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 725] chdir("./15") = 0 [pid 725] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 725] setpgid(0, 0 [pid 721] close(4) = 0 [pid 721] mkdir("./file1", 0777 [pid 725] <... setpgid resumed>) = 0 [pid 725] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 721] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 727 attached [pid 727] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 727] rt_sigprocmask(SIG_SETMASK, [], [pid 721] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 727] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 727] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 725] <... openat resumed>) = 3 [pid 725] write(3, "1000", 4 [pid 714] <... futex resumed>) = 0 [pid 725] <... write resumed>) = 4 [pid 725] close(3) = 0 [pid 725] symlink("/dev/binderfs", "./binderfs") = 0 [pid 725] write(1, "executing program\n", 18executing program ) = 18 [pid 725] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 725] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 725] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 725] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 725] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 725] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 725] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[728]}, 88) = 728 [pid 725] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 725] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 725] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 728 attached [pid 728] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 728] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 728] memfd_create("syzkaller", 0) = 3 [pid 728] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [ 35.699548][ T721] loop4: detected capacity change from 0 to 2048 [pid 714] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 717] <... futex resumed>) = 0 [pid 714] <... futex resumed>) = 1 [pid 300] <... umount2 resumed>) = 0 [pid 300] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./15/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./15/file1") = 0 [pid 300] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./15") = 0 [pid 300] mkdir("./16", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 729 ./strace-static-x86_64: Process 729 attached [pid 729] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 729] chdir("./16") = 0 [pid 729] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 729] setpgid(0, 0) = 0 [pid 729] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 729] write(3, "1000", 4) = 4 [pid 729] close(3) = 0 executing program [pid 729] symlink("/dev/binderfs", "./binderfs") = 0 [pid 729] write(1, "executing program\n", 18) = 18 [pid 729] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 729] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 729] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 729] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 729] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 729] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 729] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[731]}, 88) = 731 [pid 729] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 729] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 729] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 731 attached [pid 731] set_robust_list(0x7fb08392e9a0, 24 [pid 714] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 731] <... set_robust_list resumed>) = 0 [pid 731] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 731] memfd_create("syzkaller", 0) = 3 [pid 731] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 728] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 731] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 719] <... mount resumed>) = 0 [pid 719] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 719] chdir("./file1") = 0 [pid 719] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 719] ioctl(4, LOOP_CLR_FD) = 0 [pid 719] close(4) = 0 [pid 719] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 718] <... futex resumed>) = 0 [pid 718] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 718] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 719] <... futex resumed>) = 1 [pid 719] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 719] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] <... write resumed>) = 1048576 [pid 718] <... futex resumed>) = 0 [pid 718] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 718] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 719] <... futex resumed>) = 1 [pid 719] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 719] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 718] <... futex resumed>) = 0 [pid 718] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 718] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 719] <... futex resumed>) = 1 [pid 719] creat("./bus", 000) = 6 [pid 719] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 718] <... futex resumed>) = 0 [pid 718] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 718] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 719] <... futex resumed>) = 1 [pid 719] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 719] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 718] <... futex resumed>) = 0 [pid 718] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 718] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 719] <... futex resumed>) = 1 [pid 719] pwrite64(6, "+", 1, 0) = 1 [pid 719] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 718] <... futex resumed>) = 0 [pid 718] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 718] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 719] <... futex resumed>) = 1 [pid 719] open("./bus", O_RDONLY) = 7 [pid 719] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 718] <... futex resumed>) = 0 [pid 718] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 718] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 718] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 718] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 718] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 718] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[734]}, 88) = 734 [pid 718] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 718] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 718] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 719] <... futex resumed>) = 1 [pid 719] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 719] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 35.745457][ T719] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 35.756795][ T717] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 719] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 734 attached [pid 731] <... write resumed>) = 1048576 [pid 728] munmap(0x7fb07b50e000, 138412032 [pid 721] <... mount resumed>) = 0 [pid 734] set_robust_list(0x7fb08390d9a0, 24 [pid 731] munmap(0x7fb07b50e000, 138412032 [pid 728] <... munmap resumed>) = 0 [pid 734] <... set_robust_list resumed>) = 0 [pid 731] <... munmap resumed>) = 0 [pid 728] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 734] rt_sigprocmask(SIG_SETMASK, [], [pid 731] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 728] <... openat resumed>) = 4 [pid 734] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 731] <... openat resumed>) = 4 [pid 728] ioctl(4, LOOP_SET_FD, 3 [pid 734] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 731] ioctl(4, LOOP_SET_FD, 3 [pid 714] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 734] <... mmap resumed>) = 0x20000000 [pid 714] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 721] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 721] chdir("./file1") = 0 [pid 721] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 721] ioctl(4, LOOP_CLR_FD) = 0 [pid 721] close(4 [pid 734] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] <... futex resumed>) = 0 [pid 714] <... futex resumed>) = 1 [pid 734] <... futex resumed>) = 1 [pid 714] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 734] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 727] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 718] <... futex resumed>) = 0 [pid 727] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 718] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [ 35.793620][ T721] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 35.796707][ T717] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 35.817335][ T728] loop1: detected capacity change from 0 to 2048 [ 35.820476][ T717] EXT4-fs (loop3): This should not happen!! Data will be lost [ 35.820476][ T717] [ 35.825081][ T731] loop2: detected capacity change from 0 to 2048 [pid 727] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 719] <... futex resumed>) = 0 [pid 718] <... futex resumed>) = 1 [pid 731] <... ioctl resumed>) = 0 [pid 727] <... futex resumed>) = 1 [pid 718] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 714] <... futex resumed>) = 0 [pid 731] close(3 [pid 727] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 731] <... close resumed>) = 0 [pid 731] close(4 [pid 721] <... close resumed>) = 0 [pid 721] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 721] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 728] <... ioctl resumed>) = 0 [pid 728] close(3) = 0 [pid 728] close(4 [pid 720] <... futex resumed>) = 0 [pid 720] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 721] <... futex resumed>) = 0 [pid 720] <... futex resumed>) = 1 [ 35.843467][ T719] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 35.860500][ T717] EXT4-fs (loop3): Total free blocks count 0 [ 35.862214][ T719] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 35.866967][ T717] EXT4-fs (loop3): Free/Dirty block details [ 35.880065][ T719] EXT4-fs (loop0): This should not happen!! Data will be lost [ 35.880065][ T719] [pid 721] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 721] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 721] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 720] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 718] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 728] <... close resumed>) = 0 [pid 718] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 734] <... futex resumed>) = 0 [pid 728] mkdir("./file1", 0777 [pid 718] <... futex resumed>) = 1 [pid 734] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 728] <... mkdir resumed>) = 0 [pid 718] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 734] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 728] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 734] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 718] <... futex resumed>) = 0 [pid 731] <... close resumed>) = 0 [pid 720] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 734] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 731] mkdir("./file1", 0777 [pid 720] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 717] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 731] <... mkdir resumed>) = 0 [pid 720] <... futex resumed>) = 1 [pid 720] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 731] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 721] <... futex resumed>) = 0 [pid 721] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 721] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 720] <... futex resumed>) = 0 [pid 721] creat("./bus", 000 [pid 720] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 721] <... creat resumed>) = 6 [pid 720] <... futex resumed>) = 0 [pid 721] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 720] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 721] <... futex resumed>) = 0 [pid 720] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 721] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 720] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 721] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 720] <... futex resumed>) = 0 [pid 721] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 720] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 721] <... futex resumed>) = 0 [pid 720] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 721] pwrite64(6, "+", 1, 0 [pid 720] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] <... futex resumed>) = ? [pid 721] <... pwrite64 resumed>) = 1 [pid 720] <... futex resumed>) = 0 [pid 721] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 720] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 721] <... futex resumed>) = 0 [pid 720] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 721] open("./bus", O_RDONLY [pid 720] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 721] <... open resumed>) = 7 [pid 720] <... futex resumed>) = 0 [pid 721] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 720] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 721] <... futex resumed>) = 0 [pid 720] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 721] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 720] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 721] <... copy_file_range resumed>) = 1 [pid 720] <... futex resumed>) = 0 [pid 721] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 720] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 721] <... futex resumed>) = 0 [pid 720] <... futex resumed>) = 0 [pid 721] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 720] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 720] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 720] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 720] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[737]}, 88) = 737 [pid 720] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 720] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 720] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 737 attached [ 35.884051][ T717] EXT4-fs (loop3): free_blocks=2415919504 [ 35.894850][ T719] EXT4-fs (loop0): Total free blocks count 0 [ 35.899342][ T717] EXT4-fs (loop3): dirty_blocks=32 [ 35.907444][ T719] EXT4-fs (loop0): Free/Dirty block details [ 35.910286][ T717] EXT4-fs (loop3): Block reservation details [ 35.922037][ T717] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 35.923061][ T719] EXT4-fs (loop0): free_blocks=2415919504 [ 35.933485][ T719] EXT4-fs (loop0): dirty_blocks=32 [pid 737] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 727] +++ killed by SIGBUS +++ [pid 737] rt_sigprocmask(SIG_SETMASK, [], [pid 728] <... mount resumed>) = 0 [pid 719] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 734] <... futex resumed>) = ? [pid 728] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 737] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 728] <... openat resumed>) = 3 [pid 737] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 737] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] <... openat resumed>) = 4 [pid 719] +++ killed by SIGBUS +++ [pid 728] ioctl(4, LOOP_CLR_FD) = 0 [pid 728] close(4) = 0 [pid 728] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] <... futex resumed>) = 0 [pid 725] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 725] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] <... futex resumed>) = 1 [pid 728] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 728] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] <... futex resumed>) = 0 [pid 725] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 725] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] <... futex resumed>) = 1 [pid 728] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 728] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] <... futex resumed>) = 0 [pid 725] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 725] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] <... futex resumed>) = 1 [pid 728] creat("./bus", 000) = 6 [pid 728] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] <... futex resumed>) = 0 [pid 725] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 725] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] <... futex resumed>) = 1 [pid 728] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 728] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] <... futex resumed>) = 0 [pid 725] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 725] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] <... futex resumed>) = 1 [pid 720] <... futex resumed>) = 0 [pid 720] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 721] <... futex resumed>) = 0 [pid 720] <... futex resumed>) = 1 [pid 737] <... futex resumed>) = 1 [pid 728] pwrite64(6, "+", 1, 0 [pid 720] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 737] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 734] +++ killed by SIGBUS +++ [pid 728] <... pwrite64 resumed>) = 1 [pid 718] +++ killed by SIGBUS +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=718, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 298] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./16/binderfs") = 0 [pid 298] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 717] +++ killed by SIGBUS +++ [pid 714] +++ killed by SIGBUS +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=714, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 731] <... mount resumed>) = 0 [pid 731] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 731] chdir("./file1") = 0 [pid 731] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 731] ioctl(4, LOOP_CLR_FD) = 0 [pid 731] close(4) = 0 [pid 731] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 731] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 728] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 725] <... futex resumed>) = 0 [pid 728] open("./bus", O_RDONLY [pid 725] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] <... open resumed>) = 7 [pid 725] <... futex resumed>) = 0 [pid 728] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] <... futex resumed>) = 0 [pid 725] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 728] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 725] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] <... copy_file_range resumed>) = 1 [pid 725] <... futex resumed>) = 0 [pid 729] <... futex resumed>) = 0 [pid 301] <... restart_syscall resumed>) = 0 [pid 728] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] <... futex resumed>) = 0 [pid 725] <... futex resumed>) = 0 [pid 728] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 725] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 301] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW [pid 725] <... mmap resumed>) = 0x7fb0838ed000 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 725] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 301] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 725] <... mprotect resumed>) = 0 [pid 301] <... openat resumed>) = 3 [pid 725] rt_sigprocmask(SIG_BLOCK, ~[], [pid 301] newfstatat(3, "", [pid 725] <... rt_sigprocmask resumed>[], 8) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 725] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 301] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 725] <... clone3 resumed> => {parent_tid=[740]}, 88) = 740 [pid 301] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 725] rt_sigprocmask(SIG_SETMASK, [], [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 725] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 301] newfstatat(AT_FDCWD, "./16/binderfs", [pid 725] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 725] <... futex resumed>) = 0 [pid 301] unlink("./16/binderfs" [pid 725] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... unlink resumed>) = 0 [ 35.994094][ T721] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 35.997073][ T734] EXT4-fs (loop0): This should not happen!! Data will be lost [ 35.997073][ T734] [ 36.015154][ T731] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 36.021333][ T721] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 301] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 740 attached [pid 731] <... futex resumed>) = 0 [pid 729] <... futex resumed>) = 1 [pid 720] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 720] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] <... futex resumed>) = 0 [pid 720] <... futex resumed>) = 1 [pid 737] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 720] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 737] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 737] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 720] <... futex resumed>) = 0 [pid 737] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 740] set_robust_list(0x7fb08390d9a0, 24 [pid 731] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 729] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 740] <... set_robust_list resumed>) = 0 [pid 740] rt_sigprocmask(SIG_SETMASK, [], [pid 731] <... open resumed>) = 4 [pid 740] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 740] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 740] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 725] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] <... futex resumed>) = 0 [pid 725] <... futex resumed>) = 1 [pid 731] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 731] <... futex resumed>) = 1 [pid 729] <... futex resumed>) = 0 [ 36.044203][ T721] EXT4-fs (loop4): This should not happen!! Data will be lost [ 36.044203][ T721] [ 36.054609][ T721] EXT4-fs (loop4): Total free blocks count 0 [ 36.060588][ T721] EXT4-fs (loop4): Free/Dirty block details [ 36.067217][ T721] EXT4-fs (loop4): free_blocks=2415919504 [ 36.069968][ T728] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, [ 36.072793][ T721] EXT4-fs (loop4): dirty_blocks=32 [ 36.072810][ T721] EXT4-fs (loop4): Block reservation details [pid 731] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 729] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 721] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 731] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 729] <... futex resumed>) = 0 [pid 731] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 729] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 731] <... open resumed>) = 5 [pid 731] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 729] <... futex resumed>) = 0 [pid 731] creat("./bus", 000 [pid 729] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 731] <... creat resumed>) = 6 [pid 729] <... futex resumed>) = 0 [pid 731] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 731] <... futex resumed>) = 0 [pid 729] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 731] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 729] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 731] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 729] <... futex resumed>) = 0 [pid 731] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 731] <... futex resumed>) = 0 [pid 729] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 731] pwrite64(6, "+", 1, 0 [pid 729] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 731] <... pwrite64 resumed>) = 1 [pid 729] <... futex resumed>) = 0 [pid 731] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 731] <... futex resumed>) = 0 [pid 729] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 731] open("./bus", O_RDONLY [pid 729] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 731] <... open resumed>) = 7 [pid 729] <... futex resumed>) = 0 [pid 731] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 731] <... futex resumed>) = 0 [pid 729] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 731] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 729] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 731] <... copy_file_range resumed>) = 1 [pid 729] <... futex resumed>) = 0 [pid 731] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 731] <... futex resumed>) = 0 [pid 729] <... futex resumed>) = 0 [pid 731] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 729] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 729] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 729] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 729] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[741]}, 88) = 741 [pid 729] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 729] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 729] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 737] <... futex resumed>) = ? [pid 737] +++ killed by SIGBUS +++ ./strace-static-x86_64: Process 741 attached [pid 741] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 741] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 741] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 729] <... futex resumed>) = 0 [pid 729] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 731] <... futex resumed>) = 0 [pid 729] <... futex resumed>) = 1 [ 36.080872][ T728] block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 36.082294][ T728] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 36.086358][ T721] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 36.092082][ T728] EXT4-fs (loop1): This should not happen!! Data will be lost [ 36.092082][ T728] [ 36.106866][ T721] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 36.113099][ T728] EXT4-fs (loop1): Total free blocks count 0 [pid 729] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 725] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 301] <... umount2 resumed>) = 0 [pid 298] <... umount2 resumed>) = 0 [pid 741] <... futex resumed>) = 1 [pid 741] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 725] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 721] +++ killed by SIGBUS +++ [pid 720] +++ killed by SIGBUS +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=720, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 302] restart_syscall(<... resuming interrupted clone ...> [pid 740] <... futex resumed>) = 0 [pid 728] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 725] <... futex resumed>) = 1 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 740] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 725] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] newfstatat(AT_FDCWD, "./16/file1", [pid 298] newfstatat(AT_FDCWD, "./16/file1", [pid 740] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 740] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 740] <... futex resumed>) = 1 [pid 725] <... futex resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 740] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] <... openat resumed>) = 4 [pid 298] <... openat resumed>) = 4 [pid 301] newfstatat(4, "", [pid 298] newfstatat(4, "", [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, [pid 298] getdents64(4, [pid 301] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 298] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, [pid 298] getdents64(4, [pid 301] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 298] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 301] close(4 [pid 298] close(4 [pid 301] <... close resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 301] rmdir("./16/file1" [pid 298] rmdir("./16/file1" [pid 301] <... rmdir resumed>) = 0 [pid 298] <... rmdir resumed>) = 0 [pid 301] getdents64(3, [pid 298] getdents64(3, [pid 301] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 298] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 301] close(3 [pid 298] close(3 [pid 301] <... close resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 301] rmdir("./16" [pid 298] rmdir("./16" [pid 301] <... rmdir resumed>) = 0 [pid 298] <... rmdir resumed>) = 0 [pid 301] mkdir("./17", 0777 [pid 298] mkdir("./17", 0777 [pid 301] <... mkdir resumed>) = 0 [pid 298] <... mkdir resumed>) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 301] <... openat resumed>) = 3 [pid 298] <... openat resumed>) = 3 [pid 301] ioctl(3, LOOP_CLR_FD [ 36.120315][ T731] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 36.147434][ T728] EXT4-fs (loop1): Free/Dirty block details [ 36.160982][ T721] EXT4-fs (loop4): This should not happen!! Data will be lost [ 36.160982][ T721] [ 36.175033][ T728] EXT4-fs (loop1): free_blocks=2415919504 [ 36.175060][ T728] EXT4-fs (loop1): dirty_blocks=32 [ 36.175074][ T728] EXT4-fs (loop1): Block reservation details [ 36.175084][ T728] EXT4-fs (loop1): i_reserved_data_blocks=2 [pid 298] ioctl(3, LOOP_CLR_FD [pid 301] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 301] close(3 [pid 298] close(3 [pid 301] <... close resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 302] <... restart_syscall resumed>) = 0 [pid 301] <... clone resumed>, child_tidptr=0x5555610ee690) = 743 [pid 298] <... clone resumed>, child_tidptr=0x5555610ee690) = 742 [pid 740] <... futex resumed>) = ? [pid 740] +++ killed by SIGBUS +++ ./strace-static-x86_64: Process 743 attached ./strace-static-x86_64: Process 742 attached [pid 729] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 743] set_robust_list(0x5555610ee6a0, 24 [pid 742] set_robust_list(0x5555610ee6a0, 24 [pid 729] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] +++ killed by SIGBUS +++ [pid 725] +++ killed by SIGBUS +++ [pid 743] <... set_robust_list resumed>) = 0 [pid 743] chdir("./17") = 0 [pid 743] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 743] setpgid(0, 0) = 0 [pid 743] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 743] write(3, "1000", 4) = 4 [pid 743] close(3) = 0 [pid 743] symlink("/dev/binderfs", "./binderfs") = 0 [pid 743] write(1, "executing program\n", 18executing program ) = 18 [pid 743] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 743] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 743] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 743] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 742] <... set_robust_list resumed>) = 0 [pid 729] <... futex resumed>) = 1 [pid 302] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW [pid 741] <... futex resumed>) = 0 [pid 729] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=725, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 741] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 741] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 741] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 742] chdir("./17" [pid 741] <... futex resumed>) = 1 [pid 729] <... futex resumed>) = 0 [pid 741] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 302] <... openat resumed>) = 3 [pid 742] <... chdir resumed>) = 0 [pid 743] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 743] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 743] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[744]}, 88) = 744 [pid 743] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 743] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 36.182356][ T731] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 36.209288][ T731] EXT4-fs (loop2): This should not happen!! Data will be lost [ 36.209288][ T731] [ 36.213237][ T728] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 36.218952][ T731] EXT4-fs (loop2): Total free blocks count 0 [ 36.232748][ T728] EXT4-fs (loop1): This should not happen!! Data will be lost [ 36.232748][ T728] [pid 743] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 302] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 302] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./16/binderfs"./strace-static-x86_64: Process 744 attached [pid 742] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 302] <... unlink resumed>) = 0 [pid 302] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 744] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 744] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 744] memfd_create("syzkaller", 0) = 3 [pid 744] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 742] <... prctl resumed>) = 0 [pid 742] setpgid(0, 0) = 0 [pid 742] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 299] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW [pid 744] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 742] <... openat resumed>) = 3 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 742] write(3, "1000", 4 [pid 299] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 742] <... write resumed>) = 4 [pid 731] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 742] close(3 [pid 299] <... openat resumed>) = 3 [pid 742] <... close resumed>) = 0 [pid 299] newfstatat(3, "", [pid 742] symlink("/dev/binderfs", "./binderfs" [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 741] <... futex resumed>) = ? [pid 742] <... symlink resumed>) = 0 [pid 299] getdents64(3, [pid 741] +++ killed by SIGBUS +++ executing program [pid 742] write(1, "executing program\n", 18 [pid 299] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 742] <... write resumed>) = 18 [pid 299] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 742] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 742] <... futex resumed>) = 0 [pid 299] newfstatat(AT_FDCWD, "./15/binderfs", [pid 742] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 742] <... rt_sigaction resumed>NULL, 8) = 0 [pid 299] unlink("./15/binderfs" [pid 742] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 299] <... unlink resumed>) = 0 [pid 742] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 299] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 742] <... mmap resumed>) = 0x7fb08390e000 [pid 742] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 742] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 742] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[745]}, 88) = 745 [pid 742] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 742] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 742] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 744] <... write resumed>) = 1048576 [pid 744] munmap(0x7fb07b50e000, 138412032) = 0 [pid 744] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 744] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 745 attached ) = 0 [pid 744] close(3) = 0 [ 36.237345][ T731] EXT4-fs (loop2): Free/Dirty block details [ 36.253152][ T731] EXT4-fs (loop2): free_blocks=2415919504 [ 36.259164][ T731] EXT4-fs (loop2): dirty_blocks=32 [ 36.264269][ T731] EXT4-fs (loop2): Block reservation details [ 36.270885][ T731] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 36.283134][ T731] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 744] close(4) = 0 [pid 744] mkdir("./file1", 0777) = 0 [pid 744] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 745] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 745] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 745] memfd_create("syzkaller", 0) = 3 [pid 731] +++ killed by SIGBUS +++ [pid 729] +++ killed by SIGBUS +++ [pid 745] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=729, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=18} --- [pid 745] <... mmap resumed>) = 0x7fb07b50e000 [pid 745] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./15/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./15/file1") = 0 [pid 299] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./15") = 0 [pid 299] mkdir("./16", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 746 [pid 745] <... write resumed>) = 1048576 [pid 745] munmap(0x7fb07b50e000, 138412032) = 0 [pid 745] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 745] ioctl(4, LOOP_SET_FD, 3 [pid 302] <... umount2 resumed>) = 0 [pid 300] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./16/binderfs") = 0 [pid 300] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 745] <... ioctl resumed>) = 0 [pid 745] close(3) = 0 [pid 745] close(4./strace-static-x86_64: Process 746 attached [pid 746] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 746] chdir("./16") = 0 [pid 746] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 746] setpgid(0, 0) = 0 [pid 746] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 746] write(3, "1000", 4) = 4 [pid 746] close(3) = 0 [pid 746] symlink("/dev/binderfs", "./binderfs") = 0 [pid 746] write(1, "executing program\n", 18) = 18 [pid 746] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 746] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 746] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 746] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 746] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 746] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 746] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[749]}, 88) = 749 [pid 746] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 746] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 746] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 749 attached [pid 749] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 749] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 749] memfd_create("syzkaller", 0) = 3 [pid 749] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 749] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 749] munmap(0x7fb07b50e000, 138412032) = 0 [pid 749] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 749] ioctl(4, LOOP_SET_FD, 3executing program [pid 302] newfstatat(AT_FDCWD, "./16/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 749] <... ioctl resumed>) = 0 [pid 749] close(3) = 0 [pid 749] close(4 [pid 302] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 744] <... mount resumed>) = 0 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 744] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 744] chdir("./file1") = 0 [pid 744] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 744] ioctl(4, LOOP_CLR_FD) = 0 [pid 744] close(4) = 0 [pid 744] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 744] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 743] <... futex resumed>) = 0 [pid 302] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 749] <... close resumed>) = 0 [pid 749] mkdir("./file1", 0777 [pid 743] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... openat resumed>) = 4 [pid 743] <... futex resumed>) = 1 [pid 743] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 36.286631][ T744] loop3: detected capacity change from 0 to 2048 [ 36.295649][ T731] EXT4-fs (loop2): This should not happen!! Data will be lost [ 36.295649][ T731] [ 36.325897][ T745] loop0: detected capacity change from 0 to 2048 [ 36.336218][ T744] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 302] newfstatat(4, "", [pid 749] <... mkdir resumed>) = 0 [pid 749] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(4, [pid 744] <... futex resumed>) = 0 [pid 744] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 302] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 302] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 302] close(4) = 0 [pid 302] rmdir("./16/file1") = 0 [pid 302] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./16" [pid 744] <... open resumed>) = 4 [pid 744] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... rmdir resumed>) = 0 [pid 302] mkdir("./17", 0777 [pid 744] <... futex resumed>) = 1 [pid 744] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 302] <... mkdir resumed>) = 0 [pid 743] <... futex resumed>) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 743] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 302] <... openat resumed>) = 3 [pid 743] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] close(3) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 744] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 744] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 302] <... clone resumed>, child_tidptr=0x5555610ee690) = 750 [pid 744] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 743] <... futex resumed>) = 0 [pid 743] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 743] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 744] creat("./bus", 000) = 6 [pid 744] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 743] <... futex resumed>) = 0 [pid 743] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 743] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 744] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 744] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 743] <... futex resumed>) = 0 [pid 743] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 743] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 744] pwrite64(6, "+", 1, 0) = 1 [pid 744] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 743] <... futex resumed>) = 0 [pid 743] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 743] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 744] open("./bus", O_RDONLY) = 7 [pid 744] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 743] <... futex resumed>) = 0 [pid 744] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 743] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 744] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 743] <... futex resumed>) = 0 [pid 744] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 743] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 743] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 743] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 744] <... copy_file_range resumed>) = 1 [pid 743] <... mprotect resumed>) = 0 [pid 743] rt_sigprocmask(SIG_BLOCK, ~[], [pid 744] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 743] <... rt_sigprocmask resumed>[], 8) = 0 [pid 744] <... futex resumed>) = 0 [pid 743] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0}./strace-static-x86_64: Process 750 attached [pid 744] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 750] set_robust_list(0x5555610ee6a0, 24./strace-static-x86_64: Process 753 attached [pid 753] set_robust_list(0x7fb08390d9a0, 24 [pid 743] <... clone3 resumed> => {parent_tid=[753]}, 88) = 753 [pid 743] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 743] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 743] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 753] <... set_robust_list resumed>) = 0 [pid 753] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 753] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 750] <... set_robust_list resumed>) = 0 [pid 750] chdir("./17") = 0 [pid 750] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 750] setpgid(0, 0) = 0 [pid 750] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 750] write(3, "1000", 4) = 4 [pid 750] close(3 [pid 745] <... close resumed>) = 0 [pid 745] mkdir("./file1", 0777) = 0 [pid 745] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue"executing program [pid 750] <... close resumed>) = 0 [pid 750] symlink("/dev/binderfs", "./binderfs") = 0 [pid 750] write(1, "executing program\n", 18) = 18 [pid 750] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 750] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 750] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 750] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 750] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 750] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 750] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[754]}, 88) = 754 [pid 750] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 750] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 750] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 743] <... futex resumed>) = 0 [pid 743] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 744] <... futex resumed>) = 0 [pid 743] <... futex resumed>) = 1 [pid 743] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... umount2 resumed>) = 0 [pid 300] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 754 attached [pid 754] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 754] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 754] memfd_create("syzkaller", 0) = 3 [pid 754] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 754] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 754] munmap(0x7fb07b50e000, 138412032) = 0 [pid 754] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 754] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 754] close(3) = 0 [pid 754] close(4 [pid 749] <... mount resumed>) = 0 [pid 749] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 749] chdir("./file1") = 0 [pid 749] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 749] ioctl(4, LOOP_CLR_FD) = 0 [ 36.347789][ T749] loop1: detected capacity change from 0 to 2048 [ 36.371748][ T749] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 749] close(4) = 0 [pid 749] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] <... futex resumed>) = 0 [pid 746] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 746] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 749] <... futex resumed>) = 1 [pid 749] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 749] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] <... futex resumed>) = 0 [pid 746] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 746] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 749] <... futex resumed>) = 1 [pid 749] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 749] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] <... futex resumed>) = 0 [pid 746] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 746] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 749] <... futex resumed>) = 1 [pid 749] creat("./bus", 000) = 6 [pid 749] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] <... futex resumed>) = 0 [pid 746] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 746] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./16/file1", [pid 749] <... futex resumed>) = 1 [pid 749] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 749] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] <... futex resumed>) = 0 [pid 746] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 746] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 749] <... futex resumed>) = 1 [pid 749] pwrite64(6, "+", 1, 0) = 1 [pid 749] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] <... futex resumed>) = 0 [pid 746] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 746] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 749] <... futex resumed>) = 1 [pid 749] open("./bus", O_RDONLY) = 7 [pid 749] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] <... futex resumed>) = 0 [pid 746] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] getdents64(4, [pid 746] <... futex resumed>) = 0 [pid 746] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 300] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 746] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 300] getdents64(4, [pid 746] <... mmap resumed>) = 0x7fb0838ed000 [pid 746] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 300] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 746] <... mprotect resumed>) = 0 [pid 300] close(4 [pid 746] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 300] <... close resumed>) = 0 [pid 746] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 300] rmdir("./16/file1" [pid 746] <... clone3 resumed> => {parent_tid=[756]}, 88) = 756 [pid 746] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 746] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 746] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... rmdir resumed>) = 0 [pid 300] getdents64(3, [pid 749] <... futex resumed>) = 1 [pid 300] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 300] close(3 [pid 749] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 300] <... close resumed>) = 0 [pid 300] rmdir("./16" [pid 749] <... copy_file_range resumed>) = 1 [pid 300] <... rmdir resumed>) = 0 [pid 300] mkdir("./17", 0777 [pid 749] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 749] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] <... mkdir resumed>) = 0 [ 36.386382][ T744] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 36.400935][ T754] loop4: detected capacity change from 0 to 2048 [ 36.426211][ T744] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 36.430913][ T745] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 756 attached [pid 743] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 300] <... openat resumed>) = 3 [pid 743] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] ioctl(3, LOOP_CLR_FD [pid 753] <... futex resumed>) = 0 [pid 743] <... futex resumed>) = 1 [pid 300] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 753] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 743] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] close(3 [pid 753] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 300] <... close resumed>) = 0 [pid 753] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 753] <... futex resumed>) = 1 [pid 743] <... futex resumed>) = 0 [pid 753] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] <... clone resumed>, child_tidptr=0x5555610ee690) = 758 [pid 756] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 756] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 756] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 746] <... futex resumed>) = 0 [pid 746] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 746] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 756] <... futex resumed>) = 1 [pid 756] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 754] <... close resumed>) = 0 [pid 749] <... futex resumed>) = 0 [pid 754] mkdir("./file1", 0777./strace-static-x86_64: Process 758 attached ) = 0 [pid 758] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 758] chdir("./17") = 0 [pid 758] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 758] setpgid(0, 0 [pid 754] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue"executing program [pid 758] <... setpgid resumed>) = 0 [pid 745] <... mount resumed>) = 0 [pid 758] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 745] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 758] <... openat resumed>) = 3 [pid 745] <... openat resumed>) = 3 [pid 758] write(3, "1000", 4 [pid 745] chdir("./file1" [pid 758] <... write resumed>) = 4 [pid 745] <... chdir resumed>) = 0 [pid 758] close(3 [pid 745] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 758] <... close resumed>) = 0 [pid 745] <... openat resumed>) = 4 [pid 758] symlink("/dev/binderfs", "./binderfs" [pid 745] ioctl(4, LOOP_CLR_FD [pid 758] <... symlink resumed>) = 0 [pid 745] <... ioctl resumed>) = 0 [pid 758] write(1, "executing program\n", 18 [pid 745] close(4 [pid 758] <... write resumed>) = 18 [pid 746] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 745] <... close resumed>) = 0 [pid 758] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 758] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 758] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 758] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [ 36.438336][ T744] EXT4-fs (loop3): This should not happen!! Data will be lost [ 36.438336][ T744] [ 36.458965][ T744] EXT4-fs (loop3): Total free blocks count 0 [ 36.465338][ T749] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 36.482106][ T744] EXT4-fs (loop3): Free/Dirty block details [pid 758] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 758] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 758] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[759]}, 88) = 759 [pid 758] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 758] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 758] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 746] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 745] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 759 attached [pid 759] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 759] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 759] memfd_create("syzkaller", 0) = 3 [pid 759] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 746] <... futex resumed>) = 1 [pid 745] <... futex resumed>) = 1 [pid 756] <... futex resumed>) = 0 [pid 742] <... futex resumed>) = 0 [pid 742] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 742] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 756] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0) = -1 EBADF (Bad file descriptor) [pid 746] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 745] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 756] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 756] <... futex resumed>) = 0 [pid 745] <... open resumed>) = 4 [pid 756] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 745] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 742] <... futex resumed>) = 0 [pid 745] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 742] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 745] <... open resumed>) = 5 [pid 742] <... futex resumed>) = 0 [pid 745] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 742] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 745] <... futex resumed>) = 0 [pid 742] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 745] creat("./bus", 000 [pid 742] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 745] <... creat resumed>) = 6 [pid 742] <... futex resumed>) = 0 [pid 745] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 742] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 745] <... futex resumed>) = 0 [pid 742] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 745] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 742] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 745] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 742] <... futex resumed>) = 0 [pid 745] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 742] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 745] <... futex resumed>) = 0 [pid 742] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 745] pwrite64(6, "+", 1, 0 [pid 742] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 745] <... pwrite64 resumed>) = 1 [pid 742] <... futex resumed>) = 0 [pid 745] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 742] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 745] <... futex resumed>) = 0 [pid 742] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 745] open("./bus", O_RDONLY [pid 742] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 745] <... open resumed>) = 7 [pid 742] <... futex resumed>) = 0 [pid 745] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 742] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 745] <... futex resumed>) = 0 [pid 742] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 745] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 742] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 745] <... copy_file_range resumed>) = 1 [pid 742] <... futex resumed>) = 0 [pid 745] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 742] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 745] <... futex resumed>) = 0 [pid 742] <... futex resumed>) = 0 [pid 745] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 742] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 745] <... mmap resumed>) = 0x20000000 [pid 744] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [ 36.482259][ T749] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 36.488248][ T744] EXT4-fs (loop3): free_blocks=2415919504 [ 36.510156][ T749] EXT4-fs (loop1): This should not happen!! Data will be lost [ 36.510156][ T749] [ 36.511186][ T744] EXT4-fs (loop3): dirty_blocks=32 [ 36.527760][ T744] EXT4-fs (loop3): Block reservation details [ 36.533852][ T744] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 36.540757][ T749] EXT4-fs (loop1): Total free blocks count 0 [pid 745] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 742] <... futex resumed>) = 0 [pid 753] <... futex resumed>) = ? [pid 742] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 742] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 759] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 753] +++ killed by SIGBUS +++ [pid 759] <... write resumed>) = 1048576 [pid 759] munmap(0x7fb07b50e000, 138412032) = 0 [pid 759] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 36.541991][ T745] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 36.546837][ T749] EXT4-fs (loop1): Free/Dirty block details [ 36.568351][ T744] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 36.570498][ T759] loop2: detected capacity change from 0 to 2048 [ 36.581599][ T749] EXT4-fs (loop1): free_blocks=2415919504 [pid 759] ioctl(4, LOOP_SET_FD, 3 [pid 754] <... mount resumed>) = 0 [pid 754] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 754] chdir("./file1") = 0 [pid 754] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 754] ioctl(4, LOOP_CLR_FD) = 0 [pid 754] close(4) = 0 [pid 754] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 750] <... futex resumed>) = 0 [pid 750] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 750] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 754] <... futex resumed>) = 1 [pid 754] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 759] <... ioctl resumed>) = 0 [pid 759] close(3) = 0 [pid 759] close(4 [pid 742] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 742] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 749] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 742] <... futex resumed>) = 0 [pid 742] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 756] <... futex resumed>) = ? [pid 744] +++ killed by SIGBUS +++ [pid 743] +++ killed by SIGBUS +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=743, si_uid=0, si_status=SIGBUS, si_utime=1, si_stime=19} --- [ 36.588181][ T745] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 36.592577][ T749] EXT4-fs (loop1): dirty_blocks=32 [ 36.592593][ T749] EXT4-fs (loop1): Block reservation details [ 36.592604][ T749] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 36.606652][ T754] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 36.609562][ T744] EXT4-fs (loop3): This should not happen!! Data will be lost [ 36.609562][ T744] [pid 301] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 301] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./17/binderfs") = 0 [pid 301] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 754] <... open resumed>) = 4 [pid 756] +++ killed by SIGBUS +++ [pid 754] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 754] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 750] <... futex resumed>) = 0 [pid 750] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] <... futex resumed>) = 0 [pid 750] <... futex resumed>) = 1 [pid 754] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 750] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 754] <... open resumed>) = 5 [pid 754] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 750] <... futex resumed>) = 0 [pid 754] creat("./bus", 000 [pid 750] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] <... creat resumed>) = 6 [pid 750] <... futex resumed>) = 0 [pid 754] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 750] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 754] <... futex resumed>) = 0 [pid 750] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 754] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 750] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 750] <... futex resumed>) = 0 [pid 754] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 750] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 754] <... futex resumed>) = 0 [pid 750] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 754] pwrite64(6, "+", 1, 0 [pid 750] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] <... pwrite64 resumed>) = 1 [pid 750] <... futex resumed>) = 0 [pid 754] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 750] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 754] <... futex resumed>) = 0 [pid 750] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 754] open("./bus", O_RDONLY [pid 750] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] <... open resumed>) = 7 [pid 750] <... futex resumed>) = 0 [pid 754] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 750] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 754] <... futex resumed>) = 0 [pid 750] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 754] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 750] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] <... copy_file_range resumed>) = 1 [pid 750] <... futex resumed>) = 0 [pid 754] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 750] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] <... futex resumed>) = 0 [pid 750] <... futex resumed>) = 0 [pid 754] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 750] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 750] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 750] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 36.643061][ T745] EXT4-fs (loop0): This should not happen!! Data will be lost [ 36.643061][ T745] [ 36.652907][ T745] EXT4-fs (loop0): Total free blocks count 0 [ 36.655263][ T749] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 36.659191][ T745] EXT4-fs (loop0): Free/Dirty block details [ 36.672126][ T749] EXT4-fs (loop1): This should not happen!! Data will be lost [ 36.672126][ T749] [ 36.677165][ T745] EXT4-fs (loop0): free_blocks=2415919504 [ 36.692024][ T745] EXT4-fs (loop0): dirty_blocks=32 [pid 750] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[762]}, 88) = 762 [pid 750] rt_sigprocmask(SIG_SETMASK, [], [pid 759] <... close resumed>) = 0 [pid 750] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 759] mkdir("./file1", 0777 [pid 750] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 749] +++ killed by SIGBUS +++ [pid 746] +++ killed by SIGBUS +++ [pid 745] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 742] <... mmap resumed>) = 0x7fb0838ed000 [pid 750] <... futex resumed>) = 0 [pid 742] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=746, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- ./strace-static-x86_64: Process 762 attached [pid 759] <... mkdir resumed>) = 0 [pid 750] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 742] <... mprotect resumed>) = ? [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 759] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 762] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 762] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 762] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 750] <... futex resumed>) = 0 [pid 750] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] <... futex resumed>) = 0 [pid 750] <... futex resumed>) = 1 [pid 762] <... futex resumed>) = 1 [pid 745] +++ killed by SIGBUS +++ [pid 742] +++ killed by SIGBUS +++ [pid 762] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] <... restart_syscall resumed>) = 0 [pid 299] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./16/binderfs") = 0 [pid 299] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=742, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 298] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./17/binderfs") = 0 [pid 298] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [ 36.697273][ T745] EXT4-fs (loop0): Block reservation details [ 36.703251][ T745] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 36.712384][ T754] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, [ 36.712383][ T745] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 36.712411][ T745] EXT4-fs (loop0): This should not happen!! Data will be lost [ 36.712411][ T745] [pid 750] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 759] <... mount resumed>) = 0 [pid 759] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 759] chdir("./file1") = 0 [pid 759] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 759] ioctl(4, LOOP_CLR_FD) = 0 [pid 301] <... umount2 resumed>) = 0 [pid 301] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./17/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./17/file1") = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./17") = 0 [pid 301] mkdir("./18", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 765 [pid 759] close(4) = 0 [pid 759] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] <... futex resumed>) = 0 [pid 758] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 758] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 759] <... futex resumed>) = 1 [pid 759] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000./strace-static-x86_64: Process 765 attached ) = 4 executing program [pid 765] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 765] chdir("./18") = 0 [pid 765] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 765] setpgid(0, 0) = 0 [pid 765] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 765] write(3, "1000", 4) = 4 [pid 765] close(3) = 0 [pid 765] symlink("/dev/binderfs", "./binderfs") = 0 [pid 750] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 765] write(1, "executing program\n", 18 [pid 750] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 765] <... write resumed>) = 18 [pid 750] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 765] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 750] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 765] <... futex resumed>) = 0 [pid 762] <... futex resumed>) = 0 [pid 750] <... futex resumed>) = 1 [pid 765] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, [pid 762] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 750] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 765] <... rt_sigaction resumed>NULL, 8) = 0 [pid 762] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 765] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 762] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 765] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 762] <... futex resumed>) = 1 [pid 750] <... futex resumed>) = 0 [pid 765] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 762] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 765] <... mmap resumed>) = 0x7fb08390e000 [pid 765] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 765] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 765] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[766]}, 88) = 766 [pid 765] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 765] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 765] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 759] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 758] <... futex resumed>) = 0 ./strace-static-x86_64: Process 766 attached [pid 759] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 758] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 758] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 766] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 766] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 766] memfd_create("syzkaller", 0) = 3 [pid 766] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 766] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 759] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 759] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 758] <... futex resumed>) = 0 [pid 758] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 759] creat("./bus", 000 [pid 758] <... futex resumed>) = 0 [pid 758] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 759] <... creat resumed>) = 6 [pid 759] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 758] <... futex resumed>) = 0 [pid 758] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 36.720531][ T754] block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 36.746625][ T759] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 36.751312][ T754] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 36.779630][ T754] EXT4-fs (loop4): This should not happen!! Data will be lost [ 36.779630][ T754] [ 36.790046][ T754] EXT4-fs (loop4): Total free blocks count 0 [pid 758] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 766] <... write resumed>) = 1048576 [pid 766] munmap(0x7fb07b50e000, 138412032) = 0 [pid 766] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 766] ioctl(4, LOOP_SET_FD, 3 [pid 759] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 766] <... ioctl resumed>) = 0 [pid 766] close(3) = 0 [pid 766] close(4 [pid 759] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 759] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 766] <... close resumed>) = 0 [pid 766] mkdir("./file1", 0777) = 0 [pid 766] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 759] <... futex resumed>) = 1 [pid 299] <... umount2 resumed>) = 0 [pid 298] <... umount2 resumed>) = 0 [pid 759] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 758] <... futex resumed>) = 0 [pid 758] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 758] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 754] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 762] <... futex resumed>) = ? [pid 762] +++ killed by SIGBUS +++ [pid 759] <... futex resumed>) = 0 [pid 759] pwrite64(6, "+", 1, 0 [pid 299] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 759] <... pwrite64 resumed>) = 1 [pid 759] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 758] <... futex resumed>) = 0 [pid 758] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 758] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 759] open("./bus", O_RDONLY) = 7 [pid 759] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 758] <... futex resumed>) = 0 [pid 758] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 758] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 759] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 758] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 759] <... copy_file_range resumed>) = 1 [pid 758] <... mmap resumed>) = 0x7fb0838ed000 [pid 758] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 759] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] <... mprotect resumed>) = 0 [pid 759] <... futex resumed>) = 0 [pid 758] rt_sigprocmask(SIG_BLOCK, ~[], executing program [], 8) = 0 [pid 758] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[768]}, 88) = 768 [pid 758] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 758] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 758] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 768 attached [pid 768] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 768] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 768] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 758] <... futex resumed>) = 0 [pid 758] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 758] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 768] <... futex resumed>) = 1 [pid 768] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./16/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./16/file1") = 0 [pid 299] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./16") = 0 [pid 299] mkdir("./17", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 769 ./strace-static-x86_64: Process 769 attached [pid 769] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 769] chdir("./17") = 0 [pid 769] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 769] setpgid(0, 0) = 0 [pid 769] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 769] write(3, "1000", 4) = 4 [pid 769] close(3) = 0 [pid 769] symlink("/dev/binderfs", "./binderfs") = 0 [pid 769] write(1, "executing program\n", 18) = 18 [pid 769] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 769] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 769] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 769] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 769] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 769] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 769] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[770]}, 88) = 770 [pid 769] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 769] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 769] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 770 attached [pid 770] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 770] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 770] memfd_create("syzkaller", 0) = 3 [pid 770] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [ 36.796184][ T754] EXT4-fs (loop4): Free/Dirty block details [ 36.804611][ T754] EXT4-fs (loop4): free_blocks=2415919504 [ 36.810513][ T754] EXT4-fs (loop4): dirty_blocks=32 [ 36.814172][ T766] loop3: detected capacity change from 0 to 2048 [ 36.816228][ T754] EXT4-fs (loop4): Block reservation details [ 36.831431][ T754] EXT4-fs (loop4): i_reserved_data_blocks=2 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./17/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 770] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./17/file1") = 0 [pid 298] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./17") = 0 [pid 298] mkdir("./18", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3 [pid 770] <... write resumed>) = 1048576 [pid 770] munmap(0x7fb07b50e000, 138412032) = 0 [pid 770] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 770] ioctl(4, LOOP_SET_FD, 3 [pid 298] <... close resumed>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 770] <... ioctl resumed>) = 0 [pid 770] close(3) = 0 [ 36.847001][ T759] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 36.873819][ T754] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 36.875571][ T770] loop1: detected capacity change from 0 to 2048 [pid 770] close(4executing program [pid 758] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 758] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 768] <... futex resumed>) = 0 [pid 758] <... futex resumed>) = 1 [pid 768] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 758] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 768] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 768] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 758] <... futex resumed>) = 0 [pid 768] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 773 attached [pid 773] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 773] chdir("./18") = 0 [pid 773] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 773] setpgid(0, 0) = 0 [pid 773] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 773] write(3, "1000", 4) = 4 [pid 773] close(3) = 0 [pid 773] symlink("/dev/binderfs", "./binderfs") = 0 [pid 773] write(1, "executing program\n", 18) = 18 [pid 773] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 773] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 773] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 773] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 298] <... clone resumed>, child_tidptr=0x5555610ee690) = 773 [pid 773] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 773] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 773] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[774]}, 88) = 774 [pid 773] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 773] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 773] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 774 attached [pid 766] <... mount resumed>) = 0 [pid 754] +++ killed by SIGBUS +++ [pid 750] +++ killed by SIGBUS +++ [pid 766] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=750, si_uid=0, si_status=SIGBUS, si_utime=1, si_stime=17} --- [pid 766] chdir("./file1" [pid 302] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW [pid 766] <... chdir resumed>) = 0 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 766] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 302] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 766] <... openat resumed>) = 4 [pid 302] <... openat resumed>) = 3 [pid 766] ioctl(4, LOOP_CLR_FD [pid 302] newfstatat(3, "", [pid 766] <... ioctl resumed>) = 0 [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 766] close(4 [pid 302] getdents64(3, [pid 766] <... close resumed>) = 0 [pid 302] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 766] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 766] <... futex resumed>) = 1 [pid 770] <... close resumed>) = 0 [pid 765] <... futex resumed>) = 0 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 770] mkdir("./file1", 0777 [pid 765] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 766] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 302] newfstatat(AT_FDCWD, "./17/binderfs", [pid 766] <... open resumed>) = 4 [pid 302] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 766] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] unlink("./17/binderfs" [pid 766] <... futex resumed>) = 0 [pid 302] <... unlink resumed>) = 0 [pid 766] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 302] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 774] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 774] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 774] memfd_create("syzkaller", 0) = 3 [pid 774] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 770] <... mkdir resumed>) = 0 [pid 766] <... futex resumed>) = 0 [pid 765] <... futex resumed>) = 1 [pid 766] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 770] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 765] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 765] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [ 36.893129][ T759] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 36.895357][ T766] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 36.908214][ T759] EXT4-fs (loop2): This should not happen!! Data will be lost [ 36.908214][ T759] [ 36.917092][ T754] EXT4-fs (loop4): This should not happen!! Data will be lost [ 36.917092][ T754] [ 36.926606][ T759] EXT4-fs (loop2): Total free blocks count 0 [ 36.940838][ T759] EXT4-fs (loop2): Free/Dirty block details [pid 774] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 766] <... futex resumed>) = 0 [pid 765] <... futex resumed>) = 1 [pid 766] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 766] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 766] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 774] <... write resumed>) = 1048576 [pid 774] munmap(0x7fb07b50e000, 138412032) = 0 [pid 774] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 774] ioctl(4, LOOP_SET_FD, 3 [pid 765] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 759] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 765] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 765] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 765] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 768] <... futex resumed>) = ? [pid 768] +++ killed by SIGBUS +++ [pid 774] <... ioctl resumed>) = 0 [pid 766] <... futex resumed>) = 0 [pid 766] creat("./bus", 000) = 6 [pid 766] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 766] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 774] close(3) = 0 [pid 774] close(4 [pid 765] <... futex resumed>) = 0 [pid 765] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 766] <... futex resumed>) = 0 [pid 765] <... futex resumed>) = 1 [pid 766] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 765] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 766] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 766] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 765] <... futex resumed>) = 0 [pid 766] pwrite64(6, "+", 1, 0 [pid 765] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 766] <... pwrite64 resumed>) = 1 [pid 765] <... futex resumed>) = 0 [pid 766] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 765] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 766] <... futex resumed>) = 0 [pid 765] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 766] open("./bus", O_RDONLY [pid 765] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 766] <... open resumed>) = 7 [pid 765] <... futex resumed>) = 0 [pid 766] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 765] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 766] <... futex resumed>) = 0 [pid 765] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 766] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 765] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 766] <... copy_file_range resumed>) = 1 [pid 765] <... futex resumed>) = 0 [pid 766] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 765] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 766] <... futex resumed>) = 0 [pid 765] <... futex resumed>) = 0 [pid 766] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 765] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 765] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 765] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 765] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[775]}, 88) = 775 [pid 765] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 765] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 765] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 775 attached [pid 775] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 775] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 775] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 765] <... futex resumed>) = 0 [pid 765] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 766] <... futex resumed>) = 0 [pid 765] <... futex resumed>) = 1 [pid 765] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... umount2 resumed>) = 0 [pid 302] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./17/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 302] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 302] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 302] close(4) = 0 [pid 302] rmdir("./17/file1") = 0 [pid 302] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./17") = 0 [pid 302] mkdir("./18", 0777) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] close(3) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 776 [pid 775] <... futex resumed>) = 1 [pid 775] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 776 attached [pid 776] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 776] chdir("./18") = 0 [pid 776] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 776] setpgid(0, 0) = 0 [pid 776] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 776] write(3, "1000", 4) = 4 [pid 776] close(3) = 0 [pid 776] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 776] write(1, "executing program\n", 18) = 18 [pid 776] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 776] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 776] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 776] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 776] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 776] rt_sigprocmask(SIG_BLOCK, ~[], [pid 774] <... close resumed>) = 0 [pid 774] mkdir("./file1", 0777 [pid 776] <... rt_sigprocmask resumed>[], 8) = 0 [pid 774] <... mkdir resumed>) = 0 [pid 774] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 776] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[777]}, 88) = 777 [pid 776] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 776] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 776] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 777 attached [pid 777] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 777] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 777] memfd_create("syzkaller", 0) = 3 [pid 777] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 759] +++ killed by SIGBUS +++ [pid 758] +++ killed by SIGBUS +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=758, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=17} --- [pid 300] restart_syscall(<... resuming interrupted clone ...> [ 36.987936][ T766] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 36.988349][ T759] EXT4-fs (loop2): This should not happen!! Data will be lost [ 36.988349][ T759] [ 37.003245][ T766] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 37.024448][ T766] EXT4-fs (loop3): This should not happen!! Data will be lost [ 37.024448][ T766] [ 37.035648][ T766] EXT4-fs (loop3): Total free blocks count 0 [ 37.042128][ T766] EXT4-fs (loop3): Free/Dirty block details [pid 777] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 300] <... restart_syscall resumed>) = 0 [pid 300] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./17/binderfs") = 0 [pid 300] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 777] <... write resumed>) = 1048576 [pid 777] munmap(0x7fb07b50e000, 138412032) = 0 [pid 777] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 777] ioctl(4, LOOP_SET_FD, 3 [pid 766] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 777] <... ioctl resumed>) = 0 [pid 775] <... futex resumed>) = ? [pid 765] <... futex resumed>) = ? [pid 777] close(3) = 0 [pid 777] close(4 [pid 775] +++ killed by SIGBUS +++ [pid 770] <... mount resumed>) = 0 [pid 770] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 770] chdir("./file1") = 0 [pid 770] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 770] ioctl(4, LOOP_CLR_FD) = 0 [pid 770] close(4) = 0 [pid 770] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 770] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 769] <... futex resumed>) = 0 [ 37.048545][ T766] EXT4-fs (loop3): free_blocks=2415919504 [ 37.055488][ T766] EXT4-fs (loop3): dirty_blocks=32 [ 37.060869][ T766] EXT4-fs (loop3): Block reservation details [ 37.066728][ T766] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 37.071890][ T777] loop4: detected capacity change from 0 to 2048 [ 37.074501][ T770] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 37.082266][ T766] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 769] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 770] <... futex resumed>) = 0 [pid 769] <... futex resumed>) = 1 [pid 770] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 769] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 770] <... open resumed>) = 4 [pid 770] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 769] <... futex resumed>) = 0 [pid 770] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 769] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 770] <... open resumed>) = 5 [pid 769] <... futex resumed>) = 0 [pid 770] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 769] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 770] <... futex resumed>) = 0 [pid 769] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 770] creat("./bus", 000 [pid 769] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 770] <... creat resumed>) = 6 [pid 769] <... futex resumed>) = 0 [pid 770] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 769] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 770] <... futex resumed>) = 0 [pid 769] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 770] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 769] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 770] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 769] <... futex resumed>) = 0 [pid 770] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 769] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 770] <... futex resumed>) = 0 [pid 769] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 770] pwrite64(6, "+", 1, 0 [pid 769] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 770] <... pwrite64 resumed>) = 1 [pid 769] <... futex resumed>) = 0 [pid 770] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 769] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 770] <... futex resumed>) = 0 [pid 769] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 770] open("./bus", O_RDONLY [pid 769] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 770] <... open resumed>) = 7 [pid 769] <... futex resumed>) = 0 [pid 770] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 769] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 770] <... futex resumed>) = 0 [pid 769] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 770] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 769] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 770] <... copy_file_range resumed>) = 1 [pid 769] <... futex resumed>) = 0 [pid 770] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 769] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 770] <... futex resumed>) = 0 [pid 769] <... futex resumed>) = 0 [pid 770] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 769] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 769] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 769] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 769] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0}./strace-static-x86_64: Process 780 attached [pid 780] set_robust_list(0x7fb08390d9a0, 24 [pid 769] <... clone3 resumed> => {parent_tid=[780]}, 88) = 780 [pid 780] <... set_robust_list resumed>) = 0 [pid 769] rt_sigprocmask(SIG_SETMASK, [], [pid 766] +++ killed by SIGBUS +++ [pid 765] +++ killed by SIGBUS +++ [pid 780] rt_sigprocmask(SIG_SETMASK, [], [pid 769] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 780] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 769] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 780] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 769] <... futex resumed>) = 0 [pid 780] <... mmap resumed>) = 0x20000000 [pid 769] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 780] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 769] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 780] <... futex resumed>) = 0 [pid 769] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 780] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 769] <... futex resumed>) = 1 [pid 769] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=765, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11} --- [pid 301] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 301] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./18/binderfs") = 0 [pid 301] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 777] <... close resumed>) = 0 [pid 770] <... futex resumed>) = 0 [pid 777] mkdir("./file1", 0777 [pid 774] <... mount resumed>) = 0 [pid 774] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 774] chdir("./file1") = 0 [pid 774] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 774] ioctl(4, LOOP_CLR_FD) = 0 [pid 774] close(4) = 0 [pid 774] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 774] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 777] <... mkdir resumed>) = 0 [pid 777] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 773] <... futex resumed>) = 0 [pid 773] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 773] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 774] <... futex resumed>) = 0 [pid 774] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 774] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 774] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 773] <... futex resumed>) = 0 [pid 773] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 774] <... futex resumed>) = 0 [pid 773] <... futex resumed>) = 1 [pid 774] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 773] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 774] <... open resumed>) = 5 [pid 774] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 773] <... futex resumed>) = 0 [pid 774] creat("./bus", 000 [pid 773] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 774] <... creat resumed>) = 6 [pid 773] <... futex resumed>) = 0 [pid 774] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 773] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 774] <... futex resumed>) = 0 [pid 773] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 774] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 773] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 774] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 773] <... futex resumed>) = 0 [pid 774] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 773] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 774] <... futex resumed>) = 0 [pid 773] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 774] pwrite64(6, "+", 1, 0 [pid 773] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 774] <... pwrite64 resumed>) = 1 [pid 773] <... futex resumed>) = 0 [pid 774] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 773] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 774] <... futex resumed>) = 0 [pid 773] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 774] open("./bus", O_RDONLY [pid 773] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 774] <... open resumed>) = 7 [pid 773] <... futex resumed>) = 0 [pid 774] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 773] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 774] <... futex resumed>) = 0 [pid 773] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 774] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 773] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 774] <... copy_file_range resumed>) = 1 [pid 773] <... futex resumed>) = 0 [pid 774] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 773] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 774] <... futex resumed>) = 0 [pid 773] <... futex resumed>) = 0 [pid 774] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 773] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 773] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 773] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 773] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[783]}, 88) = 783 [pid 773] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 773] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 773] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 783 attached [pid 783] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 783] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 783] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 773] <... futex resumed>) = 0 [pid 773] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 774] <... futex resumed>) = 0 [pid 773] <... futex resumed>) = 1 [pid 773] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... umount2 resumed>) = 0 [pid 769] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 300] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 769] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 780] <... futex resumed>) = 0 [pid 769] <... futex resumed>) = 1 [pid 300] newfstatat(AT_FDCWD, "./17/file1", [pid 301] <... umount2 resumed>) = 0 [pid 783] <... futex resumed>) = 1 [pid 780] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 769] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 780] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 780] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 780] <... futex resumed>) = 1 [pid 769] <... futex resumed>) = 0 [pid 300] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 780] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] <... openat resumed>) = 4 [pid 300] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./17/file1") = 0 [pid 300] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./17") = 0 [pid 300] mkdir("./18", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 785 [ 37.141814][ T770] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 37.157045][ T774] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 37.170589][ T770] EXT4-fs (loop1): This should not happen!! Data will be lost [ 37.170589][ T770] [ 37.181392][ T770] EXT4-fs (loop1): Total free blocks count 0 [ 37.187424][ T770] EXT4-fs (loop1): Free/Dirty block details [ 37.193444][ T770] EXT4-fs (loop1): free_blocks=2415919504 [pid 783] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 785 attached [pid 770] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./18/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./18/file1") = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./18") = 0 [pid 301] mkdir("./19", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 773] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 773] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 773] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 783] <... futex resumed>) = 0 [pid 783] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0) = -1 EBADF (Bad file descriptor) [pid 785] set_robust_list(0x5555610ee6a0, 24 [pid 783] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 780] <... futex resumed>) = ? [pid 783] <... futex resumed>) = 1 [pid 773] <... futex resumed>) = 0 [pid 785] <... set_robust_list resumed>) = 0 [pid 783] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 780] +++ killed by SIGBUS +++ [pid 301] <... openat resumed>) = 3 [ 37.199307][ T770] EXT4-fs (loop1): dirty_blocks=32 [ 37.204453][ T770] EXT4-fs (loop1): Block reservation details [ 37.210469][ T770] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 37.217089][ T774] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 37.229880][ T774] EXT4-fs (loop0): This should not happen!! Data will be lost [ 37.229880][ T774] [ 37.232393][ T777] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. executing program [pid 785] chdir("./18") = 0 [pid 785] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 785] setpgid(0, 0) = 0 [pid 785] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 785] write(3, "1000", 4) = 4 [pid 785] close(3) = 0 [pid 785] symlink("/dev/binderfs", "./binderfs") = 0 [pid 785] write(1, "executing program\n", 18) = 18 [pid 785] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 785] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 785] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 785] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 785] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 785] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 785] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[787]}, 88) = 787 [pid 785] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 785] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 785] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 788 ./strace-static-x86_64: Process 788 attached ./strace-static-x86_64: Process 787 attached [pid 770] +++ killed by SIGBUS +++ [pid 769] +++ killed by SIGBUS +++ [pid 788] set_robust_list(0x5555610ee6a0, 24 [pid 787] set_robust_list(0x7fb08392e9a0, 24 [pid 788] <... set_robust_list resumed>) = 0 [pid 787] <... set_robust_list resumed>) = 0 [pid 777] <... mount resumed>) = 0 [pid 774] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=769, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 788] chdir("./19" [pid 787] rt_sigprocmask(SIG_SETMASK, [], [pid 777] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 783] <... futex resumed>) = ? [pid 788] <... chdir resumed>) = 0 [pid 787] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 777] <... openat resumed>) = 3 [pid 788] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 787] memfd_create("syzkaller", 0 [pid 783] +++ killed by SIGBUS +++ [pid 777] chdir("./file1" [pid 299] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW [pid 788] <... prctl resumed>) = 0 [pid 787] <... memfd_create resumed>) = 3 [pid 788] setpgid(0, 0 [pid 787] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 777] <... chdir resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 788] <... setpgid resumed>) = 0 [pid 787] <... mmap resumed>) = 0x7fb07b50e000 [ 37.239673][ T774] EXT4-fs (loop0): Total free blocks count 0 [ 37.251236][ T770] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 37.255526][ T774] EXT4-fs (loop0): Free/Dirty block details [ 37.255542][ T774] EXT4-fs (loop0): free_blocks=2415919504 [ 37.255556][ T774] EXT4-fs (loop0): dirty_blocks=32 [ 37.255567][ T774] EXT4-fs (loop0): Block reservation details [ 37.287584][ T770] EXT4-fs (loop1): This should not happen!! Data will be lost [ 37.287584][ T770] [pid 788] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 787] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 777] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 299] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 787] <... write resumed>) = 1048576 [pid 787] munmap(0x7fb07b50e000, 138412032) = 0 [pid 787] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 787] ioctl(4, LOOP_SET_FD, 3 [pid 788] <... openat resumed>) = 3 [pid 777] <... openat resumed>) = 4 [pid 299] <... openat resumed>) = 3 [pid 787] <... ioctl resumed>) = 0 [pid 787] close(3) = 0 [pid 787] close(4 [pid 788] write(3, "1000", 4) = 4 [pid 788] close(3) = 0 [pid 788] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 788] write(1, "executing program\n", 18) = 18 [pid 788] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 788] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 788] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 788] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 788] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 788] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 788] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[789]}, 88) = 789 [pid 788] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 788] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 788] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 789 attached [pid 789] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 789] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 789] memfd_create("syzkaller", 0) = 3 [pid 789] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 777] ioctl(4, LOOP_CLR_FD [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 777] <... ioctl resumed>) = 0 [pid 299] getdents64(3, [pid 777] close(4) = 0 [pid 299] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 777] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 774] +++ killed by SIGBUS +++ [pid 773] +++ killed by SIGBUS +++ [pid 299] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 777] <... futex resumed>) = 1 [pid 776] <... futex resumed>) = 0 [pid 777] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 776] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 777] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 776] <... futex resumed>) = 0 [pid 299] newfstatat(AT_FDCWD, "./17/binderfs", [pid 777] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 776] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 777] <... open resumed>) = 4 [pid 777] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] unlink("./17/binderfs" [pid 777] <... futex resumed>) = 1 [pid 776] <... futex resumed>) = 0 [pid 777] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 776] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... unlink resumed>) = 0 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=773, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 777] <... open resumed>) = 5 [pid 776] <... futex resumed>) = 0 [pid 299] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 777] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 776] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 789] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 777] <... futex resumed>) = 0 [pid 777] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 776] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 776] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 777] <... futex resumed>) = 0 [pid 776] <... futex resumed>) = 1 [pid 777] creat("./bus", 000 [pid 776] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 777] <... creat resumed>) = 6 [pid 777] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 776] <... futex resumed>) = 0 [pid 298] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW [pid 777] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 776] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 777] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 776] <... futex resumed>) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 777] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 776] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 777] <... futex resumed>) = 0 [pid 776] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 298] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 777] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 776] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 777] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 776] <... futex resumed>) = 0 [pid 777] pwrite64(6, "+", 1, 0 [pid 776] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 777] <... pwrite64 resumed>) = 1 [pid 777] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 776] <... futex resumed>) = 0 [pid 777] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 776] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 777] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 776] <... futex resumed>) = 0 [pid 777] open("./bus", O_RDONLY [pid 776] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 777] <... open resumed>) = 7 [pid 777] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 776] <... futex resumed>) = 0 [pid 777] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 776] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 777] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 776] <... futex resumed>) = 0 [pid 777] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 776] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 777] <... copy_file_range resumed>) = 1 [pid 776] <... futex resumed>) = 0 [pid 298] <... openat resumed>) = 3 [pid 777] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 776] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 777] <... futex resumed>) = 0 [pid 776] <... mmap resumed>) = 0x7fb0838ed000 [pid 298] newfstatat(3, "", [pid 777] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 776] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 776] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 776] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 298] getdents64(3, [pid 776] <... clone3 resumed> => {parent_tid=[790]}, 88) = 790 [pid 776] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 298] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 776] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 776] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 790 attached [pid 298] unlink("./18/binderfs" [pid 790] set_robust_list(0x7fb08390d9a0, 24 [pid 298] <... unlink resumed>) = 0 [pid 790] <... set_robust_list resumed>) = 0 [pid 298] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 790] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 790] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 776] <... futex resumed>) = 0 [pid 776] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 777] <... futex resumed>) = 0 [ 37.289854][ T774] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 37.309427][ T774] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 37.317349][ T787] loop2: detected capacity change from 0 to 2048 [ 37.322375][ T774] EXT4-fs (loop0): This should not happen!! Data will be lost [ 37.322375][ T774] [pid 776] <... futex resumed>) = 1 [pid 776] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 790] <... futex resumed>) = 1 [pid 790] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 789] <... write resumed>) = 1048576 [pid 789] munmap(0x7fb07b50e000, 138412032) = 0 [pid 789] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 789] ioctl(4, LOOP_SET_FD, 3 [pid 787] <... close resumed>) = 0 [pid 787] mkdir("./file1", 0777) = 0 [pid 787] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 789] <... ioctl resumed>) = 0 [pid 789] close(3) = 0 [pid 789] close(4 [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./17/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [ 37.350684][ T777] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 37.366726][ T777] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 37.369295][ T789] loop3: detected capacity change from 0 to 2048 [ 37.378812][ T777] EXT4-fs (loop4): This should not happen!! Data will be lost [ 37.378812][ T777] [ 37.394489][ T777] EXT4-fs (loop4): Total free blocks count 0 [pid 299] close(4) = 0 [pid 299] rmdir("./17/file1") = 0 [pid 299] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 776] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./18/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./18/file1") = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./17") = 0 [pid 298] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./18") = 0 [pid 776] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] mkdir("./18", 0777) = 0 [pid 298] mkdir("./19", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 299] ioctl(3, LOOP_CLR_FD [pid 298] <... openat resumed>) = 3 [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 793 [pid 299] <... clone resumed>, child_tidptr=0x5555610ee690) = 792 [pid 789] <... close resumed>) = 0 [pid 776] <... futex resumed>) = 1 [pid 790] <... futex resumed>) = 0 [pid 790] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 776] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 792 attached [pid 790] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 777] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- ./strace-static-x86_64: Process 793 attached [pid 792] set_robust_list(0x5555610ee6a0, 24 [pid 789] mkdir("./file1", 0777 [pid 776] <... futex resumed>) = ? [pid 793] set_robust_list(0x5555610ee6a0, 24 [pid 792] <... set_robust_list resumed>) = 0 [pid 790] +++ killed by SIGBUS +++ [pid 789] <... mkdir resumed>) = 0 [pid 793] <... set_robust_list resumed>) = 0 [pid 792] chdir("./18" [pid 787] <... mount resumed>) = 0 [pid 787] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 787] chdir("./file1") = 0 [pid 787] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 793] chdir("./19" [pid 792] <... chdir resumed>) = 0 [pid 789] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 793] <... chdir resumed>) = 0 [pid 792] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 787] ioctl(4, LOOP_CLR_FD [pid 793] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 792] <... prctl resumed>) = 0 [pid 793] <... prctl resumed>) = 0 [pid 792] setpgid(0, 0 [pid 787] <... ioctl resumed>) = 0 [pid 793] setpgid(0, 0 [pid 792] <... setpgid resumed>) = 0 [pid 793] <... setpgid resumed>) = 0 [pid 792] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 787] close(4 [pid 793] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 792] <... openat resumed>) = 3 [pid 793] <... openat resumed>) = 3 [pid 792] write(3, "1000", 4 [pid 787] <... close resumed>) = 0 [pid 793] write(3, "1000", 4 [pid 792] <... write resumed>) = 4 [pid 793] <... write resumed>) = 4 [pid 792] close(3 [pid 787] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] close(3 [pid 792] <... close resumed>) = 0 [pid 787] <... futex resumed>) = 1 [pid 785] <... futex resumed>) = 0 [pid 793] <... close resumed>) = 0 [pid 792] symlink("/dev/binderfs", "./binderfs" [pid 787] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 785] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] symlink("/dev/binderfs", "./binderfs" [pid 792] <... symlink resumed>) = 0 [pid 787] <... open resumed>) = 4 [pid 785] <... futex resumed>) = 0 [pid 793] <... symlink resumed>) = 0 executing program [pid 792] write(1, "executing program\n", 18 [pid 787] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 785] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}executing program [pid 793] write(1, "executing program\n", 18 [pid 792] <... write resumed>) = 18 [pid 787] <... futex resumed>) = 0 [pid 785] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 793] <... write resumed>) = 18 [pid 792] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 787] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 785] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] <... futex resumed>) = 0 [pid 787] <... open resumed>) = 5 [pid 785] <... futex resumed>) = 0 [pid 793] <... futex resumed>) = 0 [pid 792] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, [pid 787] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [ 37.400376][ T777] EXT4-fs (loop4): Free/Dirty block details [ 37.406337][ T777] EXT4-fs (loop4): free_blocks=2415919504 [ 37.412005][ T777] EXT4-fs (loop4): dirty_blocks=32 [ 37.417065][ T777] EXT4-fs (loop4): Block reservation details [ 37.422911][ T777] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 37.430466][ T787] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 37.431835][ T777] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 785] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 793] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, [pid 792] <... rt_sigaction resumed>NULL, 8) = 0 [pid 787] <... futex resumed>) = 0 [pid 785] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 777] +++ killed by SIGBUS +++ [pid 776] +++ killed by SIGBUS +++ [pid 793] <... rt_sigaction resumed>NULL, 8) = 0 [pid 792] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 787] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 785] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=776, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 793] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 792] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 787] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 785] <... futex resumed>) = 0 [pid 302] restart_syscall(<... resuming interrupted clone ...> [pid 793] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 792] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 787] creat("./bus", 000 [pid 785] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 793] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 792] <... mmap resumed>) = 0x7fb08390e000 [pid 787] <... creat resumed>) = 6 [pid 793] <... mmap resumed>) = 0x7fb08390e000 [pid 792] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE [pid 787] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE [pid 792] <... mprotect resumed>) = 0 [pid 787] <... futex resumed>) = 1 [pid 785] <... futex resumed>) = 0 [pid 793] <... mprotect resumed>) = 0 [pid 792] rt_sigprocmask(SIG_BLOCK, ~[], [pid 787] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 785] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] rt_sigprocmask(SIG_BLOCK, ~[], [pid 792] <... rt_sigprocmask resumed>[], 8) = 0 [pid 787] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 785] <... futex resumed>) = 0 [pid 302] <... restart_syscall resumed>) = 0 [pid 793] <... rt_sigprocmask resumed>[], 8) = 0 [pid 792] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} [pid 787] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 785] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 793] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} [pid 787] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 792] <... clone3 resumed> => {parent_tid=[795]}, 88) = 795 [pid 787] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW [pid 793] <... clone3 resumed> => {parent_tid=[796]}, 88) = 796 [pid 792] rt_sigprocmask(SIG_SETMASK, [], [pid 787] <... futex resumed>) = 1 [pid 785] <... futex resumed>) = 0 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 793] rt_sigprocmask(SIG_SETMASK, [], [pid 792] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 787] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 785] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 793] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 792] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 787] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 785] <... futex resumed>) = 0 [pid 302] <... openat resumed>) = 3 [pid 793] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] <... futex resumed>) = 0 [pid 787] pwrite64(6, "+", 1, 0 [pid 785] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] newfstatat(3, "", [pid 793] <... futex resumed>) = 0 [pid 792] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 787] <... pwrite64 resumed>) = 1 [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 793] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 787] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] getdents64(3, [pid 787] <... futex resumed>) = 1 [pid 785] <... futex resumed>) = 0 [pid 302] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 787] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 785] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 787] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 785] <... futex resumed>) = 0 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 787] open("./bus", O_RDONLY [pid 785] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] newfstatat(AT_FDCWD, "./18/binderfs", [pid 787] <... open resumed>) = 7 [pid 302] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 787] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] unlink("./18/binderfs"./strace-static-x86_64: Process 795 attached [pid 787] <... futex resumed>) = 1 [pid 785] <... futex resumed>) = 0 [pid 302] <... unlink resumed>) = 0 [pid 787] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 785] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 796 attached [pid 795] set_robust_list(0x7fb08392e9a0, 24 [pid 787] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 785] <... futex resumed>) = 0 [pid 796] set_robust_list(0x7fb08392e9a0, 24 [pid 795] <... set_robust_list resumed>) = 0 [pid 796] <... set_robust_list resumed>) = 0 [pid 795] rt_sigprocmask(SIG_SETMASK, [], [pid 796] rt_sigprocmask(SIG_SETMASK, [], [pid 795] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 796] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 795] memfd_create("syzkaller", 0 [pid 787] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 785] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 796] memfd_create("syzkaller", 0 [pid 795] <... memfd_create resumed>) = 3 [pid 787] <... copy_file_range resumed>) = 1 [pid 785] <... futex resumed>) = 0 [pid 796] <... memfd_create resumed>) = 3 [pid 795] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 787] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 785] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 796] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 795] <... mmap resumed>) = 0x7fb07b50e000 [pid 787] <... futex resumed>) = 0 [pid 796] <... mmap resumed>) = 0x7fb07b50e000 [pid 795] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 787] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 785] <... mmap resumed>) = 0x7fb0838ed000 [pid 785] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 785] rt_sigprocmask(SIG_BLOCK, ~[], [pid 795] <... write resumed>) = 1048576 [pid 795] munmap(0x7fb07b50e000, 138412032) = 0 [pid 795] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 37.452943][ T777] EXT4-fs (loop4): This should not happen!! Data will be lost [ 37.452943][ T777] [pid 795] ioctl(4, LOOP_SET_FD, 3 [pid 796] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 789] <... mount resumed>) = 0 [pid 785] <... rt_sigprocmask resumed>[], 8) = 0 [pid 785] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[799]}, 88) = 799 [pid 785] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 785] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 785] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 796] <... write resumed>) = 1048576 [pid 796] munmap(0x7fb07b50e000, 138412032) = 0 [pid 796] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 796] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 799 attached [pid 795] <... ioctl resumed>) = 0 [pid 789] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 799] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 799] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 799] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 785] <... futex resumed>) = 0 [pid 785] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 787] <... futex resumed>) = 0 [pid 785] <... futex resumed>) = 1 [pid 799] <... futex resumed>) = 1 [pid 796] <... ioctl resumed>) = 0 [pid 795] close(3 [pid 789] <... openat resumed>) = 3 [pid 785] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... umount2 resumed>) = 0 [pid 302] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./18/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 302] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(4, [pid 799] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 302] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 302] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 302] close(4) = 0 [pid 302] rmdir("./18/file1") = 0 [pid 302] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./18") = 0 [pid 302] mkdir("./19", 0777) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] close(3) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 800 [pid 795] <... close resumed>) = 0 ./strace-static-x86_64: Process 800 attached [pid 796] close(3 [pid 795] close(4 [pid 796] <... close resumed>) = 0 [pid 796] close(4 [pid 789] chdir("./file1") = 0 [pid 789] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 789] ioctl(4, LOOP_CLR_FD) = 0 [pid 789] close(4) = 0 [pid 789] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 788] <... futex resumed>) = 0 [pid 788] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 788] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 789] <... futex resumed>) = 1 [pid 789] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [ 37.500323][ T789] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 37.501444][ T795] loop1: detected capacity change from 0 to 2048 [ 37.517786][ T796] loop0: detected capacity change from 0 to 2048 [ 37.520924][ T787] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 789] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 788] <... futex resumed>) = 0 [pid 788] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 788] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 789] <... futex resumed>) = 1 [pid 789] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 789] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 800] set_robust_list(0x5555610ee6a0, 24 [pid 788] <... futex resumed>) = 0 [pid 788] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 800] <... set_robust_list resumed>) = 0 [pid 788] <... futex resumed>) = 0 [pid 788] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 789] <... futex resumed>) = 1 [pid 789] creat("./bus", 000) = 6 [pid 789] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 788] <... futex resumed>) = 0 [pid 788] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 788] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 789] <... futex resumed>) = 1 [pid 789] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 789] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 788] <... futex resumed>) = 0 [pid 788] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 788] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 789] <... futex resumed>) = 1 [pid 789] pwrite64(6, "+", 1, 0) = 1 [pid 789] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 788] <... futex resumed>) = 0 [pid 789] open("./bus", O_RDONLY [pid 788] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 789] <... open resumed>) = 7 [pid 788] <... futex resumed>) = 0 [pid 789] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 788] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 789] <... futex resumed>) = 0 [pid 788] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 789] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 788] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 789] <... copy_file_range resumed>) = 1 [pid 788] <... futex resumed>) = 0 [pid 789] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 788] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 789] <... futex resumed>) = 0 [pid 788] <... futex resumed>) = 0 [pid 789] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 788] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 788] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 788] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 788] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[801]}, 88) = 801 [pid 788] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 788] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 788] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 800] chdir("./19"executing program ./strace-static-x86_64: Process 801 attached ) = 0 [pid 800] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 800] setpgid(0, 0) = 0 [pid 800] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 800] write(3, "1000", 4) = 4 [pid 800] close(3) = 0 [pid 800] symlink("/dev/binderfs", "./binderfs") = 0 [pid 800] write(1, "executing program\n", 18) = 18 [pid 800] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 800] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 800] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 800] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 800] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 800] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 800] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[802]}, 88) = 802 [pid 800] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 800] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 800] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 801] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 801] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 801] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 788] <... futex resumed>) = 0 [pid 788] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 788] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 801] <... futex resumed>) = 1 [pid 801] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 802 attached [pid 802] set_robust_list(0x7fb08392e9a0, 24 [pid 789] <... futex resumed>) = 0 [pid 802] <... set_robust_list resumed>) = 0 [pid 802] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 802] memfd_create("syzkaller", 0) = 3 [pid 802] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 802] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 802] munmap(0x7fb07b50e000, 138412032) = 0 [pid 802] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 802] ioctl(4, LOOP_SET_FD, 3 [pid 785] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 37.539007][ T787] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 37.551395][ T787] EXT4-fs (loop2): This should not happen!! Data will be lost [ 37.551395][ T787] [ 37.561199][ T787] EXT4-fs (loop2): Total free blocks count 0 [ 37.567459][ T787] EXT4-fs (loop2): Free/Dirty block details [ 37.574176][ T789] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 37.585948][ T802] loop4: detected capacity change from 0 to 2048 [ 37.589492][ T787] EXT4-fs (loop2): free_blocks=2415919504 [pid 785] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 802] <... ioctl resumed>) = 0 [pid 802] close(3) = 0 [pid 802] close(4 [pid 799] <... futex resumed>) = 0 [pid 785] <... futex resumed>) = 1 [pid 799] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 788] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 799] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 788] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 801] <... futex resumed>) = 0 [pid 799] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 788] <... futex resumed>) = 1 [pid 801] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 799] <... futex resumed>) = 0 [pid 788] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 801] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 799] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 801] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 788] <... futex resumed>) = 0 [pid 801] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 785] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 796] <... close resumed>) = 0 [pid 795] <... close resumed>) = 0 [pid 787] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 785] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 796] mkdir("./file1", 0777 [pid 795] mkdir("./file1", 0777 [pid 796] <... mkdir resumed>) = 0 [pid 795] <... mkdir resumed>) = 0 [pid 796] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 795] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 799] <... futex resumed>) = ? [pid 799] +++ killed by SIGBUS +++ [ 37.596041][ T789] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 37.600844][ T787] EXT4-fs (loop2): dirty_blocks=32 [ 37.613966][ T789] EXT4-fs (loop3): This should not happen!! Data will be lost [ 37.613966][ T789] [ 37.618570][ T787] EXT4-fs (loop2): Block reservation details [ 37.629494][ T789] EXT4-fs (loop3): Total free blocks count 0 [ 37.633427][ T787] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 37.639447][ T789] EXT4-fs (loop3): Free/Dirty block details [pid 802] <... close resumed>) = 0 [pid 802] mkdir("./file1", 0777) = 0 [pid 802] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 795] <... mount resumed>) = 0 [pid 795] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 795] chdir("./file1") = 0 [pid 795] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 795] ioctl(4, LOOP_CLR_FD) = 0 [pid 795] close(4) = 0 [pid 795] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 795] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 792] <... futex resumed>) = 0 [pid 792] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 787] +++ killed by SIGBUS +++ [pid 785] +++ killed by SIGBUS +++ [pid 795] <... futex resumed>) = 0 [pid 792] <... futex resumed>) = 1 [pid 795] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 792] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=785, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 795] <... open resumed>) = 4 [pid 300] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW [pid 795] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 795] <... futex resumed>) = 1 [pid 792] <... futex resumed>) = 0 [pid 300] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 795] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 792] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... openat resumed>) = 3 [pid 795] <... open resumed>) = 5 [pid 792] <... futex resumed>) = 0 [pid 300] newfstatat(3, "", [pid 795] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 795] <... futex resumed>) = 0 [pid 792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] getdents64(3, [pid 795] creat("./bus", 000 [pid 792] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 795] <... creat resumed>) = 6 [pid 792] <... futex resumed>) = 0 [pid 300] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 795] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 795] <... futex resumed>) = 0 [pid 792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] newfstatat(AT_FDCWD, "./18/binderfs", [pid 795] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 792] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 795] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 792] <... futex resumed>) = 0 [pid 300] unlink("./18/binderfs" [pid 795] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... unlink resumed>) = 0 [pid 795] <... futex resumed>) = 0 [pid 792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 795] pwrite64(6, "+", 1, 0 [pid 792] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 795] <... pwrite64 resumed>) = 1 [pid 792] <... futex resumed>) = 0 [pid 795] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 795] <... futex resumed>) = 0 [pid 792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 795] open("./bus", O_RDONLY [pid 792] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 795] <... open resumed>) = 7 [pid 792] <... futex resumed>) = 0 [pid 795] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 789] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 801] <... futex resumed>) = ? [pid 795] <... futex resumed>) = 0 [pid 795] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 801] +++ killed by SIGBUS +++ [pid 792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 37.650837][ T789] EXT4-fs (loop3): free_blocks=2415919504 [ 37.657068][ T789] EXT4-fs (loop3): dirty_blocks=32 [ 37.657912][ T795] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 37.663729][ T787] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 37.677332][ T789] EXT4-fs (loop3): Block reservation details [ 37.685808][ T787] EXT4-fs (loop2): This should not happen!! Data will be lost [ 37.685808][ T787] [pid 802] <... mount resumed>) = 0 [pid 792] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 795] <... futex resumed>) = 0 [pid 792] <... futex resumed>) = 1 [pid 795] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 792] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 795] <... copy_file_range resumed>) = 1 [pid 792] <... futex resumed>) = 0 [pid 795] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 795] <... futex resumed>) = 0 [pid 792] <... mmap resumed>) = 0x7fb0838ed000 [pid 795] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 792] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 792] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 792] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[807]}, 88) = 807 [pid 792] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 792] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 792] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 802] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 802] chdir("./file1") = 0 [pid 802] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 802] ioctl(4, LOOP_CLR_FD) = 0 [pid 802] close(4) = 0 [pid 802] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 800] <... futex resumed>) = 0 [pid 800] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 800] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 802] <... futex resumed>) = 1 [pid 802] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 802] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 800] <... futex resumed>) = 0 [pid 800] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 800] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 802] <... futex resumed>) = 1 [pid 802] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000./strace-static-x86_64: Process 807 attached ) = 5 [pid 789] +++ killed by SIGBUS +++ [pid 788] +++ killed by SIGBUS +++ [pid 807] set_robust_list(0x7fb08390d9a0, 24 [pid 802] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=788, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 807] <... set_robust_list resumed>) = 0 [pid 802] <... futex resumed>) = 1 [pid 800] <... futex resumed>) = 0 [pid 301] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW [pid 800] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 800] <... futex resumed>) = 0 [pid 301] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 807] rt_sigprocmask(SIG_SETMASK, [], [pid 802] creat("./bus", 000 [pid 800] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... openat resumed>) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, [pid 807] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 301] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 802] <... creat resumed>) = 6 [pid 301] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 807] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 802] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] unlink("./19/binderfs") = 0 [pid 301] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 807] <... mmap resumed>) = 0x20000000 [pid 802] <... futex resumed>) = 1 [pid 800] <... futex resumed>) = 0 [pid 800] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 807] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 802] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 800] <... futex resumed>) = 0 [pid 807] <... futex resumed>) = 1 [pid 802] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 800] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 792] <... futex resumed>) = 0 [pid 792] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 795] <... futex resumed>) = 0 [ 37.691397][ T789] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 37.709035][ T802] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 37.710020][ T789] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 37.732213][ T789] EXT4-fs (loop3): This should not happen!! Data will be lost [ 37.732213][ T789] [pid 792] <... futex resumed>) = 1 [pid 807] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 802] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 802] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 792] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 800] <... futex resumed>) = 0 [pid 800] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... umount2 resumed>) = 0 [pid 802] <... futex resumed>) = 0 [pid 800] <... futex resumed>) = 1 [pid 802] pwrite64(6, "+", 1, 0 [pid 800] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 802] <... pwrite64 resumed>) = 1 [pid 802] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 800] <... futex resumed>) = 0 [pid 802] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 800] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 802] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 800] <... futex resumed>) = 0 [pid 802] open("./bus", O_RDONLY [pid 800] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 802] <... open resumed>) = 7 [pid 802] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 800] <... futex resumed>) = 0 [pid 802] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 800] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 802] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 800] <... futex resumed>) = 0 [pid 802] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 800] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 802] <... copy_file_range resumed>) = 1 [pid 800] <... futex resumed>) = 0 [pid 802] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 800] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 802] <... futex resumed>) = 0 [pid 800] <... mmap resumed>) = 0x7fb0838ed000 [pid 802] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 800] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 800] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 800] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[810]}, 88) = 810 [pid 800] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 800] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 800] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./18/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./18/file1") = 0 [pid 300] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./18") = 0 [pid 300] mkdir("./19", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 811 ./strace-static-x86_64: Process 811 attached [pid 811] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 811] chdir("./19") = 0 [pid 811] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 811] setpgid(0, 0) = 0 [pid 811] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 811] write(3, "1000", 4) = 4 [pid 811] close(3) = 0 [pid 811] symlink("/dev/binderfs", "./binderfs") = 0 [pid 811] write(1, "executing program\n", 18executing program ) = 18 [pid 811] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 37.753561][ T795] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 37.775782][ T795] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 37.779368][ T796] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 811] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 811] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 811] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 811] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 811] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 811] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[812]}, 88) = 812 [pid 811] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 811] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 811] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 812 attached [pid 812] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 812] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 812] memfd_create("syzkaller", 0) = 3 [pid 812] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 301] <... umount2 resumed>) = 0 [pid 812] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 792] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 792] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 807] <... futex resumed>) = 0 [pid 792] <... futex resumed>) = 1 [pid 807] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0) = -1 EBADF (Bad file descriptor) [pid 792] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 807] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 807] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./19/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./19/file1") = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./19" [pid 812] <... write resumed>) = 1048576 [pid 812] munmap(0x7fb07b50e000, 138412032 [pid 301] <... rmdir resumed>) = 0 [pid 812] <... munmap resumed>) = 0 [pid 301] mkdir("./20", 0777 [pid 812] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 812] ioctl(4, LOOP_SET_FD, 3 [pid 301] <... mkdir resumed>) = 0 [ 37.788112][ T795] EXT4-fs (loop1): This should not happen!! Data will be lost [ 37.788112][ T795] [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 812] <... ioctl resumed>) = 0 [pid 812] close(3 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 813 ./strace-static-x86_64: Process 810 attached [pid 812] <... close resumed>) = 0 [pid 812] close(4 [pid 810] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 810] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 810] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 800] <... futex resumed>) = 0 [pid 800] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 802] <... futex resumed>) = 0 [pid 800] <... futex resumed>) = 1 [pid 800] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 810] <... futex resumed>) = 1 [pid 810] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 813 attached [pid 813] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 813] chdir("./20") = 0 [pid 813] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 813] setpgid(0, 0) = 0 [pid 813] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 813] write(3, "1000", 4) = 4 [pid 813] close(3) = 0 [pid 813] symlink("/dev/binderfs", "./binderfs") = 0 [pid 813] write(1, "executing program\n", 18executing program ) = 18 [pid 813] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 813] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 813] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 813] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 813] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 813] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 813] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[815]}, 88) = 815 [pid 813] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 813] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 813] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 796] <... mount resumed>) = 0 [pid 796] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 796] chdir("./file1") = 0 [pid 796] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 796] ioctl(4, LOOP_CLR_FD) = 0 [pid 796] close(4) = 0 [pid 796] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] <... futex resumed>) = 0 [pid 793] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 793] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 796] <... futex resumed>) = 1 [pid 796] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 796] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] <... futex resumed>) = 0 [pid 793] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 793] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 796] <... futex resumed>) = 1 [pid 796] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 796] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] <... futex resumed>) = 0 [pid 793] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 793] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 815 attached [pid 796] <... futex resumed>) = 1 [pid 796] creat("./bus", 000) = 6 [ 37.828478][ T812] loop2: detected capacity change from 0 to 2048 [ 37.835581][ T795] EXT4-fs (loop1): Total free blocks count 0 [ 37.841531][ T795] EXT4-fs (loop1): Free/Dirty block details [ 37.845138][ T802] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 37.847968][ T795] EXT4-fs (loop1): free_blocks=2415919504 [ 37.867591][ T795] EXT4-fs (loop1): dirty_blocks=32 [ 37.872985][ T795] EXT4-fs (loop1): Block reservation details [pid 815] set_robust_list(0x7fb08392e9a0, 24 [pid 796] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 795] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 815] <... set_robust_list resumed>) = 0 [pid 815] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 815] memfd_create("syzkaller", 0) = 3 [pid 815] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 815] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 796] <... futex resumed>) = 1 [pid 796] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 815] <... write resumed>) = 1048576 [pid 815] munmap(0x7fb07b50e000, 138412032) = 0 [pid 815] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 815] ioctl(4, LOOP_SET_FD, 3 [pid 807] <... futex resumed>) = ? [pid 793] <... futex resumed>) = 0 [pid 815] <... ioctl resumed>) = 0 [pid 815] close(3) = 0 [pid 815] close(4 [pid 807] +++ killed by SIGBUS +++ [ 37.879191][ T795] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 37.880080][ T802] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 37.895620][ T815] loop3: detected capacity change from 0 to 2048 [ 37.897379][ T802] EXT4-fs (loop4): This should not happen!! Data will be lost [ 37.897379][ T802] [ 37.906304][ T795] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 812] <... close resumed>) = 0 [pid 800] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 793] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 812] mkdir("./file1", 0777 [pid 795] +++ killed by SIGBUS +++ [pid 792] +++ killed by SIGBUS +++ [pid 800] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 800] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 796] <... futex resumed>) = 0 [pid 793] <... futex resumed>) = 1 [pid 796] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 793] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 796] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 796] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 793] <... futex resumed>) = 0 [pid 796] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 793] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 796] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 793] <... futex resumed>) = 0 [pid 812] <... mkdir resumed>) = 0 [pid 810] <... futex resumed>) = 0 [pid 796] pwrite64(6, "+", 1, 0 [pid 793] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 796] <... pwrite64 resumed>) = 1 [pid 796] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 793] <... futex resumed>) = 0 [pid 796] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 793] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 796] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 793] <... futex resumed>) = 0 [pid 796] open("./bus", O_RDONLY [pid 793] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 796] <... open resumed>) = 7 [pid 796] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 793] <... futex resumed>) = 0 [pid 796] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 793] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 796] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 793] <... futex resumed>) = 0 [pid 812] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 810] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 796] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 793] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=792, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 796] <... copy_file_range resumed>) = 1 [pid 793] <... futex resumed>) = 0 [pid 796] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 815] <... close resumed>) = 0 [pid 796] <... futex resumed>) = 0 [pid 793] <... mmap resumed>) = 0x7fb0838ed000 [pid 815] mkdir("./file1", 0777 [pid 796] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 793] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 815] <... mkdir resumed>) = 0 [pid 793] <... mprotect resumed>) = 0 [pid 815] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 793] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 810] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 793] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 299] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW [pid 793] <... clone3 resumed> => {parent_tid=[816]}, 88) = 816 [pid 793] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 810] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 793] <... futex resumed>) = 0 [pid 793] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 816 attached [pid 810] <... futex resumed>) = 1 [pid 800] <... futex resumed>) = 0 [pid 810] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 816] set_robust_list(0x7fb08390d9a0, 24 [pid 299] <... openat resumed>) = 3 [pid 816] <... set_robust_list resumed>) = 0 [pid 816] rt_sigprocmask(SIG_SETMASK, [], [pid 299] newfstatat(3, "", [pid 816] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 816] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 299] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./18/binderfs") = 0 [pid 299] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 816] <... mmap resumed>) = 0x20000000 [pid 816] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] <... futex resumed>) = 0 [pid 793] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 796] <... futex resumed>) = 0 [pid 793] <... futex resumed>) = 1 [pid 793] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 816] <... futex resumed>) = 1 [ 37.913123][ T802] EXT4-fs (loop4): Total free blocks count 0 [ 37.924681][ T795] EXT4-fs (loop1): This should not happen!! Data will be lost [ 37.924681][ T795] [ 37.930862][ T802] EXT4-fs (loop4): Free/Dirty block details [ 37.946708][ T802] EXT4-fs (loop4): free_blocks=2415919504 [ 37.952373][ T802] EXT4-fs (loop4): dirty_blocks=32 [ 37.960733][ T796] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 816] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 793] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 793] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 793] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 816] <... futex resumed>) = 0 [pid 816] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0) = -1 EBADF (Bad file descriptor) [pid 816] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 816] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 793] <... futex resumed>) = 1 [pid 793] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [ 37.976089][ T796] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 37.976614][ T802] EXT4-fs (loop4): Block reservation details [ 37.988496][ T796] EXT4-fs (loop0): This should not happen!! Data will be lost [ 37.988496][ T796] [ 38.000385][ T815] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 38.003811][ T796] EXT4-fs (loop0): Total free blocks count 0 [ 38.020235][ T796] EXT4-fs (loop0): Free/Dirty block details [pid 796] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 816] <... futex resumed>) = ? [pid 815] <... mount resumed>) = 0 [pid 815] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 815] chdir("./file1") = 0 [pid 815] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 815] ioctl(4, LOOP_CLR_FD) = 0 [pid 815] close(4) = 0 [pid 815] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 813] <... futex resumed>) = 0 [pid 813] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 813] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] <... futex resumed>) = 1 [pid 815] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 815] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 813] <... futex resumed>) = 0 [pid 813] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 813] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] <... futex resumed>) = 1 [pid 815] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 815] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 813] <... futex resumed>) = 0 [pid 813] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 815] <... futex resumed>) = 1 [pid 813] <... futex resumed>) = 0 [pid 815] creat("./bus", 000 [pid 813] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] <... creat resumed>) = 6 [pid 815] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 813] <... futex resumed>) = 0 [pid 815] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 813] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 815] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 813] <... futex resumed>) = 0 [pid 815] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 813] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 816] +++ killed by SIGBUS +++ [pid 815] <... futex resumed>) = 0 [pid 813] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 815] pwrite64(6, "+", 1, 0 [pid 813] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 812] <... mount resumed>) = 0 [pid 802] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 812] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 810] <... futex resumed>) = ? [pid 812] <... openat resumed>) = 3 [pid 810] +++ killed by SIGBUS +++ [ 38.026280][ T796] EXT4-fs (loop0): free_blocks=2415919504 [ 38.032968][ T796] EXT4-fs (loop0): dirty_blocks=32 [ 38.038414][ T796] EXT4-fs (loop0): Block reservation details [ 38.039417][ T812] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 38.044439][ T796] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 38.060098][ T802] EXT4-fs (loop4): i_reserved_data_blocks=2 [pid 812] chdir("./file1" [pid 815] <... pwrite64 resumed>) = 1 [pid 813] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 813] <... futex resumed>) = 0 [pid 815] open("./bus", O_RDONLY [pid 813] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 815] <... open resumed>) = 7 [pid 813] <... futex resumed>) = 0 [pid 815] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 813] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] <... futex resumed>) = 0 [pid 813] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 815] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 813] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 815] <... copy_file_range resumed>) = 1 [pid 813] <... futex resumed>) = 0 [pid 815] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 813] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 815] <... futex resumed>) = 0 [pid 813] <... futex resumed>) = 0 [pid 815] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 813] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 813] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 813] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 813] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[821]}, 88) = 821 [pid 813] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 813] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 813] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 821 attached [pid 821] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 821] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 821] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 813] <... futex resumed>) = 0 [pid 813] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 815] <... futex resumed>) = 0 [pid 813] <... futex resumed>) = 1 [pid 813] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 812] <... chdir resumed>) = 0 [pid 821] <... futex resumed>) = 1 [pid 821] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 812] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 802] +++ killed by SIGBUS +++ [pid 800] +++ killed by SIGBUS +++ [pid 299] <... umount2 resumed>) = 0 [pid 796] +++ killed by SIGBUS +++ [pid 793] +++ killed by SIGBUS +++ [ 38.069388][ T796] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 38.076180][ T802] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 38.086171][ T815] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 38.094180][ T802] EXT4-fs (loop4): This should not happen!! Data will be lost [ 38.094180][ T802] [ 38.109018][ T796] EXT4-fs (loop0): This should not happen!! Data will be lost [ 38.109018][ T796] [pid 812] <... openat resumed>) = 4 [pid 812] ioctl(4, LOOP_CLR_FD) = 0 [pid 812] close(4) = 0 [pid 299] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 812] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 811] <... futex resumed>) = 0 [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=800, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=793, si_uid=0, si_status=SIGBUS, si_utime=1, si_stime=15} --- [pid 812] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 811] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] newfstatat(AT_FDCWD, "./18/file1", [pid 298] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW [pid 812] <... open resumed>) = 4 [pid 811] <... futex resumed>) = 0 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 812] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 811] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 299] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 812] <... futex resumed>) = 0 [pid 811] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 302] <... openat resumed>) = 3 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... openat resumed>) = 3 [pid 812] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 811] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] newfstatat(3, "", [pid 299] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] newfstatat(3, "", [pid 812] <... open resumed>) = 5 [pid 811] <... futex resumed>) = 0 [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] <... openat resumed>) = 4 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 812] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 811] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] getdents64(3, [pid 299] newfstatat(4, "", [pid 298] getdents64(3, [pid 812] <... futex resumed>) = 0 [pid 811] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 302] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 812] creat("./bus", 000 [pid 811] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] getdents64(4, [pid 298] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 812] <... creat resumed>) = 6 [pid 811] <... futex resumed>) = 0 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 812] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 811] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] newfstatat(AT_FDCWD, "./19/binderfs", [pid 299] getdents64(4, [pid 298] newfstatat(AT_FDCWD, "./19/binderfs", [pid 812] <... futex resumed>) = 0 [pid 811] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 302] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 812] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 811] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] unlink("./19/binderfs" [pid 299] close(4 [pid 298] unlink("./19/binderfs" [pid 812] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 811] <... futex resumed>) = 0 [pid 302] <... unlink resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 298] <... unlink resumed>) = 0 [pid 812] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 811] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] rmdir("./18/file1" [pid 298] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 812] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 299] <... rmdir resumed>) = 0 [pid 812] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] getdents64(3, [pid 813] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 812] <... futex resumed>) = 1 [pid 811] <... futex resumed>) = 0 [pid 299] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 813] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 812] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 811] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] close(3 [pid 821] <... futex resumed>) = 0 [pid 813] <... futex resumed>) = 1 [pid 812] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 811] <... futex resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 821] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 813] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 812] pwrite64(6, "+", 1, 0 [pid 811] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] rmdir("./18" [pid 821] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 812] <... pwrite64 resumed>) = 1 [pid 299] <... rmdir resumed>) = 0 [pid 821] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 812] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] mkdir("./19", 0777 [pid 821] <... futex resumed>) = 1 [pid 813] <... futex resumed>) = 0 [pid 812] <... futex resumed>) = 1 [pid 811] <... futex resumed>) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 821] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 812] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 811] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 812] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 811] <... futex resumed>) = 0 [pid 299] <... openat resumed>) = 3 [pid 812] open("./bus", O_RDONLY [pid 811] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] ioctl(3, LOOP_CLR_FD [pid 812] <... open resumed>) = 7 [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 812] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] close(3 [pid 812] <... futex resumed>) = 1 [pid 811] <... futex resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 812] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 811] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 812] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 811] <... futex resumed>) = 0 [pid 812] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 811] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... clone resumed>, child_tidptr=0x5555610ee690) = 822 [pid 812] <... copy_file_range resumed>) = 1 [pid 811] <... futex resumed>) = 0 [pid 812] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 811] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 822 attached [pid 815] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 812] <... futex resumed>) = 0 [pid 811] <... mmap resumed>) = 0x7fb0838ed000 [pid 812] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 811] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 822] set_robust_list(0x5555610ee6a0, 24) = 0 executing program [pid 822] chdir("./19" [pid 821] <... futex resumed>) = ? [pid 811] rt_sigprocmask(SIG_BLOCK, ~[], [pid 822] <... chdir resumed>) = 0 [pid 811] <... rt_sigprocmask resumed>[], 8) = 0 [pid 822] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 811] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 821] +++ killed by SIGBUS +++ [pid 822] <... prctl resumed>) = 0 [pid 822] setpgid(0, 0) = 0 [pid 822] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 822] write(3, "1000", 4) = 4 [pid 822] close(3) = 0 [pid 822] symlink("/dev/binderfs", "./binderfs") = 0 [pid 822] write(1, "executing program\n", 18) = 18 [pid 822] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 822] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 822] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 822] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 822] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 822] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 822] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[824]}, 88) = 824 [pid 822] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 822] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 822] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 823 attached [pid 823] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 823] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 38.121923][ T815] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 38.139338][ T815] EXT4-fs (loop3): This should not happen!! Data will be lost [ 38.139338][ T815] [ 38.148884][ T815] EXT4-fs (loop3): Total free blocks count 0 [ 38.154667][ T815] EXT4-fs (loop3): Free/Dirty block details [ 38.160481][ T815] EXT4-fs (loop3): free_blocks=2415919504 [ 38.166656][ T815] EXT4-fs (loop3): dirty_blocks=32 [ 38.171626][ T815] EXT4-fs (loop3): Block reservation details [pid 823] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 824 attached [pid 811] <... clone3 resumed> => {parent_tid=[823]}, 88) = 823 [pid 302] <... umount2 resumed>) = 0 [pid 811] rt_sigprocmask(SIG_SETMASK, [], [pid 302] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 811] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 811] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] newfstatat(AT_FDCWD, "./19/file1", [pid 823] <... futex resumed>) = 0 [pid 811] <... futex resumed>) = 1 [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 823] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 811] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 823] <... mmap resumed>) = 0x20000000 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 823] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 823] <... futex resumed>) = 1 [pid 811] <... futex resumed>) = 0 [pid 302] <... openat resumed>) = 4 [pid 823] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 811] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] newfstatat(4, "", [pid 812] <... futex resumed>) = 0 [pid 811] <... futex resumed>) = 1 [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 824] set_robust_list(0x7fb08392e9a0, 24 [pid 811] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] getdents64(4, [pid 298] <... umount2 resumed>) = 0 [pid 824] <... set_robust_list resumed>) = 0 [pid 302] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 298] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 824] rt_sigprocmask(SIG_SETMASK, [], [pid 302] getdents64(4, [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 824] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 302] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 298] newfstatat(AT_FDCWD, "./19/file1", [pid 824] memfd_create("syzkaller", 0 [pid 302] close(4 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 824] <... memfd_create resumed>) = 3 [pid 815] +++ killed by SIGBUS +++ [pid 813] +++ killed by SIGBUS +++ [pid 302] <... close resumed>) = 0 [pid 298] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 824] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 302] rmdir("./19/file1" [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=813, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 824] <... mmap resumed>) = 0x7fb07b50e000 [pid 302] <... rmdir resumed>) = 0 [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 298] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 824] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 302] getdents64(3, [pid 298] <... openat resumed>) = 4 [pid 302] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 298] newfstatat(4, "", [pid 302] close(3 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] <... close resumed>) = 0 [pid 298] getdents64(4, [pid 302] rmdir("./19" [pid 298] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 302] <... rmdir resumed>) = 0 [pid 298] getdents64(4, [pid 302] mkdir("./20", 0777 [pid 298] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 302] <... mkdir resumed>) = 0 [pid 301] <... restart_syscall resumed>) = 0 [pid 298] close(4 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 298] <... close resumed>) = 0 [pid 302] <... openat resumed>) = 3 [pid 298] rmdir("./19/file1" [pid 302] ioctl(3, LOOP_CLR_FD [pid 301] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... rmdir resumed>) = 0 [pid 302] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] getdents64(3, [pid 302] close(3 [pid 301] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 302] <... close resumed>) = 0 [pid 301] <... openat resumed>) = 3 [pid 298] close(3 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] newfstatat(3, "", [pid 298] <... close resumed>) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 38.177502][ T815] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 38.188848][ T815] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 38.198548][ T812] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 38.201417][ T815] EXT4-fs (loop3): This should not happen!! Data will be lost [ 38.201417][ T815] [pid 298] rmdir("./19" [pid 302] <... clone resumed>, child_tidptr=0x5555610ee690) = 825 [pid 301] getdents64(3, [pid 298] <... rmdir resumed>) = 0 [pid 301] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 298] mkdir("./20", 0777 [pid 301] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... mkdir resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 301] newfstatat(AT_FDCWD, "./20/binderfs", [pid 298] <... openat resumed>) = 3 [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] ioctl(3, LOOP_CLR_FD [pid 301] unlink("./20/binderfs" [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 301] <... unlink resumed>) = 0 [pid 298] close(3 [pid 301] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... close resumed>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 826 ./strace-static-x86_64: Process 826 attached ./strace-static-x86_64: Process 825 attached [pid 824] <... write resumed>) = 1048576 [pid 824] munmap(0x7fb07b50e000, 138412032) = 0 [pid 824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 824] ioctl(4, LOOP_SET_FD, 3 [pid 826] set_robust_list(0x5555610ee6a0, 24 [pid 825] set_robust_list(0x5555610ee6a0, 24 [pid 824] <... ioctl resumed>) = 0 [pid 824] close(3) = 0 [pid 824] close(4 [pid 826] <... set_robust_list resumed>) = 0 [pid 826] chdir("./20") = 0 [pid 825] <... set_robust_list resumed>) = 0 [pid 826] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 826] setpgid(0, 0) = 0 [pid 826] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 825] chdir("./20" [pid 826] <... openat resumed>) = 3 [pid 826] write(3, "1000", 4) = 4 [pid 826] close(3) = 0 [pid 826] symlink("/dev/binderfs", "./binderfs" [pid 825] <... chdir resumed>) = 0 executing program [pid 826] <... symlink resumed>) = 0 [pid 825] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 826] write(1, "executing program\n", 18 [pid 825] <... prctl resumed>) = 0 [pid 826] <... write resumed>) = 18 [pid 826] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] setpgid(0, 0 [pid 826] <... futex resumed>) = 0 [pid 825] <... setpgid resumed>) = 0 [pid 826] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, [pid 825] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 826] <... rt_sigaction resumed>NULL, 8) = 0 [pid 826] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 825] <... openat resumed>) = 3 [pid 826] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 825] write(3, "1000", 4 [pid 826] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 825] <... write resumed>) = 4 [pid 826] <... mmap resumed>) = 0x7fb08390e000 [pid 825] close(3 [pid 826] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE [pid 825] <... close resumed>) = 0 [pid 825] symlink("/dev/binderfs", "./binderfs" [pid 826] <... mprotect resumed>) = 0 [pid 826] rt_sigprocmask(SIG_BLOCK, ~[], [pid 825] <... symlink resumed>) = 0 executing program [pid 826] <... rt_sigprocmask resumed>[], 8) = 0 [pid 825] write(1, "executing program\n", 18 [pid 826] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} [pid 825] <... write resumed>) = 18 [pid 825] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 826] <... clone3 resumed> => {parent_tid=[827]}, 88) = 827 [pid 826] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 826] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 826] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 827 attached [pid 827] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 827] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 827] memfd_create("syzkaller", 0) = 3 [pid 827] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 811] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 811] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 811] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 823] <... futex resumed>) = 0 [pid 811] <... futex resumed>) = 1 [pid 823] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 811] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 823] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 823] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 811] <... futex resumed>) = 0 [pid 823] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 825] <... futex resumed>) = 0 [pid 825] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, [pid 827] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 825] <... rt_sigaction resumed>NULL, 8) = 0 [pid 827] <... write resumed>) = 1048576 [pid 825] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 827] munmap(0x7fb07b50e000, 138412032) = 0 [pid 827] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 38.225443][ T812] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 38.241823][ T812] EXT4-fs (loop2): This should not happen!! Data will be lost [ 38.241823][ T812] [ 38.248207][ T824] loop1: detected capacity change from 0 to 2048 [ 38.252842][ T812] EXT4-fs (loop2): Total free blocks count 0 [ 38.268095][ T812] EXT4-fs (loop2): Free/Dirty block details [ 38.274125][ T812] EXT4-fs (loop2): free_blocks=2415919504 [pid 827] ioctl(4, LOOP_SET_FD, 3 [pid 825] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 827] <... ioctl resumed>) = 0 [pid 827] close(3) = 0 [pid 827] close(4 [pid 825] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 825] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 825] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 825] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[828]}, 88) = 828 [pid 825] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 825] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 825] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 828 attached [pid 828] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 828] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 828] memfd_create("syzkaller", 0) = 3 [pid 828] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 828] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 812] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 823] <... futex resumed>) = ? [pid 823] +++ killed by SIGBUS +++ [pid 824] <... close resumed>) = 0 [pid 824] mkdir("./file1", 0777) = 0 [pid 824] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 301] <... umount2 resumed>) = 0 [pid 828] <... write resumed>) = 1048576 [pid 828] munmap(0x7fb07b50e000, 138412032) = 0 [pid 828] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 828] ioctl(4, LOOP_SET_FD, 3 [ 38.280265][ T812] EXT4-fs (loop2): dirty_blocks=32 [ 38.281256][ T827] loop0: detected capacity change from 0 to 2048 [ 38.285707][ T812] EXT4-fs (loop2): Block reservation details [ 38.297244][ T812] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 38.312429][ T812] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 38.314748][ T828] loop4: detected capacity change from 0 to 2048 [pid 301] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 812] +++ killed by SIGBUS +++ [pid 811] +++ killed by SIGBUS +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=811, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 828] <... ioctl resumed>) = 0 [pid 828] close(3) = 0 [pid 828] close(4 [pid 301] newfstatat(AT_FDCWD, "./20/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./20/file1") = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./20") = 0 [pid 301] mkdir("./21", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 831 ./strace-static-x86_64: Process 831 attached [pid 831] set_robust_list(0x5555610ee6a0, 24 [pid 824] <... mount resumed>) = 0 [pid 831] <... set_robust_list resumed>) = 0 [pid 831] chdir("./21" [pid 824] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 831] <... chdir resumed>) = 0 [pid 827] <... close resumed>) = 0 [pid 824] <... openat resumed>) = 3 [pid 827] mkdir("./file1", 0777 [pid 831] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 824] chdir("./file1" [pid 300] <... restart_syscall resumed>) = 0 [pid 827] <... mkdir resumed>) = 0 [pid 300] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./19/binderfs" [pid 827] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 300] <... unlink resumed>) = 0 [pid 831] <... prctl resumed>) = 0 [pid 300] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 831] setpgid(0, 0 [pid 824] <... chdir resumed>) = 0 [pid 831] <... setpgid resumed>) = 0 [pid 831] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 824] ioctl(4, LOOP_CLR_FD) = 0 [pid 824] close(4 [pid 831] <... openat resumed>) = 3 [pid 824] <... close resumed>) = 0 [pid 824] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 822] <... futex resumed>) = 0 [pid 824] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 822] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 824] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 822] <... futex resumed>) = 0 [pid 824] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 822] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 831] write(3, "1000", 4) = 4 [pid 831] close(3) = 0 [pid 831] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 831] write(1, "executing program\n", 18) = 18 [pid 831] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 831] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 831] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 831] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 831] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 831] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 831] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[832]}, 88) = 832 ./strace-static-x86_64: Process 832 attached [pid 824] <... open resumed>) = 4 [pid 831] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 831] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 832] set_robust_list(0x7fb08392e9a0, 24 [pid 831] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 824] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 832] <... set_robust_list resumed>) = 0 [pid 824] <... futex resumed>) = 1 [pid 822] <... futex resumed>) = 0 [pid 824] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 822] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 832] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 832] memfd_create("syzkaller", 0 [pid 824] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 822] <... futex resumed>) = 0 [pid 832] <... memfd_create resumed>) = 3 [pid 832] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 824] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 822] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 824] <... open resumed>) = 5 [pid 824] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 822] <... futex resumed>) = 0 [pid 822] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 824] creat("./bus", 000 [pid 822] <... futex resumed>) = 0 [pid 824] <... creat resumed>) = 6 [pid 822] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 824] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 822] <... futex resumed>) = 0 [pid 824] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 822] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 824] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 822] <... futex resumed>) = 0 [pid 824] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 822] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 824] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 824] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 822] <... futex resumed>) = 0 [pid 824] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 822] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 824] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 822] <... futex resumed>) = 0 [pid 824] pwrite64(6, "+", 1, 0 [pid 822] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 824] <... pwrite64 resumed>) = 1 [pid 824] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 822] <... futex resumed>) = 0 [pid 824] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 822] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 824] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 822] <... futex resumed>) = 0 [pid 822] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 824] open("./bus", O_RDONLY) = 7 [pid 824] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 824] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 822] <... futex resumed>) = 0 [pid 828] <... close resumed>) = 0 [pid 822] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 828] mkdir("./file1", 0777 [pid 824] <... futex resumed>) = 0 [pid 822] <... futex resumed>) = 1 [pid 828] <... mkdir resumed>) = 0 [pid 824] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 822] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 828] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 824] <... copy_file_range resumed>) = 1 [pid 822] <... futex resumed>) = 0 [pid 832] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 824] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 824] <... futex resumed>) = 0 [pid 822] <... mmap resumed>) = 0x7fb0838ed000 [pid 824] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 822] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 832] munmap(0x7fb07b50e000, 138412032 [pid 822] <... mprotect resumed>) = 0 [pid 822] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 822] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[833]}, 88) = 833 [pid 822] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 833 attached [pid 822] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 833] set_robust_list(0x7fb08390d9a0, 24 [pid 832] <... munmap resumed>) = 0 [pid 822] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 833] <... set_robust_list resumed>) = 0 [pid 832] <... openat resumed>) = 4 [pid 833] rt_sigprocmask(SIG_SETMASK, [], [pid 832] ioctl(4, LOOP_SET_FD, 3 [pid 833] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 833] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 822] <... futex resumed>) = 0 [pid 822] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 822] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 824] <... futex resumed>) = 0 [ 38.325606][ T812] EXT4-fs (loop2): This should not happen!! Data will be lost [ 38.325606][ T812] [ 38.332266][ T824] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 832] <... ioctl resumed>) = 0 [pid 832] close(3 [pid 828] <... mount resumed>) = 0 [pid 300] <... umount2 resumed>) = 0 [pid 832] <... close resumed>) = 0 [pid 832] close(4 [pid 300] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./19/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./19/file1") = 0 [pid 300] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./19") = 0 [pid 300] mkdir("./20", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 836 [pid 828] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 828] chdir("./file1") = 0 [pid 828] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 828] ioctl(4, LOOP_CLR_FD) = 0 [pid 828] close(4) = 0 [pid 828] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 828] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 836 attached [pid 825] <... futex resumed>) = 0 [pid 822] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 825] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [ 38.371927][ T832] loop3: detected capacity change from 0 to 2048 [ 38.374752][ T824] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 38.379885][ T828] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 38.393592][ T824] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 822] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 836] set_robust_list(0x5555610ee6a0, 24 [pid 833] <... futex resumed>) = 0 [pid 828] <... futex resumed>) = 0 [pid 825] <... futex resumed>) = 1 [pid 822] <... futex resumed>) = 1 [pid 833] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 828] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 825] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 822] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 833] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 828] <... open resumed>) = 4 [pid 833] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 828] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 833] <... futex resumed>) = 1 [pid 828] <... futex resumed>) = 1 [pid 825] <... futex resumed>) = 0 [pid 822] <... futex resumed>) = 0 [pid 833] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 828] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 825] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 828] <... open resumed>) = 5 [pid 825] <... futex resumed>) = 0 [pid 828] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 828] <... futex resumed>) = 0 [pid 825] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 828] creat("./bus", 000 [pid 825] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 828] <... creat resumed>) = 6 [pid 825] <... futex resumed>) = 0 [pid 828] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 828] <... futex resumed>) = 0 [pid 825] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 828] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 825] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 828] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 825] <... futex resumed>) = 0 [pid 828] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 828] <... futex resumed>) = 0 [pid 825] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 828] pwrite64(6, "+", 1, 0 [pid 825] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 828] <... pwrite64 resumed>) = 1 [pid 825] <... futex resumed>) = 0 [pid 828] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 828] <... futex resumed>) = 0 [pid 825] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 828] open("./bus", O_RDONLY [pid 825] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 828] <... open resumed>) = 7 [pid 825] <... futex resumed>) = 0 [pid 828] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 828] <... futex resumed>) = 0 [pid 825] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 828] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 825] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 828] <... copy_file_range resumed>) = 1 [pid 825] <... futex resumed>) = 0 [pid 828] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 828] <... futex resumed>) = 0 [pid 825] <... futex resumed>) = 0 [pid 828] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 825] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 825] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 825] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 825] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[837]}, 88) = 837 [pid 825] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 825] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 825] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 836] <... set_robust_list resumed>) = 0 [pid 836] chdir("./20") = 0 [pid 836] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 836] setpgid(0, 0) = 0 [pid 836] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 836] write(3, "1000", 4) = 4 executing program [pid 836] close(3) = 0 [pid 836] symlink("/dev/binderfs", "./binderfs") = 0 [pid 836] write(1, "executing program\n", 18) = 18 [pid 836] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 837 attached ) = 0 [pid 836] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 836] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 836] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 836] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 836] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 836] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[839]}, 88) = 839 [pid 836] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 836] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 837] set_robust_list(0x7fb08390d9a0, 24 [pid 836] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 839 attached [pid 839] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 839] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 839] memfd_create("syzkaller", 0) = 3 [pid 839] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 837] <... set_robust_list resumed>) = 0 [pid 832] <... close resumed>) = 0 [pid 837] rt_sigprocmask(SIG_SETMASK, [], [pid 832] mkdir("./file1", 0777 [pid 824] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 837] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 837] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 833] <... futex resumed>) = ? [pid 832] <... mkdir resumed>) = 0 [pid 837] <... mmap resumed>) = 0x20000000 [pid 833] +++ killed by SIGBUS +++ [pid 832] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [ 38.419883][ T824] EXT4-fs (loop1): This should not happen!! Data will be lost [ 38.419883][ T824] [ 38.430667][ T824] EXT4-fs (loop1): Total free blocks count 0 [ 38.436757][ T824] EXT4-fs (loop1): Free/Dirty block details [ 38.442492][ T824] EXT4-fs (loop1): free_blocks=2415919504 [ 38.448330][ T824] EXT4-fs (loop1): dirty_blocks=32 [ 38.453463][ T824] EXT4-fs (loop1): Block reservation details [ 38.459681][ T824] EXT4-fs (loop1): i_reserved_data_blocks=2 [pid 837] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 825] <... futex resumed>) = 0 [pid 837] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 825] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 828] <... futex resumed>) = 0 [pid 825] <... futex resumed>) = 1 [pid 839] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 825] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 839] <... write resumed>) = 1048576 [pid 824] +++ killed by SIGBUS +++ [pid 822] +++ killed by SIGBUS +++ [ 38.469193][ T828] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 38.470894][ T824] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 38.499467][ T824] EXT4-fs (loop1): This should not happen!! Data will be lost [ 38.499467][ T824] [ 38.499676][ T827] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 839] munmap(0x7fb07b50e000, 138412032) = 0 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=822, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 839] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 825] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 299] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW [pid 839] <... openat resumed>) = 4 [pid 825] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 839] ioctl(4, LOOP_SET_FD, 3 [pid 837] <... futex resumed>) = 0 [pid 825] <... futex resumed>) = 1 [pid 299] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 837] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 825] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 827] <... mount resumed>) = 0 [pid 827] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 839] <... ioctl resumed>) = 0 [pid 837] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 299] <... openat resumed>) = 3 [pid 837] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] newfstatat(3, "", [pid 837] <... futex resumed>) = 1 [pid 825] <... futex resumed>) = 0 [pid 837] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 827] chdir("./file1") = 0 [pid 299] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 827] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 827] ioctl(4, LOOP_CLR_FD) = 0 [pid 827] close(4) = 0 [pid 827] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 826] <... futex resumed>) = 0 [pid 826] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 826] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 827] <... futex resumed>) = 1 [pid 827] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 299] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./19/binderfs") = 0 [pid 299] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 827] <... open resumed>) = 4 [pid 827] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 826] <... futex resumed>) = 0 [pid 826] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 826] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 827] <... futex resumed>) = 1 [pid 827] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 827] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 826] <... futex resumed>) = 0 [pid 826] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 826] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 827] <... futex resumed>) = 1 [pid 827] creat("./bus", 000) = 6 [pid 827] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 826] <... futex resumed>) = 0 [pid 826] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 826] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 827] <... futex resumed>) = 1 [pid 827] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 827] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 826] <... futex resumed>) = 0 [pid 826] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 826] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 827] <... futex resumed>) = 1 [pid 827] pwrite64(6, "+", 1, 0) = 1 [pid 827] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 826] <... futex resumed>) = 0 [pid 826] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 826] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 827] <... futex resumed>) = 1 [pid 827] open("./bus", O_RDONLY) = 7 [pid 827] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 826] <... futex resumed>) = 0 [pid 826] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 826] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 826] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 826] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 826] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 826] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[843]}, 88) = 843 [pid 826] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 826] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 826] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 827] <... futex resumed>) = 1 [pid 827] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 827] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 827] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 839] close(3 [pid 299] <... umount2 resumed>) = 0 [pid 839] <... close resumed>) = 0 [pid 299] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 839] close(4 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 839] <... close resumed>) = 0 [ 38.509212][ T828] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 38.535590][ T839] loop2: detected capacity change from 0 to 2048 [ 38.562531][ T828] EXT4-fs (loop4): This should not happen!! Data will be lost [ 38.562531][ T828] [pid 299] newfstatat(AT_FDCWD, "./19/file1", ./strace-static-x86_64: Process 843 attached [pid 839] mkdir("./file1", 0777 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 843] set_robust_list(0x7fb08390d9a0, 24 [pid 839] <... mkdir resumed>) = 0 [pid 843] <... set_robust_list resumed>) = 0 [pid 839] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 299] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 832] <... mount resumed>) = 0 [pid 832] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 832] chdir("./file1") = 0 [pid 832] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 832] ioctl(4, LOOP_CLR_FD) = 0 [pid 832] close(4) = 0 [pid 832] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 831] <... futex resumed>) = 0 [pid 831] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 831] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 832] <... futex resumed>) = 1 [pid 832] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 832] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 831] <... futex resumed>) = 0 [pid 831] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 831] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 832] <... futex resumed>) = 1 [pid 832] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 843] rt_sigprocmask(SIG_SETMASK, [], [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 832] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 831] <... futex resumed>) = 0 [pid 831] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 831] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 832] <... futex resumed>) = 1 [pid 832] creat("./bus", 000) = 6 [pid 832] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 831] <... futex resumed>) = 0 [pid 831] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 831] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 832] <... futex resumed>) = 1 [pid 832] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 299] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 843] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 299] <... openat resumed>) = 4 [pid 832] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 832] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 831] <... futex resumed>) = 0 [pid 831] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 831] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 832] <... futex resumed>) = 1 [pid 832] pwrite64(6, "+", 1, 0) = 1 [pid 832] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 831] <... futex resumed>) = 0 [pid 831] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 831] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 832] <... futex resumed>) = 1 [pid 832] open("./bus", O_RDONLY) = 7 [pid 832] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 831] <... futex resumed>) = 0 [pid 831] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 831] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 831] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 831] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 831] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 843] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 831] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 299] newfstatat(4, "", [pid 831] <... clone3 resumed> => {parent_tid=[844]}, 88) = 844 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 831] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 299] getdents64(4, [pid 831] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 831] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 843] <... mmap resumed>) = 0x20000000 [pid 299] rmdir("./19/file1" [pid 832] <... futex resumed>) = 1 [pid 832] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 832] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 832] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 844 attached [pid 844] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 844] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 844] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 831] <... futex resumed>) = 0 [pid 831] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 831] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 832] <... futex resumed>) = 0 [pid 843] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 826] <... futex resumed>) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 826] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 827] <... futex resumed>) = 0 [pid 826] <... futex resumed>) = 1 [pid 843] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] getdents64(3, [ 38.574264][ T832] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 38.584911][ T828] EXT4-fs (loop4): Total free blocks count 0 [ 38.600733][ T828] EXT4-fs (loop4): Free/Dirty block details [ 38.607091][ T828] EXT4-fs (loop4): free_blocks=2415919504 [pid 826] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 844] <... futex resumed>) = 1 [pid 844] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] close(3 [pid 831] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 828] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 299] <... close resumed>) = 0 [pid 831] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 844] <... futex resumed>) = 0 [pid 831] <... futex resumed>) = 1 [pid 844] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 831] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 844] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 844] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 831] <... futex resumed>) = 0 [ 38.607623][ T827] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 38.612757][ T828] EXT4-fs (loop4): dirty_blocks=32 [ 38.628619][ T832] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 38.632318][ T828] EXT4-fs (loop4): Block reservation details [ 38.648597][ T827] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 38.654062][ T828] EXT4-fs (loop4): i_reserved_data_blocks=2 [pid 844] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 837] <... futex resumed>) = ? [pid 826] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 299] rmdir("./19" [pid 826] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 843] <... futex resumed>) = 0 [pid 826] <... futex resumed>) = 1 [pid 843] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 826] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 843] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 843] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 826] <... futex resumed>) = 0 [pid 843] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 837] +++ killed by SIGBUS +++ [pid 299] <... rmdir resumed>) = 0 [ 38.670770][ T832] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 38.673911][ T827] EXT4-fs (loop0): This should not happen!! Data will be lost [ 38.673911][ T827] [ 38.682908][ T832] EXT4-fs (loop3): This should not happen!! Data will be lost [ 38.682908][ T832] [ 38.696014][ T827] EXT4-fs (loop0): Total free blocks count 0 [ 38.702758][ T832] EXT4-fs (loop3): Total free blocks count 0 [ 38.709664][ T827] EXT4-fs (loop0): Free/Dirty block details [pid 299] mkdir("./20", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 839] <... mount resumed>) = 0 [ 38.715540][ T828] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 38.720939][ T827] EXT4-fs (loop0): free_blocks=2415919504 [ 38.732758][ T832] EXT4-fs (loop3): Free/Dirty block details [ 38.740503][ T839] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 38.744397][ T832] EXT4-fs (loop3): free_blocks=2415919504 [ 38.755254][ T827] EXT4-fs (loop0): dirty_blocks=32 [ 38.760143][ T828] EXT4-fs (loop4): This should not happen!! Data will be lost [ 38.760143][ T828] [pid 299] ioctl(3, LOOP_CLR_FD [pid 839] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 828] +++ killed by SIGBUS +++ [pid 825] +++ killed by SIGBUS +++ [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 827] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=825, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 843] <... futex resumed>) = ? [pid 302] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 302] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(3, [pid 839] <... openat resumed>) = 3 [pid 302] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 299] close(3 [pid 302] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./20/binderfs") = 0 [pid 302] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 839] chdir("./file1") = 0 [pid 839] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 839] ioctl(4, LOOP_CLR_FD) = 0 [pid 839] close(4) = 0 [pid 839] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 836] <... futex resumed>) = 0 [pid 843] +++ killed by SIGBUS +++ [pid 839] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 836] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... close resumed>) = 0 [pid 839] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 836] <... futex resumed>) = 0 [pid 827] +++ killed by SIGBUS +++ [pid 839] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 836] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 832] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 844] <... futex resumed>) = ? [pid 839] <... open resumed>) = 4 [pid 839] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 836] <... futex resumed>) = 0 [pid 839] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 836] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 839] <... open resumed>) = 5 [pid 836] <... futex resumed>) = 0 [pid 839] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 836] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 839] <... futex resumed>) = 0 [pid 836] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 839] creat("./bus", 000 [pid 836] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 839] <... creat resumed>) = 6 [pid 836] <... futex resumed>) = 0 [pid 839] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 836] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 839] <... futex resumed>) = 0 [pid 836] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 839] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 836] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 839] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 836] <... futex resumed>) = 0 [pid 839] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 836] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 839] <... futex resumed>) = 0 [pid 836] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 839] pwrite64(6, "+", 1, 0 [pid 836] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 839] <... pwrite64 resumed>) = 1 [pid 836] <... futex resumed>) = 0 [pid 839] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 836] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 839] <... futex resumed>) = 0 [pid 836] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 839] open("./bus", O_RDONLY [pid 836] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 839] <... open resumed>) = 7 [pid 836] <... futex resumed>) = 0 [pid 839] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 836] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 839] <... futex resumed>) = 0 [pid 836] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 839] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 836] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 839] <... copy_file_range resumed>) = 1 [pid 836] <... futex resumed>) = 0 [pid 839] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 836] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 839] <... futex resumed>) = 0 [pid 836] <... futex resumed>) = 0 [pid 839] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 836] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 836] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 836] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 836] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[847]}, 88) = 847 [pid 836] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 836] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 836] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 848 [pid 844] +++ killed by SIGBUS +++ [ 38.766178][ T827] EXT4-fs (loop0): Block reservation details [ 38.781624][ T832] EXT4-fs (loop3): dirty_blocks=32 [ 38.782777][ T827] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 38.787170][ T832] EXT4-fs (loop3): Block reservation details [ 38.798526][ T832] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 38.811527][ T826] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 ./strace-static-x86_64: Process 848 attached ./strace-static-x86_64: Process 847 attached [pid 848] set_robust_list(0x5555610ee6a0, 24 [pid 847] set_robust_list(0x7fb08390d9a0, 24 [pid 848] <... set_robust_list resumed>) = 0 [pid 847] <... set_robust_list resumed>) = 0 [pid 826] +++ killed by SIGBUS +++ [pid 848] chdir("./20" [pid 847] rt_sigprocmask(SIG_SETMASK, [], [pid 832] +++ killed by SIGBUS +++ [pid 831] +++ killed by SIGBUS +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=826, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=19} --- [pid 848] <... chdir resumed>) = 0 [pid 847] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 848] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 847] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 848] <... prctl resumed>) = 0 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=831, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=17} --- [pid 848] setpgid(0, 0 [pid 301] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW [pid 848] <... setpgid resumed>) = 0 [pid 847] <... mmap resumed>) = 0x20000000 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 848] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 847] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 848] <... openat resumed>) = 3 [pid 301] <... openat resumed>) = 3 [pid 298] <... openat resumed>) = 3 [pid 848] write(3, "1000", 4 [pid 301] newfstatat(3, "", [pid 298] newfstatat(3, "", [pid 848] <... write resumed>) = 4 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 848] close(3 [pid 301] getdents64(3, [pid 298] getdents64(3, [pid 848] <... close resumed>) = 0 [pid 301] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 298] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 848] symlink("/dev/binderfs", "./binderfs" [pid 301] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 848] <... symlink resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 848] write(1, "executing program\n", 18 [pid 301] newfstatat(AT_FDCWD, "./21/binderfs", [pid 298] newfstatat(AT_FDCWD, "./20/binderfs", [pid 848] <... write resumed>) = 18 [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 848] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] unlink("./21/binderfs" [pid 298] unlink("./20/binderfs" [pid 848] <... futex resumed>) = 0 [pid 301] <... unlink resumed>) = 0 [pid 298] <... unlink resumed>) = 0 [pid 848] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, [pid 301] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 848] <... rt_sigaction resumed>NULL, 8) = 0 [pid 848] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 848] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 848] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 848] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 848] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[849]}, 88) = 849 [pid 848] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 848] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 848] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 849 attached [pid 849] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 849] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 849] memfd_create("syzkaller", 0) = 3 [pid 849] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 847] <... futex resumed>) = 1 [pid 836] <... futex resumed>) = 0 [pid 849] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 847] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 836] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 839] <... futex resumed>) = 0 [pid 836] <... futex resumed>) = 1 [pid 849] <... write resumed>) = 1048576 [pid 849] munmap(0x7fb07b50e000, 138412032) = 0 [pid 849] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 38.823169][ T832] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 38.825287][ T826] EXT4-fs (loop0): This should not happen!! Data will be lost [ 38.825287][ T826] [ 38.837378][ T832] EXT4-fs (loop3): This should not happen!! Data will be lost [ 38.837378][ T832] [pid 849] ioctl(4, LOOP_SET_FD, 3 [pid 836] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 849] <... ioctl resumed>) = 0 [pid 849] close(3) = 0 [pid 849] close(4 [pid 302] <... umount2 resumed>) = 0 [pid 302] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./20/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 302] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 302] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 302] close(4) = 0 [pid 302] rmdir("./20/file1") = 0 [pid 302] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./20"executing program ) = 0 [pid 302] mkdir("./21", 0777) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] close(3) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 851 ./strace-static-x86_64: Process 851 attached [pid 851] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 851] chdir("./21") = 0 [pid 851] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 851] setpgid(0, 0) = 0 [pid 851] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 851] write(3, "1000", 4) = 4 [pid 851] close(3) = 0 [pid 851] symlink("/dev/binderfs", "./binderfs") = 0 [pid 851] write(1, "executing program\n", 18) = 18 [pid 851] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 851] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 851] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 851] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 851] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 851] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 851] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[852]}, 88) = 852 [pid 851] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 851] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 851] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 852 attached [pid 852] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 852] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 852] memfd_create("syzkaller", 0) = 3 [pid 852] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 852] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 852] munmap(0x7fb07b50e000, 138412032) = 0 [pid 852] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 852] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 852] close(3) = 0 [pid 852] close(4 [pid 849] <... close resumed>) = 0 [pid 849] mkdir("./file1", 0777) = 0 [pid 849] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 298] <... umount2 resumed>) = 0 [pid 301] <... umount2 resumed>) = 0 [ 38.867442][ T839] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 38.872096][ T849] loop1: detected capacity change from 0 to 2048 [ 38.891925][ T839] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 38.904993][ T839] EXT4-fs (loop2): This should not happen!! Data will be lost [ 38.904993][ T839] [ 38.906558][ T852] loop4: detected capacity change from 0 to 2048 [pid 301] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 836] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 836] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 847] <... futex resumed>) = 0 [pid 836] <... futex resumed>) = 1 [pid 847] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 836] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 847] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 847] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 836] <... futex resumed>) = 0 [pid 847] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./21/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... openat resumed>) = 4 [pid 298] newfstatat(AT_FDCWD, "./20/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 298] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, [pid 298] getdents64(4, [pid 301] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 298] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 301] close(4) = 0 [pid 301] rmdir("./21/file1" [pid 298] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 301] <... rmdir resumed>) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./20/file1") = 0 [pid 301] getdents64(3, [pid 298] getdents64(3, [pid 301] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 298] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 298] close(3) = 0 [pid 301] rmdir("./21") = 0 [pid 298] rmdir("./20") = 0 [pid 298] mkdir("./21", 0777 [pid 301] mkdir("./22", 0777) = 0 [pid 298] <... mkdir resumed>) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD [pid 301] ioctl(3, LOOP_CLR_FD [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 301] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 301] close(3 [pid 298] close(3 [pid 301] <... close resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] <... clone resumed>, child_tidptr=0x5555610ee690) = 854 [pid 298] <... clone resumed>, child_tidptr=0x5555610ee690) = 855 ./strace-static-x86_64: Process 855 attached [pid 855] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 855] chdir("./21") = 0 [pid 855] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 855] setpgid(0, 0) = 0 [pid 855] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 855] write(3, "1000", 4) = 4 [pid 855] close(3) = 0 [pid 855] symlink("/dev/binderfs", "./binderfs") = 0 [pid 855] write(1, "executing program\n", 18executing program ) = 18 [pid 855] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 854 attached ) = 0 [pid 854] set_robust_list(0x5555610ee6a0, 24 [pid 855] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 855] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 854] <... set_robust_list resumed>) = 0 [pid 855] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 854] chdir("./22" [pid 855] <... mmap resumed>) = 0x7fb08390e000 [pid 855] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 855] rt_sigprocmask(SIG_BLOCK, ~[], [pid 854] <... chdir resumed>) = 0 [pid 854] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 854] setpgid(0, 0 [pid 855] <... rt_sigprocmask resumed>[], 8) = 0 [pid 854] <... setpgid resumed>) = 0 [pid 855] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} [pid 854] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 855] <... clone3 resumed> => {parent_tid=[856]}, 88) = 856 [pid 855] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 855] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 856 attached [pid 854] write(3, "1000", 4 [pid 852] <... close resumed>) = 0 [pid 839] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 852] mkdir("./file1", 0777executing program [pid 855] <... futex resumed>) = 0 [pid 852] <... mkdir resumed>) = 0 [pid 852] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 847] <... futex resumed>) = ? [pid 856] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 854] <... write resumed>) = 4 [pid 856] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 854] close(3 [pid 856] memfd_create("syzkaller", 0 [pid 854] <... close resumed>) = 0 [pid 854] symlink("/dev/binderfs", "./binderfs") = 0 [pid 856] <... memfd_create resumed>) = 3 [pid 856] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 854] write(1, "executing program\n", 18) = 18 [pid 854] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 854] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 854] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 854] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 854] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 854] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[858]}, 88) = 858 [pid 854] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 854] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 856] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 856] munmap(0x7fb07b50e000, 138412032 [pid 839] +++ killed by SIGBUS +++ [pid 856] <... munmap resumed>) = 0 [pid 856] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 856] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 856] close(3) = 0 [pid 856] close(4 [pid 855] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 849] <... mount resumed>) = 0 [pid 849] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 849] chdir("./file1") = 0 [pid 849] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 849] ioctl(4, LOOP_CLR_FD) = 0 [pid 849] close(4) = 0 [pid 849] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 848] <... futex resumed>) = 0 [pid 848] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 848] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 849] <... futex resumed>) = 1 [ 38.915088][ T839] EXT4-fs (loop2): Total free blocks count 0 [ 38.926932][ T839] EXT4-fs (loop2): Free/Dirty block details [ 38.933567][ T839] EXT4-fs (loop2): free_blocks=2415919504 [ 38.942073][ T839] EXT4-fs (loop2): dirty_blocks=32 [ 38.947954][ T839] EXT4-fs (loop2): Block reservation details [ 38.954148][ T839] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 38.962011][ T849] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 849] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 849] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 848] <... futex resumed>) = 0 [pid 848] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 848] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 849] <... futex resumed>) = 1 [pid 849] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 849] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 848] <... futex resumed>) = 0 [pid 848] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 848] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 849] <... futex resumed>) = 1 [pid 849] creat("./bus", 000) = 6 [pid 849] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 848] <... futex resumed>) = 0 [pid 848] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 848] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 849] <... futex resumed>) = 1 [pid 849] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 849] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 848] <... futex resumed>) = 0 [pid 848] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 848] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 849] <... futex resumed>) = 1 [pid 849] pwrite64(6, "+", 1, 0./strace-static-x86_64: Process 858 attached ) = 1 [pid 849] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 848] <... futex resumed>) = 0 [pid 848] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 848] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 849] <... futex resumed>) = 1 [pid 849] open("./bus", O_RDONLY) = 7 [pid 849] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 858] set_robust_list(0x7fb08392e9a0, 24 [pid 848] <... futex resumed>) = 0 [pid 858] <... set_robust_list resumed>) = 0 [pid 848] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 858] rt_sigprocmask(SIG_SETMASK, [], [pid 848] <... futex resumed>) = 0 [pid 848] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 858] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 848] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 848] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 858] memfd_create("syzkaller", 0 [pid 848] <... mprotect resumed>) = 0 [pid 848] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 858] <... memfd_create resumed>) = 3 [pid 848] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 858] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 848] <... clone3 resumed> => {parent_tid=[859]}, 88) = 859 [pid 858] <... mmap resumed>) = 0x7fb07b50e000 ./strace-static-x86_64: Process 859 attached [pid 848] rt_sigprocmask(SIG_SETMASK, [], [pid 847] +++ killed by SIGBUS +++ [pid 836] +++ killed by SIGBUS +++ [pid 848] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=836, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=10} --- [pid 848] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 848] <... futex resumed>) = 0 [pid 848] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 849] <... futex resumed>) = 1 [pid 849] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 849] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 849] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 859] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 859] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 859] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 858] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 859] <... mmap resumed>) = 0x20000000 [pid 859] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 848] <... futex resumed>) = 0 [pid 848] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 848] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 849] <... futex resumed>) = 0 [pid 858] <... write resumed>) = 1048576 [pid 300] <... restart_syscall resumed>) = 0 [pid 300] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./20/binderfs") = 0 [pid 300] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 859] <... futex resumed>) = 1 [ 38.973423][ T856] loop0: detected capacity change from 0 to 2048 [ 38.974151][ T847] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 38.992514][ T847] EXT4-fs (loop2): This should not happen!! Data will be lost [ 38.992514][ T847] [ 39.009213][ T849] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 859] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 858] munmap(0x7fb07b50e000, 138412032) = 0 [pid 858] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 858] ioctl(4, LOOP_SET_FD, 3 [pid 856] <... close resumed>) = 0 [pid 858] <... ioctl resumed>) = 0 [pid 858] close(3) = 0 [pid 858] close(4 [pid 852] <... mount resumed>) = 0 [pid 852] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 852] chdir("./file1") = 0 [pid 852] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 852] ioctl(4, LOOP_CLR_FD) = 0 [pid 852] close(4) = 0 [pid 852] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 852] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 856] mkdir("./file1", 0777) = 0 [pid 856] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 851] <... futex resumed>) = 0 [pid 848] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 851] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 848] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 851] <... futex resumed>) = 1 [pid 859] <... futex resumed>) = 0 [pid 851] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 848] <... futex resumed>) = 1 [pid 859] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 848] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 859] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 859] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] <... futex resumed>) = 0 [pid 859] <... futex resumed>) = 1 [pid 859] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 852] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 852] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 852] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 848] <... futex resumed>) = 0 [pid 851] <... futex resumed>) = 0 [pid 851] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] <... futex resumed>) = 0 [pid 851] <... futex resumed>) = 1 [pid 852] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 851] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 852] <... open resumed>) = 5 [pid 852] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 851] <... futex resumed>) = 0 [pid 852] creat("./bus", 000 [pid 851] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] <... creat resumed>) = 6 [pid 851] <... futex resumed>) = 0 [pid 852] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 851] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 852] <... futex resumed>) = 0 [pid 851] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 852] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 851] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 851] <... futex resumed>) = 0 [pid 852] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 851] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 852] <... futex resumed>) = 0 [pid 851] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 852] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 851] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 851] <... futex resumed>) = 0 [pid 852] pwrite64(6, "+", 1, 0 [pid 851] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 852] <... pwrite64 resumed>) = 1 [pid 852] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 851] <... futex resumed>) = 0 [pid 852] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 851] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 851] <... futex resumed>) = 0 [pid 852] open("./bus", O_RDONLY [pid 851] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 852] <... open resumed>) = 7 [pid 852] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 851] <... futex resumed>) = 0 [pid 852] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 851] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 851] <... futex resumed>) = 0 [pid 852] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 851] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] <... copy_file_range resumed>) = 1 [pid 851] <... futex resumed>) = 0 [pid 852] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 851] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 852] <... futex resumed>) = 0 [pid 851] <... mmap resumed>) = 0x7fb0838ed000 [pid 852] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 851] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 851] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 851] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[862]}, 88) = 862 [pid 851] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 851] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 851] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 862 attached [pid 862] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 862] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 862] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 851] <... futex resumed>) = 0 [pid 851] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] <... futex resumed>) = 0 [pid 851] <... futex resumed>) = 1 [pid 851] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 862] <... futex resumed>) = 1 [pid 862] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 858] <... close resumed>) = 0 [pid 300] <... umount2 resumed>) = 0 [pid 858] mkdir("./file1", 0777) = 0 [pid 858] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 300] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 39.075395][ T849] EXT4-fs (loop1): free_blocks=2415919504 [ 39.077487][ T852] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 39.081106][ T849] EXT4-fs (loop1): dirty_blocks=32 [ 39.097317][ T852] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 39.100926][ T849] EXT4-fs (loop1): Block reservation details [ 39.114093][ T852] EXT4-fs (loop4): This should not happen!! Data will be lost [pid 300] newfstatat(AT_FDCWD, "./20/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./20/file1") = 0 [pid 300] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./20") = 0 [pid 300] mkdir("./21", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 863 [pid 849] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 859] <... futex resumed>) = ? ./strace-static-x86_64: Process 863 attached [pid 859] +++ killed by SIGBUS +++ [pid 851] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 851] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 862] <... futex resumed>) = 0 [pid 851] <... futex resumed>) = 1 [pid 862] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 851] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 862] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 862] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 851] <... futex resumed>) = 0 [pid 862] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 863] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 863] chdir("./21") = 0 [pid 863] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 863] setpgid(0, 0) = 0 [pid 863] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 863] write(3, "1000", 4) = 4 [pid 863] close(3executing program ) = 0 [pid 863] symlink("/dev/binderfs", "./binderfs") = 0 [pid 863] write(1, "executing program\n", 18) = 18 [pid 863] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 863] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 863] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 863] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 863] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 863] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 863] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[865]}, 88) = 865 [pid 863] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 863] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 863] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 865 attached [pid 865] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 865] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 865] memfd_create("syzkaller", 0) = 3 [pid 865] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 865] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 865] munmap(0x7fb07b50e000, 138412032) = 0 [pid 865] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 865] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 865] close(3) = 0 [ 39.114093][ T852] [ 39.125449][ T849] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 39.141197][ T852] EXT4-fs (loop4): Total free blocks count 0 [ 39.145360][ T849] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 39.147421][ T852] EXT4-fs (loop4): Free/Dirty block details [pid 865] close(4 [pid 849] +++ killed by SIGBUS +++ [pid 848] +++ killed by SIGBUS +++ [pid 858] <... mount resumed>) = 0 [pid 856] <... mount resumed>) = 0 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=848, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 299] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./20/binderfs") = 0 [pid 299] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 856] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 856] chdir("./file1") = 0 [pid 856] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 856] ioctl(4, LOOP_CLR_FD) = 0 [pid 856] close(4) = 0 [ 39.182401][ T865] loop2: detected capacity change from 0 to 2048 [ 39.186983][ T849] EXT4-fs (loop1): This should not happen!! Data will be lost [ 39.186983][ T849] [ 39.189987][ T852] EXT4-fs (loop4): free_blocks=2415919504 [ 39.204725][ T852] EXT4-fs (loop4): dirty_blocks=32 [ 39.207512][ T856] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 39.210381][ T852] EXT4-fs (loop4): Block reservation details [pid 856] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 865] <... close resumed>) = 0 [pid 858] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 852] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 865] mkdir("./file1", 0777 [pid 862] <... futex resumed>) = ? [pid 855] <... futex resumed>) = 0 [pid 855] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 855] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 856] <... futex resumed>) = 1 [pid 865] <... mkdir resumed>) = 0 [pid 865] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 856] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 862] +++ killed by SIGBUS +++ [pid 856] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 855] <... futex resumed>) = 0 [pid 855] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 855] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 856] <... futex resumed>) = 1 [pid 856] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 856] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 855] <... futex resumed>) = 0 [pid 855] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 855] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 856] <... futex resumed>) = 1 [pid 856] creat("./bus", 000 [pid 858] <... openat resumed>) = 3 [pid 856] <... creat resumed>) = 6 [pid 856] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 855] <... futex resumed>) = 0 [pid 855] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 855] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 856] <... futex resumed>) = 1 [pid 858] chdir("./file1" [pid 856] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 858] <... chdir resumed>) = 0 [pid 856] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 855] <... futex resumed>) = 0 [pid 855] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 855] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 856] <... futex resumed>) = 1 [pid 856] pwrite64(6, "+", 1, 0 [pid 858] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 856] <... pwrite64 resumed>) = 1 [pid 856] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 858] <... openat resumed>) = 4 [pid 855] <... futex resumed>) = 0 [pid 855] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 855] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 856] <... futex resumed>) = 1 [pid 856] open("./bus", O_RDONLY) = 7 [pid 858] ioctl(4, LOOP_CLR_FD [pid 856] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 855] <... futex resumed>) = 0 [pid 855] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 855] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 856] <... futex resumed>) = 1 [pid 855] <... futex resumed>) = 0 [pid 856] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 855] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 858] <... ioctl resumed>) = 0 [pid 856] <... copy_file_range resumed>) = 1 [pid 855] <... mmap resumed>) = 0x7fb0838ed000 [pid 856] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 855] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 856] <... futex resumed>) = 0 [pid 855] <... mprotect resumed>) = 0 [pid 856] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 855] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 855] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[869]}, 88) = 869 [pid 855] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 855] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 855] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 858] close(4./strace-static-x86_64: Process 869 attached [pid 869] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 869] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 869] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 855] <... futex resumed>) = 0 [pid 855] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 856] <... futex resumed>) = 0 [pid 855] <... futex resumed>) = 1 [ 39.221256][ T858] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 39.226535][ T852] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 39.258169][ T852] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 869] <... futex resumed>) = 1 [pid 858] <... close resumed>) = 0 [pid 855] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 869] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 858] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 858] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 854] <... futex resumed>) = 0 [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./20/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./20/file1") = 0 [pid 299] getdents64(3, [pid 854] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./20") = 0 [pid 858] <... futex resumed>) = 0 [pid 854] <... futex resumed>) = 1 [pid 858] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 854] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 858] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 858] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] mkdir("./21", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 870 [pid 854] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 858] <... futex resumed>) = 0 [pid 854] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 858] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 858] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 854] <... futex resumed>) = 0 [pid 858] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 854] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 858] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 854] <... futex resumed>) = 0 [pid 858] creat("./bus", 000 [pid 854] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 858] <... creat resumed>) = 6 [pid 858] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 854] <... futex resumed>) = 0 [pid 858] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 854] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 858] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 854] <... futex resumed>) = 0 [pid 858] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 854] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 858] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 858] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 854] <... futex resumed>) = 0 [pid 858] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 854] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 858] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 854] <... futex resumed>) = 0 [pid 858] pwrite64(6, "+", 1, 0 [pid 854] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 858] <... pwrite64 resumed>) = 1 [pid 858] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 854] <... futex resumed>) = 0 [pid 858] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 854] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 858] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 854] <... futex resumed>) = 0 [pid 858] open("./bus", O_RDONLY [pid 854] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 858] <... open resumed>) = 7 [pid 858] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 854] <... futex resumed>) = 0 [pid 854] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 858] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 854] <... mmap resumed>) = 0x7fb0838ed000 [pid 858] <... copy_file_range resumed>) = 1 [pid 854] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 854] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 854] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 858] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] <... clone3 resumed> => {parent_tid=[871]}, 88) = 871 [pid 858] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 854] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 854] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}executing program ./strace-static-x86_64: Process 870 attached [pid 870] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 870] chdir("./21") = 0 [pid 870] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 870] setpgid(0, 0) = 0 [pid 870] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 870] write(3, "1000", 4) = 4 [pid 870] close(3) = 0 [pid 870] symlink("/dev/binderfs", "./binderfs") = 0 [pid 870] write(1, "executing program\n", 18) = 18 [pid 870] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 870] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 870] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 870] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 870] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 870] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 870] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[872]}, 88) = 872 [pid 870] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 870] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 870] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 872 attached [pid 872] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 872] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 872] memfd_create("syzkaller", 0) = 3 [pid 872] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 ./strace-static-x86_64: Process 871 attached [ 39.259856][ T856] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 39.288993][ T856] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 39.301061][ T856] EXT4-fs (loop0): This should not happen!! Data will be lost [ 39.301061][ T856] [pid 871] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 871] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 871] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 872] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 854] <... futex resumed>) = 0 [pid 871] <... futex resumed>) = 1 [pid 854] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 871] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 872] <... write resumed>) = 1048576 [pid 872] munmap(0x7fb07b50e000, 138412032) = 0 [pid 872] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 872] ioctl(4, LOOP_SET_FD, 3 [pid 858] <... futex resumed>) = 0 [pid 855] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 854] <... futex resumed>) = 1 [pid 855] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 869] <... futex resumed>) = 0 [pid 855] <... futex resumed>) = 1 [pid 869] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 855] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 869] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 869] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 855] <... futex resumed>) = 0 [pid 869] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 872] <... ioctl resumed>) = 0 [pid 872] close(3) = 0 [pid 872] close(4) = 0 [pid 872] mkdir("./file1", 0777) = 0 [ 39.330120][ T856] EXT4-fs (loop0): Total free blocks count 0 [ 39.351515][ T856] EXT4-fs (loop0): Free/Dirty block details [ 39.358063][ T852] EXT4-fs (loop4): This should not happen!! Data will be lost [ 39.358063][ T852] [ 39.362896][ T872] loop1: detected capacity change from 0 to 2048 [pid 872] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 865] <... mount resumed>) = 0 [pid 854] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 852] +++ killed by SIGBUS +++ [pid 851] +++ killed by SIGBUS +++ [pid 865] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=851, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=18} --- [ 39.369857][ T865] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 39.384449][ T856] EXT4-fs (loop0): free_blocks=2415919504 [ 39.385557][ T858] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 39.390433][ T856] EXT4-fs (loop0): dirty_blocks=32 [ 39.405640][ T858] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 39.409855][ T856] EXT4-fs (loop0): Block reservation details [pid 865] <... openat resumed>) = 3 [pid 856] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 865] chdir("./file1" [pid 302] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW [pid 869] <... futex resumed>) = ? [pid 865] <... chdir resumed>) = 0 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 856] +++ killed by SIGBUS +++ [pid 865] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 302] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 865] <... openat resumed>) = 4 [pid 302] <... openat resumed>) = 3 [pid 865] ioctl(4, LOOP_CLR_FD [pid 302] newfstatat(3, "", [pid 865] <... ioctl resumed>) = 0 [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 865] close(4 [pid 302] getdents64(3, [pid 865] <... close resumed>) = 0 [pid 302] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 865] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 865] <... futex resumed>) = 1 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 865] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 302] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./21/binderfs") = 0 [pid 302] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 863] <... futex resumed>) = 0 [pid 869] +++ killed by SIGBUS +++ [pid 863] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 855] +++ killed by SIGBUS +++ [pid 854] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 863] <... futex resumed>) = 1 [pid 854] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 863] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 854] <... futex resumed>) = 1 [pid 854] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=855, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 865] <... futex resumed>) = 0 [pid 865] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 865] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 863] <... futex resumed>) = 0 [pid 863] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... restart_syscall resumed>) = 0 [pid 865] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 863] <... futex resumed>) = 0 [pid 865] <... open resumed>) = 5 [pid 863] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 865] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW [pid 865] <... futex resumed>) = 1 [pid 863] <... futex resumed>) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 865] creat("./bus", 000 [pid 863] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 865] <... creat resumed>) = 6 [pid 863] <... futex resumed>) = 0 [pid 298] <... openat resumed>) = 3 [pid 865] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 863] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] newfstatat(3, "", [pid 865] <... futex resumed>) = 0 [pid 863] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 865] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 863] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] getdents64(3, [pid 865] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 863] <... futex resumed>) = 0 [pid 298] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 865] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 863] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 871] <... futex resumed>) = 0 [pid 865] <... futex resumed>) = 0 [pid 863] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 865] pwrite64(6, "+", 1, 0 [pid 863] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] newfstatat(AT_FDCWD, "./21/binderfs", [pid 871] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 865] <... pwrite64 resumed>) = 1 [pid 863] <... futex resumed>) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 871] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 865] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 863] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] unlink("./21/binderfs" [pid 865] <... futex resumed>) = 0 [pid 863] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 298] <... unlink resumed>) = 0 [pid 865] open("./bus", O_RDONLY [pid 863] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 865] <... open resumed>) = 7 [pid 863] <... futex resumed>) = 0 [pid 298] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 865] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 863] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 865] <... futex resumed>) = 0 [pid 863] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 865] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 863] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 865] <... copy_file_range resumed>) = 1 [pid 863] <... futex resumed>) = 0 [pid 865] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 863] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 865] <... futex resumed>) = 0 [pid 863] <... futex resumed>) = 0 [pid 865] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 863] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 863] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 863] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 863] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[877]}, 88) = 877 [pid 863] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 863] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 39.422236][ T858] EXT4-fs (loop3): This should not happen!! Data will be lost [ 39.422236][ T858] [ 39.427698][ T856] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 39.443321][ T858] EXT4-fs (loop3): Total free blocks count 0 [ 39.450525][ T869] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 39.458065][ T858] EXT4-fs (loop3): Free/Dirty block details [ 39.462981][ T869] EXT4-fs (loop0): This should not happen!! Data will be lost [ 39.462981][ T869] [ 39.470453][ T858] EXT4-fs (loop3): free_blocks=2415919504 [pid 863] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 877 attached [pid 872] <... mount resumed>) = 0 [pid 871] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 854] <... futex resumed>) = 0 [pid 871] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 877] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 877] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 877] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 863] <... futex resumed>) = 0 [pid 863] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 865] <... futex resumed>) = 0 [pid 863] <... futex resumed>) = 1 [pid 863] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 877] <... futex resumed>) = 1 [pid 877] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 872] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 872] chdir("./file1") = 0 [pid 872] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 872] ioctl(4, LOOP_CLR_FD) = 0 [pid 872] close(4 [pid 858] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [ 39.485477][ T872] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 39.489072][ T858] EXT4-fs (loop3): dirty_blocks=32 [ 39.498909][ T865] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 39.501053][ T858] EXT4-fs (loop3): Block reservation details [ 39.521355][ T858] EXT4-fs (loop3): i_reserved_data_blocks=2 [pid 871] <... futex resumed>) = ? [pid 872] <... close resumed>) = 0 [pid 872] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 870] <... futex resumed>) = 0 [pid 870] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 870] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 872] <... futex resumed>) = 1 [pid 872] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 872] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 870] <... futex resumed>) = 0 [pid 870] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 870] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 872] <... futex resumed>) = 1 [pid 872] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 872] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 870] <... futex resumed>) = 0 [pid 870] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 870] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 872] <... futex resumed>) = 1 [pid 872] creat("./bus", 000) = 6 [pid 872] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 870] <... futex resumed>) = 0 [pid 870] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 870] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 872] <... futex resumed>) = 1 [pid 872] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 872] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 870] <... futex resumed>) = 0 [pid 870] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 870] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 872] <... futex resumed>) = 1 [pid 872] pwrite64(6, "+", 1, 0) = 1 [pid 872] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 870] <... futex resumed>) = 0 [pid 870] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 870] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 872] <... futex resumed>) = 1 [pid 872] open("./bus", O_RDONLY) = 7 [pid 872] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 870] <... futex resumed>) = 0 [pid 870] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 870] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 870] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 870] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 870] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 870] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[878]}, 88) = 878 [pid 870] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 870] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 870] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 872] <... futex resumed>) = 1 [pid 872] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 872] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 872] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 878 attached [pid 878] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 878] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 878] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 871] +++ killed by SIGBUS +++ [pid 878] <... mmap resumed>) = 0x20000000 [pid 878] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 870] <... futex resumed>) = 0 [pid 870] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 870] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 872] <... futex resumed>) = 0 [pid 863] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 302] <... umount2 resumed>) = 0 [pid 863] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 877] <... futex resumed>) = 0 [pid 863] <... futex resumed>) = 1 [pid 877] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 863] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 877] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 877] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 863] <... futex resumed>) = 0 [pid 877] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 302] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./21/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 302] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 302] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 302] close(4) = 0 [pid 302] rmdir("./21/file1") = 0 [pid 302] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./21") = 0 [pid 302] mkdir("./22", 0777) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] close(3) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 879 [pid 878] <... futex resumed>) = 1 [ 39.527854][ T865] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 39.539909][ T865] EXT4-fs (loop2): This should not happen!! Data will be lost [ 39.539909][ T865] [ 39.550156][ T865] EXT4-fs (loop2): Total free blocks count 0 [ 39.553887][ T872] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 39.557544][ T858] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 878] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 879 attached [pid 870] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 870] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 878] <... futex resumed>) = 0 [pid 870] <... futex resumed>) = 1 [pid 878] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 870] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 878] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 878] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 870] <... futex resumed>) = 0 [pid 878] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 879] set_robust_list(0x5555610ee6a0, 24 [pid 858] +++ killed by SIGBUS +++ [pid 854] +++ killed by SIGBUS +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=854, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 301] restart_syscall(<... resuming interrupted clone ...>executing program [pid 879] <... set_robust_list resumed>) = 0 [pid 865] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 879] chdir("./22") = 0 [pid 879] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 879] setpgid(0, 0) = 0 [pid 879] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 879] write(3, "1000", 4) = 4 [pid 879] close(3) = 0 [pid 879] symlink("/dev/binderfs", "./binderfs") = 0 [pid 879] write(1, "executing program\n", 18) = 18 [pid 879] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 879] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 879] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 879] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 879] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 879] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 879] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[880]}, 88) = 880 [pid 879] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 879] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 879] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 880 attached [pid 880] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 880] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 880] memfd_create("syzkaller", 0) = 3 [pid 880] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 301] <... restart_syscall resumed>) = 0 [pid 877] <... futex resumed>) = ? [ 39.582763][ T865] EXT4-fs (loop2): Free/Dirty block details [ 39.588565][ T865] EXT4-fs (loop2): free_blocks=2415919504 [ 39.594113][ T865] EXT4-fs (loop2): dirty_blocks=32 [ 39.596885][ T858] EXT4-fs (loop3): This should not happen!! Data will be lost [ 39.596885][ T858] [ 39.599296][ T865] EXT4-fs (loop2): Block reservation details [ 39.612046][ T872] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 39.614460][ T865] EXT4-fs (loop2): i_reserved_data_blocks=2 [pid 880] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 880] munmap(0x7fb07b50e000, 138412032 [pid 877] +++ killed by SIGBUS +++ [pid 301] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW [pid 880] <... munmap resumed>) = 0 [pid 880] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 880] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 880] close(3) = 0 [pid 880] close(4 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... umount2 resumed>) = 0 [pid 865] +++ killed by SIGBUS +++ [pid 863] +++ killed by SIGBUS +++ [pid 301] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... openat resumed>) = 3 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=863, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(3, "", [pid 298] newfstatat(AT_FDCWD, "./21/file1", [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] getdents64(3, [pid 300] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] <... openat resumed>) = 3 [pid 298] <... openat resumed>) = 4 [pid 301] newfstatat(AT_FDCWD, "./22/binderfs", [pid 300] newfstatat(3, "", [pid 298] newfstatat(4, "", [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] unlink("./22/binderfs" [pid 300] getdents64(3, [pid 298] getdents64(4, [pid 301] <... unlink resumed>) = 0 [pid 300] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 298] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 301] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] getdents64(4, [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 300] newfstatat(AT_FDCWD, "./21/binderfs", [pid 298] close(4 [pid 300] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] <... close resumed>) = 0 [pid 300] unlink("./21/binderfs" [pid 298] rmdir("./21/file1" [pid 300] <... unlink resumed>) = 0 [pid 298] <... rmdir resumed>) = 0 [pid 300] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./21") = 0 [pid 298] mkdir("./22", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 881 ./strace-static-x86_64: Process 881 attached [pid 881] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 881] chdir("./22") = 0 [pid 881] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 881] setpgid(0, 0) = 0 [pid 881] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 881] write(3, "1000", 4) = 4 [pid 881] close(3) = 0 [ 39.629047][ T872] EXT4-fs (loop1): This should not happen!! Data will be lost [ 39.629047][ T872] [ 39.649980][ T880] loop4: detected capacity change from 0 to 2048 [ 39.650306][ T865] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 39.657412][ T872] EXT4-fs (loop1): Total free blocks count 0 [ 39.673118][ T865] EXT4-fs (loop2): This should not happen!! Data will be lost [ 39.673118][ T865] [pid 881] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 881] write(1, "executing program\n", 18) = 18 [pid 881] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 881] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 881] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 881] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 881] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 881] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 881] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[882]}, 88) = 882 [pid 881] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 881] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 881] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 882 attached [pid 882] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 882] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 882] memfd_create("syzkaller", 0) = 3 [pid 882] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 880] <... close resumed>) = 0 [pid 880] mkdir("./file1", 0777) = 0 [pid 880] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 882] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 872] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 878] <... futex resumed>) = ? [pid 878] +++ killed by SIGBUS +++ [pid 882] <... write resumed>) = 1048576 [pid 882] munmap(0x7fb07b50e000, 138412032) = 0 [pid 882] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 882] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 882] close(3) = 0 [pid 882] close(4 [pid 872] +++ killed by SIGBUS +++ [pid 870] +++ killed by SIGBUS +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=870, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [ 39.674837][ T872] EXT4-fs (loop1): Free/Dirty block details [ 39.689882][ T872] EXT4-fs (loop1): free_blocks=2415919504 [ 39.695959][ T872] EXT4-fs (loop1): dirty_blocks=32 [ 39.701121][ T872] EXT4-fs (loop1): Block reservation details [ 39.708765][ T872] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 39.716859][ T872] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 39.718591][ T882] loop0: detected capacity change from 0 to 2048 [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 301] <... umount2 resumed>) = 0 [pid 299] <... restart_syscall resumed>) = 0 [pid 300] <... umount2 resumed>) = 0 [pid 299] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./21/binderfs") = 0 [pid 299] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./22/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./22/file1") = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./22") = 0 [pid 300] newfstatat(AT_FDCWD, "./21/file1", [pid 301] mkdir("./23", 0777) = 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 300] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... openat resumed>) = 3 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] ioctl(3, LOOP_CLR_FD [pid 300] <... openat resumed>) = 4 [pid 301] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 300] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 885 ./strace-static-x86_64: Process 885 attached [pid 885] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 885] chdir("./23") = 0 [pid 885] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 885] setpgid(0, 0) = 0 [pid 885] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 885] write(3, "1000", 4) = 4 [pid 885] close(3) = 0 [pid 885] symlink("/dev/binderfs", "./binderfs") = 0 [pid 885] write(1, "executing program\n", 18executing program ) = 18 [pid 885] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 885] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 885] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 885] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 885] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 885] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 885] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} [pid 300] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 880] <... mount resumed>) = 0 [pid 300] close(4 [pid 880] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 300] <... close resumed>) = 0 [pid 300] rmdir("./21/file1"./strace-static-x86_64: Process 886 attached [pid 885] <... clone3 resumed> => {parent_tid=[886]}, 88) = 886 [pid 880] <... openat resumed>) = 3 [pid 300] <... rmdir resumed>) = 0 [pid 886] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 886] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 886] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 885] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 885] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 880] chdir("./file1" [pid 300] getdents64(3, [pid 885] <... futex resumed>) = 1 [pid 300] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 886] <... futex resumed>) = 0 [pid 886] memfd_create("syzkaller", 0 [pid 885] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 880] <... chdir resumed>) = 0 [pid 300] close(3 [pid 886] <... memfd_create resumed>) = 3 [pid 880] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 300] <... close resumed>) = 0 [pid 886] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 300] rmdir("./21" [pid 880] <... openat resumed>) = 4 [pid 880] ioctl(4, LOOP_CLR_FD) = 0 [pid 880] close(4 [pid 300] <... rmdir resumed>) = 0 [pid 880] <... close resumed>) = 0 [pid 880] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 879] <... futex resumed>) = 0 [pid 879] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 300] mkdir("./22", 0777 [pid 886] <... mmap resumed>) = 0x7fb07b50e000 [pid 880] <... futex resumed>) = 1 [pid 879] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... mkdir resumed>) = 0 [pid 880] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 882] <... close resumed>) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 882] mkdir("./file1", 0777 [pid 300] <... openat resumed>) = 3 [pid 300] ioctl(3, LOOP_CLR_FD [pid 882] <... mkdir resumed>) = 0 [pid 880] <... open resumed>) = 4 [pid 300] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 882] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 880] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] close(3) = 0 [pid 879] <... futex resumed>) = 0 [pid 880] <... futex resumed>) = 1 [pid 879] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 879] <... futex resumed>) = 0 [pid 879] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... clone resumed>, child_tidptr=0x5555610ee690) = 887 [pid 880] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 880] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 879] <... futex resumed>) = 0 [pid 879] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 879] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 880] creat("./bus", 000) = 6 [pid 880] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 879] <... futex resumed>) = 0 [pid 879] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 879] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 880] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 880] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 879] <... futex resumed>) = 0 [pid 880] <... futex resumed>) = 1 [pid 879] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 879] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 880] pwrite64(6, "+", 1, 0) = 1 [pid 880] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 879] <... futex resumed>) = 0 [pid 879] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 879] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 880] open("./bus", O_RDONLY) = 7 [pid 880] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 879] <... futex resumed>) = 0 [pid 879] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 887 attached [pid 880] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 879] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 887] set_robust_list(0x5555610ee6a0, 24 [pid 886] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 879] <... futex resumed>) = 0 [pid 879] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 887] <... set_robust_list resumed>) = 0 [pid 879] <... mmap resumed>) = 0x7fb0838ed000 [pid 879] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 879] rt_sigprocmask(SIG_BLOCK, ~[], [pid 887] chdir("./22" [pid 879] <... rt_sigprocmask resumed>[], 8) = 0 [pid 880] <... copy_file_range resumed>) = 1 [pid 879] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 887] <... chdir resumed>) = 0 [pid 887] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 880] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 879] <... clone3 resumed> => {parent_tid=[888]}, 88) = 888 [pid 879] rt_sigprocmask(SIG_SETMASK, [], [pid 299] <... umount2 resumed>) = 0 [pid 887] <... prctl resumed>) = 0 [pid 880] <... futex resumed>) = 0 [pid 879] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 299] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 879] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 888 attached ) = 0 [pid 887] setpgid(0, 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 880] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 887] <... setpgid resumed>) = 0 [pid 879] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] newfstatat(AT_FDCWD, "./21/file1", [pid 888] set_robust_list(0x7fb08390d9a0, 24 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 888] <... set_robust_list resumed>) = 0 [pid 299] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 887] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 888] rt_sigprocmask(SIG_SETMASK, [], [pid 299] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 887] <... openat resumed>) = 3 [pid 888] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 887] write(3, "1000", 4 [pid 299] <... openat resumed>) = 4 [pid 888] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 299] newfstatat(4, "", [pid 887] <... write resumed>) = 4 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 887] close(3 [pid 299] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 887] <... close resumed>) = 0 [pid 299] getdents64(4, [pid 887] symlink("/dev/binderfs", "./binderfs" executing program [pid 299] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./21/file1") = 0 [pid 299] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 299] close(3 [pid 887] <... symlink resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 887] write(1, "executing program\n", 18 [pid 299] rmdir("./21") = 0 [pid 887] <... write resumed>) = 18 [pid 299] mkdir("./22", 0777) = 0 [pid 887] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 887] <... futex resumed>) = 0 [pid 299] ioctl(3, LOOP_CLR_FD [pid 887] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 299] close(3 [pid 887] <... rt_sigaction resumed>NULL, 8) = 0 [pid 887] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 299] <... close resumed>) = 0 [pid 887] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 887] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 887] <... mmap resumed>) = 0x7fb08390e000 [pid 887] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE [pid 299] <... clone resumed>, child_tidptr=0x5555610ee690) = 889 [pid 887] <... mprotect resumed>) = 0 [pid 887] rt_sigprocmask(SIG_BLOCK, ~[], [pid 886] <... write resumed>) = 1048576 [pid 886] munmap(0x7fb07b50e000, 138412032 [pid 887] <... rt_sigprocmask resumed>[], 8) = 0 [pid 888] <... mmap resumed>) = 0x20000000 [pid 887] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0}./strace-static-x86_64: Process 889 attached [pid 888] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 879] <... futex resumed>) = 0 [ 39.729579][ T872] EXT4-fs (loop1): This should not happen!! Data will be lost [ 39.729579][ T872] [ 39.758812][ T880] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 888] <... futex resumed>) = 1 [pid 887] <... clone3 resumed> => {parent_tid=[890]}, 88) = 890 [pid 879] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 888] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 887] rt_sigprocmask(SIG_SETMASK, [], [pid 879] <... futex resumed>) = 1 [pid 887] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 880] <... futex resumed>) = 0 [pid 879] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 886] <... munmap resumed>) = 0 [pid 886] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 886] ioctl(4, LOOP_SET_FD, 3 [pid 887] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 887] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 889] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 889] chdir("./22"./strace-static-x86_64: Process 890 attached [pid 890] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 890] rt_sigprocmask(SIG_SETMASK, [], [pid 889] <... chdir resumed>) = 0 [pid 890] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 890] memfd_create("syzkaller", 0 [pid 889] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 889] setpgid(0, 0) = 0 [pid 889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 890] <... memfd_create resumed>) = 3 [pid 890] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 889] <... openat resumed>) = 3 [pid 890] <... mmap resumed>) = 0x7fb07b50e000 [pid 889] write(3, "1000", 4) = 4 [pid 889] close(3) = 0 [pid 889] symlink("/dev/binderfs", "./binderfs") = 0 [pid 889] write(1, "executing program\n", 18executing program ) = 18 [pid 889] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 889] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 889] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 889] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 889] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 889] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 889] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[891]}, 88) = 891 [pid 889] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 889] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 889] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 890] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 891 attached [pid 891] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 891] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 891] memfd_create("syzkaller", 0) = 3 [pid 891] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 890] <... write resumed>) = 1048576 [pid 891] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 890] munmap(0x7fb07b50e000, 138412032 [pid 879] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 890] <... munmap resumed>) = 0 [pid 890] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 39.804135][ T880] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 39.804683][ T886] loop3: detected capacity change from 0 to 2048 [ 39.818970][ T880] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 39.836862][ T880] EXT4-fs (loop4): This should not happen!! Data will be lost [ 39.836862][ T880] [ 39.846869][ T880] EXT4-fs (loop4): Total free blocks count 0 [pid 890] ioctl(4, LOOP_SET_FD, 3 [pid 879] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 891] <... write resumed>) = 1048576 [pid 891] munmap(0x7fb07b50e000, 138412032 [pid 888] <... futex resumed>) = 0 [pid 879] <... futex resumed>) = 1 [pid 891] <... munmap resumed>) = 0 [pid 891] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 891] ioctl(4, LOOP_SET_FD, 3 [pid 890] <... ioctl resumed>) = 0 [pid 888] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 886] <... ioctl resumed>) = 0 [pid 880] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 879] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 888] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 888] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 879] <... futex resumed>) = 0 [pid 888] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 888] +++ killed by SIGBUS +++ [pid 886] close(3) = 0 [pid 886] close(4 [pid 890] close(3) = 0 [pid 890] close(4) = 0 [pid 890] mkdir("./file1", 0777) = 0 [ 39.852681][ T880] EXT4-fs (loop4): Free/Dirty block details [ 39.858723][ T880] EXT4-fs (loop4): free_blocks=2415919504 [ 39.862118][ T890] loop2: detected capacity change from 0 to 2048 [ 39.864357][ T880] EXT4-fs (loop4): dirty_blocks=32 [ 39.875641][ T880] EXT4-fs (loop4): Block reservation details [ 39.877131][ T891] loop1: detected capacity change from 0 to 2048 [ 39.881490][ T880] EXT4-fs (loop4): i_reserved_data_blocks=2 [pid 890] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 891] <... ioctl resumed>) = 0 [pid 880] +++ killed by SIGBUS +++ [pid 879] +++ killed by SIGBUS +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=879, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 302] restart_syscall(<... resuming interrupted clone ...> [pid 891] close(3) = 0 [pid 891] close(4 [pid 882] <... mount resumed>) = 0 [pid 882] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 882] chdir("./file1") = 0 [pid 882] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 882] ioctl(4, LOOP_CLR_FD) = 0 [pid 882] close(4) = 0 [pid 882] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 881] <... futex resumed>) = 0 [pid 881] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 881] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 882] <... futex resumed>) = 1 [pid 882] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 882] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 881] <... futex resumed>) = 0 [pid 881] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 881] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 882] <... futex resumed>) = 1 [pid 882] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 882] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 881] <... futex resumed>) = 0 [pid 881] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 881] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 882] <... futex resumed>) = 1 [pid 882] creat("./bus", 000) = 6 [pid 882] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 881] <... futex resumed>) = 0 [pid 881] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 881] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 882] <... futex resumed>) = 1 [pid 882] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 882] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 881] <... futex resumed>) = 0 [pid 881] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 881] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 882] <... futex resumed>) = 1 [pid 882] pwrite64(6, "+", 1, 0) = 1 [pid 882] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 881] <... futex resumed>) = 0 [pid 881] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 881] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 882] <... futex resumed>) = 1 [pid 882] open("./bus", O_RDONLY) = 7 [pid 302] <... restart_syscall resumed>) = 0 [pid 882] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 890] <... mount resumed>) = 0 [pid 881] <... futex resumed>) = 0 [pid 881] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 881] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 302] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW [pid 881] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 881] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 881] rt_sigprocmask(SIG_BLOCK, ~[], [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 890] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 882] <... futex resumed>) = 1 [pid 881] <... rt_sigprocmask resumed>[], 8) = 0 [pid 881] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 882] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 302] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 890] <... openat resumed>) = 3 ./strace-static-x86_64: Process 897 attached [pid 891] <... close resumed>) = 0 [pid 886] <... close resumed>) = 0 [pid 882] <... copy_file_range resumed>) = 1 [pid 881] <... clone3 resumed> => {parent_tid=[897]}, 88) = 897 [pid 302] <... openat resumed>) = 3 [pid 891] mkdir("./file1", 0777 [pid 886] mkdir("./file1", 0777 [pid 881] rt_sigprocmask(SIG_SETMASK, [], [pid 897] set_robust_list(0x7fb08390d9a0, 24 [pid 890] chdir("./file1" [pid 882] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(3, [pid 897] <... set_robust_list resumed>) = 0 [pid 891] <... mkdir resumed>) = 0 [pid 890] <... chdir resumed>) = 0 [pid 882] <... futex resumed>) = 0 [pid 881] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 302] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 886] <... mkdir resumed>) = 0 [pid 891] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 886] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 881] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 897] rt_sigprocmask(SIG_SETMASK, [], [pid 890] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 882] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 881] <... futex resumed>) = 0 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./22/binderfs" [pid 881] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... unlink resumed>) = 0 [pid 302] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 897] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 890] <... openat resumed>) = 4 [pid 897] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 881] <... futex resumed>) = 0 [pid 881] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 890] ioctl(4, LOOP_CLR_FD [pid 897] <... futex resumed>) = 1 [pid 881] <... futex resumed>) = 1 [pid 881] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 882] <... futex resumed>) = 0 [pid 890] <... ioctl resumed>) = 0 [pid 897] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 890] close(4) = 0 [pid 890] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 887] <... futex resumed>) = 0 [pid 887] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 887] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 890] <... futex resumed>) = 1 [pid 890] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 890] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 887] <... futex resumed>) = 0 [pid 887] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 887] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 890] <... futex resumed>) = 1 [pid 890] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 890] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 887] <... futex resumed>) = 0 [pid 887] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 887] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 890] <... futex resumed>) = 1 [pid 890] creat("./bus", 000) = 6 [pid 890] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 887] <... futex resumed>) = 0 [pid 887] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 887] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 890] <... futex resumed>) = 1 [pid 890] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 890] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 887] <... futex resumed>) = 0 [pid 887] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 887] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 890] <... futex resumed>) = 1 [pid 890] pwrite64(6, "+", 1, 0) = 1 [pid 890] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 887] <... futex resumed>) = 0 [pid 887] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 887] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 890] <... futex resumed>) = 1 [pid 890] open("./bus", O_RDONLY) = 7 [ 39.884039][ T880] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 39.907798][ T880] EXT4-fs (loop4): This should not happen!! Data will be lost [ 39.907798][ T880] [ 39.913274][ T882] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 39.925965][ T890] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 890] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 887] <... futex resumed>) = 0 [pid 887] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 887] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 887] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 887] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 887] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 887] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[898]}, 88) = 898 [pid 887] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 887] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 887] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 890] <... futex resumed>) = 1 [pid 890] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 890] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 890] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 898 attached [pid 898] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 898] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 898] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 887] <... futex resumed>) = 0 [pid 887] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 887] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 890] <... futex resumed>) = 0 [pid 898] <... futex resumed>) = 1 [ 39.957321][ T882] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 39.972829][ T890] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 39.973510][ T882] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 898] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 881] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 887] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 881] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 897] <... futex resumed>) = 0 [pid 887] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 881] <... futex resumed>) = 1 [pid 898] <... futex resumed>) = 0 [pid 897] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 887] <... futex resumed>) = 1 [pid 881] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 898] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 897] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 887] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 898] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 897] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 898] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 897] <... futex resumed>) = 1 [pid 881] <... futex resumed>) = 0 [pid 898] <... futex resumed>) = 1 [pid 897] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 887] <... futex resumed>) = 0 [pid 898] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 891] <... mount resumed>) = 0 [pid 891] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 302] <... umount2 resumed>) = 0 [pid 891] <... openat resumed>) = 3 [pid 302] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 891] chdir("./file1" [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 891] <... chdir resumed>) = 0 [pid 302] newfstatat(AT_FDCWD, "./22/file1", [pid 891] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 891] <... openat resumed>) = 4 [pid 302] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 891] ioctl(4, LOOP_CLR_FD [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 891] <... ioctl resumed>) = 0 [pid 302] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 891] close(4 [pid 302] <... openat resumed>) = 4 [pid 891] <... close resumed>) = 0 [pid 302] newfstatat(4, "", [pid 891] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 891] <... futex resumed>) = 1 [pid 889] <... futex resumed>) = 0 [pid 302] getdents64(4, [pid 891] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 889] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 891] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 889] <... futex resumed>) = 0 [pid 302] getdents64(4, [pid 891] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 889] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 891] <... open resumed>) = 4 [pid 302] close(4 [pid 891] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... close resumed>) = 0 [pid 891] <... futex resumed>) = 1 [pid 889] <... futex resumed>) = 0 [pid 302] rmdir("./22/file1" [pid 891] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 889] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... rmdir resumed>) = 0 [pid 891] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 889] <... futex resumed>) = 0 [pid 302] getdents64(3, [pid 891] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 889] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 891] <... open resumed>) = 5 [pid 302] close(3 [pid 891] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... close resumed>) = 0 [pid 891] <... futex resumed>) = 1 [pid 889] <... futex resumed>) = 0 [pid 302] rmdir("./22" [pid 891] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 889] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... rmdir resumed>) = 0 [pid 891] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 889] <... futex resumed>) = 0 [pid 302] mkdir("./23", 0777 [pid 891] creat("./bus", 000 [pid 889] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... mkdir resumed>) = 0 [pid 891] <... creat resumed>) = 6 [ 39.989242][ T891] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 39.999367][ T882] EXT4-fs (loop0): This should not happen!! Data will be lost [ 39.999367][ T882] [ 40.010019][ T890] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 40.031518][ T882] EXT4-fs (loop0): Total free blocks count 0 [ 40.032028][ T890] EXT4-fs (loop2): This should not happen!! Data will be lost [ 40.032028][ T890] [ 40.051236][ T890] EXT4-fs (loop2): Total free blocks count 0 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 891] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... openat resumed>) = 3 [pid 891] <... futex resumed>) = 1 [pid 889] <... futex resumed>) = 0 [pid 302] ioctl(3, LOOP_CLR_FD [pid 891] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 889] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 891] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 889] <... futex resumed>) = 0 [pid 302] close(3 [pid 891] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 889] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... close resumed>) = 0 [pid 891] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 891] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 890] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 891] <... futex resumed>) = 1 [pid 889] <... futex resumed>) = 0 [pid 302] <... clone resumed>, child_tidptr=0x5555610ee690) = 902 [pid 891] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 889] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 891] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 889] <... futex resumed>) = 0 [pid 891] pwrite64(6, "+", 1, 0 [pid 889] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 891] <... pwrite64 resumed>) = 1 [pid 891] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 889] <... futex resumed>) = 0 [pid 891] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 889] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 891] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 889] <... futex resumed>) = 0 [pid 891] open("./bus", O_RDONLY [pid 889] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 891] <... open resumed>) = 7 [pid 891] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 889] <... futex resumed>) = 0 [pid 891] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 889] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 891] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 889] <... futex resumed>) = 0 [pid 891] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 889] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 902 attached [pid 898] <... futex resumed>) = ? [pid 891] <... copy_file_range resumed>) = 1 [pid 889] <... futex resumed>) = 0 [pid 891] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 889] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 891] <... futex resumed>) = 0 [pid 889] <... mmap resumed>) = 0x7fb0838ed000 [pid 891] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 889] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 889] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 889] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[903]}, 88) = 903 [pid 889] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 889] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 889] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 902] set_robust_list(0x5555610ee6a0, 24 [pid 898] +++ killed by SIGBUS +++ ./strace-static-x86_64: Process 903 attached [pid 903] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 903] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 903] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 903] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 889] <... futex resumed>) = 0 [ 40.057535][ T890] EXT4-fs (loop2): Free/Dirty block details [ 40.063265][ T890] EXT4-fs (loop2): free_blocks=2415919504 [ 40.069101][ T890] EXT4-fs (loop2): dirty_blocks=32 [ 40.074053][ T890] EXT4-fs (loop2): Block reservation details [ 40.080151][ T890] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 40.086309][ T882] EXT4-fs (loop0): Free/Dirty block details [ 40.092048][ T882] EXT4-fs (loop0): free_blocks=2415919504 [ 40.097934][ T882] EXT4-fs (loop0): dirty_blocks=32 [pid 889] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 891] <... futex resumed>) = 0 [pid 889] <... futex resumed>) = 1 [pid 889] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 903] <... futex resumed>) = 1 [pid 903] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 902] chdir("./23" [pid 882] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 902] <... chdir resumed>) = 0 [pid 897] <... futex resumed>) = ? [ 40.102996][ T882] EXT4-fs (loop0): Block reservation details [ 40.109232][ T882] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 40.116648][ T891] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 40.116702][ T890] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 40.144088][ T890] EXT4-fs (loop2): This should not happen!! Data will be lost [ 40.144088][ T890] executing program [pid 902] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 890] +++ killed by SIGBUS +++ [pid 887] +++ killed by SIGBUS +++ [pid 902] <... prctl resumed>) = 0 [pid 882] +++ killed by SIGBUS +++ [pid 902] setpgid(0, 0) = 0 [pid 902] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 902] write(3, "1000", 4) = 4 [pid 902] close(3) = 0 [pid 902] symlink("/dev/binderfs", "./binderfs") = 0 [pid 902] write(1, "executing program\n", 18) = 18 [pid 902] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 902] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 902] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 902] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 902] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 902] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 902] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[905]}, 88) = 905 [pid 902] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 902] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 902] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 905 attached [pid 905] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 905] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 905] memfd_create("syzkaller", 0) = 3 [pid 905] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 905] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 897] +++ killed by SIGBUS +++ [pid 905] <... write resumed>) = 1048576 [pid 905] munmap(0x7fb07b50e000, 138412032) = 0 [pid 905] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 905] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 905] close(3) = 0 [pid 905] close(4 [pid 889] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 40.148080][ T891] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 40.166572][ T905] loop4: detected capacity change from 0 to 2048 [ 40.167017][ T881] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 40.173392][ T891] EXT4-fs (loop1): This should not happen!! Data will be lost [ 40.173392][ T891] [ 40.188124][ T886] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 889] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 886] <... mount resumed>) = 0 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=887, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 905] <... close resumed>) = 0 [pid 905] mkdir("./file1", 0777 [pid 903] <... futex resumed>) = 0 [pid 889] <... futex resumed>) = 1 [pid 886] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 881] +++ killed by SIGBUS +++ [pid 903] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 889] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 886] <... openat resumed>) = 3 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=881, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 903] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 886] chdir("./file1" [pid 300] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW [pid 903] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 886] <... chdir resumed>) = 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 903] <... futex resumed>) = 1 [pid 889] <... futex resumed>) = 0 [pid 886] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 300] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 903] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 886] <... openat resumed>) = 4 [pid 300] <... openat resumed>) = 3 [pid 886] ioctl(4, LOOP_CLR_FD [pid 300] newfstatat(3, "", [pid 886] <... ioctl resumed>) = 0 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 886] close(4 [pid 300] getdents64(3, [pid 886] <... close resumed>) = 0 [pid 886] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 885] <... futex resumed>) = 0 [pid 886] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 885] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 886] <... open resumed>) = 4 [pid 885] <... futex resumed>) = 0 [pid 886] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 885] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 886] <... futex resumed>) = 0 [pid 885] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 886] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 885] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 886] <... open resumed>) = 5 [pid 885] <... futex resumed>) = 0 [pid 886] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 885] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 886] <... futex resumed>) = 0 [pid 885] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 886] creat("./bus", 000 [pid 885] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 886] <... creat resumed>) = 6 [pid 885] <... futex resumed>) = 0 [pid 886] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 885] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 886] <... futex resumed>) = 0 [pid 885] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 886] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 885] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 886] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 885] <... futex resumed>) = 0 [pid 886] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 885] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 886] <... futex resumed>) = 0 [pid 885] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 886] pwrite64(6, "+", 1, 0 [pid 885] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 886] <... pwrite64 resumed>) = 1 [pid 885] <... futex resumed>) = 0 [pid 886] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 885] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 886] <... futex resumed>) = 0 [pid 885] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 886] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 885] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 886] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 885] <... futex resumed>) = 0 [pid 886] open("./bus", O_RDONLY [pid 885] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 886] <... open resumed>) = 7 [pid 886] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 885] <... futex resumed>) = 0 [pid 886] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 885] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 886] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 885] <... futex resumed>) = 0 [pid 886] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 885] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW [pid 886] <... copy_file_range resumed>) = 1 [pid 885] <... futex resumed>) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 886] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 885] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 298] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 886] <... futex resumed>) = 0 [pid 885] <... mmap resumed>) = 0x7fb0838ed000 [pid 298] <... openat resumed>) = 3 [pid 886] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 885] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 298] newfstatat(3, "", [pid 885] <... mprotect resumed>) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 885] rt_sigprocmask(SIG_BLOCK, ~[], [pid 298] getdents64(3, [pid 885] <... rt_sigprocmask resumed>[], 8) = 0 [pid 885] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[906]}, 88) = 906 [pid 885] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 885] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 885] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 906 attached [pid 906] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 906] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 906] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 905] <... mkdir resumed>) = 0 [pid 885] <... futex resumed>) = 0 [pid 300] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 298] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 905] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 885] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 886] <... futex resumed>) = 0 [pid 885] <... futex resumed>) = 1 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 906] <... futex resumed>) = 1 [pid 891] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 906] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 885] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./22/binderfs") = 0 [pid 300] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./22/binderfs") = 0 [pid 298] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 903] <... futex resumed>) = ? [pid 903] +++ killed by SIGBUS +++ [ 40.195023][ T891] EXT4-fs (loop1): Total free blocks count 0 [ 40.205738][ T881] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.205738][ T881] [ 40.211338][ T891] EXT4-fs (loop1): Free/Dirty block details [ 40.225765][ T891] EXT4-fs (loop1): free_blocks=2415919504 [ 40.231259][ T891] EXT4-fs (loop1): dirty_blocks=32 [ 40.236238][ T891] EXT4-fs (loop1): Block reservation details [ 40.242023][ T891] EXT4-fs (loop1): i_reserved_data_blocks=2 [pid 891] +++ killed by SIGBUS +++ [pid 889] +++ killed by SIGBUS +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=889, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 885] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 299] <... restart_syscall resumed>) = 0 [pid 885] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 906] <... futex resumed>) = 0 [pid 885] <... futex resumed>) = 1 [pid 906] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 885] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW [pid 906] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 906] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 906] <... futex resumed>) = 1 [pid 885] <... futex resumed>) = 0 [pid 299] <... openat resumed>) = 3 [pid 906] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./22/binderfs") = 0 [ 40.244170][ T886] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 40.252937][ T891] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 40.275321][ T891] EXT4-fs (loop1): This should not happen!! Data will be lost [ 40.275321][ T891] [ 40.287051][ T886] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 40.299325][ T886] EXT4-fs (loop3): This should not happen!! Data will be lost [ 40.299325][ T886] [pid 299] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] <... umount2 resumed>) = 0 [pid 298] <... umount2 resumed>) = 0 [pid 300] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 905] <... mount resumed>) = 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./22/file1", [pid 298] newfstatat(AT_FDCWD, "./22/file1", [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 300] <... openat resumed>) = 4 [pid 298] <... openat resumed>) = 4 [pid 300] newfstatat(4, "", [pid 298] newfstatat(4, "", [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(4, [pid 298] getdents64(4, [pid 300] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 298] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, [pid 298] getdents64(4, [pid 300] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 298] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 300] close(4 [pid 298] close(4 [pid 905] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 300] <... close resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 905] <... openat resumed>) = 3 [pid 300] rmdir("./22/file1" [pid 298] rmdir("./22/file1" [pid 905] chdir("./file1" [pid 300] <... rmdir resumed>) = 0 [pid 298] <... rmdir resumed>) = 0 [pid 905] <... chdir resumed>) = 0 [pid 300] getdents64(3, [pid 298] getdents64(3, [pid 905] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 300] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 298] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 905] <... openat resumed>) = 4 [pid 300] close(3 [pid 298] close(3 [pid 905] ioctl(4, LOOP_CLR_FD [pid 300] <... close resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 905] <... ioctl resumed>) = 0 [pid 300] rmdir("./22" [pid 298] rmdir("./22" [pid 905] close(4 [pid 300] <... rmdir resumed>) = 0 [pid 298] <... rmdir resumed>) = 0 [pid 886] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 906] <... futex resumed>) = ? [pid 905] <... close resumed>) = 0 [pid 905] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] mkdir("./23", 0777 [pid 298] mkdir("./23", 0777 [pid 906] +++ killed by SIGBUS +++ [pid 905] <... futex resumed>) = 1 [pid 902] <... futex resumed>) = 0 [ 40.309246][ T886] EXT4-fs (loop3): Total free blocks count 0 [ 40.312373][ T905] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 40.315278][ T886] EXT4-fs (loop3): Free/Dirty block details [ 40.331767][ T886] EXT4-fs (loop3): free_blocks=2415919504 [ 40.337871][ T886] EXT4-fs (loop3): dirty_blocks=32 [ 40.344449][ T886] EXT4-fs (loop3): Block reservation details [ 40.350880][ T886] EXT4-fs (loop3): i_reserved_data_blocks=2 [pid 905] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 902] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... mkdir resumed>) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 298] <... mkdir resumed>) = 0 [pid 300] <... openat resumed>) = 3 [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 300] ioctl(3, LOOP_CLR_FD [pid 298] <... openat resumed>) = 3 [pid 300] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 298] ioctl(3, LOOP_CLR_FD [pid 300] close(3 [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 300] <... close resumed>) = 0 [pid 298] close(3 [pid 905] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 902] <... futex resumed>) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] <... umount2 resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 905] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 902] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 905] <... open resumed>) = 4 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 905] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... clone resumed>, child_tidptr=0x5555610ee690) = 909 [pid 299] newfstatat(AT_FDCWD, "./22/file1", [pid 905] <... futex resumed>) = 1 [pid 902] <... futex resumed>) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 905] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 902] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... clone resumed>, child_tidptr=0x5555610ee690) = 910 [pid 905] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 902] <... futex resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 905] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 902] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 905] <... open resumed>) = 5 [pid 299] <... openat resumed>) = 4 [pid 905] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] newfstatat(4, "", [pid 905] <... futex resumed>) = 1 [pid 902] <... futex resumed>) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 905] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 902] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] getdents64(4, [pid 905] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 902] <... futex resumed>) = 0 [pid 299] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 905] creat("./bus", 000 [pid 902] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] getdents64(4, [pid 905] <... creat resumed>) = 6 [pid 299] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 905] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] close(4 [pid 905] <... futex resumed>) = 1 [pid 902] <... futex resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 905] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 902] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] rmdir("./22/file1" [pid 905] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 902] <... futex resumed>) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 905] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 902] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] getdents64(3, [pid 905] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 299] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 905] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] close(3./strace-static-x86_64: Process 910 attached [pid 905] <... futex resumed>) = 1 [pid 902] <... futex resumed>) = 0 [pid 299] <... close resumed>) = 0 ./strace-static-x86_64: Process 909 attached [pid 910] set_robust_list(0x5555610ee6a0, 24 [pid 905] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 902] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] rmdir("./22" [pid 910] <... set_robust_list resumed>) = 0 [pid 909] set_robust_list(0x5555610ee6a0, 24 [pid 905] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 902] <... futex resumed>) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 910] chdir("./23" [pid 909] <... set_robust_list resumed>) = 0 [pid 905] pwrite64(6, "+", 1, 0 [pid 902] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] mkdir("./23", 0777 [pid 910] <... chdir resumed>) = 0 [pid 909] chdir("./23" [pid 905] <... pwrite64 resumed>) = 1 [pid 299] <... mkdir resumed>) = 0 [pid 910] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 909] <... chdir resumed>) = 0 [pid 905] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 910] <... prctl resumed>) = 0 [pid 909] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 905] <... futex resumed>) = 1 [pid 902] <... futex resumed>) = 0 [pid 299] <... openat resumed>) = 3 [pid 910] setpgid(0, 0 [pid 909] <... prctl resumed>) = 0 [pid 905] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 902] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] ioctl(3, LOOP_CLR_FD [pid 910] <... setpgid resumed>) = 0 [pid 909] setpgid(0, 0 [pid 905] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 902] <... futex resumed>) = 0 [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 910] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 909] <... setpgid resumed>) = 0 [pid 905] open("./bus", O_RDONLY [pid 902] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] close(3 [pid 910] <... openat resumed>) = 3 [pid 909] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 905] <... open resumed>) = 7 [pid 299] <... close resumed>) = 0 [pid 910] write(3, "1000", 4 [pid 909] <... openat resumed>) = 3 [pid 905] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 910] <... write resumed>) = 4 [pid 909] write(3, "1000", 4 [pid 905] <... futex resumed>) = 1 [pid 902] <... futex resumed>) = 0 [pid 910] close(3 [pid 909] <... write resumed>) = 4 [pid 905] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 902] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... clone resumed>, child_tidptr=0x5555610ee690) = 911 [pid 910] <... close resumed>) = 0 [pid 909] close(3 [pid 905] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 902] <... futex resumed>) = 0 [pid 910] symlink("/dev/binderfs", "./binderfs" [pid 909] <... close resumed>) = 0 [pid 905] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 902] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 910] <... symlink resumed>) = 0 [pid 909] symlink("/dev/binderfs", "./binderfs" [pid 905] <... copy_file_range resumed>) = 1 executing program [pid 902] <... futex resumed>) = 0 [pid 910] write(1, "executing program\n", 18 [pid 909] <... symlink resumed>) = 0 [pid 905] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 902] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0executing program [pid 910] <... write resumed>) = 18 [pid 909] write(1, "executing program\n", 18 [pid 905] <... futex resumed>) = 0 [pid 902] <... mmap resumed>) = 0x7fb0838ed000 [pid 910] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 909] <... write resumed>) = 18 [pid 905] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 902] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 910] <... futex resumed>) = 0 [pid 909] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 902] <... mprotect resumed>) = 0 [pid 910] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, [pid 909] <... futex resumed>) = 0 [pid 902] rt_sigprocmask(SIG_BLOCK, ~[], [pid 910] <... rt_sigaction resumed>NULL, 8) = 0 [pid 909] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, [pid 902] <... rt_sigprocmask resumed>[], 8) = 0 [pid 910] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 909] <... rt_sigaction resumed>NULL, 8) = 0 [pid 902] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 910] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 909] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 910] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 909] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 902] <... clone3 resumed> => {parent_tid=[912]}, 88) = 912 [pid 910] <... mmap resumed>) = 0x7fb08390e000 [pid 909] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 902] rt_sigprocmask(SIG_SETMASK, [], [pid 910] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE [pid 909] <... mmap resumed>) = 0x7fb08390e000 [pid 902] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 910] <... mprotect resumed>) = 0 [pid 909] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE [pid 902] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 910] rt_sigprocmask(SIG_BLOCK, ~[], [pid 909] <... mprotect resumed>) = 0 [pid 902] <... futex resumed>) = 0 [pid 910] <... rt_sigprocmask resumed>[], 8) = 0 [pid 909] rt_sigprocmask(SIG_BLOCK, ~[], [pid 902] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 910] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} [pid 909] <... rt_sigprocmask resumed>[], 8) = 0 [pid 909] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} [pid 910] <... clone3 resumed> => {parent_tid=[913]}, 88) = 913 [pid 910] rt_sigprocmask(SIG_SETMASK, [], [pid 909] <... clone3 resumed> => {parent_tid=[914]}, 88) = 914 [pid 910] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 909] rt_sigprocmask(SIG_SETMASK, [], [pid 910] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 909] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 910] <... futex resumed>) = 0 [pid 909] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 910] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 909] <... futex resumed>) = 0 ./strace-static-x86_64: Process 911 attached [pid 909] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 886] +++ killed by SIGBUS +++ [pid 885] +++ killed by SIGBUS +++ ./strace-static-x86_64: Process 914 attached ./strace-static-x86_64: Process 913 attached ./strace-static-x86_64: Process 912 attached [pid 911] set_robust_list(0x5555610ee6a0, 24 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=885, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 914] set_robust_list(0x7fb08392e9a0, 24 [pid 913] set_robust_list(0x7fb08392e9a0, 24 [pid 912] set_robust_list(0x7fb08390d9a0, 24 [pid 914] <... set_robust_list resumed>) = 0 [pid 913] <... set_robust_list resumed>) = 0 [pid 912] <... set_robust_list resumed>) = 0 [pid 912] rt_sigprocmask(SIG_SETMASK, [], [pid 913] rt_sigprocmask(SIG_SETMASK, [], [pid 911] <... set_robust_list resumed>) = 0 [pid 912] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 914] rt_sigprocmask(SIG_SETMASK, [], [pid 913] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 912] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 911] chdir("./23") = 0 [pid 911] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 911] setpgid(0, 0) = 0 [pid 911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 911] write(3, "1000", 4) = 4 [pid 911] close(3 [pid 912] <... mmap resumed>) = 0x20000000 [pid 911] <... close resumed>) = 0 [pid 913] memfd_create("syzkaller", 0 [pid 911] symlink("/dev/binderfs", "./binderfs" [pid 912] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 914] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 911] <... symlink resumed>) = 0 executing program [pid 911] write(1, "executing program\n", 18) = 18 [pid 911] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 911] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 911] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 911] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 911] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 911] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 911] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[915]}, 88) = 915 [pid 911] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 911] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 911] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 915 attached [pid 915] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 915] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 915] memfd_create("syzkaller", 0) = 3 [pid 915] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 912] <... futex resumed>) = 1 [pid 902] <... futex resumed>) = 0 [pid 902] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 905] <... futex resumed>) = 0 [pid 902] <... futex resumed>) = 1 [ 40.361696][ T886] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 40.389724][ T886] EXT4-fs (loop3): This should not happen!! Data will be lost [ 40.389724][ T886] [pid 915] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 914] memfd_create("syzkaller", 0 [pid 913] <... memfd_create resumed>) = 3 [pid 912] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 902] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 914] <... memfd_create resumed>) = 3 [pid 913] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 914] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 913] <... mmap resumed>) = 0x7fb07b50e000 [pid 913] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 914] <... mmap resumed>) = 0x7fb07b50e000 [pid 301] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./23/binderfs") = 0 [pid 301] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 914] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 913] <... write resumed>) = 1048576 [pid 914] <... write resumed>) = 1048576 [pid 915] <... write resumed>) = 1048576 [pid 913] munmap(0x7fb07b50e000, 138412032) = 0 [pid 913] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 914] munmap(0x7fb07b50e000, 138412032 [pid 913] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 914] <... munmap resumed>) = 0 [pid 914] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 40.411889][ T905] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 40.426782][ T905] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 40.438944][ T905] EXT4-fs (loop4): This should not happen!! Data will be lost [ 40.438944][ T905] [ 40.445965][ T913] loop0: detected capacity change from 0 to 2048 [ 40.454853][ T905] EXT4-fs (loop4): Total free blocks count 0 [pid 914] ioctl(4, LOOP_SET_FD, 3 [pid 913] close(3 [pid 915] munmap(0x7fb07b50e000, 138412032) = 0 [pid 915] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 915] ioctl(4, LOOP_SET_FD, 3 [pid 913] <... close resumed>) = 0 [pid 902] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 914] <... ioctl resumed>) = 0 [pid 914] close(3) = 0 [pid 914] close(4 [pid 913] close(4 [pid 902] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 912] <... futex resumed>) = 0 [pid 902] <... futex resumed>) = 1 [pid 902] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 912] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 915] <... ioctl resumed>) = 0 [pid 915] close(3 [pid 912] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 912] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 905] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 915] <... close resumed>) = 0 [pid 915] close(4 [pid 912] <... futex resumed>) = ? [pid 902] <... futex resumed>) = ? [pid 912] +++ killed by SIGBUS +++ [pid 301] <... umount2 resumed>) = 0 [pid 913] <... close resumed>) = 0 [pid 913] mkdir("./file1", 0777) = 0 [pid 913] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 301] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./23/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 40.455574][ T914] loop2: detected capacity change from 0 to 2048 [ 40.461151][ T905] EXT4-fs (loop4): Free/Dirty block details [ 40.468392][ T915] loop1: detected capacity change from 0 to 2048 [ 40.473141][ T905] EXT4-fs (loop4): free_blocks=2415919504 [ 40.484410][ T905] EXT4-fs (loop4): dirty_blocks=32 [ 40.489457][ T905] EXT4-fs (loop4): Block reservation details [ 40.495436][ T905] EXT4-fs (loop4): i_reserved_data_blocks=2 [pid 301] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./23/file1") = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./23") = 0 [pid 301] mkdir("./24", 0777 [pid 905] +++ killed by SIGBUS +++ [pid 902] +++ killed by SIGBUS +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=902, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 302] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 302] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] <... mkdir resumed>) = 0 [pid 302] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 302] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./23/binderfs") = 0 [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 302] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... openat resumed>) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 916 ./strace-static-x86_64: Process 916 attached [pid 916] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 916] chdir("./24") = 0 [pid 916] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 916] setpgid(0, 0) = 0 [pid 916] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 916] write(3, "1000", 4) = 4 [pid 916] close(3) = 0 [pid 916] symlink("/dev/binderfs", "./binderfs") = 0 [pid 916] write(1, "executing program\n", 18executing program ) = 18 [pid 916] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 916] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 916] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 916] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 916] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 916] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 916] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0}./strace-static-x86_64: Process 917 attached => {parent_tid=[917]}, 88) = 917 [pid 917] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 917] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 917] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 916] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 916] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 917] <... futex resumed>) = 0 [pid 917] memfd_create("syzkaller", 0 [pid 916] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 917] <... memfd_create resumed>) = 3 [pid 917] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 917] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 917] munmap(0x7fb07b50e000, 138412032) = 0 [pid 917] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 917] ioctl(4, LOOP_SET_FD, 3 [pid 914] <... close resumed>) = 0 [pid 915] <... close resumed>) = 0 [pid 914] mkdir("./file1", 0777 [pid 915] mkdir("./file1", 0777) = 0 [pid 915] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 914] <... mkdir resumed>) = 0 [pid 914] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 917] <... ioctl resumed>) = 0 [pid 917] close(3) = 0 [pid 917] close(4 [pid 302] <... umount2 resumed>) = 0 [pid 302] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 40.502933][ T905] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 40.515121][ T905] EXT4-fs (loop4): This should not happen!! Data will be lost [ 40.515121][ T905] [ 40.546237][ T917] loop3: detected capacity change from 0 to 2048 [pid 302] newfstatat(AT_FDCWD, "./23/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 302] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 302] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 302] close(4) = 0 [pid 302] rmdir("./23/file1" [pid 917] <... close resumed>) = 0 [pid 917] mkdir("./file1", 0777 [pid 915] <... mount resumed>) = 0 [pid 914] <... mount resumed>) = 0 [pid 302] <... rmdir resumed>) = 0 [pid 917] <... mkdir resumed>) = 0 [pid 917] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 302] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./23") = 0 [pid 302] mkdir("./24", 0777) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] close(3) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 922 [pid 915] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 915] chdir("./file1") = 0 [pid 915] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 914] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 915] <... openat resumed>) = 4 [pid 915] ioctl(4, LOOP_CLR_FD) = 0 [pid 915] close(4) = 0 [pid 915] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 911] <... futex resumed>) = 0 [pid 911] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 911] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 915] <... futex resumed>) = 1 [pid 915] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000./strace-static-x86_64: Process 922 attached [pid 922] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 915] <... open resumed>) = 4 [pid 915] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 914] <... openat resumed>) = 3 [pid 915] <... futex resumed>) = 1 [pid 911] <... futex resumed>) = 0 [pid 914] chdir("./file1" [pid 915] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 911] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 915] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 911] <... futex resumed>) = 0 [pid 915] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 914] <... chdir resumed>) = 0 [pid 911] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 922] chdir("./24" [pid 915] <... open resumed>) = 5 [pid 915] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 922] <... chdir resumed>) = 0 [pid 922] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 922] setpgid(0, 0) = 0 [pid 922] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 922] write(3, "1000", 4) = 4 [pid 922] close(3) = 0 [pid 922] symlink("/dev/binderfs", "./binderfs") = 0 [pid 922] write(1, "executing program\n", 18executing program ) = 18 [pid 922] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 922] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 922] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 922] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 922] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 922] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 922] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[926]}, 88) = 926 [pid 922] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 922] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 922] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 926 attached [pid 926] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 926] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 926] memfd_create("syzkaller", 0) = 3 [pid 926] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 915] <... futex resumed>) = 1 [pid 911] <... futex resumed>) = 0 [pid 915] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 914] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 911] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 915] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 911] <... futex resumed>) = 0 [pid 915] creat("./bus", 000 [pid 911] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 914] <... openat resumed>) = 4 [pid 915] <... creat resumed>) = 6 [pid 914] ioctl(4, LOOP_CLR_FD [pid 915] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 911] <... futex resumed>) = 0 [pid 915] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 914] <... ioctl resumed>) = 0 [pid 911] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 915] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 914] close(4 [pid 915] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 911] <... futex resumed>) = 0 [pid 915] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 911] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 915] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 914] <... close resumed>) = 0 [pid 911] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 915] <... futex resumed>) = 0 [pid 911] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 915] pwrite64(6, "+", 1, 0 [pid 911] <... futex resumed>) = 0 [pid 915] <... pwrite64 resumed>) = 1 [pid 911] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 915] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 911] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 915] <... futex resumed>) = 0 [pid 911] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 915] open("./bus", O_RDONLY [pid 911] <... futex resumed>) = 0 [pid 915] <... open resumed>) = 7 [pid 911] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 915] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 911] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 915] <... futex resumed>) = 0 [pid 911] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 915] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 911] <... futex resumed>) = 0 [pid 915] <... copy_file_range resumed>) = 1 [pid 911] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 915] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 911] <... futex resumed>) = 0 [pid 915] <... futex resumed>) = 0 [pid 911] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 915] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 911] <... mmap resumed>) = 0x7fb0838ed000 [pid 911] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 911] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 911] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[928]}, 88) = 928 [pid 911] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 914] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 911] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 914] <... futex resumed>) = 1 [pid 911] <... futex resumed>) = 0 [pid 909] <... futex resumed>) = 0 [pid 914] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 911] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 909] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 914] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 909] <... futex resumed>) = 0 [pid 914] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 909] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 926] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 914] <... open resumed>) = 4 [pid 914] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 926] <... write resumed>) = 1048576 [pid 926] munmap(0x7fb07b50e000, 138412032) = 0 [pid 926] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 40.556029][ T915] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 40.567311][ T914] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 40.590054][ T913] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 926] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 928 attached [pid 917] <... mount resumed>) = 0 [pid 914] <... futex resumed>) = 1 [pid 913] <... mount resumed>) = 0 [pid 909] <... futex resumed>) = 0 [pid 928] set_robust_list(0x7fb08390d9a0, 24 [pid 917] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 914] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 913] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 909] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 928] <... set_robust_list resumed>) = 0 [pid 917] <... openat resumed>) = 3 [pid 914] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 909] <... futex resumed>) = 0 [pid 913] <... openat resumed>) = 3 [pid 926] <... ioctl resumed>) = 0 [pid 926] close(3) = 0 [pid 926] close(4 [pid 914] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 909] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 914] <... open resumed>) = 5 [pid 928] rt_sigprocmask(SIG_SETMASK, [], [pid 914] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 928] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 914] <... futex resumed>) = 1 [pid 909] <... futex resumed>) = 0 [pid 928] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 914] creat("./bus", 000 [pid 909] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 928] <... mmap resumed>) = 0x20000000 [pid 909] <... futex resumed>) = 0 [pid 928] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 914] <... creat resumed>) = 6 [pid 909] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 928] <... futex resumed>) = 1 [pid 914] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 911] <... futex resumed>) = 0 [pid 909] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 911] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 909] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 915] <... futex resumed>) = 0 [pid 911] <... futex resumed>) = 1 [pid 909] <... futex resumed>) = 0 [pid 914] <... futex resumed>) = 0 [pid 928] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 917] chdir("./file1") = 0 [pid 917] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 917] ioctl(4, LOOP_CLR_FD) = 0 [pid 917] close(4) = 0 [pid 917] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 917] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 913] chdir("./file1") = 0 [pid 913] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 913] ioctl(4, LOOP_CLR_FD) = 0 [pid 913] close(4) = 0 [pid 913] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 910] <... futex resumed>) = 0 [pid 910] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 910] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 913] <... futex resumed>) = 1 [pid 913] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 926] <... close resumed>) = 0 [pid 926] mkdir("./file1", 0777) = 0 [pid 926] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 916] <... futex resumed>) = 0 [pid 911] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 909] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 913] <... open resumed>) = 4 [pid 913] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 910] <... futex resumed>) = 0 [pid 913] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 910] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 913] <... open resumed>) = 5 [pid 910] <... futex resumed>) = 0 [pid 913] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 910] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 913] <... futex resumed>) = 0 [pid 910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 913] creat("./bus", 000 [pid 910] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 913] <... creat resumed>) = 6 [pid 910] <... futex resumed>) = 0 [pid 913] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 910] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 913] <... futex resumed>) = 0 [pid 910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 913] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 910] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 913] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 910] <... futex resumed>) = 0 [pid 913] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 910] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 913] <... futex resumed>) = 0 [pid 910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 913] pwrite64(6, "+", 1, 0 [pid 910] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 916] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 913] <... pwrite64 resumed>) = 1 [pid 910] <... futex resumed>) = 0 [pid 917] <... futex resumed>) = 0 [pid 916] <... futex resumed>) = 1 [pid 917] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 916] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 917] <... open resumed>) = 4 [pid 914] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 913] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 910] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 917] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 914] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 917] <... futex resumed>) = 1 [pid 916] <... futex resumed>) = 0 [pid 914] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 916] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 914] <... futex resumed>) = 1 [pid 916] <... futex resumed>) = 0 [pid 909] <... futex resumed>) = 0 [pid 917] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 916] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 914] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 909] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 917] <... open resumed>) = 5 [pid 914] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 909] <... futex resumed>) = 0 [pid 917] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 914] pwrite64(6, "+", 1, 0 [pid 913] <... futex resumed>) = 0 [pid 910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 909] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 917] <... futex resumed>) = 1 [pid 916] <... futex resumed>) = 0 [pid 914] <... pwrite64 resumed>) = 1 [pid 913] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 910] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 917] creat("./bus", 000 [pid 916] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 914] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 913] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 910] <... futex resumed>) = 0 [pid 913] open("./bus", O_RDONLY [pid 910] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 913] <... open resumed>) = 7 [pid 913] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 910] <... futex resumed>) = 0 [pid 913] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 910] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 913] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 910] <... futex resumed>) = 0 [pid 913] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 910] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 913] <... copy_file_range resumed>) = 1 [pid 910] <... futex resumed>) = 0 [pid 913] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 910] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 913] <... futex resumed>) = 0 [pid 910] <... mmap resumed>) = 0x7fb0838ed000 [pid 917] <... creat resumed>) = 6 [pid 916] <... futex resumed>) = 0 [pid 914] <... futex resumed>) = 1 [pid 913] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 910] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 909] <... futex resumed>) = 0 [pid 910] <... mprotect resumed>) = 0 [pid 910] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 910] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[929]}, 88) = 929 [pid 910] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 910] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 910] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 917] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 916] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 914] open("./bus", O_RDONLY [pid 909] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 917] <... futex resumed>) = 0 [pid 916] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 914] <... open resumed>) = 7 [pid 917] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 916] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 914] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 909] <... futex resumed>) = 0 [pid 917] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 916] <... futex resumed>) = 0 [pid 914] <... futex resumed>) = 0 [pid 909] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 917] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 916] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 914] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 909] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 917] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 909] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 917] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 914] <... futex resumed>) = 0 [pid 909] <... futex resumed>) = 1 [pid 917] <... futex resumed>) = 1 [pid 916] <... futex resumed>) = 0 [pid 917] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 914] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 909] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 917] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 916] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 914] <... copy_file_range resumed>) = 1 [pid 909] <... futex resumed>) = 0 [pid 917] pwrite64(6, "+", 1, 0 [pid 916] <... futex resumed>) = 0 [pid 914] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 909] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 917] <... pwrite64 resumed>) = 1 [pid 916] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 914] <... futex resumed>) = 0 [pid 909] <... mmap resumed>) = 0x7fb0838ed000 [pid 917] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 916] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 914] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 909] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 917] <... futex resumed>) = 0 [pid 916] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 917] open("./bus", O_RDONLY [pid 916] <... futex resumed>) = 0 [pid 909] <... mprotect resumed>) = 0 [pid 916] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 909] rt_sigprocmask(SIG_BLOCK, ~[], [pid 917] <... open resumed>) = 7 [pid 909] <... rt_sigprocmask resumed>[], 8) = 0 [pid 917] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 909] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 917] <... futex resumed>) = 1 [pid 916] <... futex resumed>) = 0 [pid 917] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 916] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 930 attached [pid 917] <... copy_file_range resumed>) = 1 [pid 916] <... futex resumed>) = 0 [pid 909] <... clone3 resumed> => {parent_tid=[930]}, 88) = 930 [pid 917] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 916] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 909] rt_sigprocmask(SIG_SETMASK, [], [pid 917] <... futex resumed>) = 0 [pid 916] <... futex resumed>) = 0 [pid 917] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 916] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 909] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 40.611923][ T917] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 40.612101][ T926] loop4: detected capacity change from 0 to 2048 [ 40.635543][ T915] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters ./strace-static-x86_64: Process 929 attached [pid 930] set_robust_list(0x7fb08390d9a0, 24 [pid 917] <... mmap resumed>) = 0x20000000 [pid 909] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 917] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 909] <... futex resumed>) = 0 [pid 917] <... futex resumed>) = 1 [pid 916] <... futex resumed>) = 0 [pid 909] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 916] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 916] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 930] <... set_robust_list resumed>) = 0 [pid 930] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 930] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = -1 ETIMEDOUT (Connection timed out) [pid 930] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 909] <... futex resumed>) = 0 [pid 909] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 914] <... futex resumed>) = 0 [pid 909] <... futex resumed>) = 1 [pid 911] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 910] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 909] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 930] <... futex resumed>) = 1 [ 40.674443][ T915] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 40.678796][ T917] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 40.687248][ T915] EXT4-fs (loop1): This should not happen!! Data will be lost [ 40.687248][ T915] [ 40.711321][ T915] EXT4-fs (loop1): Total free blocks count 0 [pid 930] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 929] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 929] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 929] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 928] <... futex resumed>) = 0 [pid 911] <... futex resumed>) = 1 [pid 910] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 928] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 911] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 913] <... futex resumed>) = 0 [pid 910] <... futex resumed>) = 1 [pid 928] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 916] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 910] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 916] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 40.712545][ T914] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 40.717435][ T915] EXT4-fs (loop1): Free/Dirty block details [ 40.737781][ T915] EXT4-fs (loop1): free_blocks=2415919504 [ 40.743717][ T913] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 40.749211][ T914] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 916] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 928] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 909] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 909] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 928] <... futex resumed>) = 1 [pid 911] <... futex resumed>) = 0 [pid 930] <... futex resumed>) = 0 [pid 909] <... futex resumed>) = 1 [pid 930] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 909] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 930] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 930] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 909] <... futex resumed>) = 0 [pid 930] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 928] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 926] <... mount resumed>) = 0 [ 40.758868][ T915] EXT4-fs (loop1): dirty_blocks=32 [ 40.772179][ T917] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 40.775566][ T913] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 40.789898][ T926] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 40.799544][ T915] EXT4-fs (loop1): Block reservation details [ 40.812020][ T917] EXT4-fs (loop3): This should not happen!! Data will be lost [ 40.812020][ T917] [pid 910] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 910] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 929] <... futex resumed>) = 0 [pid 910] <... futex resumed>) = 1 [pid 929] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 910] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 929] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 929] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 910] <... futex resumed>) = 0 [pid 929] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 926] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 926] chdir("./file1") = 0 [pid 926] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 926] ioctl(4, LOOP_CLR_FD) = 0 [pid 926] close(4) = 0 [pid 926] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 922] <... futex resumed>) = 0 [pid 922] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 922] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 926] <... futex resumed>) = 1 [pid 926] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 926] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 922] <... futex resumed>) = 0 [pid 922] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 922] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 926] <... futex resumed>) = 1 [pid 926] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 926] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 922] <... futex resumed>) = 0 [pid 922] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 922] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 926] <... futex resumed>) = 1 [pid 926] creat("./bus", 000) = 6 [pid 926] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 922] <... futex resumed>) = 0 [pid 922] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 922] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 917] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 916] <... mmap resumed>) = 0x7fb0838ed000 [ 40.815887][ T913] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.815887][ T913] [ 40.826564][ T914] EXT4-fs (loop2): This should not happen!! Data will be lost [ 40.826564][ T914] [ 40.834745][ T917] EXT4-fs (loop3): Total free blocks count 0 [ 40.847486][ T915] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 40.849973][ T917] EXT4-fs (loop3): Free/Dirty block details [ 40.861374][ T917] EXT4-fs (loop3): free_blocks=2415919504 [ 40.867303][ T917] EXT4-fs (loop3): dirty_blocks=32 [pid 916] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 916] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 916] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[933]}, 88) = 933 [pid 916] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 916] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 916] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 926] <... futex resumed>) = 1 [pid 926] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 926] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 922] <... futex resumed>) = 0 [pid 922] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 922] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 926] <... futex resumed>) = 1 [pid 926] pwrite64(6, "+", 1, 0) = 1 [pid 926] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 922] <... futex resumed>) = 0 [pid 922] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 922] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 926] open("./bus", O_RDONLY [pid 916] <... futex resumed>) = ? [pid 926] <... open resumed>) = 7 [pid 926] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 922] <... futex resumed>) = 0 [pid 922] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 922] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 922] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 922] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 922] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 922] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[934]}, 88) = 934 [pid 922] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 922] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 922] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 933 attached [pid 926] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 926] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 926] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 915] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 928] <... futex resumed>) = ? [pid 928] +++ killed by SIGBUS +++ ./strace-static-x86_64: Process 934 attached [pid 933] +++ killed by SIGBUS +++ [ 40.872233][ T917] EXT4-fs (loop3): Block reservation details [ 40.878208][ T917] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 40.884151][ T914] EXT4-fs (loop2): Total free blocks count 0 [ 40.890221][ T914] EXT4-fs (loop2): Free/Dirty block details [ 40.896157][ T914] EXT4-fs (loop2): free_blocks=2415919504 [ 40.897991][ T915] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [pid 934] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 917] +++ killed by SIGBUS +++ [pid 916] +++ killed by SIGBUS +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=916, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16} --- [pid 301] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 301] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./24/binderfs") = 0 [pid 301] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 934] rt_sigprocmask(SIG_SETMASK, [], [pid 922] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 934] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 922] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 934] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 922] <... futex resumed>) = 1 [pid 926] <... futex resumed>) = 0 [pid 926] write(-1, "\x30\x78\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65983) = -1 EBADF (Bad file descriptor) [ 40.903120][ T917] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 40.914632][ T913] EXT4-fs (loop0): Total free blocks count 0 [ 40.926061][ T917] EXT4-fs (loop3): This should not happen!! Data will be lost [ 40.926061][ T917] [ 40.933429][ T915] EXT4-fs (loop1): This should not happen!! Data will be lost [ 40.933429][ T915] [ 40.942685][ T913] EXT4-fs (loop0): Free/Dirty block details [ 40.956089][ T914] EXT4-fs (loop2): dirty_blocks=32 [ 40.956513][ T913] EXT4-fs (loop0): free_blocks=2415919504 [ 40.961882][ T914] EXT4-fs (loop2): Block reservation details [pid 926] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 926] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 914] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 930] <... futex resumed>) = ? [pid 915] +++ killed by SIGBUS +++ [pid 911] +++ killed by SIGBUS +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=911, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=18} --- [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 934] <... mmap resumed>) = 0x20000000 [pid 922] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 934] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 934] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 922] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 913] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 922] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 930] +++ killed by SIGBUS +++ [pid 929] <... futex resumed>) = ? [pid 926] <... futex resumed>) = 0 [pid 922] <... futex resumed>) = 1 [pid 299] <... restart_syscall resumed>) = 0 [pid 926] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 922] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 926] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 926] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 922] <... futex resumed>) = 0 [pid 926] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 922] exit_group(0 [pid 926] <... futex resumed>) = ? [pid 922] <... exit_group resumed>) = ? [pid 926] +++ exited with 0 +++ [pid 934] <... futex resumed>) = ? [pid 929] +++ killed by SIGBUS +++ [pid 299] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./23/binderfs") = 0 [ 40.967141][ T913] EXT4-fs (loop0): dirty_blocks=32 [ 40.974668][ T914] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 40.978060][ T913] EXT4-fs (loop0): Block reservation details [ 40.989536][ T913] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 40.998420][ T914] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 40.999131][ T934] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [pid 299] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 914] +++ killed by SIGBUS +++ [pid 909] +++ killed by SIGBUS +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=909, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 300] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 300] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 300] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./23/binderfs") = 0 [pid 300] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 913] +++ killed by SIGBUS +++ [pid 910] +++ killed by SIGBUS +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=910, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=17} --- [pid 298] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./23/binderfs") = 0 [ 41.012553][ T914] EXT4-fs (loop2): This should not happen!! Data will be lost [ 41.012553][ T914] [ 41.027434][ T913] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 41.036227][ T934] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 41.047567][ T913] EXT4-fs (loop0): This should not happen!! Data will be lost [ 41.047567][ T913] [ 41.062058][ T934] EXT4-fs (loop4): This should not happen!! Data will be lost [pid 298] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... umount2 resumed>) = 0 [pid 301] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./24/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./24/file1") = 0 [pid 301] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./24") = 0 [pid 301] mkdir("./25", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 936 [pid 934] +++ exited with 0 +++ [pid 922] +++ exited with 0 +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=922, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- ./strace-static-x86_64: Process 936 attached [pid 302] restart_syscall(<... resuming interrupted clone ...> [pid 936] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 936] chdir("./25") = 0 [pid 936] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 936] setpgid(0, 0) = 0 [pid 936] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 936] write(3, "1000", 4) = 4 [pid 936] close(3) = 0 [pid 936] symlink("/dev/binderfs", "./binderfs") = 0 [pid 936] write(1, "executing program\n", 18executing program ) = 18 [pid 936] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 936] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 936] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 936] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 936] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 936] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 936] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[937]}, 88) = 937 [pid 936] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 936] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 936] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 937 attached [pid 937] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 937] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 937] memfd_create("syzkaller", 0) = 3 [pid 937] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 302] <... restart_syscall resumed>) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./23/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 302] <... openat resumed>) = 3 [pid 298] <... openat resumed>) = 4 [pid 302] newfstatat(3, "", [pid 298] newfstatat(4, "", [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(3, [pid 298] getdents64(4, [pid 302] <... getdents64 resumed>0x5555610ef730 /* 4 entries */, 32768) = 112 [pid 298] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 302] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] getdents64(4, [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 302] newfstatat(AT_FDCWD, "./24/binderfs", [pid 298] close(4 [pid 302] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] <... close resumed>) = 0 [pid 302] unlink("./24/binderfs" [pid 298] rmdir("./23/file1" [pid 302] <... unlink resumed>) = 0 [pid 298] <... rmdir resumed>) = 0 [pid 302] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW [ 41.062058][ T934] [ 41.081027][ T934] EXT4-fs (loop4): Total free blocks count 0 [ 41.087159][ T934] EXT4-fs (loop4): Free/Dirty block details [ 41.093101][ T934] EXT4-fs (loop4): free_blocks=2415919504 [ 41.099203][ T934] EXT4-fs (loop4): dirty_blocks=32 [ 41.104602][ T934] EXT4-fs (loop4): Block reservation details [ 41.110645][ T934] EXT4-fs (loop4): i_reserved_data_blocks=2 [pid 298] getdents64(3, [pid 937] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 300] <... umount2 resumed>) = 0 [pid 299] <... umount2 resumed>) = 0 [pid 298] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 300] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] close(3 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... close resumed>) = 0 [pid 300] newfstatat(AT_FDCWD, "./23/file1", [pid 299] newfstatat(AT_FDCWD, "./23/file1", [pid 298] rmdir("./23" [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] <... rmdir resumed>) = 0 [pid 300] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] mkdir("./24", 0777 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... mkdir resumed>) = 0 [pid 300] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 299] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 300] <... openat resumed>) = 4 [pid 299] <... openat resumed>) = 4 [pid 298] <... openat resumed>) = 3 [pid 300] newfstatat(4, "", [pid 299] newfstatat(4, "", [pid 298] ioctl(3, LOOP_CLR_FD [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 300] getdents64(4, [pid 299] getdents64(4, [pid 298] close(3 [pid 300] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 299] <... getdents64 resumed>0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 298] <... close resumed>) = 0 [pid 300] getdents64(4, [pid 299] getdents64(4, [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 300] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 299] <... getdents64 resumed>0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 300] close(4 [pid 299] close(4 [pid 298] <... clone resumed>, child_tidptr=0x5555610ee690) = 938 [pid 300] <... close resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 300] rmdir("./23/file1" [pid 299] rmdir("./23/file1" [pid 300] <... rmdir resumed>) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 300] getdents64(3, [pid 299] getdents64(3, [pid 300] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 299] <... getdents64 resumed>0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 300] close(3 [pid 299] close(3 [pid 300] <... close resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 300] rmdir("./23" [pid 299] rmdir("./23" [pid 300] <... rmdir resumed>) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 300] mkdir("./24", 0777 [pid 299] mkdir("./24", 0777 [pid 300] <... mkdir resumed>) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 300] <... openat resumed>) = 3 [pid 299] <... openat resumed>) = 3 [pid 300] ioctl(3, LOOP_CLR_FD [pid 299] ioctl(3, LOOP_CLR_FD [pid 300] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 300] close(3 [pid 299] close(3 [pid 300] <... close resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 300] <... clone resumed>, child_tidptr=0x5555610ee690) = 939 [pid 299] <... clone resumed>, child_tidptr=0x5555610ee690) = 940 [pid 937] <... write resumed>) = 1048576 ./strace-static-x86_64: Process 940 attached [pid 940] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 940] chdir("./24") = 0 [pid 940] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 940] setpgid(0, 0) = 0 [pid 940] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 940] write(3, "1000", 4) = 4 [pid 940] close(3) = 0 [pid 940] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 940] write(1, "executing program\n", 18) = 18 [pid 940] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 940] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 940] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 940] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 940] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 940] rt_sigprocmask(SIG_BLOCK, ~[], [pid 937] munmap(0x7fb07b50e000, 138412032 [pid 940] <... rt_sigprocmask resumed>[], 8) = 0 [pid 937] <... munmap resumed>) = 0 [pid 940] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[941]}, 88) = 941 [pid 940] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 940] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 940] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 937] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 937] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 939 attached ./strace-static-x86_64: Process 938 attached [pid 939] set_robust_list(0x5555610ee6a0, 24 [pid 938] set_robust_list(0x5555610ee6a0, 24 [pid 939] <... set_robust_list resumed>) = 0 [pid 938] <... set_robust_list resumed>) = 0 [pid 938] chdir("./24"./strace-static-x86_64: Process 941 attached [pid 941] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 941] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 938] <... chdir resumed>) = 0 [pid 941] memfd_create("syzkaller", 0) = 3 [pid 938] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 941] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 939] chdir("./24" [pid 938] <... prctl resumed>) = 0 [pid 938] setpgid(0, 0 [pid 939] <... chdir resumed>) = 0 [pid 938] <... setpgid resumed>) = 0 [pid 939] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 938] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 939] setpgid(0, 0) = 0 [pid 938] write(3, "1000", 4 [pid 939] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 938] <... write resumed>) = 4 [pid 939] <... openat resumed>) = 3 [pid 938] close(3 [pid 939] write(3, "1000", 4 [pid 938] <... close resumed>) = 0 [pid 939] <... write resumed>) = 4 [pid 938] symlink("/dev/binderfs", "./binderfs" [pid 939] close(3 [pid 938] <... symlink resumed>) = 0 [pid 939] <... close resumed>) = 0 [pid 937] <... ioctl resumed>) = 0 [pid 937] close(3) = 0 [pid 937] close(4 [pid 939] symlink("/dev/binderfs", "./binderfs" [pid 938] write(1, "executing program\n", 18executing program [pid 939] <... symlink resumed>) = 0 [pid 938] <... write resumed>) = 18 [pid 939] write(1, "executing program\n", 18 [pid 938] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 941] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 941] munmap(0x7fb07b50e000, 138412032) = 0 [pid 941] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 941] ioctl(4, LOOP_SET_FD, 3executing program [ 41.130807][ T8] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 41.162105][ T937] loop3: detected capacity change from 0 to 2048 ) = 0 [pid 939] <... write resumed>) = 18 [pid 938] <... futex resumed>) = 0 [pid 941] close(3 [pid 939] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 938] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, [pid 939] <... futex resumed>) = 0 [pid 939] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, [pid 938] <... rt_sigaction resumed>NULL, 8) = 0 [pid 941] <... close resumed>) = 0 [pid 939] <... rt_sigaction resumed>NULL, 8) = 0 [pid 938] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 941] close(4 [pid 939] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 938] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 939] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 938] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 939] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 938] <... mmap resumed>) = 0x7fb08390e000 [pid 938] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 938] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 938] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[942]}, 88) = 942 ./strace-static-x86_64: Process 942 attached [pid 939] <... mmap resumed>) = 0x7fb08390e000 [pid 938] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 938] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 938] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 939] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE [pid 942] set_robust_list(0x7fb08392e9a0, 24 [pid 939] <... mprotect resumed>) = 0 [pid 942] <... set_robust_list resumed>) = 0 [pid 939] rt_sigprocmask(SIG_BLOCK, ~[], [pid 942] rt_sigprocmask(SIG_SETMASK, [], [pid 939] <... rt_sigprocmask resumed>[], 8) = 0 [pid 942] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 939] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0}./strace-static-x86_64: Process 943 attached [pid 943] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 943] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 943] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 939] <... clone3 resumed> => {parent_tid=[943]}, 88) = 943 [pid 939] rt_sigprocmask(SIG_SETMASK, [], [pid 942] memfd_create("syzkaller", 0 [pid 939] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 942] <... memfd_create resumed>) = 3 [pid 939] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 942] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 939] <... futex resumed>) = 1 [pid 943] <... futex resumed>) = 0 [pid 943] memfd_create("syzkaller", 0 [pid 939] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 943] <... memfd_create resumed>) = 3 [pid 943] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 942] <... mmap resumed>) = 0x7fb07b50e000 [pid 943] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 942] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 937] <... close resumed>) = 0 [pid 937] mkdir("./file1", 0777) = 0 [pid 937] mount("/dev/loop3", "./file1", "ext4", 0, ",errors=continue" [pid 943] <... write resumed>) = 1048576 [pid 943] munmap(0x7fb07b50e000, 138412032) = 0 [pid 943] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 943] ioctl(4, LOOP_SET_FD, 3 [pid 942] <... write resumed>) = 1048576 [pid 943] <... ioctl resumed>) = 0 [pid 942] munmap(0x7fb07b50e000, 138412032 [pid 941] <... close resumed>) = 0 [pid 941] mkdir("./file1", 0777) = 0 [pid 941] mount("/dev/loop1", "./file1", "ext4", 0, ",errors=continue" [pid 942] <... munmap resumed>) = 0 [pid 942] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 302] <... umount2 resumed>) = 0 [pid 942] <... openat resumed>) = 4 [pid 942] ioctl(4, LOOP_SET_FD, 3 [pid 943] close(3 [pid 302] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./24/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 943] <... close resumed>) = 0 [pid 942] <... ioctl resumed>) = 0 [pid 302] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(4, 0x5555610f7770 /* 2 entries */, 32768) = 48 [pid 302] getdents64(4, 0x5555610f7770 /* 0 entries */, 32768) = 0 [pid 302] close(4) = 0 [pid 302] rmdir("./24/file1") = 0 [pid 302] getdents64(3, 0x5555610ef730 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./24") = 0 [pid 302] mkdir("./25", 0777) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] close(3) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555610ee690) = 946 [pid 942] close(3 [pid 943] close(4 [pid 942] <... close resumed>) = 0 [pid 942] close(4./strace-static-x86_64: Process 946 attached [pid 946] set_robust_list(0x5555610ee6a0, 24) = 0 [pid 946] chdir("./25") = 0 [pid 946] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 946] setpgid(0, 0) = 0 [pid 946] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 946] write(3, "1000", 4) = 4 [pid 946] close(3) = 0 [pid 946] symlink("/dev/binderfs", "./binderfs") = 0 [pid 946] write(1, "executing program\n", 18executing program ) = 18 [pid 946] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 946] rt_sigaction(SIGRT_1, {sa_handler=0x7fb0839981a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb083989350}, NULL, 8) = 0 [pid 946] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 946] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb08390e000 [pid 946] mprotect(0x7fb08390f000, 131072, PROT_READ|PROT_WRITE) = 0 [ 41.178129][ T8] EXT4-fs (loop4): This should not happen!! Data will be lost [ 41.178129][ T8] [ 41.183426][ T941] loop1: detected capacity change from 0 to 2048 [ 41.209090][ T943] loop2: detected capacity change from 0 to 2048 [ 41.219191][ T942] loop0: detected capacity change from 0 to 2048 [pid 946] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 946] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08392e990, parent_tid=0x7fb08392e990, exit_signal=0, stack=0x7fb08390e000, stack_size=0x20300, tls=0x7fb08392e6c0} => {parent_tid=[947]}, 88) = 947 [pid 946] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 946] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 946] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 947 attached [pid 947] set_robust_list(0x7fb08392e9a0, 24) = 0 [pid 947] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 947] memfd_create("syzkaller", 0) = 3 [pid 947] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb07b50e000 [pid 941] <... mount resumed>) = 0 [pid 941] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 941] chdir("./file1") = 0 [pid 941] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 941] ioctl(4, LOOP_CLR_FD) = 0 [pid 941] close(4) = 0 [pid 941] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 940] <... futex resumed>) = 0 [pid 941] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 940] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 941] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 940] <... futex resumed>) = 0 [pid 941] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 940] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 947] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 947] munmap(0x7fb07b50e000, 138412032) = 0 [pid 947] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 947] ioctl(4, LOOP_SET_FD, 3 [pid 941] <... open resumed>) = 4 [pid 937] <... mount resumed>) = 0 [pid 941] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 940] <... futex resumed>) = 0 [pid 941] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 940] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 941] <... open resumed>) = 5 [pid 940] <... futex resumed>) = 0 [pid 941] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 940] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 941] <... futex resumed>) = 0 [pid 940] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 941] creat("./bus", 000 [pid 940] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 941] <... creat resumed>) = 6 [pid 940] <... futex resumed>) = 0 [pid 941] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 940] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 941] <... futex resumed>) = 0 [pid 940] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 941] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 940] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 941] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 940] <... futex resumed>) = 0 [pid 941] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 940] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 941] <... futex resumed>) = 0 [pid 940] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 941] pwrite64(6, "+", 1, 0 [pid 940] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 941] <... pwrite64 resumed>) = 1 [pid 940] <... futex resumed>) = 0 [pid 941] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 940] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 941] <... futex resumed>) = 0 [pid 940] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 941] open("./bus", O_RDONLY [pid 940] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 941] <... open resumed>) = 7 [pid 940] <... futex resumed>) = 0 [pid 941] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 940] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 941] <... futex resumed>) = 0 [pid 940] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 941] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 940] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 941] <... copy_file_range resumed>) = 1 [pid 940] <... futex resumed>) = 0 [pid 941] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 940] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 941] <... futex resumed>) = 0 [pid 940] <... futex resumed>) = 0 [pid 941] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 940] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 940] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 940] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 940] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[950]}, 88) = 950 [pid 940] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 940] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 940] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 937] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 937] chdir("./file1") = 0 [pid 937] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 937] ioctl(4, LOOP_CLR_FD) = 0 [pid 937] close(4) = 0 [pid 937] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 936] <... futex resumed>) = 0 [pid 936] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 936] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 937] <... futex resumed>) = 1 [pid 937] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 947] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 950 attached [pid 937] <... open resumed>) = 4 [pid 947] close(3 [pid 950] set_robust_list(0x7fb08390d9a0, 24 [pid 937] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 936] <... futex resumed>) = 0 [pid 936] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 936] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 937] <... futex resumed>) = 1 [pid 937] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 937] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 936] <... futex resumed>) = 0 [pid 936] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 936] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 937] <... futex resumed>) = 1 [pid 937] creat("./bus", 000 [pid 950] <... set_robust_list resumed>) = 0 [pid 947] <... close resumed>) = 0 [pid 937] <... creat resumed>) = 6 [pid 937] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 936] <... futex resumed>) = 0 [pid 936] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 943] <... close resumed>) = 0 [pid 942] <... close resumed>) = 0 [pid 936] <... futex resumed>) = 0 [pid 936] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 937] <... futex resumed>) = 1 [pid 937] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 937] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 936] <... futex resumed>) = 0 [pid 936] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 936] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 937] <... futex resumed>) = 1 [pid 937] pwrite64(6, "+", 1, 0) = 1 [pid 937] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 936] <... futex resumed>) = 0 [pid 936] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 936] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 937] <... futex resumed>) = 1 [pid 937] open("./bus", O_RDONLY) = 7 [pid 937] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 936] <... futex resumed>) = 0 [pid 936] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 936] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 936] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 936] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 936] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 936] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 943] mkdir("./file1", 0777 [pid 942] mkdir("./file1", 0777 [pid 947] close(4 [pid 950] rt_sigprocmask(SIG_SETMASK, [], [pid 936] <... clone3 resumed> => {parent_tid=[951]}, 88) = 951 [pid 937] <... futex resumed>) = 1 [pid 936] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 936] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 936] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 951 attached [pid 951] set_robust_list(0x7fb08390d9a0, 24) = 0 [pid 951] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 951] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 936] <... futex resumed>) = 0 [pid 936] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 936] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 951] <... futex resumed>) = 1 [pid 943] <... mkdir resumed>) = 0 [pid 942] <... mkdir resumed>) = 0 [pid 943] mount("/dev/loop2", "./file1", "ext4", 0, ",errors=continue" [pid 942] mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue" [pid 951] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 950] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 937] ????( [pid 950] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [ 41.228241][ T941] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 41.251124][ T937] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 41.256736][ T947] loop4: detected capacity change from 0 to 2048 [pid 937] <... ???? resumed>) = ? [pid 936] <... futex resumed>) = ? [pid 937] +++ killed by SIGBUS +++ [pid 950] <... mmap resumed>) = 0x20000000 [pid 950] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 950] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 940] <... futex resumed>) = 0 [pid 940] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 941] <... futex resumed>) = 0 [pid 940] <... futex resumed>) = 1 [ 41.274803][ T951] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 41.293521][ T941] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 41.294116][ T951] ------------[ cut here ]------------ [ 41.309823][ T941] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 41.313640][ T951] kernel BUG at fs/ext4/inode.c:2746! [pid 940] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 940] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 950] <... futex resumed>) = 0 [pid 940] <... futex resumed>) = 1 [pid 950] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 940] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 950] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 950] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 940] <... futex resumed>) = 0 [ 41.330579][ T951] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 41.336536][ T951] CPU: 1 PID: 951 Comm: syz-executor300 Not tainted 5.15.173-syzkaller-00206-gf7ce2ffd2f33 #0 [ 41.338424][ T941] EXT4-fs (loop1): This should not happen!! Data will be lost [ 41.338424][ T941] [ 41.346596][ T951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 41.346624][ T951] RIP: 0010:ext4_writepages+0x3fe6/0x4000 [ 41.346672][ T951] Code: 89 de e8 0d 60 87 ff 45 84 f6 75 2c e8 73 5d 87 ff 49 be 00 00 00 00 00 fc ff df 4c 8b 64 24 50 e9 e4 c5 ff ff e8 5a 5d 87 ff <0f> 0b e8 53 5d 87 ff e8 da 79 17 ff eb 9b e8 47 5d 87 ff e8 ce 79 [ 41.357209][ T941] EXT4-fs (loop1): Total free blocks count 0 [ 41.365950][ T951] RSP: 0018:ffffc90001d07040 EFLAGS: 00010293 [ 41.365973][ T951] RAX: ffffffff81e90df6 RBX: 0000008000000000 RCX: ffff88811b978000 [ 41.365988][ T951] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 41.366001][ T951] RBP: ffffc90001d07450 R08: ffffffff81e90566 R09: ffffed1024b052f7 [ 41.374245][ T941] EXT4-fs (loop1): Free/Dirty block details [ 41.391212][ T951] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90001d07680 [ 41.391231][ T951] R13: 0000000000000000 R14: 000000d410000000 R15: 0000000000000001 [ 41.391242][ T951] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 41.391260][ T951] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.391274][ T951] CR2: 00000000200000c0 CR3: 0000000006a0f000 CR4: 00000000003506a0 [ 41.391291][ T951] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.391307][ T951] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.391319][ T951] Call Trace: [ 41.391325][ T951] [ 41.391333][ T951] ? __die_body+0x62/0xb0 [ 41.391358][ T951] ? die+0x88/0xb0 [ 41.391375][ T951] ? do_trap+0x103/0x330 [ 41.391392][ T951] ? ext4_writepages+0x3fe6/0x4000 [ 41.391415][ T951] ? handle_invalid_op+0x95/0xc0 [ 41.391433][ T951] ? ext4_writepages+0x3fe6/0x4000 [ 41.519248][ T951] ? exc_invalid_op+0x32/0x50 [ 41.523758][ T951] ? asm_exc_invalid_op+0x1b/0x20 [ 41.528619][ T951] ? ext4_writepages+0x3756/0x4000 [ 41.533703][ T951] ? ext4_writepages+0x3fe6/0x4000 [ 41.538683][ T951] ? ext4_writepages+0x3fe6/0x4000 [ 41.543592][ T951] ? __kernel_text_address+0x9b/0x110 [ 41.548800][ T951] ? unwind_get_return_address+0x4d/0x90 [ 41.554269][ T951] ? ext4_readpage+0x230/0x230 [ 41.558874][ T951] ? unwind_get_return_address+0x4d/0x90 [ 41.564340][ T951] ? ext4_readpage+0x230/0x230 [ 41.568933][ T951] do_writepages+0x40e/0x670 [ 41.573360][ T951] ? __writepage+0x130/0x130 [ 41.577786][ T951] ? __stack_depot_save+0x34/0x470 [ 41.582734][ T951] ? kasan_set_free_info+0x23/0x40 [ 41.587682][ T951] ? kmem_cache_free+0x115/0x330 [ 41.592465][ T951] ? _raw_spin_unlock+0x4d/0x70 [ 41.597142][ T951] filemap_fdatawrite_wbc+0x248/0x2a0 [ 41.602537][ T951] filemap_flush+0x10c/0x150 [ 41.606953][ T951] ? filemap_fdatawrite_range+0x1b0/0x1b0 [ 41.612508][ T951] ext4_alloc_da_blocks+0x77/0x1a0 [ 41.617456][ T951] ext4_release_file+0x84/0x310 [ 41.622142][ T951] ? ext4_file_open+0x700/0x700 [ 41.626824][ T951] __fput+0x228/0x8c0 [ 41.630647][ T951] ____fput+0x15/0x20 [ 41.634463][ T951] task_work_run+0x129/0x190 [ 41.638900][ T951] do_exit+0xc48/0x2ca0 [ 41.642887][ T951] ? simple_acl_create+0x2c0/0x2c0 [ 41.647835][ T951] ? put_task_struct+0x80/0x80 [ 41.652431][ T951] do_group_exit+0x141/0x310 [ 41.656858][ T951] get_signal+0x7a3/0x1630 [ 41.661118][ T951] arch_do_signal_or_restart+0xbd/0x1680 [ 41.666579][ T951] ? send_signal+0x43a/0x590 [ 41.671029][ T951] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 41.676646][ T951] ? force_sig_info_to_task+0x31c/0x440 [ 41.682026][ T951] ? get_sigframe_size+0x10/0x10 [ 41.686803][ T951] ? force_sig_fault+0x127/0x1d0 [ 41.691579][ T951] ? page_fault_oops+0xa90/0xa90 [ 41.696357][ T951] ? __init_rwsem+0x1d0/0x1d0 [ 41.700860][ T951] exit_to_user_mode_loop+0xa0/0xe0 [ 41.705895][ T951] exit_to_user_mode_prepare+0x5a/0xa0 [ 41.711205][ T951] irqentry_exit_to_user_mode+0x9/0x10 [ 41.716487][ T951] irqentry_exit+0x12/0x40 [ 41.720737][ T951] exc_page_fault+0x47a/0x7f0 [ 41.725252][ T951] asm_exc_page_fault+0x27/0x30 [ 41.729936][ T951] RIP: 0033:0x7fb083948f9d [ 41.734227][ T951] Code: Unable to access opcode bytes at RIP 0x7fb083948f73. [ 41.741393][ T951] RSP: 002b:00007fb08390ca70 EFLAGS: 00010246 [ 41.747381][ T951] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000 [ 41.755629][ T951] RDX: 0000000000000030 RSI: 00007fb0839c606b RDI: 0000000020000380 [ 41.763437][ T951] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 41.771250][ T951] R10: 0000000000000004 R11: 0000000000000246 R12: 00007fb0839c606b [pid 950] futex(0x7fb0839fa718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 947] <... close resumed>) = 0 [pid 942] <... mount resumed>) = 0 [pid 947] mkdir("./file1", 0777) = 0 [ 41.779060][ T951] R13: 0000000000000002 R14: 00007fb08390d000 R15: 00007fb08390d140 [ 41.786875][ T951] [ 41.789735][ T951] Modules linked in: [ 41.795091][ T951] ---[ end trace ca6b75ba42047f82 ]--- [ 41.795596][ T942] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 41.800386][ T951] RIP: 0010:ext4_writepages+0x3fe6/0x4000 [pid 947] mount("/dev/loop4", "./file1", "ext4", 0, ",errors=continue" [pid 942] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 942] chdir("./file1") = 0 [ 41.800419][ T951] Code: 89 de e8 0d 60 87 ff 45 84 f6 75 2c e8 73 5d 87 ff 49 be 00 00 00 00 00 fc ff df 4c 8b 64 24 50 e9 e4 c5 ff ff e8 5a 5d 87 ff <0f> 0b e8 53 5d 87 ff e8 da 79 17 ff eb 9b e8 47 5d 87 ff e8 ce 79 [ 41.816367][ T941] EXT4-fs (loop1): free_blocks=2415919504 [ 41.841658][ T951] RSP: 0018:ffffc90001d07040 EFLAGS: 00010293 [ 41.848545][ T951] RAX: ffffffff81e90df6 RBX: 0000008000000000 RCX: ffff88811b978000 [ 41.850237][ T943] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 41.857131][ T951] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 41.875543][ T951] RBP: ffffc90001d07450 R08: ffffffff81e90566 R09: ffffed1024b052f7 [pid 942] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 942] ioctl(4, LOOP_CLR_FD) = 0 [pid 943] <... mount resumed>) = 0 [pid 943] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 943] chdir("./file1") = 0 [pid 943] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 943] ioctl(4, LOOP_CLR_FD) = 0 [pid 943] close(4) = 0 [pid 943] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 939] <... futex resumed>) = 0 [pid 939] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 939] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 943] <... futex resumed>) = 1 [pid 943] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 943] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 939] <... futex resumed>) = 0 [pid 939] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 939] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 943] <... futex resumed>) = 1 [pid 943] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 5 [pid 943] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 939] <... futex resumed>) = 0 [pid 939] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 939] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 943] <... futex resumed>) = 1 [pid 943] creat("./bus", 000) = 6 [pid 943] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 939] <... futex resumed>) = 0 [pid 939] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 939] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 943] <... futex resumed>) = 1 [pid 943] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000) = -1 EBADF (Bad file descriptor) [pid 943] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 939] <... futex resumed>) = 0 [pid 939] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 939] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 943] <... futex resumed>) = 1 [pid 943] pwrite64(6, "+", 1, 0) = 1 [pid 943] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 939] <... futex resumed>) = 0 [pid 939] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 939] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 943] <... futex resumed>) = 1 [pid 943] open("./bus", O_RDONLY) = 7 [pid 943] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 939] <... futex resumed>) = 0 [pid 939] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 939] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 939] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb0838ed000 [pid 939] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 939] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 939] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} => {parent_tid=[958]}, 88) = 958 [pid 939] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 939] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 939] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 943] <... futex resumed>) = 1 [pid 943] copy_file_range(7, NULL, 5, [65536], 6, 0) = 1 [pid 943] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 943] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 942] close(4 [pid 941] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000380} --- [pid 950] <... futex resumed>) = ? [pid 942] <... close resumed>) = 0 [pid 950] +++ killed by SIGBUS +++ [pid 941] +++ killed by SIGBUS +++ [ 41.885471][ T941] EXT4-fs (loop1): dirty_blocks=32 [ 41.891482][ T951] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90001d07680 [ 41.899943][ T951] R13: 0000000000000000 R14: 000000d410000000 R15: 0000000000000001 [ 41.900773][ T941] EXT4-fs (loop1): Block reservation details [ 41.913984][ T941] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 41.920126][ T951] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [pid 947] <... mount resumed>) = 0 [pid 942] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 947] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 942] <... futex resumed>) = 1 [pid 938] <... futex resumed>) = 0 [pid 939] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 939] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 939] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 939] futex(0x7fb0839fa71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 947] <... openat resumed>) = 3 [pid 942] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 939] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 938] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 947] chdir("./file1" [pid 942] <... open resumed>) = 4 [pid 939] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 938] <... futex resumed>) = 0 [pid 947] <... chdir resumed>) = 0 [pid 943] <... futex resumed>) = 0 [pid 942] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 939] <... futex resumed>) = 1 [pid 938] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 947] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 943] write(-1, "\x30\x78\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65983 [pid 942] <... futex resumed>) = 0 [pid 939] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 938] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 947] <... openat resumed>) = 4 [pid 943] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 942] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 938] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 947] ioctl(4, LOOP_CLR_FD [pid 943] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 942] <... open resumed>) = 5 [pid 938] <... futex resumed>) = 0 [pid 947] <... ioctl resumed>) = 0 [pid 943] <... futex resumed>) = 1 [pid 942] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 939] <... futex resumed>) = 0 [pid 938] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 947] close(4 [pid 943] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 942] <... futex resumed>) = 0 [pid 939] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 938] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 947] <... close resumed>) = 0 [pid 943] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 942] creat("./bus", 000 [pid 939] <... futex resumed>) = 0 [pid 938] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 947] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 943] ioctl(-1, _IOC(_IOC_NONE, 0x66, 0xc, 0), 0 [pid 942] <... creat resumed>) = 6 [pid 939] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 938] <... futex resumed>) = 0 [pid 947] <... futex resumed>) = 1 [pid 946] <... futex resumed>) = 0 [pid 943] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 942] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 938] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 947] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 946] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 943] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 942] <... futex resumed>) = 0 [pid 938] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 946] <... futex resumed>) = 0 [pid 943] <... futex resumed>) = 1 [pid 939] <... futex resumed>) = 0 [pid 938] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 947] <... open resumed>) = 4 [pid 946] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 943] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 938] <... futex resumed>) = 0 [pid 938] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 947] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 942] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 947] <... futex resumed>) = 1 [pid 946] <... futex resumed>) = 0 [pid 942] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 947] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 946] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 942] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 947] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 946] <... futex resumed>) = 0 [pid 942] <... futex resumed>) = 1 [pid 938] <... futex resumed>) = 0 [pid 947] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 946] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 942] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 938] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 947] <... open resumed>) = 5 [pid 942] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 938] <... futex resumed>) = 0 [pid 947] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 942] pwrite64(6, "+", 1, 0 [pid 938] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 947] <... futex resumed>) = 1 [pid 946] <... futex resumed>) = 0 [pid 942] <... pwrite64 resumed>) = 1 [pid 947] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 946] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 942] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 947] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 946] <... futex resumed>) = 0 [pid 942] <... futex resumed>) = 1 [pid 938] <... futex resumed>) = 0 [pid 947] creat("./bus", 000 [pid 946] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 942] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 938] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 947] <... creat resumed>) = 6 [pid 942] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 938] <... futex resumed>) = 0 [pid 947] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 942] open("./bus", O_RDONLY [pid 938] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 947] <... futex resumed>) = 1 [pid 946] <... futex resumed>) = 0 [pid 942] <... open resumed>) = 7 [pid 947] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 946] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 942] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 947] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 946] <... futex resumed>) = 0 [pid 942] <... futex resumed>) = 1 [pid 938] <... futex resumed>) = 0 [pid 947] fcntl(-1, F_NOTIFY, DN_ACCESS|DN_DELETE|DN_MULTISHOT|0x40000000 [pid 946] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 942] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 938] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 947] <... fcntl resumed>) = -1 EBADF (Bad file descriptor) [pid 942] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 938] <... futex resumed>) = 0 [pid 947] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 942] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 938] futex(0x7fb0839fa71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 947] <... futex resumed>) = 1 [pid 946] <... futex resumed>) = 0 [pid 942] <... copy_file_range resumed>) = 1 [pid 938] <... futex resumed>) = 0 [pid 947] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 946] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 942] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 938] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 947] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 946] <... futex resumed>) = 0 [pid 942] <... futex resumed>) = 0 [pid 938] <... mmap resumed>) = 0x7fb0838ed000 [pid 947] pwrite64(6, "+", 1, 0 [pid 946] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 942] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 938] mprotect(0x7fb0838ee000, 131072, PROT_READ|PROT_WRITE [pid 947] <... pwrite64 resumed>) = 1 [pid 938] <... mprotect resumed>) = 0 [pid 947] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 938] rt_sigprocmask(SIG_BLOCK, ~[], [pid 947] <... futex resumed>) = 1 [pid 946] <... futex resumed>) = 0 [pid 938] <... rt_sigprocmask resumed>[], 8) = 0 [pid 947] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 946] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 938] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb08390d990, parent_tid=0x7fb08390d990, exit_signal=0, stack=0x7fb0838ed000, stack_size=0x20300, tls=0x7fb08390d6c0} [pid 947] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 946] <... futex resumed>) = 0 [pid 947] open("./bus", O_RDONLY [pid 946] futex(0x7fb0839fa70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 938] <... clone3 resumed> => {parent_tid=[960]}, 88) = 960 [pid 947] <... open resumed>) = 7 [pid 938] rt_sigprocmask(SIG_SETMASK, [], [pid 947] futex(0x7fb0839fa70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 938] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 947] <... futex resumed>) = 1 [pid 946] <... futex resumed>) = 0 [pid 938] futex(0x7fb0839fa718, FUTEX_WAKE_PRIVATE, 1000000 [pid 947] futex(0x7fb0839fa708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 946] futex(0x7fb0839fa708, FUTEX_WAKE_PRIVATE, 1000000 [pid 938] <... futex resumed>) = 0 [pid 947] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 946] <... futex resumed>) = 0 [ 41.921224][ T947] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 41.932107][ T940] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 41.940368][ T951] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.958397][ T951] CR2: 00007fb08390dd58 CR3: 000000011975b000 CR4: 00000000003506a0 [ 41.966687][ T951] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.974775][ T951] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.986580][ T951] Kernel panic - not syncing: Fatal exception [ 41.987077][ T940] EXT4-fs (loop1): This should not happen!! Data will be lost [ 41.987077][ T940] [ 41.992741][ T951] Kernel Offset: disabled [ 42.006336][ T951] Rebooting in 86400 seconds..