./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2117591095 <...> forked to background, child pid 4650 no interfaces have a carrier [ 35.520131][ T4651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.533806][ T4651] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.134' (ECDSA) to the list of known hosts. execve("./syz-executor2117591095", ["./syz-executor2117591095"], 0x7ffcc3478880 /* 10 vars */) = 0 brk(NULL) = 0x555555adb000 brk(0x555555adbc40) = 0x555555adbc40 arch_prctl(ARCH_SET_FS, 0x555555adb300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x555555adb5d0) = 5075 set_robust_list(0x555555adb5e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7fa2dca04590, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7fa2dca04c60}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7fa2dca04630, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2dca04c60}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2117591095", 4096) = 28 brk(0x555555afcc40) = 0x555555afcc40 brk(0x555555afd000) = 0x555555afd000 mprotect(0x7fa2dcac6000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5076 attached , child_tidptr=0x555555adb5d0) = 5076 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] set_robust_list(0x555555adb5e0, 24) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5077 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] getpid(./strace-static-x86_64: Process 5077 attached [pid 5075] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5078 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... getpid resumed>) = 5076 [pid 5077] set_robust_list(0x555555adb5e0, 24 [pid 5076] mkdir("./syzkaller.DZuQa1", 0700./strace-static-x86_64: Process 5078 attached [pid 5077] <... set_robust_list resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5079 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555adb5d0) = 5080 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555adb5d0) = 5081 ./strace-static-x86_64: Process 5080 attached [pid 5080] set_robust_list(0x555555adb5e0, 24 [pid 5076] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5081 attached [pid 5081] set_robust_list(0x555555adb5e0, 24 [pid 5077] getpid( [pid 5080] <... set_robust_list resumed>) = 0 [pid 5080] getpid( [pid 5081] <... set_robust_list resumed>) = 0 [pid 5081] getpid( [pid 5077] <... getpid resumed>) = 5077 [pid 5076] chmod("./syzkaller.DZuQa1", 0777 [pid 5080] <... getpid resumed>) = 5080 [pid 5080] mkdir("./syzkaller.y60yhk", 0700./strace-static-x86_64: Process 5079 attached [pid 5081] <... getpid resumed>) = 5081 [pid 5077] mkdir("./syzkaller.GJ37E4", 0700 [pid 5081] mkdir("./syzkaller.z790Bp", 0700 [pid 5079] set_robust_list(0x555555adb5e0, 24) = 0 [pid 5076] <... chmod resumed>) = 0 [pid 5076] chdir("./syzkaller.DZuQa1" [pid 5079] getpid( [pid 5076] <... chdir resumed>) = 0 [pid 5076] mkdir("./0", 0777 [pid 5079] <... getpid resumed>) = 5079 [pid 5079] mkdir("./syzkaller.jToCGh", 0700 [pid 5077] <... mkdir resumed>) = 0 [pid 5077] chmod("./syzkaller.GJ37E4", 0777 [pid 5079] <... mkdir resumed>) = 0 [pid 5077] <... chmod resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5077] chdir("./syzkaller.GJ37E4" [pid 5081] <... mkdir resumed>) = 0 [pid 5081] chmod("./syzkaller.z790Bp", 0777) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 5077] <... chdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5080] chmod("./syzkaller.y60yhk", 0777 [pid 5077] mkdir("./0", 0777 [pid 5081] chdir("./syzkaller.z790Bp" [pid 5080] <... chmod resumed>) = 0 [pid 5081] <... chdir resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5081] mkdir("./0", 0777 [pid 5076] <... openat resumed>) = 3 [pid 5077] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5079] chmod("./syzkaller.jToCGh", 0777 [pid 5080] chdir("./syzkaller.y60yhk" [pid 5079] <... chmod resumed>) = 0 [pid 5080] <... chdir resumed>) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5080] mkdir("./0", 0777 [pid 5078] set_robust_list(0x555555adb5e0, 24 [pid 5077] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5078] <... set_robust_list resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5079] chdir("./syzkaller.jToCGh") = 0 [pid 5079] mkdir("./0", 0777 [pid 5080] <... mkdir resumed>) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] getpid( [pid 5077] close(3 [pid 5076] close(3 [pid 5078] <... getpid resumed>) = 5078 [pid 5079] <... mkdir resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5080] <... openat resumed>) = 3 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5079] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 [pid 5079] close(3 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] <... close resumed>) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5082 [pid 5080] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5083 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] mkdir("./syzkaller.EWCxeb", 0700 [pid 5079] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5084 ./strace-static-x86_64: Process 5082 attached [pid 5082] set_robust_list(0x555555adb5e0, 24 [pid 5077] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5085 [pid 5078] <... mkdir resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5086 [pid 5082] <... set_robust_list resumed>) = 0 [pid 5082] chdir("./0") = 0 [pid 5082] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5082] setpgid(0, 0./strace-static-x86_64: Process 5084 attached ) = 0 [pid 5078] chmod("./syzkaller.EWCxeb", 0777 [pid 5084] set_robust_list(0x555555adb5e0, 24 [pid 5082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5086 attached [pid 5084] <... set_robust_list resumed>) = 0 [pid 5082] <... openat resumed>) = 3 [pid 5078] <... chmod resumed>) = 0 ./strace-static-x86_64: Process 5085 attached [pid 5084] chdir("./0" [pid 5082] write(3, "1000", 4 [pid 5078] chdir("./syzkaller.EWCxeb" [pid 5086] set_robust_list(0x555555adb5e0, 24 [pid 5084] <... chdir resumed>) = 0 [pid 5082] <... write resumed>) = 4 ./strace-static-x86_64: Process 5083 attached [pid 5086] <... set_robust_list resumed>) = 0 [pid 5085] set_robust_list(0x555555adb5e0, 24 [pid 5084] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5082] close(3 [pid 5078] <... chdir resumed>) = 0 [pid 5084] <... prctl resumed>) = 0 [pid 5082] <... close resumed>) = 0 [pid 5084] setpgid(0, 0 [pid 5082] symlink("/dev/binderfs", "./binderfs" [pid 5086] chdir("./0" [pid 5078] mkdir("./0", 0777 [pid 5085] <... set_robust_list resumed>) = 0 [pid 5086] <... chdir resumed>) = 0 [pid 5084] <... setpgid resumed>) = 0 [pid 5083] set_robust_list(0x555555adb5e0, 24 [pid 5082] <... symlink resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5082] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... mkdir resumed>) = 0 [pid 5086] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5085] chdir("./0" [pid 5084] <... openat resumed>) = 3 [pid 5083] <... set_robust_list resumed>) = 0 [pid 5082] <... futex resumed>) = 0 [pid 5086] <... prctl resumed>) = 0 [pid 5084] write(3, "1000", 4 [pid 5082] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5086] setpgid(0, 0 [pid 5085] <... chdir resumed>) = 0 [pid 5084] <... write resumed>) = 4 [pid 5083] chdir("./0" [pid 5082] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5086] <... setpgid resumed>) = 0 [pid 5085] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5084] close(3 [pid 5082] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5078] <... openat resumed>) = 3 [pid 5083] <... chdir resumed>) = 0 [pid 5086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5085] <... prctl resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5082] <... mprotect resumed>) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5083] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5086] <... openat resumed>) = 3 [pid 5085] setpgid(0, 0 [pid 5084] symlink("/dev/binderfs", "./binderfs" [pid 5082] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] <... prctl resumed>) = 0 [pid 5086] write(3, "1000", 4 [pid 5085] <... setpgid resumed>) = 0 [pid 5084] <... symlink resumed>) = 0 [pid 5083] setpgid(0, 0 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5086] <... write resumed>) = 4 [pid 5085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... setpgid resumed>) = 0 [pid 5082] <... clone resumed>, parent_tid=[5087], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5087 [pid 5078] close(3 [pid 5086] close(3 [pid 5085] <... openat resumed>) = 3 [pid 5084] <... futex resumed>) = 0 [pid 5082] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] <... close resumed>) = 0 [pid 5085] write(3, "1000", 4 [pid 5084] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5082] <... futex resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5086] symlink("/dev/binderfs", "./binderfs" [pid 5085] <... write resumed>) = 4 [pid 5084] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5083] <... openat resumed>) = 3 [pid 5082] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5086] <... symlink resumed>) = 0 [pid 5085] close(3 [pid 5084] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5083] write(3, "1000", 4 [pid 5084] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 5087 attached [pid 5085] <... close resumed>) = 0 [pid 5086] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] <... write resumed>) = 4 [pid 5087] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5086] <... futex resumed>) = 0 [pid 5085] symlink("/dev/binderfs", "./binderfs" [pid 5083] close(3 [pid 5078] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5088 [pid 5087] <... set_robust_list resumed>) = 0 [pid 5086] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] <... clone resumed>, parent_tid=[5089], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5089 [pid 5087] memfd_create("syzkaller", 0 [pid 5084] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... close resumed>) = 0 [pid 5085] <... symlink resumed>) = 0 [pid 5086] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5085] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... futex resumed>) = 0 [pid 5083] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5088 attached [pid 5086] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5085] <... futex resumed>) = 0 [pid 5084] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5088] set_robust_list(0x555555adb5e0, 24 [pid 5083] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 5089 attached [pid 5088] <... set_robust_list resumed>) = 0 [pid 5086] <... mprotect resumed>) = 0 [pid 5085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5088] chdir("./0" [pid 5086] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5085] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5083] <... futex resumed>) = 0 [pid 5089] <... set_robust_list resumed>) = 0 [pid 5088] <... chdir resumed>) = 0 [pid 5085] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5089] memfd_create("syzkaller", 0 [pid 5088] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5086] <... clone resumed>, parent_tid=[5091], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5091 [pid 5085] <... mprotect resumed>) = 0 [pid 5083] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5089] <... memfd_create resumed>) = 3 [pid 5088] <... prctl resumed>) = 0 [pid 5086] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5088] setpgid(0, 0 [pid 5086] <... futex resumed>) = 0 [pid 5083] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5089] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5088] <... setpgid resumed>) = 0 [pid 5086] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5083] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5085] <... clone resumed>, parent_tid=[5092], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5092 ./strace-static-x86_64: Process 5092 attached ./strace-static-x86_64: Process 5091 attached [pid 5088] <... openat resumed>) = 3 [pid 5085] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... mprotect resumed>) = 0 [pid 5088] write(3, "1000", 4 [pid 5085] <... futex resumed>) = 0 [pid 5083] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5092] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5091] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5089] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5088] <... write resumed>) = 4 [pid 5087] <... memfd_create resumed>) = 3 [pid 5085] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5093 attached [pid 5092] <... set_robust_list resumed>) = 0 [pid 5091] <... set_robust_list resumed>) = 0 [pid 5088] close(3 [pid 5093] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5088] <... close resumed>) = 0 [pid 5093] <... set_robust_list resumed>) = 0 [pid 5088] symlink("/dev/binderfs", "./binderfs" [pid 5087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5083] <... clone resumed>, parent_tid=[5093], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5093 [pid 5093] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5092] memfd_create("syzkaller", 0 [pid 5091] memfd_create("syzkaller", 0 [pid 5088] <... symlink resumed>) = 0 [pid 5083] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5088] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] memfd_create("syzkaller", 0 [pid 5088] <... futex resumed>) = 0 [pid 5093] <... memfd_create resumed>) = 3 [pid 5088] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5093] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5088] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5087] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5091] <... memfd_create resumed>) = 3 [pid 5083] <... futex resumed>) = 0 [pid 5092] <... memfd_create resumed>) = 3 [pid 5093] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5088] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5083] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5093] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5092] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5088] <... mprotect resumed>) = 0 syzkaller login: [ 57.829583][ T5087] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5087 'syz-executor211' [pid 5092] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5091] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5088] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5094], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5094 [pid 5088] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5088] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5094 attached [pid 5094] set_robust_list(0x7fa2dc9f39e0, 24) = 0 [pid 5094] memfd_create("syzkaller", 0 [pid 5092] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5094] <... memfd_create resumed>) = 3 [pid 5094] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2d45d3000 [pid 5093] <... write resumed>) = 1048576 [pid 5091] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5094] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5091] <... write resumed>) = 1048576 [pid 5089] <... write resumed>) = 1048576 [pid 5089] munmap(0x7fa2d45d3000, 1048576) = 0 [pid 5089] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5094] <... write resumed>) = 1048576 [pid 5093] munmap(0x7fa2d45d3000, 1048576 [pid 5092] <... write resumed>) = 1048576 [pid 5091] munmap(0x7fa2d45d3000, 1048576 [pid 5089] <... openat resumed>) = 4 [pid 5094] munmap(0x7fa2d45d3000, 1048576 [pid 5093] <... munmap resumed>) = 0 [pid 5092] munmap(0x7fa2d45d3000, 1048576 [pid 5091] <... munmap resumed>) = 0 [pid 5089] ioctl(4, LOOP_SET_FD, 3 [pid 5092] <... munmap resumed>) = 0 [pid 5087] <... write resumed>) = 1048576 [pid 5087] munmap(0x7fa2d45d3000, 1048576 [pid 5094] <... munmap resumed>) = 0 [pid 5094] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5093] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5092] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5091] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5087] <... munmap resumed>) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5087] ioctl(4, LOOP_SET_FD, 3 [pid 5094] <... openat resumed>) = 4 [pid 5093] <... openat resumed>) = 4 [pid 5092] <... openat resumed>) = 4 [pid 5091] <... openat resumed>) = 4 [pid 5094] ioctl(4, LOOP_SET_FD, 3 [pid 5093] ioctl(4, LOOP_SET_FD, 3 [pid 5087] <... ioctl resumed>) = 0 [pid 5092] ioctl(4, LOOP_SET_FD, 3 [pid 5091] ioctl(4, LOOP_SET_FD, 3 [pid 5087] close(3) = 0 [pid 5087] mkdir("./bus", 0777 [pid 5089] <... ioctl resumed>) = 0 [pid 5087] <... mkdir resumed>) = 0 [pid 5087] mount("/dev/loop5", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5089] close(3) = 0 [pid 5089] mkdir("./bus", 0777) = 0 [pid 5089] mount("/dev/loop3", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5094] <... ioctl resumed>) = 0 [pid 5093] <... ioctl resumed>) = 0 [pid 5094] close(3 [pid 5093] close(3 [pid 5092] <... ioctl resumed>) = 0 [pid 5091] <... ioctl resumed>) = 0 [pid 5093] <... close resumed>) = 0 [ 57.949704][ T5089] loop3: detected capacity change from 0 to 2048 [ 57.961327][ T5087] loop5: detected capacity change from 0 to 2048 [ 57.973721][ T5093] loop4: detected capacity change from 0 to 2048 [ 57.981261][ T5091] loop0: detected capacity change from 0 to 2048 [ 57.988137][ T5092] loop1: detected capacity change from 0 to 2048 [pid 5093] mkdir("./bus", 0777) = 0 [pid 5093] mount("/dev/loop4", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5094] <... close resumed>) = 0 [pid 5092] close(3 [pid 5094] mkdir("./bus", 0777 [pid 5092] <... close resumed>) = 0 [pid 5091] close(3 [pid 5092] mkdir("./bus", 0777 [pid 5094] <... mkdir resumed>) = 0 [pid 5094] mount("/dev/loop2", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5092] <... mkdir resumed>) = 0 [pid 5091] <... close resumed>) = 0 [pid 5092] mount("/dev/loop1", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5091] mkdir("./bus", 0777) = 0 [ 57.994864][ T5094] loop2: detected capacity change from 0 to 2048 [pid 5091] mount("/dev/loop0", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5087] <... mount resumed>) = 0 [pid 5087] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5087] chdir("./bus") = 0 [pid 5087] ioctl(4, LOOP_CLR_FD) = 0 [pid 5087] close(4) = 0 [pid 5087] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5087] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] <... futex resumed>) = 0 [pid 5082] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5082] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] <... futex resumed>) = 0 [ 58.055963][ T5087] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 58.068635][ T5089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 58.081985][ T5093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [pid 5087] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5089] <... mount resumed>) = 0 [pid 5089] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5089] chdir("./bus") = 0 [pid 5089] ioctl(4, LOOP_CLR_FD) = 0 [pid 5089] close(4) = 0 [pid 5089] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5084] <... futex resumed>) = 0 [pid 5084] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] <... open resumed>) = 4 [pid 5084] <... futex resumed>) = 0 [pid 5087] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] <... futex resumed>) = 1 [pid 5082] <... futex resumed>) = 0 [pid 5089] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5087] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5082] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5082] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] <... write resumed>) = 9 [pid 5087] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... futex resumed>) = 0 [pid 5087] <... futex resumed>) = 1 [ 58.097065][ T5092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 58.113060][ T5094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [pid 5087] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5082] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... mount resumed>) = 0 [pid 5093] <... mount resumed>) = 0 [pid 5092] <... mount resumed>) = 0 [pid 5089] <... open resumed>) = 4 [pid 5087] <... openat resumed>) = 5 [pid 5094] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5093] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5092] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5091] <... mount resumed>) = 0 [pid 5087] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... futex resumed>) = 0 [pid 5089] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... openat resumed>) = 3 [pid 5093] <... openat resumed>) = 3 [pid 5092] <... openat resumed>) = 3 [pid 5091] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5087] <... futex resumed>) = 0 [pid 5084] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5082] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5094] chdir("./bus" [pid 5093] chdir("./bus" [pid 5092] chdir("./bus" [pid 5091] <... openat resumed>) = 3 [pid 5087] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5094] <... chdir resumed>) = 0 [pid 5093] <... chdir resumed>) = 0 [pid 5092] <... chdir resumed>) = 0 [pid 5091] chdir("./bus" [pid 5084] <... futex resumed>) = 0 [pid 5082] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] ioctl(4, LOOP_CLR_FD [pid 5093] ioctl(4, LOOP_CLR_FD [pid 5092] ioctl(4, LOOP_CLR_FD [pid 5091] <... chdir resumed>) = 0 [pid 5087] <... futex resumed>) = 0 [pid 5084] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... futex resumed>) = 1 [pid 5094] <... ioctl resumed>) = 0 [pid 5093] <... ioctl resumed>) = 0 [pid 5092] <... ioctl resumed>) = 0 [pid 5091] ioctl(4, LOOP_CLR_FD [pid 5087] open("./bus", O_RDWR [pid 5082] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5094] close(4 [pid 5093] close(4 [pid 5092] close(4 [pid 5091] <... ioctl resumed>) = 0 [pid 5089] <... futex resumed>) = 1 [pid 5087] <... open resumed>) = 6 [pid 5094] <... close resumed>) = 0 [pid 5093] <... close resumed>) = 0 [pid 5092] <... close resumed>) = 0 [pid 5089] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5094] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... futex resumed>) = 1 [pid 5093] <... futex resumed>) = 1 [pid 5092] <... futex resumed>) = 1 [pid 5085] <... futex resumed>) = 0 [pid 5083] <... futex resumed>) = 0 [pid 5094] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5093] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5092] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5092] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5085] <... futex resumed>) = 0 [pid 5083] <... futex resumed>) = 0 [pid 5093] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5092] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5085] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... futex resumed>) = 0 [pid 5084] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=33000000} [pid 5091] close(4 [pid 5093] <... open resumed>) = 4 [pid 5089] <... write resumed>) = 9 [pid 5088] <... futex resumed>) = 0 [pid 5093] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] <... open resumed>) = 4 [pid 5091] <... close resumed>) = 0 [pid 5089] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... futex resumed>) = 0 [pid 5093] <... futex resumed>) = 1 [pid 5092] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] <... futex resumed>) = 1 [pid 5088] <... futex resumed>) = 1 [pid 5087] <... futex resumed>) = 1 [pid 5084] <... futex resumed>) = 0 [pid 5083] <... futex resumed>) = 0 [pid 5082] <... futex resumed>) = 0 [pid 5094] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5093] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5092] <... futex resumed>) = 1 [pid 5091] <... futex resumed>) = 1 [pid 5089] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5088] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5086] <... futex resumed>) = 0 [pid 5085] <... futex resumed>) = 0 [pid 5084] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... open resumed>) = 4 [pid 5093] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5092] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5091] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5089] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5086] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... futex resumed>) = 0 [pid 5083] <... futex resumed>) = 0 [pid 5082] <... futex resumed>) = 0 [pid 5094] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5092] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5091] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5089] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5087] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5086] <... futex resumed>) = 0 [pid 5085] <... futex resumed>) = 0 [pid 5084] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5094] <... futex resumed>) = 1 [pid 5092] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5091] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5089] <... openat resumed>) = 5 [pid 5088] <... futex resumed>) = 0 [pid 5087] <... mmap resumed>) = 0x20000000 [pid 5086] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 58.135831][ T27] audit: type=1804 audit(1673802227.002:2): pid=5087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor211" name="/root/syzkaller.z790Bp/0/bus/bus" dev="loop5" ino=18 res=1 errno=0 [ 58.163165][ T5091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 58.183588][ T27] audit: type=1804 audit(1673802227.052:3): pid=5087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor211" name="/root/syzkaller.z790Bp/0/bus/bus" dev="loop5" ino=18 res=1 errno=0 [pid 5085] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5094] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5093] <... write resumed>) = 9 [pid 5092] <... write resumed>) = 9 [pid 5091] <... open resumed>) = 4 [pid 5089] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... write resumed>) = 9 [pid 5093] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] <... futex resumed>) = 1 [pid 5088] <... futex resumed>) = 0 [pid 5087] <... futex resumed>) = 1 [pid 5094] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] <... futex resumed>) = 1 [pid 5092] <... futex resumed>) = 1 [pid 5091] <... futex resumed>) = 1 [pid 5089] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5088] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] <... futex resumed>) = 0 [pid 5082] <... futex resumed>) = 0 [pid 5094] <... futex resumed>) = 0 [pid 5093] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5092] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5091] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5088] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5086] <... futex resumed>) = 0 [pid 5085] <... futex resumed>) = 0 [pid 5084] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... futex resumed>) = 0 [pid 5094] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5088] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5088] <... futex resumed>) = 0 [pid 5094] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5088] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5094] <... openat resumed>) = 5 [pid 5094] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5088] <... futex resumed>) = 0 [pid 5094] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5088] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5088] <... futex resumed>) = 0 [pid 5094] open("./bus", O_RDWR [pid 5088] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5094] <... open resumed>) = 6 [pid 5094] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5088] <... futex resumed>) = 0 [pid 5094] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5088] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5088] <... futex resumed>) = 0 [pid 5094] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5088] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5094] <... mmap resumed>) = 0x20000000 [pid 5089] <... futex resumed>) = 0 [pid 5086] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... futex resumed>) = 1 [pid 5083] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] <... futex resumed>) = 0 [pid 5092] <... futex resumed>) = 0 [pid 5091] <... futex resumed>) = 0 [pid 5089] open("./bus", O_RDWR [pid 5087] <... futex resumed>) = 0 [pid 5086] <... futex resumed>) = 1 [pid 5085] <... futex resumed>) = 1 [pid 5084] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... futex resumed>) = 1 [pid 5082] <... futex resumed>) = 1 [pid 5094] <... futex resumed>) = 1 [pid 5093] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5092] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5091] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5089] <... open resumed>) = 6 [pid 5088] <... futex resumed>) = 0 [ 58.242612][ T27] audit: type=1804 audit(1673802227.102:4): pid=5089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor211" name="/root/syzkaller.jToCGh/0/bus/bus" dev="loop3" ino=18 res=1 errno=0 [pid 5087] sendfile(4, 5, NULL, 2147483713 [pid 5086] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5094] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5093] <... openat resumed>) = 5 [pid 5092] <... openat resumed>) = 5 [pid 5091] <... write resumed>) = 9 [pid 5089] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5093] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] <... futex resumed>) = 1 [pid 5088] <... futex resumed>) = 0 [ 58.292586][ T5087] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 58.308839][ T27] audit: type=1804 audit(1673802227.102:5): pid=5087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor211" name="/root/syzkaller.z790Bp/0/bus/bus" dev="loop5" ino=18 res=1 errno=0 [pid 5094] sendfile(4, 5, NULL, 2147483713 [pid 5093] <... futex resumed>) = 0 [pid 5092] <... futex resumed>) = 0 [pid 5091] <... futex resumed>) = 0 [pid 5089] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5088] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5093] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5092] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5091] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5084] <... futex resumed>) = 0 [pid 5083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 58.329335][ T5094] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 58.332593][ T27] audit: type=1804 audit(1673802227.142:6): pid=5094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor211" name="/root/syzkaller.EWCxeb/0/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 58.351461][ T5087] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5086] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [ 58.369985][ T27] audit: type=1804 audit(1673802227.142:7): pid=5094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor211" name="/root/syzkaller.EWCxeb/0/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 58.382307][ T5094] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 58.405692][ T27] audit: type=1804 audit(1673802227.142:8): pid=5094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor211" name="/root/syzkaller.EWCxeb/0/bus/bus" dev="loop2" ino=18 res=1 errno=0 [pid 5083] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5086] <... futex resumed>) = 1 [pid 5085] <... futex resumed>) = 1 [pid 5084] <... futex resumed>) = 1 [pid 5083] <... futex resumed>) = 1 [pid 5082] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5093] <... futex resumed>) = 0 [pid 5092] <... futex resumed>) = 0 [pid 5091] <... futex resumed>) = 0 [pid 5089] <... futex resumed>) = 0 [pid 5088] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] open("./bus", O_RDWR [pid 5092] open("./bus", O_RDWR [pid 5091] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5089] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5088] <... futex resumed>) = 0 [pid 5093] <... open resumed>) = 6 [pid 5092] <... open resumed>) = 6 [pid 5091] <... openat resumed>) = 5 [pid 5089] <... mmap resumed>) = 0x20000000 [pid 5088] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5093] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5093] <... futex resumed>) = 0 [pid 5092] <... futex resumed>) = 0 [pid 5091] <... futex resumed>) = 0 [pid 5089] <... futex resumed>) = 0 [pid 5088] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5093] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5091] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5088] <... mprotect resumed>) = 0 [pid 5092] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5089] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5088] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5110], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5110 [pid 5088] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5088] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5110 attached [pid 5086] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 58.437886][ T27] audit: type=1804 audit(1673802227.142:9): pid=5089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor211" name="/root/syzkaller.jToCGh/0/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 58.446554][ T5087] EXT4-fs (loop5): This should not happen!! Data will be lost [ 58.446554][ T5087] [ 58.461219][ T27] audit: type=1804 audit(1673802227.142:10): pid=5093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor211" name="/root/syzkaller.y60yhk/0/bus/bus" dev="loop4" ino=18 res=1 errno=0 [pid 5082] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5110] set_robust_list(0x7fa2d46d29e0, 24 [pid 5086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5082] <... futex resumed>) = 0 [pid 5088] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5110] <... set_robust_list resumed>) = 0 [pid 5086] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5091] <... futex resumed>) = 0 [pid 5086] <... futex resumed>) = 1 [pid 5085] <... futex resumed>) = 1 [pid 5084] <... futex resumed>) = 1 [pid 5083] <... futex resumed>) = 1 [pid 5093] <... futex resumed>) = 0 [pid 5092] <... futex resumed>) = 0 [pid 5091] open("./bus", O_RDWR [pid 5089] <... futex resumed>) = 0 [pid 5082] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5084] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5093] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5092] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5091] <... open resumed>) = 6 [pid 5089] sendfile(4, 5, NULL, 2147483713 [pid 5093] <... mmap resumed>) = 0x20000000 [pid 5092] <... mmap resumed>) = 0x20000000 [pid 5091] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... mprotect resumed>) = 0 [pid 5086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5091] <... futex resumed>) = 0 [pid 5082] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [ 58.471446][ T5094] EXT4-fs (loop2): This should not happen!! Data will be lost [ 58.471446][ T5094] [ 58.493852][ T27] audit: type=1804 audit(1673802227.152:11): pid=5092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor211" name="/root/syzkaller.GJ37E4/0/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 58.525453][ T5087] EXT4-fs (loop5): Total free blocks count 0 [ 58.526301][ T5094] EXT4-fs (loop2): Total free blocks count 0 [pid 5093] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5086] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] <... futex resumed>) = 1 [pid 5092] <... futex resumed>) = 1 [pid 5091] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... futex resumed>) = 0 [pid 5093] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5092] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5091] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 1 [pid 5085] <... futex resumed>) = 0 [pid 5083] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... clone resumed>, parent_tid=[5111], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5111 [pid 5091] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5093] <... futex resumed>) = 0 [pid 5086] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... futex resumed>) = 1 [pid 5082] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] sendfile(4, 5, NULL, 2147483713 [pid 5084] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5092] <... futex resumed>) = 0 [ 58.552349][ T5089] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 58.556168][ T5094] EXT4-fs (loop2): Free/Dirty block details [ 58.574290][ T5087] EXT4-fs (loop5): Free/Dirty block details [ 58.576844][ T5094] EXT4-fs (loop2): free_blocks=2415919104 [ 58.582847][ T5087] EXT4-fs (loop5): free_blocks=2415919104 [ 58.588535][ T5094] EXT4-fs (loop2): dirty_blocks=16 [pid 5086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5085] <... futex resumed>) = 1 [pid 5084] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... futex resumed>) = 0 [pid 5092] sendfile(4, 5, NULL, 2147483713 [pid 5110] creat(0x200001c0, 0420 [pid 5094] <... sendfile resumed>) = 117 [pid 5086] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... futex resumed>) = 0 [pid 5082] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5111 attached [pid 5111] set_robust_list(0x7fa2d46d29e0, 24) = 0 [ 58.600102][ T5094] EXT4-fs (loop2): Block reservation details [ 58.601419][ T5093] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 58.606995][ T5094] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 58.627137][ T5092] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5110] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5094] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] <... futex resumed>) = 1 [pid 5084] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5091] <... futex resumed>) = 0 [pid 5091] sendfile(4, 5, NULL, 2147483713 [pid 5110] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... futex resumed>) = 0 [pid 5086] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5083] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5088] exit_group(0) = ? [ 58.629996][ T5089] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 58.643861][ T5087] EXT4-fs (loop5): dirty_blocks=16 [ 58.655937][ T5089] EXT4-fs (loop3): This should not happen!! Data will be lost [ 58.655937][ T5089] [ 58.665558][ T5091] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 58.670577][ T5089] EXT4-fs (loop3): Total free blocks count 0 [ 58.690118][ T5089] EXT4-fs (loop3): Free/Dirty block details [pid 5110] <... futex resumed>) = ? [pid 5085] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5083] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5110] +++ exited with 0 +++ [pid 5094] +++ exited with 0 +++ [pid 5088] +++ exited with 0 +++ [pid 5085] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... mprotect resumed>) = 0 [pid 5083] <... futex resumed>) = 0 [pid 5085] <... futex resumed>) = 0 [pid 5084] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5088, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [ 58.691752][ T5092] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 58.708370][ T5089] EXT4-fs (loop3): free_blocks=2415919104 [ 58.709491][ T5093] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 58.726511][ T5089] EXT4-fs (loop3): dirty_blocks=16 [ 58.727090][ T5087] EXT4-fs (loop5): Block reservation details [ 58.732583][ T5089] EXT4-fs (loop3): Block reservation details [pid 5089] <... sendfile resumed>) = 117 [pid 5086] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] <... mmap resumed>) = 0x7fa2d46b2000 ./strace-static-x86_64: Process 5112 attached [pid 5112] set_robust_list(0x7fa2d46d29e0, 24) = 0 [pid 5112] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5089] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5084] <... clone resumed>, parent_tid=[5112], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5112 [pid 5083] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5089] <... futex resumed>) = 0 [pid 5086] <... futex resumed>) = 0 [pid 5085] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5084] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... mprotect resumed>) = 0 [ 58.738333][ T5091] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 58.755880][ T5089] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 58.756113][ T5092] EXT4-fs (loop1): This should not happen!! Data will be lost [ 58.756113][ T5092] [ 58.762978][ T5087] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 58.773609][ T5092] EXT4-fs (loop1): Total free blocks count 0 [ 58.778220][ T5093] EXT4-fs (loop4): This should not happen!! Data will be lost [ 58.778220][ T5093] [ 58.784462][ T5092] EXT4-fs (loop1): Free/Dirty block details [pid 5078] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5089] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5086] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5085] <... mprotect resumed>) = 0 [pid 5084] <... futex resumed>) = 1 [pid 5083] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5112] <... futex resumed>) = 0 [pid 5112] creat(0x200001c0, 0420) = -1 EISDIR (Is a directory) [pid 5112] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5112] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5111] creat(0x200001c0, 0420) = -1 EISDIR (Is a directory) [pid 5111] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5111] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5087] <... sendfile resumed>) = 117 [pid 5087] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5087] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5113 attached [pid 5086] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5085] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] exit_group(0 [pid 5078] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5086] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5086] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5114], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5114 [pid 5086] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5086] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5113] set_robust_list(0x7fa2d46d29e0, 24 [pid 5084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... clone resumed>, parent_tid=[5113], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5113 [pid 5082] <... exit_group resumed>) = ? [pid 5078] <... openat resumed>) = 3 [pid 5111] <... futex resumed>) = ? [pid 5087] <... futex resumed>) = ? [pid 5111] +++ exited with 0 +++ [pid 5087] +++ exited with 0 +++ ./strace-static-x86_64: Process 5114 attached [pid 5114] set_robust_list(0x7fa2d46d29e0, 24) = 0 ./strace-static-x86_64: Process 5115 attached [pid 5115] set_robust_list(0x7fa2d46d29e0, 24) = 0 [pid 5115] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5113] <... set_robust_list resumed>) = 0 [pid 5085] <... clone resumed>, parent_tid=[5115], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5115 [pid 5084] exit_group(0 [pid 5083] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] +++ exited with 0 +++ [pid 5078] fstat(3, [pid 5089] <... futex resumed>) = ? [pid 5085] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... exit_group resumed>) = ? [pid 5083] <... futex resumed>) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5112] <... futex resumed>) = ? [pid 5112] +++ exited with 0 +++ [ 58.793888][ T5091] EXT4-fs (loop0): This should not happen!! Data will be lost [ 58.793888][ T5091] [ 58.800527][ T5092] EXT4-fs (loop1): free_blocks=2415919104 [ 58.812611][ T5093] EXT4-fs (loop4): Total free blocks count 0 [ 58.816320][ T5091] EXT4-fs (loop0): Total free blocks count 0 [ 58.823665][ T5093] EXT4-fs (loop4): Free/Dirty block details [ 58.828374][ T5091] EXT4-fs (loop0): Free/Dirty block details [ 58.835013][ T5092] EXT4-fs (loop1): dirty_blocks=16 [ 58.841141][ T5091] EXT4-fs (loop0): free_blocks=2415919104 [pid 5089] +++ exited with 0 +++ [pid 5085] <... futex resumed>) = 1 [pid 5084] +++ exited with 0 +++ [pid 5083] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5082, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5078] getdents64(3, [pid 5115] <... futex resumed>) = 0 [pid 5086] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5085] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5084, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5078] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5081] <... restart_syscall resumed>) = 0 [pid 5078] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./0/binderfs", [pid 5091] <... sendfile resumed>) = 117 [pid 5114] creat(0x200001c0, 0420) = -1 EISDIR (Is a directory) [pid 5114] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5081] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] fstat(3, [pid 5078] unlink("./0/binderfs" [pid 5114] <... futex resumed>) = 0 [pid 5114] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5092] <... sendfile resumed>) = 117 [pid 5091] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... openat resumed>) = 3 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5081] fstat(3, [pid 5079] getdents64(3, [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5081] getdents64(3, [pid 5079] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5115] creat(0x200001c0, 0420 [pid 5081] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] lstat("./0/binderfs", [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5115] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5086] exit_group(0 [pid 5081] lstat("./0/binderfs", [pid 5079] unlink("./0/binderfs" [pid 5115] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] <... futex resumed>) = ? [ 58.844752][ T5093] EXT4-fs (loop4): free_blocks=2415919104 [ 58.850586][ T5091] EXT4-fs (loop0): dirty_blocks=16 [ 58.856214][ T5092] EXT4-fs (loop1): Block reservation details [ 58.862912][ T5091] EXT4-fs (loop0): Block reservation details [ 58.867468][ T5093] EXT4-fs (loop4): dirty_blocks=16 [ 58.879505][ T5092] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 58.880193][ T5091] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 58.886369][ T5093] EXT4-fs (loop4): Block reservation details [pid 5113] creat(0x200001c0, 0420 [pid 5093] <... sendfile resumed>) = 117 [pid 5092] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] <... futex resumed>) = ? [pid 5086] <... exit_group resumed>) = ? [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5115] <... futex resumed>) = 1 [pid 5114] +++ exited with 0 +++ [pid 5113] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5093] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] <... futex resumed>) = 0 [pid 5085] <... futex resumed>) = 0 [pid 5081] unlink("./0/binderfs" [pid 5079] <... unlink resumed>) = 0 [pid 5115] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5113] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] <... futex resumed>) = 0 [pid 5092] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5091] +++ exited with 0 +++ [pid 5086] +++ exited with 0 +++ [pid 5085] exit_group(0 [pid 5081] <... unlink resumed>) = 0 [pid 5079] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5113] <... futex resumed>) = 1 [pid 5085] <... exit_group resumed>) = ? [pid 5083] <... futex resumed>) = 0 [pid 5081] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5113] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] exit_group(0 [pid 5113] <... futex resumed>) = ? [pid 5083] <... exit_group resumed>) = ? [pid 5113] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5086, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5076] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5076] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(3, 0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] unlink("./0/binderfs") = 0 [pid 5076] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5115] <... futex resumed>) = ? [pid 5115] +++ exited with 0 +++ [pid 5093] +++ exited with 0 +++ [pid 5092] <... futex resumed>) = ? [pid 5083] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5083, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5080] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, 0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5080] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./0/binderfs") = 0 [ 58.900879][ T5093] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 58.913997][ T56] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 58.929803][ T1019] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5080] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5092] +++ exited with 0 +++ [pid 5085] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5085, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5077] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(3, 0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] unlink("./0/binderfs") = 0 [pid 5077] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... umount2 resumed>) = 0 [pid 5081] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./0/bus", [pid 5078] <... umount2 resumed>) = 0 [pid 5078] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./0/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, 0x555555ae4660 /* 2 entries */, 32768) = 48 [ 58.942708][ T46] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 58.945075][ T56] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 58.956852][ T33] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 58.980412][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, 0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5081] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = 0 [pid 5078] close(4 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... close resumed>) = 0 [pid 5081] <... openat resumed>) = 4 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] rmdir("./0/bus" [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] lstat("./0/bus", [pid 5078] <... rmdir resumed>) = 0 [pid 5081] getdents64(4, [pid 5078] getdents64(3, [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5079] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5081] getdents64(4, [pid 5078] close(3 [pid 5081] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... close resumed>) = 0 [pid 5078] rmdir("./0" [pid 5081] close(4 [pid 5079] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... close resumed>) = 0 [pid 5079] <... openat resumed>) = 4 [pid 5078] <... rmdir resumed>) = 0 [pid 5081] rmdir("./0/bus" [pid 5079] fstat(4, [pid 5078] mkdir("./1", 0777 [pid 5081] <... rmdir resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5081] getdents64(3, [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5079] getdents64(4, [pid 5078] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5081] close(3 [pid 5079] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5081] <... close resumed>) = 0 [pid 5079] getdents64(4, [pid 5078] <... openat resumed>) = 3 [pid 5081] rmdir("./0" [pid 5079] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5081] <... rmdir resumed>) = 0 [pid 5079] close(4 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] <... umount2 resumed>) = 0 [pid 5081] mkdir("./1", 0777 [pid 5079] <... close resumed>) = 0 [pid 5078] close(3 [pid 5079] rmdir("./0/bus" [pid 5081] <... mkdir resumed>) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5079] getdents64(3, [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5079] close(3 [pid 5078] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5122 [pid 5079] <... close resumed>) = 0 [pid 5079] rmdir("./0" [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5080] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... rmdir resumed>) = 0 [pid 5076] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] close(3 [pid 5080] lstat("./0/bus", [pid 5079] mkdir("./1", 0777 [pid 5076] lstat("./0/bus", [pid 5081] <... close resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... mkdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./0/bus", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5080] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5123 [pid 5079] <... openat resumed>) = 3 [pid 5080] <... openat resumed>) = 4 [pid 5077] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 4 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5080] fstat(4, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] fstat(4, [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5122 attached [pid 5080] getdents64(4, [pid 5079] close(3 [pid 5077] <... openat resumed>) = 4 [pid 5076] getdents64(4, ./strace-static-x86_64: Process 5123 attached [pid 5122] set_robust_list(0x555555adb5e0, 24 [pid 5080] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5079] <... close resumed>) = 0 [pid 5077] fstat(4, [pid 5076] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5123] set_robust_list(0x555555adb5e0, 24 [pid 5122] <... set_robust_list resumed>) = 0 [pid 5080] getdents64(4, [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(4, [pid 5123] <... set_robust_list resumed>) = 0 [pid 5122] chdir("./1" [pid 5080] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5077] getdents64(4, [pid 5076] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5123] chdir("./1" [pid 5122] <... chdir resumed>) = 0 [pid 5080] close(4 [pid 5077] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5076] close(4 [pid 5123] <... chdir resumed>) = 0 [pid 5122] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] <... close resumed>) = 0 [pid 5079] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5124 [pid 5077] getdents64(4, [pid 5076] <... close resumed>) = 0 [pid 5123] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5122] <... prctl resumed>) = 0 [pid 5080] rmdir("./0/bus" [pid 5077] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5076] rmdir("./0/bus"./strace-static-x86_64: Process 5124 attached [pid 5123] <... prctl resumed>) = 0 [pid 5122] setpgid(0, 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5077] close(4 [pid 5076] <... rmdir resumed>) = 0 [pid 5124] set_robust_list(0x555555adb5e0, 24 [pid 5123] setpgid(0, 0 [pid 5122] <... setpgid resumed>) = 0 [pid 5080] getdents64(3, [pid 5077] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 5124] <... set_robust_list resumed>) = 0 [pid 5123] <... setpgid resumed>) = 0 [pid 5122] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5077] rmdir("./0/bus" [pid 5076] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5124] chdir("./1" [pid 5123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5122] <... openat resumed>) = 3 [pid 5080] close(3 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] close(3 [pid 5124] <... chdir resumed>) = 0 [pid 5123] <... openat resumed>) = 3 [pid 5122] write(3, "1000", 4 [pid 5080] <... close resumed>) = 0 [pid 5077] getdents64(3, [pid 5076] <... close resumed>) = 0 [pid 5124] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5123] write(3, "1000", 4 [pid 5122] <... write resumed>) = 4 [pid 5080] rmdir("./0" [pid 5077] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5076] rmdir("./0" [pid 5124] <... prctl resumed>) = 0 [pid 5123] <... write resumed>) = 4 [pid 5122] close(3 [pid 5080] <... rmdir resumed>) = 0 [pid 5077] close(3 [pid 5076] <... rmdir resumed>) = 0 [pid 5124] setpgid(0, 0 [pid 5123] close(3 [pid 5122] <... close resumed>) = 0 [pid 5080] mkdir("./1", 0777 [pid 5077] <... close resumed>) = 0 [pid 5076] mkdir("./1", 0777 [pid 5124] <... setpgid resumed>) = 0 [pid 5123] <... close resumed>) = 0 [pid 5122] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... mkdir resumed>) = 0 [pid 5077] rmdir("./0" [pid 5076] <... mkdir resumed>) = 0 [pid 5124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5123] symlink("/dev/binderfs", "./binderfs" [pid 5122] <... symlink resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5077] <... rmdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5124] <... openat resumed>) = 3 [pid 5123] <... symlink resumed>) = 0 [pid 5122] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... openat resumed>) = 3 [pid 5077] mkdir("./1", 0777 [pid 5076] <... openat resumed>) = 3 [pid 5124] write(3, "1000", 4 [pid 5123] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] <... futex resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5077] <... mkdir resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5124] <... write resumed>) = 4 [pid 5123] <... futex resumed>) = 0 [pid 5122] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5124] close(3 [pid 5123] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5122] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5080] close(3 [pid 5077] <... openat resumed>) = 3 [pid 5076] close(3 [pid 5124] <... close resumed>) = 0 [pid 5123] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5122] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... close resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] <... close resumed>) = 0 [pid 5124] symlink("/dev/binderfs", "./binderfs" [pid 5123] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5122] <... mprotect resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5124] <... symlink resumed>) = 0 [pid 5123] <... mprotect resumed>) = 0 [pid 5122] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] close(3 [pid 5124] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5125 [pid 5077] <... close resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5126 [pid 5124] <... futex resumed>) = 0 [pid 5122] <... clone resumed>, parent_tid=[5127], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5127 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5124] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5123] <... clone resumed>, parent_tid=[5128], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5128 [pid 5122] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5127 attached ./strace-static-x86_64: Process 5126 attached [pid 5124] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5123] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] <... futex resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5129 ./strace-static-x86_64: Process 5128 attached ./strace-static-x86_64: Process 5125 attached [pid 5127] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5126] set_robust_list(0x555555adb5e0, 24 [pid 5124] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5123] <... futex resumed>) = 0 [pid 5122] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5129 attached [pid 5128] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5127] <... set_robust_list resumed>) = 0 [pid 5126] <... set_robust_list resumed>) = 0 [pid 5125] set_robust_list(0x555555adb5e0, 24 [pid 5124] <... mprotect resumed>) = 0 [pid 5123] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5129] set_robust_list(0x555555adb5e0, 24 [pid 5128] <... set_robust_list resumed>) = 0 [pid 5127] memfd_create("syzkaller", 0 [pid 5126] chdir("./1" [pid 5125] <... set_robust_list resumed>) = 0 [pid 5124] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5129] <... set_robust_list resumed>) = 0 [pid 5128] memfd_create("syzkaller", 0 [pid 5127] <... memfd_create resumed>) = 3 [pid 5126] <... chdir resumed>) = 0 [pid 5125] chdir("./1" [pid 5129] chdir("./1" [pid 5128] <... memfd_create resumed>) = 3 [pid 5127] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5126] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5125] <... chdir resumed>) = 0 [pid 5124] <... clone resumed>, parent_tid=[5130], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5130 ./strace-static-x86_64: Process 5130 attached [pid 5129] <... chdir resumed>) = 0 [pid 5128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5127] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5126] <... prctl resumed>) = 0 [pid 5125] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5124] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5129] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5128] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5125] <... prctl resumed>) = 0 [pid 5124] <... futex resumed>) = 0 [pid 5130] <... set_robust_list resumed>) = 0 [pid 5129] <... prctl resumed>) = 0 [pid 5128] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5127] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5126] setpgid(0, 0 [pid 5125] setpgid(0, 0 [pid 5124] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5130] memfd_create("syzkaller", 0 [pid 5129] setpgid(0, 0 [pid 5126] <... setpgid resumed>) = 0 [pid 5125] <... setpgid resumed>) = 0 [pid 5130] <... memfd_create resumed>) = 3 [pid 5129] <... setpgid resumed>) = 0 [pid 5126] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5125] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5130] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5129] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5126] <... openat resumed>) = 3 [pid 5125] <... openat resumed>) = 3 [pid 5130] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5129] <... openat resumed>) = 3 [pid 5126] write(3, "1000", 4 [pid 5125] write(3, "1000", 4 [pid 5130] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5129] write(3, "1000", 4 [pid 5128] <... write resumed>) = 1048576 [pid 5126] <... write resumed>) = 4 [pid 5125] <... write resumed>) = 4 [pid 5129] <... write resumed>) = 4 [pid 5126] close(3 [pid 5125] close(3 [pid 5129] close(3 [pid 5126] <... close resumed>) = 0 [pid 5125] <... close resumed>) = 0 [pid 5129] <... close resumed>) = 0 [pid 5126] symlink("/dev/binderfs", "./binderfs" [pid 5125] symlink("/dev/binderfs", "./binderfs" [pid 5129] symlink("/dev/binderfs", "./binderfs" [pid 5127] <... write resumed>) = 1048576 [pid 5126] <... symlink resumed>) = 0 [pid 5125] <... symlink resumed>) = 0 [pid 5129] <... symlink resumed>) = 0 [pid 5126] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5125] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5129] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5128] munmap(0x7fa2d45d3000, 1048576 [pid 5127] munmap(0x7fa2d45d3000, 1048576 [pid 5126] <... futex resumed>) = 0 [pid 5125] <... futex resumed>) = 0 [pid 5129] <... futex resumed>) = 0 [pid 5128] <... munmap resumed>) = 0 [pid 5127] <... munmap resumed>) = 0 [pid 5126] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5125] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5129] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5128] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5127] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5126] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5125] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5129] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5128] <... openat resumed>) = 4 [pid 5127] <... openat resumed>) = 4 [pid 5126] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5125] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5129] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5128] ioctl(4, LOOP_SET_FD, 3 [pid 5127] ioctl(4, LOOP_SET_FD, 3 [pid 5126] <... mprotect resumed>) = 0 [pid 5125] <... mprotect resumed>) = 0 [pid 5129] <... mprotect resumed>) = 0 [pid 5125] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5129] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5125] <... clone resumed>, parent_tid=[5131], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5131 [pid 5129] <... clone resumed>, parent_tid=[5132], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5132 [pid 5125] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5129] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5125] <... futex resumed>) = 0 [pid 5129] <... futex resumed>) = 0 [pid 5127] <... ioctl resumed>) = 0 [pid 5125] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5129] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5126] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5131 attached [pid 5127] close(3 [pid 5131] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5127] <... close resumed>) = 0 [pid 5126] <... clone resumed>, parent_tid=[5133], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5133 [pid 5131] <... set_robust_list resumed>) = 0 [pid 5126] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5131] memfd_create("syzkaller", 0 [pid 5127] mkdir("./bus", 0777 [pid 5126] <... futex resumed>) = 0 [pid 5131] <... memfd_create resumed>) = 3 [pid 5126] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5131] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5128] <... ioctl resumed>) = 0 [pid 5127] <... mkdir resumed>) = 0 [pid 5131] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5128] close(3./strace-static-x86_64: Process 5133 attached ./strace-static-x86_64: Process 5132 attached [pid 5131] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5128] <... close resumed>) = 0 [pid 5127] mount("/dev/loop2", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5128] mkdir("./bus", 0777 [pid 5133] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5132] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5130] <... write resumed>) = 1048576 [pid 5128] <... mkdir resumed>) = 0 [pid 5133] <... set_robust_list resumed>) = 0 [pid 5132] <... set_robust_list resumed>) = 0 [pid 5130] munmap(0x7fa2d45d3000, 1048576 [pid 5128] mount("/dev/loop5", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5133] memfd_create("syzkaller", 0 [pid 5132] memfd_create("syzkaller", 0 [pid 5130] <... munmap resumed>) = 0 [pid 5133] <... memfd_create resumed>) = 3 [pid 5132] <... memfd_create resumed>) = 3 [pid 5130] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5133] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5132] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5130] <... openat resumed>) = 4 [pid 5133] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5132] <... mmap resumed>) = 0x7fa2d45d3000 [ 59.257407][ T5128] loop5: detected capacity change from 0 to 2048 [ 59.264839][ T5127] loop2: detected capacity change from 0 to 2048 [pid 5130] ioctl(4, LOOP_SET_FD, 3 [pid 5132] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5127] <... mount resumed>) = 0 [pid 5127] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5127] chdir("./bus") = 0 [pid 5130] <... ioctl resumed>) = 0 [pid 5133] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5131] <... write resumed>) = 1048576 [pid 5130] close(3 [pid 5131] munmap(0x7fa2d45d3000, 1048576 [pid 5130] <... close resumed>) = 0 [pid 5130] mkdir("./bus", 0777 [pid 5127] ioctl(4, LOOP_CLR_FD [pid 5130] <... mkdir resumed>) = 0 [pid 5131] <... munmap resumed>) = 0 [pid 5130] mount("/dev/loop3", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5131] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5127] <... ioctl resumed>) = 0 [pid 5133] <... write resumed>) = 1048576 [pid 5132] <... write resumed>) = 1048576 [pid 5131] <... openat resumed>) = 4 [pid 5131] ioctl(4, LOOP_SET_FD, 3 [pid 5133] munmap(0x7fa2d45d3000, 1048576 [pid 5132] munmap(0x7fa2d45d3000, 1048576 [pid 5128] <... mount resumed>) = 0 [pid 5127] close(4 [pid 5133] <... munmap resumed>) = 0 [pid 5132] <... munmap resumed>) = 0 [pid 5128] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5133] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5132] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5131] <... ioctl resumed>) = 0 [pid 5127] <... close resumed>) = 0 [pid 5133] <... openat resumed>) = 4 [pid 5132] <... openat resumed>) = 4 [pid 5131] close(3 [pid 5128] <... openat resumed>) = 3 [pid 5127] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 59.313049][ T5127] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 59.319920][ T5130] loop3: detected capacity change from 0 to 2048 [ 59.344426][ T5128] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 59.356738][ T5131] loop4: detected capacity change from 0 to 2048 [pid 5133] ioctl(4, LOOP_SET_FD, 3 [pid 5132] ioctl(4, LOOP_SET_FD, 3 [pid 5131] <... close resumed>) = 0 [pid 5128] chdir("./bus" [pid 5127] <... futex resumed>) = 1 [pid 5122] <... futex resumed>) = 0 [pid 5122] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5122] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] <... ioctl resumed>) = 0 [pid 5132] <... ioctl resumed>) = 0 [pid 5131] mkdir("./bus", 0777 [pid 5128] <... chdir resumed>) = 0 [pid 5127] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5133] close(3 [pid 5131] <... mkdir resumed>) = 0 [pid 5128] ioctl(4, LOOP_CLR_FD [pid 5133] <... close resumed>) = 0 [pid 5132] close(3 [pid 5131] mount("/dev/loop4", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5128] <... ioctl resumed>) = 0 [pid 5133] mkdir("./bus", 0777 [pid 5132] <... close resumed>) = 0 [pid 5130] <... mount resumed>) = 0 [pid 5128] close(4 [pid 5127] <... open resumed>) = 4 [pid 5133] <... mkdir resumed>) = 0 [pid 5127] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5132] mkdir("./bus", 0777 [pid 5128] <... close resumed>) = 0 [pid 5127] <... futex resumed>) = 1 [pid 5122] <... futex resumed>) = 0 [pid 5127] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5122] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5122] <... futex resumed>) = 0 [pid 5127] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5122] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5127] <... write resumed>) = 9 [pid 5127] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5122] <... futex resumed>) = 0 [pid 5127] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5122] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5122] <... futex resumed>) = 0 [pid 5127] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5122] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5127] <... openat resumed>) = 5 [pid 5127] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5122] <... futex resumed>) = 0 [pid 5127] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5122] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5122] <... futex resumed>) = 0 [pid 5127] open("./bus", O_RDWR [pid 5122] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5127] <... open resumed>) = 6 [pid 5127] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5122] <... futex resumed>) = 0 [pid 5132] <... mkdir resumed>) = 0 [pid 5128] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5122] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5122] <... futex resumed>) = 0 [pid 5127] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5122] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] mount("/dev/loop0", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5132] mount("/dev/loop1", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5130] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5128] <... futex resumed>) = 1 [pid 5127] <... mmap resumed>) = 0x20000000 [pid 5123] <... futex resumed>) = 0 [pid 5127] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] <... futex resumed>) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5122] <... futex resumed>) = 0 [pid 5127] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5122] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] <... openat resumed>) = 3 [pid 5128] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5122] <... futex resumed>) = 0 [pid 5127] sendfile(4, 5, NULL, 2147483713 [pid 5122] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5130] chdir("./bus") = 0 [pid 5128] <... open resumed>) = 4 [pid 5130] ioctl(4, LOOP_CLR_FD) = 0 [pid 5128] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] close(4 [pid 5128] <... futex resumed>) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5130] <... close resumed>) = 0 [pid 5128] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5130] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5124] <... futex resumed>) = 0 [pid 5130] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5124] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5124] <... futex resumed>) = 0 [pid 5130] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [ 59.376487][ T5133] loop0: detected capacity change from 0 to 2048 [ 59.383903][ T5132] loop1: detected capacity change from 0 to 2048 [ 59.389062][ T5130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [pid 5124] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5123] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5123] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5128] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5130] <... open resumed>) = 4 [pid 5128] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5130] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5124] <... futex resumed>) = 0 [pid 5130] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5124] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5128] <... write resumed>) = 9 [pid 5124] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5130] <... write resumed>) = 9 [pid 5128] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5128] <... futex resumed>) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5130] <... futex resumed>) = 1 [pid 5128] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5124] <... futex resumed>) = 0 [pid 5123] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5128] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5124] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] <... futex resumed>) = 0 [pid 5130] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5128] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5124] <... futex resumed>) = 0 [pid 5123] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5130] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5128] <... openat resumed>) = 5 [pid 5124] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5130] <... openat resumed>) = 5 [pid 5128] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5128] <... futex resumed>) = 1 [pid 5130] <... futex resumed>) = 1 [pid 5128] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5124] <... futex resumed>) = 0 [pid 5123] <... futex resumed>) = 0 [pid 5130] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5124] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] <... futex resumed>) = 0 [pid 5124] <... futex resumed>) = 1 [pid 5130] open("./bus", O_RDWR [pid 5124] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5130] <... open resumed>) = 6 [pid 5130] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5124] <... futex resumed>) = 0 [pid 5130] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5124] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5124] <... futex resumed>) = 0 [pid 5130] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5124] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5130] <... mmap resumed>) = 0x20000000 [pid 5123] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5130] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5124] <... futex resumed>) = 0 [pid 5130] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5124] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5124] <... futex resumed>) = 0 [pid 5130] sendfile(4, 5, NULL, 2147483713 [ 59.433482][ T5127] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 59.468120][ T5127] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5124] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5123] <... futex resumed>) = 1 [pid 5122] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5128] <... futex resumed>) = 0 [pid 5128] open("./bus", O_RDWR) = 6 [pid 5128] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5128] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5122] <... futex resumed>) = 0 [pid 5123] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5122] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [ 59.485000][ T5133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 59.492411][ T5127] EXT4-fs (loop2): This should not happen!! Data will be lost [ 59.492411][ T5127] [ 59.499415][ T5131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 59.510434][ T5127] EXT4-fs (loop2): Total free blocks count 0 [pid 5123] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5128] <... futex resumed>) = 0 [pid 5124] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5123] <... futex resumed>) = 1 [pid 5122] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5128] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5123] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5122] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5124] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5128] <... mmap resumed>) = 0x20000000 [pid 5124] <... futex resumed>) = 0 [pid 5122] <... mprotect resumed>) = 0 [pid 5128] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5122] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5128] <... futex resumed>) = 1 [pid 5124] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5123] <... futex resumed>) = 0 [pid 5128] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5124] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5123] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5128] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5124] <... mprotect resumed>) = 0 [pid 5123] <... futex resumed>) = 0 [pid 5122] <... clone resumed>, parent_tid=[5146], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5146 [pid 5124] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5147], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5147 [pid 5124] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5124] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5147 attached [pid 5147] set_robust_list(0x7fa2d46d29e0, 24) = 0 [pid 5128] sendfile(4, 5, NULL, 2147483713 [pid 5123] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5122] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5122] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5146 attached [pid 5146] set_robust_list(0x7fa2d46d29e0, 24) = 0 [ 59.521073][ T5132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 59.525799][ T5127] EXT4-fs (loop2): Free/Dirty block details [ 59.551899][ T5130] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 59.557098][ T5127] EXT4-fs (loop2): free_blocks=2415919104 [ 59.573510][ T5127] EXT4-fs (loop2): dirty_blocks=16 [pid 5133] <... mount resumed>) = 0 [pid 5133] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5132] <... mount resumed>) = 0 [pid 5131] <... mount resumed>) = 0 [pid 5127] <... sendfile resumed>) = 117 [pid 5124] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5146] creat(0x200001c0, 0420) = -1 EISDIR (Is a directory) [pid 5146] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5122] <... futex resumed>) = 0 [ 59.580628][ T5127] EXT4-fs (loop2): Block reservation details [ 59.586341][ T5130] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 59.587637][ T5127] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 59.601839][ T5130] EXT4-fs (loop3): This should not happen!! Data will be lost [ 59.601839][ T5130] [ 59.608251][ T5128] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 59.616882][ T5130] EXT4-fs (loop3): Total free blocks count 0 [pid 5146] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5133] <... openat resumed>) = 3 [pid 5132] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5131] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5127] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5122] exit_group(0 [pid 5146] <... futex resumed>) = ? [pid 5123] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] <... exit_group resumed>) = ? [pid 5146] +++ exited with 0 +++ [pid 5123] <... futex resumed>) = 0 [pid 5123] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2d46b2000 [pid 5123] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5123] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5148], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5148 [pid 5123] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5123] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5148 attached [pid 5148] set_robust_list(0x7fa2d46d29e0, 24) = 0 [pid 5133] chdir("./bus" [pid 5132] <... openat resumed>) = 3 [pid 5131] <... openat resumed>) = 3 [pid 5127] <... futex resumed>) = ? [pid 5133] <... chdir resumed>) = 0 [pid 5132] chdir("./bus" [pid 5131] chdir("./bus" [pid 5127] +++ exited with 0 +++ [pid 5122] +++ exited with 0 +++ [pid 5133] ioctl(4, LOOP_CLR_FD [pid 5132] <... chdir resumed>) = 0 [pid 5133] <... ioctl resumed>) = 0 [pid 5132] ioctl(4, LOOP_CLR_FD [pid 5133] close(4 [pid 5132] <... ioctl resumed>) = 0 [pid 5133] <... close resumed>) = 0 [pid 5132] close(4 [pid 5133] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5132] <... close resumed>) = 0 [pid 5133] <... futex resumed>) = 1 [pid 5132] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] <... futex resumed>) = 0 [pid 5133] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5132] <... futex resumed>) = 1 [pid 5126] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5126] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5132] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5131] <... chdir resumed>) = 0 [pid 5131] ioctl(4, LOOP_CLR_FD) = 0 [pid 5131] close(4) = 0 [pid 5131] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5125] <... futex resumed>) = 0 [pid 5129] <... futex resumed>) = 0 [pid 5129] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... open resumed>) = 4 [pid 5132] <... futex resumed>) = 0 [pid 5129] <... futex resumed>) = 1 [pid 5125] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5122, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5133] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5132] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5129] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5125] <... futex resumed>) = 0 [pid 5133] <... futex resumed>) = 1 [pid 5132] <... open resumed>) = 4 [pid 5131] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5126] <... futex resumed>) = 0 [pid 5125] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5132] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5131] <... open resumed>) = 4 [pid 5126] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5132] <... futex resumed>) = 1 [pid 5131] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5129] <... futex resumed>) = 0 [pid 5126] <... futex resumed>) = 0 [ 59.631714][ T5128] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 59.639890][ T5130] EXT4-fs (loop3): Free/Dirty block details [ 59.649375][ T5128] EXT4-fs (loop5): This should not happen!! Data will be lost [ 59.649375][ T5128] [ 59.654551][ T5130] EXT4-fs (loop3): free_blocks=2415919104 [ 59.665350][ T5128] EXT4-fs (loop5): Total free blocks count 0 [pid 5133] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5132] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5131] <... futex resumed>) = 1 [pid 5126] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] <... write resumed>) = 9 [pid 5132] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5131] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5129] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5125] <... futex resumed>) = 0 [pid 5078] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5133] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5132] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5129] <... futex resumed>) = 0 [pid 5125] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = 1 [pid 5132] <... write resumed>) = 9 [pid 5126] <... futex resumed>) = 0 [pid 5133] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5132] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5132] <... futex resumed>) = 0 [pid 5126] <... futex resumed>) = 0 [pid 5133] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5132] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5126] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] <... openat resumed>) = 5 [pid 5133] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5131] <... futex resumed>) = 0 [pid 5129] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5125] <... futex resumed>) = 1 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5133] <... futex resumed>) = 1 [pid 5131] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5126] <... futex resumed>) = 0 [pid 5133] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5131] <... write resumed>) = 9 [pid 5126] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5131] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] <... futex resumed>) = 0 [pid 5133] open("./bus", O_RDWR [pid 5131] <... futex resumed>) = 0 [pid 5126] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] <... open resumed>) = 6 [pid 5131] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5133] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5129] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5126] <... futex resumed>) = 0 [pid 5125] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 59.691135][ T5128] EXT4-fs (loop5): Free/Dirty block details [ 59.694130][ T5130] EXT4-fs (loop3): dirty_blocks=16 [ 59.704812][ T5128] EXT4-fs (loop5): free_blocks=2415919104 [ 59.711629][ T5130] EXT4-fs (loop3): Block reservation details [ 59.722401][ T5128] EXT4-fs (loop5): dirty_blocks=16 [ 59.727717][ T5128] EXT4-fs (loop5): Block reservation details [pid 5133] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5129] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] <... openat resumed>) = 3 [pid 5148] creat(0x200001c0, 0420 [pid 5147] creat(0x200001c0, 0420 [pid 5133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5132] <... futex resumed>) = 0 [pid 5130] <... sendfile resumed>) = 117 [pid 5129] <... futex resumed>) = 1 [pid 5128] <... sendfile resumed>) = 117 [pid 5126] <... futex resumed>) = 0 [pid 5125] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] fstat(3, [pid 5148] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5147] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5133] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5132] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5131] <... futex resumed>) = 0 [pid 5130] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5129] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5128] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5125] <... futex resumed>) = 1 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5148] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5147] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... mmap resumed>) = 0x20000000 [pid 5132] <... openat resumed>) = 5 [pid 5131] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5130] <... futex resumed>) = 0 [pid 5128] <... futex resumed>) = 0 [pid 5125] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] getdents64(3, [pid 5148] <... futex resumed>) = 0 [pid 5147] <... futex resumed>) = 0 [pid 5133] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5132] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5131] <... openat resumed>) = 5 [pid 5130] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5128] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5124] exit_group(0 [pid 5123] exit_group(0 [pid 5078] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5133] <... futex resumed>) = 1 [pid 5132] <... futex resumed>) = 1 [pid 5131] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] <... futex resumed>) = ? [pid 5129] <... futex resumed>) = 0 [pid 5128] <... futex resumed>) = ? [pid 5126] <... futex resumed>) = 0 [pid 5124] <... exit_group resumed>) = ? [pid 5123] <... exit_group resumed>) = ? [pid 5078] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5148] +++ exited with 0 +++ [pid 5147] +++ exited with 0 +++ [pid 5133] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5132] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5131] <... futex resumed>) = 1 [pid 5130] +++ exited with 0 +++ [pid 5129] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5128] +++ exited with 0 +++ [pid 5126] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5125] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./1/binderfs", [pid 5124] +++ exited with 0 +++ [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] unlink("./1/binderfs" [pid 5133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5132] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5131] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5129] <... futex resumed>) = 0 [pid 5126] <... futex resumed>) = 0 [pid 5125] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] +++ exited with 0 +++ [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5124, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5078] <... unlink resumed>) = 0 [pid 5133] sendfile(4, 5, NULL, 2147483713 [pid 5132] open("./bus", O_RDWR [pid 5131] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5129] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5126] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5125] <... futex resumed>) = 0 [pid 5079] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5132] <... open resumed>) = 6 [pid 5131] open("./bus", O_RDWR [pid 5125] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5123, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5131] <... open resumed>) = 6 [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5079] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... restart_syscall resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5079] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] getdents64(3, [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5081] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... openat resumed>) = 3 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] fstat(3, [pid 5079] lstat("./1/binderfs", [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] getdents64(3, [pid 5079] unlink("./1/binderfs" [pid 5081] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5079] <... unlink resumed>) = 0 [pid 5081] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./1/binderfs") = 0 [pid 5081] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5132] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 59.736881][ T5128] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 59.743946][ T5130] EXT4-fs (loop3): i_reserved_data_blocks=1 [pid 5132] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5129] <... futex resumed>) = 0 [pid 5131] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5129] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5132] <... futex resumed>) = 0 [pid 5131] <... futex resumed>) = 1 [pid 5129] <... futex resumed>) = 1 [pid 5132] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5131] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5129] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5126] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5125] <... futex resumed>) = 0 [pid 5132] <... mmap resumed>) = 0x20000000 [pid 5132] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 59.781527][ T9] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 59.795362][ T33] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 59.795393][ T5116] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 59.812760][ T5133] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5132] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5129] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5126] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5125] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... umount2 resumed>) = 0 [pid 5131] <... futex resumed>) = 0 [pid 5129] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] <... futex resumed>) = 0 [pid 5125] <... futex resumed>) = 1 [pid 5079] <... umount2 resumed>) = 0 [pid 5132] <... futex resumed>) = 0 [pid 5131] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5129] <... futex resumed>) = 1 [pid 5126] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5125] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 59.838774][ T5133] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 59.852873][ T5133] EXT4-fs (loop0): This should not happen!! Data will be lost [ 59.852873][ T5133] [ 59.865850][ T5133] EXT4-fs (loop0): Total free blocks count 0 [ 59.871883][ T5133] EXT4-fs (loop0): Free/Dirty block details [ 59.888934][ T5133] EXT4-fs (loop0): free_blocks=2415919104 [ 59.894772][ T5132] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 59.894919][ T5132] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 59.894950][ T5132] EXT4-fs (loop1): This should not happen!! Data will be lost [ 59.894950][ T5132] [ 59.894970][ T5132] EXT4-fs (loop1): Total free blocks count 0 [pid 5132] sendfile(4, 5, NULL, 2147483713 [pid 5131] <... mmap resumed>) = 0x20000000 [pid 5129] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5126] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5125] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... umount2 resumed>) = 0 [pid 5079] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./1/bus", [pid 5131] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5125] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5131] <... futex resumed>) = 0 [pid 5126] <... mprotect resumed>) = 0 [pid 5125] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./1/bus", [pid 5078] lstat("./1/bus", [pid 5131] sendfile(4, 5, NULL, 2147483713 [pid 5126] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5125] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... openat resumed>) = 4 [pid 5079] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5126] <... clone resumed>, parent_tid=[5149], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5149 [pid 5081] fstat(4, [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5126] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5126] <... futex resumed>) = 0 [pid 5081] getdents64(4, [pid 5079] <... openat resumed>) = 4 [pid 5078] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5126] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5079] fstat(4, [pid 5078] <... openat resumed>) = 4 [pid 5081] getdents64(4, 0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./1/bus") = 0 [pid 5081] getdents64(3, 0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./1") = 0 [pid 5081] mkdir("./2", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5081] close(3 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... close resumed>) = 0 [pid 5079] getdents64(4, [pid 5078] fstat(4, [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(4, [pid 5078] getdents64(4, [pid 5081] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5150 [pid 5079] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5079] close(4 [pid 5078] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5149 attached [pid 5079] <... close resumed>) = 0 [pid 5078] getdents64(4, [pid 5149] set_robust_list(0x7fa2d46d29e0, 24 [pid 5079] rmdir("./1/bus" [pid 5078] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5149] <... set_robust_list resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5078] close(4./strace-static-x86_64: Process 5150 attached [pid 5079] getdents64(3, [pid 5078] <... close resumed>) = 0 [pid 5150] set_robust_list(0x555555adb5e0, 24) = 0 [pid 5079] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5078] rmdir("./1/bus" [pid 5150] chdir("./2" [pid 5079] close(3 [pid 5150] <... chdir resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5150] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] rmdir("./1" [pid 5078] getdents64(3, [pid 5150] <... prctl resumed>) = 0 [pid 5150] setpgid(0, 0) = 0 [pid 5150] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5150] write(3, "1000", 4) = 4 [pid 5150] close(3 [pid 5129] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5079] <... rmdir resumed>) = 0 [pid 5078] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5150] <... close resumed>) = 0 [ 59.894989][ T5132] EXT4-fs (loop1): Free/Dirty block details [ 59.895006][ T5132] EXT4-fs (loop1): free_blocks=2415919104 [ 59.895026][ T5132] EXT4-fs (loop1): dirty_blocks=16 [ 59.946116][ T5133] EXT4-fs (loop0): dirty_blocks=16 [ 59.975119][ T5131] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5129] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5125] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5079] mkdir("./2", 0777 [pid 5078] close(3 [pid 5150] symlink("/dev/binderfs", "./binderfs" [pid 5129] <... futex resumed>) = 0 [pid 5125] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] <... symlink resumed>) = 0 [pid 5150] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5150] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2dc9d3000 [pid 5150] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5150] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5151], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5151 [pid 5150] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5150] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5151 attached [pid 5129] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5126] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5125] <... futex resumed>) = 0 [pid 5079] <... mkdir resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5151] set_robust_list(0x7fa2dc9f39e0, 24) = 0 [pid 5151] memfd_create("syzkaller", 0) = 3 [pid 5151] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2d45d3000 [pid 5129] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5125] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] rmdir("./1" [pid 5149] creat(0x200001c0, 0420 [pid 5133] <... sendfile resumed>) = 117 [pid 5129] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5125] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5079] <... openat resumed>) = 3 [pid 5078] <... rmdir resumed>) = 0 [pid 5149] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5133] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5129] <... mprotect resumed>) = 0 [pid 5125] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5151] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5078] mkdir("./2", 0777 [pid 5149] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = 0 [pid 5129] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5126] exit_group(0 [pid 5125] <... mprotect resumed>) = 0 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5149] <... futex resumed>) = ? [ 60.008727][ T5133] EXT4-fs (loop0): Block reservation details [ 60.019080][ T5131] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 60.032385][ T5133] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 60.040677][ T5131] EXT4-fs (loop4): This should not happen!! Data will be lost [ 60.040677][ T5131] [pid 5126] <... exit_group resumed>) = ? [pid 5125] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5078] <... mkdir resumed>) = 0 [pid 5151] <... write resumed>) = 1048576 [pid 5079] close(3./strace-static-x86_64: Process 5152 attached [pid 5149] +++ exited with 0 +++ [pid 5133] +++ exited with 0 +++ [pid 5129] <... clone resumed>, parent_tid=[5152], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5152 [pid 5152] set_robust_list(0x7fa2d46d29e0, 24 [pid 5126] +++ exited with 0 +++ [pid 5079] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5152] <... set_robust_list resumed>) = 0 [pid 5152] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5126, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5076] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5129] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5125] <... clone resumed>, parent_tid=[5153], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5153 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... openat resumed>) = 3 [pid 5076] fstat(3, ./strace-static-x86_64: Process 5153 attached [pid 5152] <... futex resumed>) = 0 [pid 5129] <... futex resumed>) = 1 [pid 5125] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5153] set_robust_list(0x7fa2d46d29e0, 24 [pid 5129] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5125] <... futex resumed>) = 0 [pid 5076] getdents64(3, 0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./1/binderfs", [pid 5153] <... set_robust_list resumed>) = 0 [pid 5125] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5154 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] unlink("./1/binderfs") = 0 [pid 5076] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5151] munmap(0x7fa2d45d3000, 1048576./strace-static-x86_64: Process 5154 attached ) = 0 [pid 5078] close(3 [pid 5151] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 60.054345][ T5131] EXT4-fs (loop4): Total free blocks count 0 [ 60.062132][ T5131] EXT4-fs (loop4): Free/Dirty block details [ 60.068580][ T5131] EXT4-fs (loop4): free_blocks=2415919104 [ 60.094086][ T5131] EXT4-fs (loop4): dirty_blocks=16 [pid 5151] ioctl(4, LOOP_SET_FD, 3 [pid 5154] set_robust_list(0x555555adb5e0, 24 [pid 5078] <... close resumed>) = 0 [pid 5154] <... set_robust_list resumed>) = 0 [pid 5153] creat(0x200001c0, 0420 [pid 5131] <... sendfile resumed>) = 117 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5155 attached [pid 5154] chdir("./2" [pid 5153] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5152] creat(0x200001c0, 0420 [pid 5132] <... sendfile resumed>) = 117 [pid 5131] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5129] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5125] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] <... umount2 resumed>) = 0 [pid 5155] set_robust_list(0x555555adb5e0, 24 [pid 5154] <... chdir resumed>) = 0 [pid 5153] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5132] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5131] <... futex resumed>) = 0 [pid 5125] exit_group(0 [pid 5078] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5155 [pid 5155] <... set_robust_list resumed>) = 0 [pid 5154] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5153] <... futex resumed>) = ? [pid 5152] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5132] <... futex resumed>) = 0 [pid 5125] <... exit_group resumed>) = ? [pid 5154] <... prctl resumed>) = 0 [pid 5153] +++ exited with 0 +++ [pid 5131] +++ exited with 0 +++ [pid 5129] exit_group(0 [pid 5155] chdir("./2" [pid 5154] setpgid(0, 0 [pid 5152] <... futex resumed>) = ? [pid 5129] <... exit_group resumed>) = ? [pid 5125] +++ exited with 0 +++ [pid 5076] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5155] <... chdir resumed>) = 0 [pid 5154] <... setpgid resumed>) = 0 [pid 5152] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5125, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5155] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5151] <... ioctl resumed>) = 0 [pid 5132] +++ exited with 0 +++ [pid 5129] +++ exited with 0 +++ [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5155] <... prctl resumed>) = 0 [pid 5154] <... openat resumed>) = 3 [pid 5080] <... restart_syscall resumed>) = 0 [pid 5155] setpgid(0, 0 [pid 5154] write(3, "1000", 4 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5129, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5076] lstat("./1/bus", [pid 5155] <... setpgid resumed>) = 0 [pid 5154] <... write resumed>) = 4 [pid 5077] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5155] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5154] close(3 [pid 5151] close(3 [pid 5080] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5155] <... openat resumed>) = 3 [pid 5154] <... close resumed>) = 0 [pid 5151] <... close resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5155] write(3, "1000", 4 [pid 5154] symlink("/dev/binderfs", "./binderfs" [pid 5151] mkdir("./bus", 0777 [pid 5080] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... openat resumed>) = 3 [pid 5076] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5155] <... write resumed>) = 4 [pid 5154] <... symlink resumed>) = 0 [pid 5151] <... mkdir resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5077] fstat(3, [pid 5076] <... openat resumed>) = 4 [pid 5155] close(3 [pid 5154] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5151] mount("/dev/loop5", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5080] fstat(3, [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] fstat(4, [pid 5155] <... close resumed>) = 0 [pid 5154] <... futex resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(3, [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5155] symlink("/dev/binderfs", "./binderfs" [pid 5154] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] getdents64(3, [pid 5077] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5076] getdents64(4, [pid 5155] <... symlink resumed>) = 0 [pid 5154] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5080] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [ 60.100120][ T33] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 60.100271][ T5131] EXT4-fs (loop4): Block reservation details [ 60.118069][ T5151] loop5: detected capacity change from 0 to 2048 [ 60.119409][ T5131] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 60.131584][ T5132] EXT4-fs (loop1): Block reservation details [ 60.138712][ T5132] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 5155] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5080] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(4, [pid 5155] <... futex resumed>) = 0 [pid 5154] <... mprotect resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./1/binderfs", [pid 5076] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5155] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5154] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] lstat("./1/binderfs", [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] close(4 [pid 5155] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] unlink("./1/binderfs" [pid 5076] <... close resumed>) = 0 [pid 5155] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5080] unlink("./1/binderfs" [pid 5077] <... unlink resumed>) = 0 [pid 5076] rmdir("./1/bus" [pid 5155] <... mprotect resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 5077] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... rmdir resumed>) = 0 [pid 5154] <... clone resumed>, parent_tid=[5158], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5158 [pid 5080] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] getdents64(3, 0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./1") = 0 [pid 5076] mkdir("./2", 0777) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555adb5d0) = 5159 ./strace-static-x86_64: Process 5158 attached [pid 5158] set_robust_list(0x7fa2dc9f39e0, 24) = 0 [pid 5158] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5160], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5160 [pid 5155] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5155] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5154] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5154] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5159 attached [pid 5159] set_robust_list(0x555555adb5e0, 24) = 0 [pid 5159] chdir("./2") = 0 [pid 5159] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5158] <... futex resumed>) = 0 [pid 5159] setpgid(0, 0 [pid 5158] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5160 attached ) = 3 [pid 5160] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5158] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2d45d3000 [pid 5159] <... setpgid resumed>) = 0 [pid 5159] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5159] write(3, "1000", 4) = 4 [pid 5159] close(3) = 0 [pid 5159] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5160] <... set_robust_list resumed>) = 0 [pid 5159] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5160] memfd_create("syzkaller", 0 [pid 5159] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5160] <... memfd_create resumed>) = 3 [pid 5159] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5159] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5160] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5159] <... mprotect resumed>) = 0 [pid 5158] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [ 60.206703][ T5151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 60.214712][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 60.231766][ T33] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5151] <... mount resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5159] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5158] <... write resumed>) = 1048576 [pid 5151] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5080] <... umount2 resumed>) = 0 [pid 5077] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5151] <... openat resumed>) = 3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5161 attached [pid 5160] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5159] <... clone resumed>, parent_tid=[5161], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5161 [pid 5151] chdir("./bus" [pid 5080] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] lstat("./1/bus", [pid 5161] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5159] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5151] <... chdir resumed>) = 0 [pid 5158] munmap(0x7fa2d45d3000, 1048576 [pid 5161] <... set_robust_list resumed>) = 0 [pid 5159] <... futex resumed>) = 0 [pid 5151] ioctl(4, LOOP_CLR_FD [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5161] memfd_create("syzkaller", 0 [pid 5159] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5161] <... memfd_create resumed>) = 3 [pid 5158] <... munmap resumed>) = 0 [pid 5151] <... ioctl resumed>) = 0 [pid 5077] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5161] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5158] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5151] close(4 [pid 5161] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5158] <... openat resumed>) = 4 [pid 5151] <... close resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5158] ioctl(4, LOOP_SET_FD, 3 [pid 5151] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5161] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5158] <... ioctl resumed>) = 0 [pid 5151] <... futex resumed>) = 1 [pid 5150] <... futex resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5151] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5150] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5151] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5150] <... futex resumed>) = 0 [pid 5077] <... openat resumed>) = 4 [pid 5151] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5150] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5151] <... open resumed>) = 4 [pid 5080] lstat("./1/bus", [pid 5077] fstat(4, [pid 5151] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5151] <... futex resumed>) = 1 [pid 5150] <... futex resumed>) = 0 [pid 5080] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] getdents64(4, [pid 5158] close(3 [pid 5151] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5150] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5160] <... write resumed>) = 1048576 [pid 5158] <... close resumed>) = 0 [pid 5151] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5150] <... futex resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5160] munmap(0x7fa2d45d3000, 1048576 [pid 5158] mkdir("./bus", 0777 [pid 5151] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5150] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... openat resumed>) = 4 [pid 5077] getdents64(4, [pid 5160] <... munmap resumed>) = 0 [pid 5158] <... mkdir resumed>) = 0 [pid 5151] <... write resumed>) = 9 [pid 5080] fstat(4, [pid 5077] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5160] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5158] mount("/dev/loop3", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5151] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] close(4 [pid 5161] <... write resumed>) = 1048576 [pid 5160] <... openat resumed>) = 4 [pid 5151] <... futex resumed>) = 1 [pid 5150] <... futex resumed>) = 0 [pid 5080] getdents64(4, [pid 5077] <... close resumed>) = 0 [pid 5161] munmap(0x7fa2d45d3000, 1048576 [pid 5160] ioctl(4, LOOP_SET_FD, 3 [pid 5151] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5150] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] rmdir("./1/bus" [pid 5080] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5161] <... munmap resumed>) = 0 [pid 5151] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5150] <... futex resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5161] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5160] <... ioctl resumed>) = 0 [pid 5080] getdents64(4, [pid 5151] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5150] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] getdents64(3, [pid 5161] <... openat resumed>) = 4 [pid 5160] close(3 [pid 5080] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5077] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5161] ioctl(4, LOOP_SET_FD, 3 [pid 5160] <... close resumed>) = 0 [pid 5151] <... openat resumed>) = 5 [pid 5080] close(4 [pid 5077] close(3 [pid 5151] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... close resumed>) = 0 [pid 5151] <... futex resumed>) = 1 [pid 5150] <... futex resumed>) = 0 [pid 5080] rmdir("./1/bus" [pid 5151] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5150] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... rmdir resumed>) = 0 [pid 5151] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5150] <... futex resumed>) = 0 [pid 5080] getdents64(3, [pid 5077] <... close resumed>) = 0 [ 60.324804][ T5158] loop3: detected capacity change from 0 to 2048 [ 60.360638][ T5160] loop2: detected capacity change from 0 to 2048 [pid 5161] <... ioctl resumed>) = 0 [pid 5160] mkdir("./bus", 0777 [pid 5151] open("./bus", O_RDWR [pid 5150] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5077] rmdir("./1" [pid 5161] close(3 [pid 5160] <... mkdir resumed>) = 0 [pid 5151] <... open resumed>) = 6 [pid 5080] close(3 [pid 5077] <... rmdir resumed>) = 0 [pid 5161] <... close resumed>) = 0 [pid 5160] mount("/dev/loop2", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5077] mkdir("./2", 0777 [pid 5161] mkdir("./bus", 0777 [pid 5077] <... mkdir resumed>) = 0 [pid 5161] <... mkdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5161] mount("/dev/loop0", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5077] <... openat resumed>) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5077] close(3) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555adb5d0) = 5164 [pid 5151] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5151] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] <... close resumed>) = 0 [pid 5080] rmdir("./1") = 0 [pid 5080] mkdir("./2", 0777) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3 [pid 5150] <... futex resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5150] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5151] <... futex resumed>) = 0 [pid 5150] <... futex resumed>) = 1 [pid 5151] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5150] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5165 ./strace-static-x86_64: Process 5164 attached [pid 5158] <... mount resumed>) = 0 [pid 5151] <... mmap resumed>) = 0x20000000 [pid 5164] set_robust_list(0x555555adb5e0, 24 [pid 5151] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5150] <... futex resumed>) = 0 [pid 5151] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5150] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5151] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5164] <... set_robust_list resumed>) = 0 [pid 5151] sendfile(4, 5, NULL, 2147483713 [pid 5150] <... futex resumed>) = 0 [pid 5164] chdir("./2" [pid 5150] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5164] <... chdir resumed>) = 0 [pid 5164] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5164] setpgid(0, 0) = 0 [pid 5164] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5164] write(3, "1000", 4) = 4 [ 60.373568][ T5161] loop0: detected capacity change from 0 to 2048 [ 60.385753][ T5158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [pid 5158] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5164] close(3 [pid 5158] <... openat resumed>) = 3 [pid 5164] <... close resumed>) = 0 [pid 5158] chdir("./bus" [pid 5164] symlink("/dev/binderfs", "./binderfs" [pid 5158] <... chdir resumed>) = 0 [pid 5164] <... symlink resumed>) = 0 [pid 5158] ioctl(4, LOOP_CLR_FD [pid 5164] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... ioctl resumed>) = 0 [pid 5164] <... futex resumed>) = 0 [pid 5158] close(4 [pid 5164] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5158] <... close resumed>) = 0 ./strace-static-x86_64: Process 5165 attached [pid 5164] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5158] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5165] set_robust_list(0x555555adb5e0, 24 [pid 5164] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5158] <... futex resumed>) = 1 [pid 5154] <... futex resumed>) = 0 [ 60.425944][ T5151] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 60.457576][ T5161] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [pid 5165] <... set_robust_list resumed>) = 0 [pid 5164] <... mprotect resumed>) = 0 [pid 5158] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5154] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5165] chdir("./2" [pid 5154] <... futex resumed>) = 0 [pid 5150] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5165] <... chdir resumed>) = 0 [pid 5154] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5150] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5165] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5150] <... futex resumed>) = 0 [pid 5165] <... prctl resumed>) = 0 [pid 5150] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5165] setpgid(0, 0 [pid 5150] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5165] <... setpgid resumed>) = 0 [pid 5150] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5165] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5150] <... mprotect resumed>) = 0 [pid 5165] <... openat resumed>) = 3 [pid 5164] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5158] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5150] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5165] write(3, "1000", 4 [pid 5160] <... mount resumed>) = 0 [pid 5165] <... write resumed>) = 4 [pid 5150] <... clone resumed>, parent_tid=[5170], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5170 [pid 5165] close(3 [pid 5150] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5165] <... close resumed>) = 0 [pid 5150] <... futex resumed>) = 0 [pid 5165] symlink("/dev/binderfs", "./binderfs" [pid 5150] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5165] <... symlink resumed>) = 0 [pid 5165] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5165] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5158] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5165] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5160] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5165] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5164] <... clone resumed>, parent_tid=[5171], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5171 ./strace-static-x86_64: Process 5170 attached [pid 5165] <... mprotect resumed>) = 0 [pid 5170] set_robust_list(0x7fa2d46d29e0, 24 [pid 5165] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5170] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5172 attached ./strace-static-x86_64: Process 5171 attached [pid 5164] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5161] <... mount resumed>) = 0 [pid 5160] <... openat resumed>) = 3 [pid 5172] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5171] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5161] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5172] <... set_robust_list resumed>) = 0 [pid 5171] <... set_robust_list resumed>) = 0 [pid 5165] <... clone resumed>, parent_tid=[5172], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5172 [pid 5161] <... openat resumed>) = 3 [pid 5164] <... futex resumed>) = 0 [pid 5158] <... open resumed>) = 4 [pid 5160] chdir("./bus" [pid 5172] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5171] memfd_create("syzkaller", 0 [pid 5161] chdir("./bus" [pid 5171] <... memfd_create resumed>) = 3 [pid 5161] <... chdir resumed>) = 0 [pid 5171] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5161] ioctl(4, LOOP_CLR_FD [pid 5171] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5161] <... ioctl resumed>) = 0 [pid 5171] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5161] close(4) = 0 [pid 5161] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5159] <... futex resumed>) = 0 [pid 5161] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5159] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5161] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5159] <... futex resumed>) = 0 [pid 5161] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5159] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5165] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5160] <... chdir resumed>) = 0 [pid 5172] <... futex resumed>) = 0 [pid 5165] <... futex resumed>) = 1 [pid 5160] ioctl(4, LOOP_CLR_FD [pid 5158] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5165] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5160] <... ioctl resumed>) = 0 [pid 5158] <... futex resumed>) = 1 [pid 5154] <... futex resumed>) = 0 [pid 5172] memfd_create("syzkaller", 0 [pid 5160] close(4 [pid 5158] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5154] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5161] <... open resumed>) = 4 [pid 5160] <... close resumed>) = 0 [pid 5154] <... futex resumed>) = 0 [pid 5161] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5161] <... futex resumed>) = 1 [pid 5159] <... futex resumed>) = 0 [pid 5172] <... memfd_create resumed>) = 3 [pid 5171] <... write resumed>) = 1048576 [pid 5161] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5160] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... write resumed>) = 9 [ 60.465005][ T5151] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 60.470783][ T5160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 60.506028][ T5151] EXT4-fs (loop5): This should not happen!! Data will be lost [ 60.506028][ T5151] [pid 5172] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5161] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5160] <... futex resumed>) = 1 [pid 5159] <... futex resumed>) = 0 [pid 5158] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] <... futex resumed>) = 0 [pid 5172] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5161] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5159] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5158] <... futex resumed>) = 1 [pid 5155] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] <... futex resumed>) = 0 [pid 5160] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5172] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5158] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5155] <... futex resumed>) = 0 [pid 5154] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5154] <... futex resumed>) = 0 [pid 5160] <... open resumed>) = 4 [pid 5158] <... openat resumed>) = 5 [pid 5154] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5161] <... write resumed>) = 9 [pid 5160] <... futex resumed>) = 1 [pid 5158] <... futex resumed>) = 0 [pid 5155] <... futex resumed>) = 0 [pid 5154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5161] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5159] <... futex resumed>) = 0 [pid 5161] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5160] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5159] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5161] <... openat resumed>) = 5 [pid 5160] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5158] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5155] <... futex resumed>) = 0 [pid 5154] <... futex resumed>) = 0 [pid 5160] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5158] open("./bus", O_RDWR [pid 5155] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5154] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5161] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] <... futex resumed>) = 0 [pid 5161] <... futex resumed>) = 0 [pid 5159] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5161] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5159] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5158] <... open resumed>) = 6 [pid 5159] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5161] <... futex resumed>) = 0 [pid 5159] <... futex resumed>) = 1 [pid 5161] open("./bus", O_RDWR [pid 5159] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5158] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5161] <... open resumed>) = 6 [pid 5160] <... write resumed>) = 9 [pid 5158] <... futex resumed>) = 1 [pid 5154] <... futex resumed>) = 0 [pid 5161] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5161] <... futex resumed>) = 1 [pid 5160] <... futex resumed>) = 1 [pid 5159] <... futex resumed>) = 0 [pid 5155] <... futex resumed>) = 0 [pid 5154] <... futex resumed>) = 0 [pid 5161] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5159] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5161] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5159] <... futex resumed>) = 0 [pid 5161] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5159] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5161] <... mmap resumed>) = 0x20000000 [pid 5160] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5158] <... mmap resumed>) = 0x20000000 [pid 5155] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5161] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... openat resumed>) = 5 [pid 5155] <... futex resumed>) = 0 [pid 5161] <... futex resumed>) = 1 [pid 5160] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] <... futex resumed>) = 0 [pid 5158] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5161] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5160] <... futex resumed>) = 0 [pid 5159] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... futex resumed>) = 1 [pid 5155] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5154] <... futex resumed>) = 0 [pid 5161] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5160] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5159] <... futex resumed>) = 0 [pid 5158] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5161] sendfile(4, 5, NULL, 2147483713 [pid 5160] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5159] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5158] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5155] <... futex resumed>) = 0 [pid 5154] <... futex resumed>) = 0 [pid 5160] open("./bus", O_RDWR [pid 5158] sendfile(4, 5, NULL, 2147483713 [pid 5154] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5155] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] <... open resumed>) = 6 [ 60.533830][ T5151] EXT4-fs (loop5): Total free blocks count 0 [ 60.541038][ T5151] EXT4-fs (loop5): Free/Dirty block details [ 60.550430][ T5151] EXT4-fs (loop5): free_blocks=2415919104 [ 60.577702][ T5161] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 60.595265][ T5151] EXT4-fs (loop5): dirty_blocks=16 [ 60.600432][ T5151] EXT4-fs (loop5): Block reservation details [ 60.609285][ T5161] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5160] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5155] <... futex resumed>) = 0 [pid 5172] <... write resumed>) = 1048576 [pid 5160] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5160] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5155] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 5160] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5155] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5160] sendfile(4, 5, NULL, 2147483713 [pid 5159] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5159] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5159] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2d46b2000 [pid 5159] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5159] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5173], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5173 [pid 5159] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5159] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5171] munmap(0x7fa2d45d3000, 1048576) = 0 [pid 5154] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5154] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5154] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2d46b2000 [pid 5154] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5154] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5174], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5174 [pid 5154] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5154] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5171] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5171] ioctl(4, LOOP_SET_FD, 3 [pid 5155] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5155] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5155] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 5174 attached ./strace-static-x86_64: Process 5173 attached [pid 5172] munmap(0x7fa2d45d3000, 1048576 [pid 5170] creat(0x200001c0, 0420 [pid 5155] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5151] <... sendfile resumed>) = 117 [pid 5174] set_robust_list(0x7fa2d46d29e0, 24 [pid 5173] set_robust_list(0x7fa2d46d29e0, 24 [pid 5172] <... munmap resumed>) = 0 [pid 5159] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5151] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5155] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5174] <... set_robust_list resumed>) = 0 [pid 5173] <... set_robust_list resumed>) = 0 [pid 5172] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5170] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5151] <... futex resumed>) = 0 [pid 5172] <... openat resumed>) = 4 [pid 5170] <... futex resumed>) = 0 [pid 5155] <... mprotect resumed>) = 0 [pid 5151] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 60.615306][ T5160] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 60.630723][ T5151] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 60.649201][ T5158] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 60.649828][ T5171] loop1: detected capacity change from 0 to 2048 [ 60.678502][ T5172] loop4: detected capacity change from 0 to 2048 [pid 5172] ioctl(4, LOOP_SET_FD, 3 [pid 5170] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5150] exit_group(0 [pid 5173] creat(0x200001c0, 0420) = -1 EISDIR (Is a directory) [pid 5161] <... sendfile resumed>) = 117 [pid 5173] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5161] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] <... ioctl resumed>) = 0 [pid 5161] <... futex resumed>) = 0 [pid 5172] close(3 [pid 5161] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] <... close resumed>) = 0 [pid 5172] mkdir("./bus", 0777 [pid 5159] exit_group(0 [pid 5173] <... futex resumed>) = ? [pid 5172] <... mkdir resumed>) = 0 [pid 5161] <... futex resumed>) = ? [pid 5159] <... exit_group resumed>) = ? [pid 5173] +++ exited with 0 +++ [pid 5172] mount("/dev/loop4", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5161] +++ exited with 0 +++ [pid 5159] +++ exited with 0 +++ [pid 5171] <... ioctl resumed>) = 0 [pid 5171] close(3) = 0 [pid 5171] mkdir("./bus", 0777) = 0 [pid 5171] mount("/dev/loop1", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5170] <... futex resumed>) = ? [pid 5150] <... exit_group resumed>) = ? [pid 5154] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5151] <... futex resumed>) = ? [pid 5151] +++ exited with 0 +++ ./strace-static-x86_64: Process 5175 attached [pid 5175] set_robust_list(0x7fa2d46d29e0, 24) = 0 [pid 5175] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5170] +++ exited with 0 +++ [pid 5155] <... clone resumed>, parent_tid=[5175], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5175 [pid 5150] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5159, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [ 60.680427][ T5158] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 60.685079][ T5161] EXT4-fs (loop0): This should not happen!! Data will be lost [ 60.685079][ T5161] [ 60.685103][ T5161] EXT4-fs (loop0): Total free blocks count 0 [ 60.685122][ T5161] EXT4-fs (loop0): Free/Dirty block details [ 60.685141][ T5161] EXT4-fs (loop0): free_blocks=2415919104 [ 60.685168][ T5161] EXT4-fs (loop0): dirty_blocks=16 [pid 5155] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] <... futex resumed>) = 0 [pid 5172] <... mount resumed>) = 0 [pid 5155] <... futex resumed>) = 1 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5150, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [ 60.685186][ T5161] EXT4-fs (loop0): Block reservation details [ 60.685202][ T5161] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 60.694633][ T5160] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 60.700254][ T5158] EXT4-fs (loop3): This should not happen!! Data will be lost [ 60.700254][ T5158] [ 60.716802][ T5160] EXT4-fs (loop2): This should not happen!! Data will be lost [ 60.716802][ T5160] [ 60.721920][ T5158] EXT4-fs (loop3): Total free blocks count 0 [pid 5172] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5155] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5172] <... openat resumed>) = 3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5172] chdir("./bus" [pid 5081] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5172] <... chdir resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5172] ioctl(4, LOOP_CLR_FD [pid 5081] fstat(3, [pid 5172] <... ioctl resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5172] close(4 [pid 5081] getdents64(3, [pid 5172] <... close resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5172] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5172] <... futex resumed>) = 1 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5172] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./2/binderfs") = 0 [pid 5081] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5171] <... mount resumed>) = 0 [pid 5171] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5171] chdir("./bus") = 0 [pid 5171] ioctl(4, LOOP_CLR_FD) = 0 [pid 5171] close(4) = 0 [pid 5171] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5164] <... futex resumed>) = 0 [pid 5171] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5164] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] <... open resumed>) = 4 [pid 5164] <... futex resumed>) = 0 [pid 5164] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5171] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5164] <... futex resumed>) = 0 [pid 5171] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5164] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] <... write resumed>) = 9 [pid 5164] <... futex resumed>) = 0 [ 60.731004][ T5172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 60.737268][ T5158] EXT4-fs (loop3): Free/Dirty block details [ 60.743316][ T5160] EXT4-fs (loop2): Total free blocks count 0 [ 60.755855][ T5158] EXT4-fs (loop3): free_blocks=2415919104 [ 60.765255][ T5160] EXT4-fs (loop2): Free/Dirty block details [ 60.779893][ T5158] EXT4-fs (loop3): dirty_blocks=16 [ 60.799150][ T5171] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [pid 5171] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5165] <... futex resumed>) = 0 [pid 5164] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5171] <... futex resumed>) = 0 [pid 5165] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5172] <... futex resumed>) = 0 [pid 5171] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5165] <... futex resumed>) = 1 [pid 5164] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... openat resumed>) = 3 [pid 5172] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5171] <... openat resumed>) = 5 [pid 5165] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5164] <... futex resumed>) = 0 [pid 5076] fstat(3, [pid 5171] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5172] <... open resumed>) = 4 [pid 5171] <... futex resumed>) = 0 [pid 5164] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5172] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5164] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] getdents64(3, [pid 5172] <... futex resumed>) = 1 [pid 5171] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5165] <... futex resumed>) = 0 [pid 5164] <... futex resumed>) = 0 [pid 5155] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5172] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5171] open("./bus", O_RDWR [pid 5165] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5172] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5171] <... open resumed>) = 6 [pid 5165] <... futex resumed>) = 0 [pid 5076] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5172] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5171] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5165] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5172] <... write resumed>) = 9 [pid 5171] <... futex resumed>) = 1 [pid 5164] <... futex resumed>) = 0 [pid 5076] lstat("./2/binderfs", [pid 5172] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5164] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5172] <... futex resumed>) = 1 [pid 5171] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5165] <... futex resumed>) = 0 [pid 5164] <... futex resumed>) = 0 [pid 5076] unlink("./2/binderfs" [pid 5172] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5171] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5165] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5172] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5171] <... mmap resumed>) = 0x20000000 [pid 5165] <... futex resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5172] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5171] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5165] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 60.803853][ T5158] EXT4-fs (loop3): Block reservation details [ 60.839184][ T5118] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5172] <... openat resumed>) = 5 [pid 5171] <... futex resumed>) = 1 [pid 5164] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5172] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5164] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5164] <... futex resumed>) = 0 [pid 5171] sendfile(4, 5, NULL, 2147483713 [pid 5164] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5172] <... futex resumed>) = 1 [pid 5165] <... futex resumed>) = 0 [pid 5172] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5165] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5172] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5165] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./2/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./2/bus") = 0 [pid 5165] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] getdents64(3, [pid 5174] creat(0x200001c0, 0420 [pid 5172] open("./bus", O_RDWR [pid 5158] <... sendfile resumed>) = 117 [pid 5081] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5174] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5081] close(3 [pid 5174] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... close resumed>) = 0 [pid 5174] <... futex resumed>) = 0 [ 60.897195][ T9] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 60.909286][ T5158] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 60.918024][ T5160] EXT4-fs (loop2): free_blocks=2415919104 [ 60.929019][ T5171] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5081] rmdir("./2" [pid 5174] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] <... open resumed>) = 6 [pid 5158] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... rmdir resumed>) = 0 [pid 5081] mkdir("./3", 0777) = 0 [pid 5154] exit_group(0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5174] <... futex resumed>) = ? [pid 5154] <... exit_group resumed>) = ? [pid 5081] <... openat resumed>) = 3 [pid 5174] +++ exited with 0 +++ [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5172] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... futex resumed>) = ? [pid 5081] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5180 [pid 5164] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5164] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5164] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2d46b2000 ./strace-static-x86_64: Process 5180 attached [pid 5164] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5180] set_robust_list(0x555555adb5e0, 24 [pid 5164] <... mprotect resumed>) = 0 [pid 5180] <... set_robust_list resumed>) = 0 [pid 5172] <... futex resumed>) = 1 [pid 5165] <... futex resumed>) = 0 [pid 5164] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5180] chdir("./3" [pid 5172] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5165] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] +++ exited with 0 +++ [pid 5154] +++ exited with 0 +++ [pid 5180] <... chdir resumed>) = 0 [pid 5165] <... futex resumed>) = 0 [pid 5164] <... clone resumed>, parent_tid=[5181], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5181 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5154, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5180] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5165] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5164] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] restart_syscall(<... resuming interrupted clone ...> [pid 5180] <... prctl resumed>) = 0 [pid 5164] <... futex resumed>) = 0 [pid 5079] <... restart_syscall resumed>) = 0 [pid 5180] setpgid(0, 0 [pid 5164] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5180] <... setpgid resumed>) = 0 [pid 5175] creat(0x200001c0, 0420 [pid 5172] <... mmap resumed>) = 0x20000000 [pid 5160] <... sendfile resumed>) = 117 [pid 5076] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5181 attached [pid 5180] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5175] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5172] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5181] set_robust_list(0x7fa2d46d29e0, 24 [pid 5180] <... openat resumed>) = 3 [pid 5175] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] <... futex resumed>) = 1 [pid 5165] <... futex resumed>) = 0 [pid 5160] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5181] <... set_robust_list resumed>) = 0 [pid 5180] write(3, "1000", 4 [pid 5175] <... futex resumed>) = 0 [pid 5172] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5165] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... futex resumed>) = 0 [pid 5155] exit_group(0 [pid 5079] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5180] <... write resumed>) = 4 [pid 5172] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5165] <... futex resumed>) = 0 [pid 5155] <... exit_group resumed>) = ? [pid 5079] <... openat resumed>) = 3 [pid 5076] lstat("./2/bus", [pid 5180] close(3 [pid 5175] +++ exited with 0 +++ [pid 5172] sendfile(4, 5, NULL, 2147483713 [pid 5165] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] +++ exited with 0 +++ [pid 5155] +++ exited with 0 +++ [pid 5079] fstat(3, [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5180] <... close resumed>) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5155, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5076] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5180] symlink("/dev/binderfs", "./binderfs" [pid 5079] getdents64(3, [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5180] <... symlink resumed>) = 0 [ 60.946262][ T5160] EXT4-fs (loop2): dirty_blocks=16 [ 60.956162][ T5160] EXT4-fs (loop2): Block reservation details [ 60.962420][ T5171] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 60.985234][ T5160] EXT4-fs (loop2): i_reserved_data_blocks=1 [pid 5079] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5078] <... restart_syscall resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5180] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 4 [pid 5180] <... futex resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] fstat(4, [pid 5180] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] lstat("./2/binderfs", [pid 5078] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5180] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(4, [pid 5180] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5079] unlink("./2/binderfs" [pid 5078] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5180] <... mprotect resumed>) = 0 [pid 5079] <... unlink resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5076] getdents64(4, [pid 5180] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5079] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] fstat(3, [pid 5076] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] close(4 [pid 5180] <... clone resumed>, parent_tid=[5182], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5182 [pid 5078] getdents64(3, [pid 5076] <... close resumed>) = 0 [pid 5180] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5076] rmdir("./2/bus" [pid 5180] <... futex resumed>) = 0 [pid 5078] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... rmdir resumed>) = 0 [pid 5180] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(3, [pid 5078] lstat("./2/binderfs", [pid 5076] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] close(3 [ 61.012934][ T5171] EXT4-fs (loop1): This should not happen!! Data will be lost [ 61.012934][ T5171] [ 61.029697][ T5172] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 61.046199][ T33] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5078] unlink("./2/binderfs" [pid 5076] <... close resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5076] rmdir("./2"./strace-static-x86_64: Process 5182 attached [pid 5164] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5078] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... rmdir resumed>) = 0 [pid 5182] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5076] mkdir("./3", 0777 [pid 5182] <... set_robust_list resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5182] memfd_create("syzkaller", 0 [pid 5165] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5182] <... memfd_create resumed>) = 3 [pid 5076] <... openat resumed>) = 3 [pid 5182] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5182] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5165] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555adb5d0) = 5183 [pid 5165] <... futex resumed>) = 0 [pid 5079] <... umount2 resumed>) = 0 [pid 5079] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./2/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5182] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5079] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5183 attached [pid 5165] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] getdents64(4, 0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5079] getdents64(4, 0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5079] close(4 [pid 5165] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5079] <... close resumed>) = 0 [pid 5183] set_robust_list(0x555555adb5e0, 24 [ 61.046581][ T9] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 61.073912][ T5171] EXT4-fs (loop1): Total free blocks count 0 [ 61.080054][ T5172] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5165] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5079] rmdir("./2/bus" [pid 5183] <... set_robust_list resumed>) = 0 [pid 5165] <... mprotect resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5183] chdir("./3" [pid 5165] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5079] getdents64(3, [pid 5183] <... chdir resumed>) = 0 [pid 5079] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5183] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5165] <... clone resumed>, parent_tid=[5184], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5184 [pid 5079] close(3 [pid 5183] <... prctl resumed>) = 0 [pid 5165] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... close resumed>) = 0 [pid 5079] rmdir("./2") = 0 [pid 5183] setpgid(0, 0 [pid 5165] <... futex resumed>) = 0 [pid 5079] mkdir("./3", 0777./strace-static-x86_64: Process 5184 attached [pid 5183] <... setpgid resumed>) = 0 [pid 5165] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... mkdir resumed>) = 0 [pid 5184] set_robust_list(0x7fa2d46d29e0, 24 [pid 5079] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5184] <... set_robust_list resumed>) = 0 [pid 5182] <... write resumed>) = 1048576 [pid 5079] <... openat resumed>) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5183] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5182] munmap(0x7fa2d45d3000, 1048576 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5183] <... openat resumed>) = 3 [pid 5182] <... munmap resumed>) = 0 [pid 5079] close(3 [pid 5182] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5079] <... close resumed>) = 0 [pid 5182] <... openat resumed>) = 4 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5182] ioctl(4, LOOP_SET_FD, 3 [pid 5183] write(3, "1000", 4 [pid 5079] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5185 ./strace-static-x86_64: Process 5185 attached [ 61.120566][ T5171] EXT4-fs (loop1): Free/Dirty block details [ 61.135951][ T5171] EXT4-fs (loop1): free_blocks=2415919104 [ 61.144568][ T5171] EXT4-fs (loop1): dirty_blocks=16 [ 61.152468][ T5172] EXT4-fs (loop4): This should not happen!! Data will be lost [ 61.152468][ T5172] [ 61.157698][ T5182] loop5: detected capacity change from 0 to 2048 [pid 5183] <... write resumed>) = 4 [pid 5182] <... ioctl resumed>) = 0 [pid 5185] set_robust_list(0x555555adb5e0, 24) = 0 [pid 5185] chdir("./3") = 0 [pid 5185] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5185] setpgid(0, 0) = 0 [pid 5182] close(3 [pid 5185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5182] <... close resumed>) = 0 [pid 5185] <... openat resumed>) = 3 [pid 5182] mkdir("./bus", 0777 [pid 5185] write(3, "1000", 4 [pid 5182] <... mkdir resumed>) = 0 [pid 5185] <... write resumed>) = 4 [pid 5182] mount("/dev/loop5", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5185] close(3) = 0 [pid 5185] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5185] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5185] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2dc9d3000 [pid 5185] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5185] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5186], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5186 [pid 5185] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5185] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5181] creat(0x200001c0, 0420) = -1 EISDIR (Is a directory) [pid 5181] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5183] close(3) = 0 [pid 5181] <... futex resumed>) = 0 [pid 5165] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 5186 attached [pid 5183] symlink("/dev/binderfs", "./binderfs" [pid 5186] set_robust_list(0x7fa2dc9f39e0, 24) = 0 [pid 5184] creat(0x200001c0, 0420 [pid 5183] <... symlink resumed>) = 0 [pid 5181] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] <... sendfile resumed>) = 117 [pid 5186] memfd_create("syzkaller", 0 [pid 5184] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5183] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5186] <... memfd_create resumed>) = 3 [pid 5184] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5183] <... futex resumed>) = 0 [pid 5186] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5184] <... futex resumed>) = 0 [pid 5183] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5186] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5184] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5183] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5172] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5165] exit_group(0 [pid 5171] <... sendfile resumed>) = 117 [pid 5171] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5078] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5171] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5164] exit_group(0 [pid 5186] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5183] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5184] <... futex resumed>) = ? [pid 5181] <... futex resumed>) = ? [pid 5172] <... futex resumed>) = ? [pid 5171] <... futex resumed>) = ? [pid 5165] <... exit_group resumed>) = ? [pid 5164] <... exit_group resumed>) = ? [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5184] +++ exited with 0 +++ [pid 5183] <... mprotect resumed>) = 0 [pid 5181] +++ exited with 0 +++ [pid 5172] +++ exited with 0 +++ [pid 5171] +++ exited with 0 +++ [pid 5165] +++ exited with 0 +++ [pid 5164] +++ exited with 0 +++ [pid 5078] lstat("./2/bus", [pid 5183] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5165, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 61.174164][ T5171] EXT4-fs (loop1): Block reservation details [ 61.181140][ T5171] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 61.187317][ T5172] EXT4-fs (loop4): Total free blocks count 0 [ 61.187341][ T5172] EXT4-fs (loop4): Free/Dirty block details [ 61.187360][ T5172] EXT4-fs (loop4): free_blocks=2415919104 [ 61.187380][ T5172] EXT4-fs (loop4): dirty_blocks=16 [ 61.187398][ T5172] EXT4-fs (loop4): Block reservation details [ 61.187413][ T5172] EXT4-fs (loop4): i_reserved_data_blocks=1 [pid 5078] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5164, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5183] <... clone resumed>, parent_tid=[5189], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5189 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5183] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 5189 attached [pid 5183] <... futex resumed>) = 0 [pid 5078] <... openat resumed>) = 4 [pid 5183] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] fstat(4, [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] getdents64(4, [pid 5080] <... openat resumed>) = 3 [pid 5078] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5080] fstat(3, [pid 5078] getdents64(4, [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5080] getdents64(3, [pid 5078] close(4 [pid 5080] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5078] <... close resumed>) = 0 [pid 5080] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] rmdir("./2/bus" [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... rmdir resumed>) = 0 [pid 5080] lstat("./2/binderfs", [pid 5078] getdents64(3, [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5080] unlink("./2/binderfs" [pid 5078] close(3 [pid 5189] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5080] <... unlink resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] rmdir("./2" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5189] <... set_robust_list resumed>) = 0 [pid 5186] <... write resumed>) = 1048576 [pid 5182] <... mount resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5078] mkdir("./3", 0777) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5078] close(3 [pid 5189] memfd_create("syzkaller", 0 [pid 5186] munmap(0x7fa2d45d3000, 1048576 [pid 5182] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5078] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5189] <... memfd_create resumed>) = 3 [pid 5186] <... munmap resumed>) = 0 [pid 5182] <... openat resumed>) = 3 [pid 5080] <... umount2 resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5190 [pid 5080] lstat("./2/bus", ./strace-static-x86_64: Process 5190 attached [pid 5189] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5186] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5182] chdir("./bus" [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5190] set_robust_list(0x555555adb5e0, 24 [pid 5189] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5186] <... openat resumed>) = 4 [pid 5182] <... chdir resumed>) = 0 [pid 5080] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] fstat(3, [pid 5190] <... set_robust_list resumed>) = 0 [pid 5186] ioctl(4, LOOP_SET_FD, 3 [pid 5182] ioctl(4, LOOP_CLR_FD [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5190] chdir("./3" [pid 5189] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [ 61.270429][ T5182] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 61.289187][ T5116] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5186] <... ioctl resumed>) = 0 [pid 5182] <... ioctl resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5190] <... chdir resumed>) = 0 [pid 5186] close(3 [pid 5182] close(4 [pid 5080] <... openat resumed>) = 4 [pid 5077] getdents64(3, [pid 5190] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5189] <... write resumed>) = 1048576 [pid 5186] <... close resumed>) = 0 [pid 5182] <... close resumed>) = 0 [pid 5080] fstat(4, [pid 5186] mkdir("./bus", 0777 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5190] <... prctl resumed>) = 0 [pid 5186] <... mkdir resumed>) = 0 [pid 5182] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] getdents64(4, [pid 5189] munmap(0x7fa2d45d3000, 1048576 [pid 5077] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5190] setpgid(0, 0 [pid 5186] mount("/dev/loop3", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5182] <... futex resumed>) = 1 [pid 5180] <... futex resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5077] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5190] <... setpgid resumed>) = 0 [pid 5189] <... munmap resumed>) = 0 [pid 5182] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5180] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] getdents64(4, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5190] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5189] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5180] <... futex resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5077] lstat("./2/binderfs", [pid 5190] <... openat resumed>) = 3 [pid 5189] <... openat resumed>) = 4 [pid 5182] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5180] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] close(4 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5190] write(3, "1000", 4 [pid 5189] ioctl(4, LOOP_SET_FD, 3 [pid 5182] <... open resumed>) = 4 [pid 5080] <... close resumed>) = 0 [pid 5182] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] rmdir("./2/bus" [pid 5077] unlink("./2/binderfs" [pid 5190] <... write resumed>) = 4 [pid 5182] <... futex resumed>) = 1 [pid 5180] <... futex resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5182] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5180] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] getdents64(3, [pid 5182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5180] <... futex resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5182] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5180] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] close(3 [pid 5182] <... write resumed>) = 9 [pid 5080] <... close resumed>) = 0 [pid 5182] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] rmdir("./2" [pid 5182] <... futex resumed>) = 1 [pid 5180] <... futex resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5182] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5180] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] mkdir("./3", 0777 [pid 5182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5180] <... futex resumed>) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 5190] close(3 [pid 5182] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5180] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5077] <... unlink resumed>) = 0 [pid 5190] <... close resumed>) = 0 [pid 5182] <... openat resumed>) = 5 [pid 5080] <... openat resumed>) = 3 [ 61.333590][ T5186] loop3: detected capacity change from 0 to 2048 [ 61.366239][ T5186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [pid 5077] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5190] symlink("/dev/binderfs", "./binderfs" [pid 5189] <... ioctl resumed>) = 0 [pid 5182] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5182] <... futex resumed>) = 1 [pid 5180] <... futex resumed>) = 0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5182] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5180] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] close(3 [pid 5190] <... symlink resumed>) = 0 [pid 5182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5180] <... futex resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5190] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5182] open("./bus", O_RDWR [pid 5180] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5190] <... futex resumed>) = 0 [pid 5189] close(3 [pid 5182] <... open resumed>) = 6 [pid 5182] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5193 [pid 5182] <... futex resumed>) = 1 [pid 5180] <... futex resumed>) = 0 [pid 5182] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5180] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5180] <... futex resumed>) = 0 [pid 5182] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5180] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5182] <... mmap resumed>) = 0x20000000 [pid 5182] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5180] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5193 attached [pid 5186] <... mount resumed>) = 0 [pid 5182] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5180] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] set_robust_list(0x555555adb5e0, 24 [pid 5186] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5180] <... futex resumed>) = 0 [pid 5193] <... set_robust_list resumed>) = 0 [pid 5186] <... openat resumed>) = 3 [pid 5182] sendfile(4, 5, NULL, 2147483713 [pid 5180] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5193] chdir("./3" [pid 5190] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5189] <... close resumed>) = 0 [pid 5186] chdir("./bus" [pid 5193] <... chdir resumed>) = 0 [pid 5186] <... chdir resumed>) = 0 [pid 5193] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5190] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5189] mkdir("./bus", 0777 [pid 5186] ioctl(4, LOOP_CLR_FD [pid 5193] <... prctl resumed>) = 0 [pid 5186] <... ioctl resumed>) = 0 [pid 5193] setpgid(0, 0 [pid 5186] close(4 [pid 5193] <... setpgid resumed>) = 0 [pid 5190] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5189] <... mkdir resumed>) = 0 [pid 5186] <... close resumed>) = 0 [pid 5193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5186] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] <... openat resumed>) = 3 [pid 5190] <... mprotect resumed>) = 0 [pid 5189] mount("/dev/loop0", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5186] <... futex resumed>) = 1 [pid 5185] <... futex resumed>) = 0 [pid 5193] write(3, "1000", 4 [pid 5190] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5186] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5185] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] <... write resumed>) = 4 [pid 5186] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5185] <... futex resumed>) = 0 [pid 5193] close(3 [pid 5190] <... clone resumed>, parent_tid=[5194], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5194 [pid 5186] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5185] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5193] <... close resumed>) = 0 [pid 5190] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5186] <... open resumed>) = 4 [pid 5193] symlink("/dev/binderfs", "./binderfs" [pid 5190] <... futex resumed>) = 0 [pid 5186] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] <... symlink resumed>) = 0 [pid 5190] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5186] <... futex resumed>) = 1 [pid 5185] <... futex resumed>) = 0 [pid 5193] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5186] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5185] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] <... futex resumed>) = 0 [pid 5186] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5185] <... futex resumed>) = 0 [pid 5193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5186] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5185] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5193] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5186] <... write resumed>) = 9 [pid 5193] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5186] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] <... mprotect resumed>) = 0 [pid 5186] <... futex resumed>) = 1 [pid 5185] <... futex resumed>) = 0 [ 61.380991][ T5189] loop0: detected capacity change from 0 to 2048 [ 61.397215][ T5116] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 61.410365][ T5182] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5193] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5186] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5185] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5186] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5185] <... futex resumed>) = 0 [pid 5193] <... clone resumed>, parent_tid=[5195], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5195 [pid 5186] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5185] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5193] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5186] <... openat resumed>) = 5 [pid 5193] <... futex resumed>) = 0 [pid 5186] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5186] <... futex resumed>) = 1 [pid 5185] <... futex resumed>) = 0 [pid 5186] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5185] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5186] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5185] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5194 attached [pid 5186] open("./bus", O_RDWR [pid 5185] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5195 attached [pid 5194] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5186] <... open resumed>) = 6 [pid 5195] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5194] <... set_robust_list resumed>) = 0 [pid 5186] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... set_robust_list resumed>) = 0 [pid 5186] <... futex resumed>) = 1 [pid 5185] <... futex resumed>) = 0 [pid 5195] memfd_create("syzkaller", 0 [pid 5194] memfd_create("syzkaller", 0 [pid 5186] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5185] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... memfd_create resumed>) = 3 [pid 5194] <... memfd_create resumed>) = 3 [pid 5186] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5185] <... futex resumed>) = 0 [pid 5195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5194] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5186] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5185] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5195] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5194] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5186] <... mmap resumed>) = 0x20000000 [pid 5195] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5186] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5180] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5186] <... futex resumed>) = 1 [pid 5185] <... futex resumed>) = 0 [pid 5180] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5186] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5185] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5180] <... futex resumed>) = 0 [pid 5186] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5185] <... futex resumed>) = 0 [pid 5180] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5186] sendfile(4, 5, NULL, 2147483713 [pid 5185] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5180] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5180] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5180] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5198], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5198 [pid 5180] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 61.451254][ T5182] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5180] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5198 attached [pid 5198] set_robust_list(0x7fa2d46d29e0, 24) = 0 [pid 5195] <... write resumed>) = 1048576 [pid 5195] munmap(0x7fa2d45d3000, 1048576) = 0 [pid 5195] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5195] ioctl(4, LOOP_SET_FD, 3 [pid 5194] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5185] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5180] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5185] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5185] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2d46b2000 [pid 5185] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE) = 0 [ 61.495798][ T5186] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 61.505016][ T5182] EXT4-fs (loop5): This should not happen!! Data will be lost [ 61.505016][ T5182] [ 61.525695][ T5189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 61.536026][ T5195] loop4: detected capacity change from 0 to 2048 [pid 5185] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5199], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5199 [pid 5194] <... write resumed>) = 1048576 [pid 5185] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... umount2 resumed>) = 0 [pid 5185] <... futex resumed>) = 0 [pid 5185] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5194] munmap(0x7fa2d45d3000, 1048576) = 0 [pid 5194] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5189] <... mount resumed>) = 0 [pid 5194] <... openat resumed>) = 4 [pid 5189] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5194] ioctl(4, LOOP_SET_FD, 3 [pid 5189] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5199 attached [pid 5194] <... ioctl resumed>) = 0 [pid 5189] chdir("./bus" [pid 5077] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5199] set_robust_list(0x7fa2d46d29e0, 24 [pid 5194] close(3 [pid 5189] <... chdir resumed>) = 0 [pid 5199] <... set_robust_list resumed>) = 0 [pid 5198] creat(0x200001c0, 0420 [pid 5195] <... ioctl resumed>) = 0 [pid 5194] <... close resumed>) = 0 [pid 5189] ioctl(4, LOOP_CLR_FD [pid 5182] <... sendfile resumed>) = 117 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5198] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5195] close(3 [pid 5194] mkdir("./bus", 0777 [pid 5189] <... ioctl resumed>) = 0 [ 61.566150][ T5182] EXT4-fs (loop5): Total free blocks count 0 [ 61.572187][ T5182] EXT4-fs (loop5): Free/Dirty block details [ 61.578876][ T5182] EXT4-fs (loop5): free_blocks=2415919104 [ 61.589455][ T5182] EXT4-fs (loop5): dirty_blocks=16 [ 61.591032][ T5194] loop2: detected capacity change from 0 to 2048 [ 61.594967][ T5182] EXT4-fs (loop5): Block reservation details [ 61.607395][ T5182] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 5077] lstat("./2/bus", [pid 5198] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... close resumed>) = 0 [pid 5194] <... mkdir resumed>) = 0 [pid 5189] close(4 [pid 5182] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5180] exit_group(0 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5198] <... futex resumed>) = ? [pid 5195] mkdir("./bus", 0777 [pid 5194] mount("/dev/loop2", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5189] <... close resumed>) = 0 [pid 5185] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5180] <... exit_group resumed>) = ? [pid 5077] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5198] +++ exited with 0 +++ [pid 5195] <... mkdir resumed>) = 0 [pid 5189] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5182] <... futex resumed>) = ? [ 61.613694][ T5186] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 61.626014][ T5186] EXT4-fs (loop3): This should not happen!! Data will be lost [ 61.626014][ T5186] [ 61.635737][ T5186] EXT4-fs (loop3): Total free blocks count 0 [ 61.641808][ T5186] EXT4-fs (loop3): Free/Dirty block details [ 61.652786][ T5186] EXT4-fs (loop3): free_blocks=2415919104 [ 61.658830][ T5186] EXT4-fs (loop3): dirty_blocks=16 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5195] mount("/dev/loop4", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5189] <... futex resumed>) = 1 [pid 5183] <... futex resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5199] creat(0x200001c0, 0420 [pid 5189] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5186] <... sendfile resumed>) = 117 [pid 5183] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5182] +++ exited with 0 +++ [pid 5180] +++ exited with 0 +++ [pid 5077] <... openat resumed>) = 4 [pid 5199] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5189] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5186] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5183] <... futex resumed>) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5180, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5199] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5189] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5186] <... futex resumed>) = 0 [pid 5185] exit_group(0 [pid 5183] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] fstat(4, [pid 5199] <... futex resumed>) = 0 [pid 5186] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 5185] <... exit_group resumed>) = ? [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5186] +++ exited with 0 +++ [pid 5189] <... open resumed>) = 4 [pid 5189] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5183] <... futex resumed>) = 0 [pid 5183] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5183] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5189] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5199] +++ exited with 0 +++ [pid 5185] +++ exited with 0 +++ [pid 5077] getdents64(4, [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5185, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5077] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5189] <... write resumed>) = 9 [pid 5077] getdents64(4, [pid 5079] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5189] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] close(4 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... close resumed>) = 0 [pid 5189] <... futex resumed>) = 1 [pid 5183] <... futex resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5189] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5183] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... openat resumed>) = 3 [pid 5079] fstat(3, [pid 5077] rmdir("./2/bus" [pid 5189] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5183] <... futex resumed>) = 0 [pid 5081] fstat(3, [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5189] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5183] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5189] <... openat resumed>) = 5 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(3, [pid 5077] <... rmdir resumed>) = 0 [pid 5189] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5183] <... futex resumed>) = 0 [pid 5189] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5183] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5189] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5183] <... futex resumed>) = 0 [pid 5189] open("./bus", O_RDWR [pid 5183] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5194] <... mount resumed>) = 0 [pid 5189] <... open resumed>) = 6 [pid 5194] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5189] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] <... openat resumed>) = 3 [pid 5189] <... futex resumed>) = 1 [pid 5183] <... futex resumed>) = 0 [pid 5194] chdir("./bus" [pid 5189] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5183] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] <... chdir resumed>) = 0 [pid 5189] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5183] <... futex resumed>) = 0 [pid 5194] ioctl(4, LOOP_CLR_FD [pid 5189] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5183] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5194] <... ioctl resumed>) = 0 [pid 5189] <... mmap resumed>) = 0x20000000 [pid 5194] close(4 [pid 5189] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... mount resumed>) = 0 [pid 5189] <... futex resumed>) = 1 [pid 5183] <... futex resumed>) = 0 [pid 5081] getdents64(3, [pid 5079] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5077] getdents64(3, [pid 5195] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [ 61.664208][ T5186] EXT4-fs (loop3): Block reservation details [ 61.670256][ T5186] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 61.684055][ T5194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [pid 5194] <... close resumed>) = 0 [pid 5189] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5183] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5079] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5195] <... openat resumed>) = 3 [pid 5194] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5189] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5183] <... futex resumed>) = 0 [pid 5081] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] close(3 [pid 5195] chdir("./bus" [pid 5194] <... futex resumed>) = 1 [pid 5190] <... futex resumed>) = 0 [pid 5189] sendfile(4, 5, NULL, 2147483713 [pid 5183] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./3/binderfs", [pid 5077] <... close resumed>) = 0 [pid 5195] <... chdir resumed>) = 0 [pid 5194] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5190] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] lstat("./3/binderfs", [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] rmdir("./2" [pid 5194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5190] <... futex resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] unlink("./3/binderfs" [pid 5194] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5190] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] unlink("./3/binderfs" [pid 5079] <... unlink resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5195] ioctl(4, LOOP_CLR_FD) = 0 [ 61.706303][ T5195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [pid 5195] close(4) = 0 [pid 5195] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5193] <... futex resumed>) = 0 [pid 5195] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5193] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5193] <... futex resumed>) = 0 [pid 5195] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5193] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... unlink resumed>) = 0 [pid 5079] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] mkdir("./3", 0777 [pid 5194] <... open resumed>) = 4 [pid 5081] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5195] <... open resumed>) = 4 [pid 5077] <... mkdir resumed>) = 0 [pid 5195] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5195] <... futex resumed>) = 1 [pid 5193] <... futex resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5195] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5193] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5193] <... futex resumed>) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5195] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5193] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] close(3) = 0 [pid 5194] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5195] <... write resumed>) = 9 [pid 5194] <... futex resumed>) = 1 [pid 5190] <... futex resumed>) = 0 [pid 5195] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5190] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5204 [pid 5195] <... futex resumed>) = 1 [pid 5193] <... futex resumed>) = 0 [pid 5190] <... futex resumed>) = 0 [pid 5183] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5183] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5183] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2d46b2000 [pid 5183] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5183] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5205], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5205 ./strace-static-x86_64: Process 5204 attached [pid 5183] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5204] set_robust_list(0x555555adb5e0, 24 [pid 5183] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5204] <... set_robust_list resumed>) = 0 [pid 5204] chdir("./3") = 0 [pid 5204] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5204] setpgid(0, 0./strace-static-x86_64: Process 5205 attached ) = 0 [pid 5205] set_robust_list(0x7fa2d46d29e0, 24 [pid 5204] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5205] <... set_robust_list resumed>) = 0 [pid 5204] <... openat resumed>) = 3 [pid 5204] write(3, "1000", 4) = 4 [pid 5204] close(3) = 0 [pid 5204] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5204] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 61.739965][ T5189] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 61.757996][ T5189] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 61.775327][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5204] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2dc9d3000 [pid 5195] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5194] <... write resumed>) = 9 [pid 5193] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5204] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5195] <... openat resumed>) = 5 [pid 5194] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] <... futex resumed>) = 0 [pid 5204] <... mprotect resumed>) = 0 [pid 5195] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] <... futex resumed>) = 1 [pid 5193] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5190] <... futex resumed>) = 0 [pid 5204] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5195] <... futex resumed>) = 0 [pid 5194] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5190] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5204] <... clone resumed>, parent_tid=[5206], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5206 [pid 5204] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5204] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5195] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5193] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... futex resumed>) = 0 [pid 5195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5194] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5193] <... futex resumed>) = 0 [pid 5190] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5206 attached [pid 5193] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5206] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5195] open("./bus", O_RDWR [pid 5206] <... set_robust_list resumed>) = 0 [pid 5195] <... open resumed>) = 6 [pid 5194] <... openat resumed>) = 5 [pid 5206] memfd_create("syzkaller", 0 [pid 5195] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] <... memfd_create resumed>) = 3 [pid 5195] <... futex resumed>) = 1 [pid 5194] <... futex resumed>) = 1 [pid 5193] <... futex resumed>) = 0 [pid 5190] <... futex resumed>) = 0 [pid 5206] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5195] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5194] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5193] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5183] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... umount2 resumed>) = 0 [ 61.787829][ T5116] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5206] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5193] <... futex resumed>) = 0 [pid 5190] <... futex resumed>) = 0 [pid 5195] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5194] open("./bus", O_RDWR [pid 5193] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = 0 [pid 5079] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./3/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5190] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5195] <... mmap resumed>) = 0x20000000 [pid 5194] <... open resumed>) = 6 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] fstat(4, [pid 5195] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] lstat("./3/bus", [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5195] <... futex resumed>) = 1 [pid 5194] <... futex resumed>) = 1 [pid 5193] <... futex resumed>) = 0 [pid 5190] <... futex resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(4, [pid 5195] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5194] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5193] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5079] getdents64(4, 0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5079] close(4) = 0 [pid 5195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5193] <... futex resumed>) = 0 [pid 5190] <... futex resumed>) = 0 [ 61.843792][ T5189] EXT4-fs (loop0): This should not happen!! Data will be lost [ 61.843792][ T5189] [ 61.872467][ T5189] EXT4-fs (loop0): Total free blocks count 0 [ 61.881882][ T5189] EXT4-fs (loop0): Free/Dirty block details [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] rmdir("./3/bus" [pid 5195] sendfile(4, 5, NULL, 2147483713 [pid 5194] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5193] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5190] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... rmdir resumed>) = 0 [pid 5206] <... write resumed>) = 1048576 [pid 5194] <... mmap resumed>) = 0x20000000 [pid 5081] <... openat resumed>) = 4 [pid 5079] getdents64(3, [pid 5194] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5079] close(3) = 0 [pid 5079] rmdir("./3") = 0 [pid 5079] mkdir("./4", 0777) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5079] close(3 [pid 5194] <... futex resumed>) = 1 [pid 5190] <... futex resumed>) = 0 [pid 5081] fstat(4, [pid 5079] <... close resumed>) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5206] munmap(0x7fa2d45d3000, 1048576 [pid 5194] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5190] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 61.891629][ T5189] EXT4-fs (loop0): free_blocks=2415919104 [ 61.898526][ T5189] EXT4-fs (loop0): dirty_blocks=16 [ 61.904351][ T5189] EXT4-fs (loop0): Block reservation details [ 61.920065][ T5195] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5206] <... munmap resumed>) = 0 [pid 5205] creat(0x200001c0, 0420 [pid 5194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5190] <... futex resumed>) = 0 [pid 5189] <... sendfile resumed>) = 117 [pid 5081] getdents64(4, [pid 5079] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5207 ./strace-static-x86_64: Process 5207 attached [pid 5206] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5205] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5194] sendfile(4, 5, NULL, 2147483713 [pid 5190] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5189] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5207] set_robust_list(0x555555adb5e0, 24 [pid 5206] <... openat resumed>) = 4 [pid 5205] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5183] exit_group(0 [pid 5081] getdents64(4, [pid 5207] <... set_robust_list resumed>) = 0 [pid 5206] ioctl(4, LOOP_SET_FD, 3 [pid 5205] <... futex resumed>) = ? [pid 5189] <... futex resumed>) = ? [pid 5183] <... exit_group resumed>) = ? [pid 5081] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5207] chdir("./4" [pid 5205] +++ exited with 0 +++ [pid 5193] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5207] <... chdir resumed>) = 0 [pid 5207] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5207] setpgid(0, 0) = 0 [pid 5207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5207] write(3, "1000", 4) = 4 [pid 5207] close(3) = 0 [pid 5207] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5207] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5207] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5206] <... ioctl resumed>) = 0 [pid 5193] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5206] close(3 [pid 5193] <... futex resumed>) = 0 [pid 5081] close(4 [pid 5207] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5206] <... close resumed>) = 0 [pid 5193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5189] +++ exited with 0 +++ [pid 5183] +++ exited with 0 +++ [pid 5081] <... close resumed>) = 0 [pid 5207] <... mprotect resumed>) = 0 [pid 5206] mkdir("./bus", 0777 [pid 5193] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5081] rmdir("./3/bus" [pid 5207] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5206] <... mkdir resumed>) = 0 [pid 5193] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... rmdir resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5183, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5206] mount("/dev/loop1", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5207] <... clone resumed>, parent_tid=[5208], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5208 [pid 5207] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5207] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5208 attached [pid 5208] set_robust_list(0x7fa2dc9f39e0, 24) = 0 [pid 5208] memfd_create("syzkaller", 0) = 3 [ 61.943205][ T5189] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 61.961996][ T5206] loop1: detected capacity change from 0 to 2048 [ 61.964383][ T5194] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2d45d3000 [pid 5193] <... mprotect resumed>) = 0 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5208] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5193] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5190] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] getdents64(3, [pid 5076] <... restart_syscall resumed>) = 0 [pid 5190] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5193] <... clone resumed>, parent_tid=[5210], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5210 [pid 5190] <... futex resumed>) = 0 [pid 5081] close(3 [pid 5193] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... close resumed>) = 0 ./strace-static-x86_64: Process 5210 attached [pid 5193] <... futex resumed>) = 0 [pid 5210] set_robust_list(0x7fa2d46d29e0, 24 [pid 5190] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5193] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] rmdir("./3" [pid 5076] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5210] <... set_robust_list resumed>) = 0 [pid 5190] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... rmdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5190] <... mprotect resumed>) = 0 [pid 5081] mkdir("./4", 0777 [pid 5076] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5190] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5076] <... openat resumed>) = 3 [pid 5076] fstat(3, [pid 5081] <... mkdir resumed>) = 0 [pid 5190] <... clone resumed>, parent_tid=[5212], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5212 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5190] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5212 attached [pid 5190] <... futex resumed>) = 0 [ 61.991314][ T5195] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 62.021620][ T5195] EXT4-fs (loop4): This should not happen!! Data will be lost [ 62.021620][ T5195] [pid 5076] getdents64(3, [pid 5208] <... write resumed>) = 1048576 [pid 5208] munmap(0x7fa2d45d3000, 1048576) = 0 [pid 5208] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5208] ioctl(4, LOOP_SET_FD, 3 [pid 5212] set_robust_list(0x7fa2d46d29e0, 24 [pid 5208] <... ioctl resumed>) = 0 [pid 5193] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5190] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5076] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5206] <... mount resumed>) = 0 [pid 5212] <... set_robust_list resumed>) = 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5208] close(3) = 0 [pid 5208] mkdir("./bus", 0777) = 0 [pid 5206] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5081] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... close resumed>) = 0 [pid 5076] lstat("./3/binderfs", [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5206] <... openat resumed>) = 3 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5208] mount("/dev/loop3", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5206] chdir("./bus" [pid 5081] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5213 [pid 5076] unlink("./3/binderfs"./strace-static-x86_64: Process 5213 attached [pid 5206] <... chdir resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [ 62.034988][ T5206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 62.051346][ T5194] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 62.061035][ T5208] loop3: detected capacity change from 0 to 2048 [ 62.074231][ T5195] EXT4-fs (loop4): Total free blocks count 0 [pid 5206] ioctl(4, LOOP_CLR_FD [pid 5076] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5206] <... ioctl resumed>) = 0 [pid 5206] close(4) = 0 [pid 5213] set_robust_list(0x555555adb5e0, 24 [pid 5206] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5213] <... set_robust_list resumed>) = 0 [pid 5206] <... futex resumed>) = 1 [pid 5204] <... futex resumed>) = 0 [pid 5206] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5204] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5204] <... futex resumed>) = 0 [pid 5213] chdir("./4" [pid 5206] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5204] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5213] <... chdir resumed>) = 0 [pid 5206] <... open resumed>) = 4 [pid 5206] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5206] <... futex resumed>) = 1 [pid 5204] <... futex resumed>) = 0 [pid 5204] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5213] <... prctl resumed>) = 0 [pid 5206] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5204] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 62.092936][ T5195] EXT4-fs (loop4): Free/Dirty block details [ 62.100472][ T5194] EXT4-fs (loop2): This should not happen!! Data will be lost [ 62.100472][ T5194] [ 62.114414][ T5195] EXT4-fs (loop4): free_blocks=2415919104 [ 62.121751][ T5195] EXT4-fs (loop4): dirty_blocks=16 [ 62.124441][ T33] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 62.129021][ T5195] EXT4-fs (loop4): Block reservation details [pid 5213] setpgid(0, 0 [pid 5210] creat(0x200001c0, 0420) = -1 EISDIR (Is a directory) [pid 5210] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5210] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5195] <... sendfile resumed>) = 117 [pid 5195] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5195] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] <... setpgid resumed>) = 0 [pid 5206] <... write resumed>) = 9 [pid 5193] exit_group(0 [pid 5213] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5206] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] <... exit_group resumed>) = ? [pid 5206] <... futex resumed>) = 1 [pid 5204] <... futex resumed>) = 0 [pid 5204] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5204] <... futex resumed>) = 0 [pid 5213] <... openat resumed>) = 3 [pid 5210] <... futex resumed>) = ? [pid 5204] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5195] <... futex resumed>) = ? [pid 5213] write(3, "1000", 4 [pid 5210] +++ exited with 0 +++ [pid 5206] <... openat resumed>) = 5 [pid 5195] +++ exited with 0 +++ [pid 5193] +++ exited with 0 +++ [pid 5213] <... write resumed>) = 4 [pid 5206] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5193, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5213] close(3 [pid 5206] <... futex resumed>) = 1 [pid 5204] <... futex resumed>) = 0 [pid 5213] <... close resumed>) = 0 [pid 5206] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5204] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] symlink("/dev/binderfs", "./binderfs" [pid 5206] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5204] <... futex resumed>) = 0 [pid 5080] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5213] <... symlink resumed>) = 0 [pid 5208] <... mount resumed>) = 0 [pid 5206] open("./bus", O_RDWR [pid 5204] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5213] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5206] <... open resumed>) = 6 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5213] <... futex resumed>) = 0 [pid 5206] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5213] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5208] <... openat resumed>) = 3 [pid 5206] <... futex resumed>) = 1 [pid 5204] <... futex resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5213] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5206] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5204] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5080] fstat(3, [pid 5213] <... mprotect resumed>) = 0 [pid 5208] chdir("./bus" [pid 5206] <... mmap resumed>) = 0x20000000 [pid 5204] <... futex resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 62.147843][ T5195] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 62.161775][ T5194] EXT4-fs (loop2): Total free blocks count 0 [ 62.165383][ T5208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 62.168367][ T5194] EXT4-fs (loop2): Free/Dirty block details [pid 5213] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5208] <... chdir resumed>) = 0 [pid 5206] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5204] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] getdents64(3, [pid 5213] <... clone resumed>, parent_tid=[5216], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5216 [pid 5208] ioctl(4, LOOP_CLR_FD [pid 5206] <... futex resumed>) = 0 [pid 5204] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5213] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5212] creat(0x200001c0, 0420 [pid 5208] <... ioctl resumed>) = 0 [pid 5206] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5204] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] <... sendfile resumed>) = 117 [pid 5080] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5213] <... futex resumed>) = 0 [pid 5212] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5208] close(4 [pid 5206] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5204] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5213] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5212] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... close resumed>) = 0 [pid 5206] sendfile(4, 5, NULL, 2147483713 [pid 5204] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5194] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] lstat("./3/binderfs", [pid 5076] <... umount2 resumed>) = 0 [pid 5212] <... futex resumed>) = 0 [pid 5208] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] <... futex resumed>) = 0 [pid 5190] exit_group(0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5208] <... futex resumed>) = 1 [pid 5207] <... futex resumed>) = 0 [pid 5190] <... exit_group resumed>) = ? [pid 5080] unlink("./3/binderfs" [pid 5212] +++ exited with 0 +++ [pid 5208] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5207] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] +++ exited with 0 +++ [pid 5207] <... futex resumed>) = 0 [pid 5207] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 62.203652][ T5194] EXT4-fs (loop2): free_blocks=2415919104 [ 62.209554][ T5194] EXT4-fs (loop2): dirty_blocks=16 [ 62.216178][ T5194] EXT4-fs (loop2): Block reservation details [ 62.223289][ T5194] EXT4-fs (loop2): i_reserved_data_blocks=1 [pid 5190] +++ exited with 0 +++ [pid 5080] <... unlink resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5190, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- ./strace-static-x86_64: Process 5216 attached [pid 5080] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5216] set_robust_list(0x7fa2dc9f39e0, 24) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5216] memfd_create("syzkaller", 0 [pid 5076] lstat("./3/bus", [pid 5216] <... memfd_create resumed>) = 3 [pid 5216] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5216] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5078] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5216] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5208] <... open resumed>) = 4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5208] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5208] <... futex resumed>) = 1 [pid 5207] <... futex resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5204] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5078] fstat(3, [pid 5216] <... write resumed>) = 1048576 [pid 5204] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5204] <... futex resumed>) = 0 [pid 5078] getdents64(3, [pid 5076] <... openat resumed>) = 4 [pid 5204] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5076] fstat(4, [pid 5207] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5204] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5208] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5078] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5207] <... futex resumed>) = 0 [pid 5204] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(4, [pid 5208] <... write resumed>) = 9 [pid 5207] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5204] <... mprotect resumed>) = 0 [pid 5078] lstat("./3/binderfs", [pid 5076] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5208] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5204] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] getdents64(4, [pid 5208] <... futex resumed>) = 0 [pid 5207] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] unlink("./3/binderfs" [pid 5076] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5208] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5207] <... futex resumed>) = 0 [pid 5204] <... clone resumed>, parent_tid=[5217], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5217 [pid 5078] <... unlink resumed>) = 0 [pid 5076] close(4 [pid 5208] <... openat resumed>) = 5 [pid 5207] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5204] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 5208] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5204] <... futex resumed>) = 0 [pid 5076] rmdir("./3/bus" [pid 5208] <... futex resumed>) = 0 [pid 5207] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [ 62.268658][ T5206] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 62.306127][ T33] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5204] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... rmdir resumed>) = 0 [pid 5208] open("./bus", O_RDWR [pid 5207] <... futex resumed>) = 0 [pid 5076] getdents64(3, [pid 5208] <... open resumed>) = 6 [pid 5207] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5208] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5076] close(3 [pid 5208] <... futex resumed>) = 0 [pid 5207] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... close resumed>) = 0 [pid 5208] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5207] <... futex resumed>) = 0 [pid 5076] rmdir("./3" [pid 5216] munmap(0x7fa2d45d3000, 1048576 [pid 5076] <... rmdir resumed>) = 0 [pid 5216] <... munmap resumed>) = 0 [pid 5208] <... mmap resumed>) = 0x20000000 [pid 5207] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] mkdir("./4", 0777 [pid 5216] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5208] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5076] <... mkdir resumed>) = 0 [pid 5216] <... openat resumed>) = 4 [pid 5207] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5216] ioctl(4, LOOP_SET_FD, 3 [pid 5208] <... futex resumed>) = 0 [pid 5207] <... futex resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [ 62.327724][ T5118] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 62.348586][ T5216] loop5: detected capacity change from 0 to 2048 [ 62.361848][ T5208] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters ./strace-static-x86_64: Process 5217 attached [pid 5208] sendfile(4, 5, NULL, 2147483713 [pid 5207] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5217] set_robust_list(0x7fa2d46d29e0, 24 [pid 5204] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555adb5d0) = 5218 ./strace-static-x86_64: Process 5218 attached [pid 5218] set_robust_list(0x555555adb5e0, 24) = 0 [pid 5217] <... set_robust_list resumed>) = 0 [pid 5218] chdir("./4") = 0 [pid 5218] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5218] setpgid(0, 0) = 0 [pid 5218] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5218] write(3, "1000", 4) = 4 [pid 5218] close(3 [pid 5216] <... ioctl resumed>) = 0 [pid 5218] <... close resumed>) = 0 [pid 5216] close(3 [pid 5218] symlink("/dev/binderfs", "./binderfs" [pid 5216] <... close resumed>) = 0 [pid 5218] <... symlink resumed>) = 0 [pid 5216] mkdir("./bus", 0777 [pid 5080] <... umount2 resumed>) = 0 [pid 5218] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] <... mkdir resumed>) = 0 [pid 5218] <... futex resumed>) = 0 [pid 5216] mount("/dev/loop5", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5218] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5207] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5218] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5207] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5207] <... futex resumed>) = 0 [pid 5218] <... mprotect resumed>) = 0 [pid 5207] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5218] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5207] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5218] <... clone resumed>, parent_tid=[5219], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5219 [pid 5207] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5218] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5207] <... mprotect resumed>) = 0 [pid 5218] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5207] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5219 attached , parent_tid=[5220], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5220 [pid 5207] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5207] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5219] set_robust_list(0x7fa2dc9f39e0, 24) = 0 [pid 5219] memfd_create("syzkaller", 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5219] <... memfd_create resumed>) = 3 [pid 5219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 62.375446][ T5206] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5078] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5219] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5220 attached [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5220] set_robust_list(0x7fa2d46d29e0, 24 [pid 5080] lstat("./3/bus", [pid 5220] <... set_robust_list resumed>) = 0 [pid 5219] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] lstat("./3/bus", [pid 5080] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... openat resumed>) = 4 [pid 5078] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] fstat(4, [pid 5078] <... openat resumed>) = 4 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] fstat(4, [pid 5080] getdents64(4, [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, [pid 5080] getdents64(4, [pid 5078] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5080] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5078] getdents64(4, [pid 5080] close(4 [pid 5078] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5207] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] <... close resumed>) = 0 [ 62.418288][ T5208] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 62.444841][ T5216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [pid 5078] close(4 [pid 5080] rmdir("./3/bus" [pid 5078] <... close resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5078] rmdir("./3/bus" [pid 5080] getdents64(3, 0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5080] close(3 [pid 5078] getdents64(3, [pid 5219] <... write resumed>) = 1048576 [pid 5216] <... mount resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5216] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5219] munmap(0x7fa2d45d3000, 1048576) = 0 [pid 5219] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5219] ioctl(4, LOOP_SET_FD, 3 [pid 5216] <... openat resumed>) = 3 [pid 5080] rmdir("./3" [pid 5078] close(3 [pid 5216] chdir("./bus" [pid 5080] <... rmdir resumed>) = 0 [pid 5216] <... chdir resumed>) = 0 [pid 5080] mkdir("./4", 0777 [pid 5078] <... close resumed>) = 0 [pid 5216] ioctl(4, LOOP_CLR_FD [pid 5080] <... mkdir resumed>) = 0 [pid 5078] rmdir("./3" [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5078] <... rmdir resumed>) = 0 [pid 5216] <... ioctl resumed>) = 0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] mkdir("./4", 0777 [pid 5219] <... ioctl resumed>) = 0 [ 62.467587][ T5208] EXT4-fs (loop3): This should not happen!! Data will be lost [ 62.467587][ T5208] [ 62.495351][ T5206] EXT4-fs (loop1): This should not happen!! Data will be lost [ 62.495351][ T5206] [ 62.501646][ T5219] loop0: detected capacity change from 0 to 2048 [pid 5080] close(3 [pid 5219] close(3 [pid 5216] close(4 [pid 5080] <... close resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5219] <... close resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5219] mkdir("./bus", 0777 [pid 5216] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 5223 attached [pid 5219] <... mkdir resumed>) = 0 [pid 5216] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5223 [pid 5219] mount("/dev/loop0", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5078] <... openat resumed>) = 3 [pid 5223] set_robust_list(0x555555adb5e0, 24 [pid 5216] <... futex resumed>) = 1 [pid 5213] <... futex resumed>) = 0 [pid 5223] <... set_robust_list resumed>) = 0 [pid 5216] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5213] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5213] <... futex resumed>) = 0 [pid 5213] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5223] chdir("./4" [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5223] <... chdir resumed>) = 0 [pid 5078] close(3 [pid 5223] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5216] <... open resumed>) = 4 [ 62.527890][ T5206] EXT4-fs (loop1): Total free blocks count 0 [ 62.539083][ T5206] EXT4-fs (loop1): Free/Dirty block details [ 62.541294][ T5208] EXT4-fs (loop3): Total free blocks count 0 [ 62.545921][ T5206] EXT4-fs (loop1): free_blocks=2415919104 [ 62.551201][ T5208] EXT4-fs (loop3): Free/Dirty block details [ 62.557284][ T5206] EXT4-fs (loop1): dirty_blocks=16 [ 62.570200][ T5206] EXT4-fs (loop1): Block reservation details [pid 5223] <... prctl resumed>) = 0 [pid 5216] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... close resumed>) = 0 [pid 5223] setpgid(0, 0 [pid 5216] <... futex resumed>) = 1 [pid 5213] <... futex resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5223] <... setpgid resumed>) = 0 [pid 5217] creat(0x200001c0, 0420 [pid 5216] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5213] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5225 attached [pid 5223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5217] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5216] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5213] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5206] <... sendfile resumed>) = 117 [pid 5078] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5225 [pid 5223] <... openat resumed>) = 3 [pid 5217] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] set_robust_list(0x555555adb5e0, 24 [pid 5223] write(3, "1000", 4 [pid 5217] <... futex resumed>) = 0 [pid 5216] <... write resumed>) = 9 [pid 5206] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] <... set_robust_list resumed>) = 0 [pid 5223] <... write resumed>) = 4 [pid 5217] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5225] chdir("./4" [pid 5223] close(3 [pid 5216] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] <... futex resumed>) = 0 [pid 5204] exit_group(0 [pid 5220] creat(0x200001c0, 0420 [pid 5208] <... sendfile resumed>) = 117 [pid 5225] <... chdir resumed>) = 0 [pid 5223] <... close resumed>) = 0 [pid 5220] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5217] <... futex resumed>) = ? [pid 5216] <... futex resumed>) = 1 [pid 5213] <... futex resumed>) = 0 [pid 5208] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5204] <... exit_group resumed>) = ? [ 62.580682][ T5206] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 62.591708][ T5208] EXT4-fs (loop3): free_blocks=2415919104 [ 62.599032][ T5208] EXT4-fs (loop3): dirty_blocks=16 [ 62.604696][ T5208] EXT4-fs (loop3): Block reservation details [ 62.610710][ T5208] EXT4-fs (loop3): i_reserved_data_blocks=1 [pid 5225] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5223] symlink("/dev/binderfs", "./binderfs" [pid 5220] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5217] +++ exited with 0 +++ [pid 5216] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... futex resumed>) = 0 [pid 5206] +++ exited with 0 +++ [pid 5204] +++ exited with 0 +++ [pid 5225] <... prctl resumed>) = 0 [pid 5223] <... symlink resumed>) = 0 [pid 5220] <... futex resumed>) = 0 [pid 5216] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5213] <... futex resumed>) = 0 [pid 5208] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5207] exit_group(0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5204, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5225] setpgid(0, 0 [pid 5223] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] <... mount resumed>) = 0 [pid 5216] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5213] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5208] <... futex resumed>) = ? [pid 5207] <... exit_group resumed>) = ? [pid 5225] <... setpgid resumed>) = 0 [pid 5223] <... futex resumed>) = 0 [pid 5220] +++ exited with 0 +++ [pid 5219] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5216] <... openat resumed>) = 5 [pid 5223] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5208] +++ exited with 0 +++ [pid 5207] +++ exited with 0 +++ [pid 5225] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5223] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5219] <... openat resumed>) = 3 [pid 5216] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] <... openat resumed>) = 3 [pid 5223] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5219] chdir("./bus" [pid 5216] <... futex resumed>) = 1 [pid 5213] <... futex resumed>) = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5207, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5225] write(3, "1000", 4 [pid 5223] <... mprotect resumed>) = 0 [pid 5219] <... chdir resumed>) = 0 [pid 5216] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] <... write resumed>) = 4 [pid 5223] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5219] ioctl(4, LOOP_CLR_FD [pid 5216] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5213] <... futex resumed>) = 0 [pid 5079] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5227 attached [pid 5225] close(3 [pid 5219] <... ioctl resumed>) = 0 [pid 5216] open("./bus", O_RDWR [pid 5213] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5227] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5225] <... close resumed>) = 0 [pid 5223] <... clone resumed>, parent_tid=[5227], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5227 [pid 5219] close(4 [pid 5216] <... open resumed>) = 6 [pid 5079] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5227] <... set_robust_list resumed>) = 0 [pid 5225] symlink("/dev/binderfs", "./binderfs" [pid 5223] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] <... close resumed>) = 0 [pid 5225] <... symlink resumed>) = 0 [pid 5223] <... futex resumed>) = 0 [pid 5219] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... openat resumed>) = 3 [pid 5077] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5225] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5219] <... futex resumed>) = 1 [pid 5218] <... futex resumed>) = 0 [pid 5216] <... futex resumed>) = 1 [pid 5213] <... futex resumed>) = 0 [pid 5079] fstat(3, [pid 5077] <... openat resumed>) = 3 [pid 5225] <... futex resumed>) = 0 [pid 5219] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5218] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] fstat(3, [pid 5225] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5218] <... futex resumed>) = 0 [pid 5216] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5213] <... futex resumed>) = 0 [pid 5079] getdents64(3, [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5227] memfd_create("syzkaller", 0 [pid 5225] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5219] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5218] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5216] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5213] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5077] getdents64(3, [pid 5227] <... memfd_create resumed>) = 3 [pid 5225] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5219] <... open resumed>) = 4 [pid 5219] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] <... mmap resumed>) = 0x20000000 [pid 5079] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5227] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5225] <... mprotect resumed>) = 0 [pid 5219] <... futex resumed>) = 1 [pid 5218] <... futex resumed>) = 0 [pid 5216] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5227] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5225] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5219] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5218] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] <... futex resumed>) = 1 [pid 5213] <... futex resumed>) = 0 [pid 5219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 62.620477][ T5219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [pid 5218] <... futex resumed>) = 0 [pid 5213] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] lstat("./4/binderfs", [pid 5077] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5227] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5219] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5218] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5216] sendfile(4, 5, NULL, 2147483713 [pid 5213] <... futex resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5227] <... write resumed>) = 1048576 [pid 5225] <... clone resumed>, parent_tid=[5228], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5228 [pid 5219] <... write resumed>) = 9 [pid 5213] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] unlink("./4/binderfs" [pid 5077] lstat("./3/binderfs", ./strace-static-x86_64: Process 5228 attached [pid 5225] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5219] <... futex resumed>) = 1 [pid 5218] <... futex resumed>) = 0 [pid 5228] <... set_robust_list resumed>) = 0 [pid 5219] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5218] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] memfd_create("syzkaller", 0 [pid 5219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5218] <... futex resumed>) = 0 [pid 5079] <... unlink resumed>) = 0 [pid 5228] <... memfd_create resumed>) = 3 [pid 5219] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5218] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5228] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5225] <... futex resumed>) = 0 [pid 5219] <... openat resumed>) = 5 [pid 5079] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5228] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5227] munmap(0x7fa2d45d3000, 1048576 [pid 5225] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5219] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5227] <... munmap resumed>) = 0 [pid 5219] <... futex resumed>) = 1 [pid 5218] <... futex resumed>) = 0 [pid 5077] unlink("./3/binderfs" [pid 5219] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5218] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5218] <... futex resumed>) = 0 [pid 5219] open("./bus", O_RDWR [pid 5218] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5219] <... open resumed>) = 6 [pid 5077] <... unlink resumed>) = 0 [pid 5227] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5219] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] <... write resumed>) = 1048576 [ 62.699667][ T5216] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 62.729560][ T5118] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5077] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5228] munmap(0x7fa2d45d3000, 1048576 [pid 5227] <... openat resumed>) = 4 [pid 5219] <... futex resumed>) = 1 [pid 5218] <... futex resumed>) = 0 [pid 5228] <... munmap resumed>) = 0 [pid 5227] ioctl(4, LOOP_SET_FD, 3 [pid 5219] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5218] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5228] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5218] <... futex resumed>) = 0 [pid 5213] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5228] <... openat resumed>) = 4 [pid 5219] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5213] <... futex resumed>) = 0 [pid 5227] <... ioctl resumed>) = 0 [pid 5227] close(3) = 0 [pid 5227] mkdir("./bus", 0777) = 0 [pid 5227] mount("/dev/loop4", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5079] <... umount2 resumed>) = 0 [pid 5079] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./4/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5079] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(4, 0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5079] getdents64(4, [pid 5213] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5219] <... mmap resumed>) = 0x20000000 [pid 5213] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5228] ioctl(4, LOOP_SET_FD, 3 [pid 5213] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5077] <... umount2 resumed>) = 0 [pid 5079] close(4) = 0 [pid 5079] rmdir("./4/bus") = 0 [ 62.738196][ T5216] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 62.755489][ T5216] EXT4-fs (loop5): This should not happen!! Data will be lost [ 62.755489][ T5216] [ 62.767229][ T5116] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 62.773389][ T5227] loop4: detected capacity change from 0 to 2048 [ 62.784297][ T5216] EXT4-fs (loop5): Total free blocks count 0 [pid 5228] <... ioctl resumed>) = 0 [pid 5219] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] <... mprotect resumed>) = 0 [pid 5219] <... futex resumed>) = 1 [pid 5218] <... futex resumed>) = 0 [pid 5213] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5218] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] sendfile(4, 5, NULL, 2147483713 [pid 5218] <... futex resumed>) = 0 [pid 5218] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5213] <... clone resumed>, parent_tid=[5231], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5231 [pid 5228] close(3 [pid 5213] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] <... close resumed>) = 0 [pid 5213] <... futex resumed>) = 0 [pid 5213] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5228] mkdir("./bus", 0777) = 0 [pid 5079] getdents64(3, 0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5079] close(3) = 0 [pid 5079] rmdir("./4") = 0 [pid 5228] mount("/dev/loop2", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5079] mkdir("./5", 0777 [pid 5077] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5231 attached [pid 5231] set_robust_list(0x7fa2d46d29e0, 24) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5079] close(3) = 0 [ 62.806463][ T5228] loop2: detected capacity change from 0 to 2048 [ 62.812547][ T5216] EXT4-fs (loop5): Free/Dirty block details [ 62.839534][ T5219] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5232 ./strace-static-x86_64: Process 5232 attached [pid 5232] set_robust_list(0x555555adb5e0, 24) = 0 [pid 5232] chdir("./5") = 0 [pid 5232] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5232] setpgid(0, 0) = 0 [pid 5232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5232] write(3, "1000", 4) = 4 [pid 5232] close(3) = 0 [pid 5232] symlink("/dev/binderfs", "./binderfs" [pid 5218] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5213] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] lstat("./3/bus", [pid 5218] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5218] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2d46b2000 [pid 5218] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5218] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5235], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5235 [pid 5218] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5218] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5232] <... symlink resumed>) = 0 [pid 5232] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5232] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5232] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5232] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5077] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5232] <... mprotect resumed>) = 0 [pid 5232] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5236], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5236 ./strace-static-x86_64: Process 5235 attached [pid 5232] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] set_robust_list(0x7fa2d46d29e0, 24 [pid 5232] <... futex resumed>) = 0 [pid 5235] <... set_robust_list resumed>) = 0 [pid 5232] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5236 attached [pid 5236] set_robust_list(0x7fa2dc9f39e0, 24) = 0 [pid 5236] memfd_create("syzkaller", 0) = 3 [pid 5236] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2d45d3000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 62.842975][ T5216] EXT4-fs (loop5): free_blocks=2415919104 [ 62.870090][ T5227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 62.879962][ T5216] EXT4-fs (loop5): dirty_blocks=16 [ 62.888561][ T5216] EXT4-fs (loop5): Block reservation details [ 62.895816][ T5216] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 5077] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(4, 0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, 0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5077] close(4) = 0 [pid 5077] rmdir("./3/bus") = 0 [pid 5077] getdents64(3, 0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5077] rmdir("./3") = 0 [pid 5077] mkdir("./4", 0777) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5077] close(3 [pid 5218] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] <... close resumed>) = 0 [ 62.906220][ T5228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555adb5d0) = 5237 ./strace-static-x86_64: Process 5237 attached [pid 5237] set_robust_list(0x555555adb5e0, 24) = 0 [pid 5237] chdir("./4") = 0 [pid 5237] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5237] setpgid(0, 0) = 0 [pid 5237] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5237] write(3, "1000", 4) = 4 [pid 5237] close(3) = 0 [pid 5237] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5237] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5237] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2dc9d3000 [pid 5237] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5237] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5238], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5238 [pid 5237] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5237] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5227] <... mount resumed>) = 0 [pid 5227] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5227] chdir("./bus") = 0 [pid 5227] ioctl(4, LOOP_CLR_FD) = 0 [pid 5227] close(4) = 0 [pid 5227] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5223] <... futex resumed>) = 0 [pid 5227] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5223] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5223] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5227] <... open resumed>) = 4 [pid 5227] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] <... futex resumed>) = 0 [pid 5227] <... futex resumed>) = 1 [pid 5223] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5223] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5227] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 ./strace-static-x86_64: Process 5238 attached [pid 5227] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5223] <... futex resumed>) = 0 [pid 5227] <... futex resumed>) = 1 [pid 5223] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5223] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5227] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5238] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5227] <... openat resumed>) = 5 [pid 5238] <... set_robust_list resumed>) = 0 [pid 5231] creat(0x200001c0, 0420 [pid 5227] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] <... sendfile resumed>) = 117 [pid 5238] memfd_create("syzkaller", 0 [pid 5231] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5231] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] <... futex resumed>) = 1 [pid 5223] <... futex resumed>) = 0 [pid 5238] <... memfd_create resumed>) = 3 [pid 5216] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5238] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5231] <... futex resumed>) = 0 [pid 5227] open("./bus", O_RDWR [pid 5223] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] <... futex resumed>) = 0 [pid 5231] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5223] <... futex resumed>) = 0 [pid 5213] exit_group(0 [pid 5238] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5231] <... futex resumed>) = ? [pid 5227] <... open resumed>) = 6 [pid 5223] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5213] <... exit_group resumed>) = ? [pid 5231] +++ exited with 0 +++ [pid 5227] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5223] <... futex resumed>) = 0 [pid 5223] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5223] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5227] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 5223] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 62.947606][ T5219] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5223] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5227] sendfile(4, 5, NULL, 2147483713 [pid 5228] <... mount resumed>) = 0 [pid 5228] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5216] +++ exited with 0 +++ [pid 5213] +++ exited with 0 +++ [pid 5228] <... openat resumed>) = 3 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5213, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5228] chdir("./bus") = 0 [pid 5228] ioctl(4, LOOP_CLR_FD [pid 5081] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5238] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5236] <... write resumed>) = 1048576 [pid 5228] <... ioctl resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5228] close(4 [pid 5081] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5228] <... close resumed>) = 0 [pid 5228] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... openat resumed>) = 3 [pid 5228] <... futex resumed>) = 1 [pid 5225] <... futex resumed>) = 0 [pid 5223] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] fstat(3, [pid 5228] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5225] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] <... futex resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5225] <... futex resumed>) = 0 [pid 5223] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] getdents64(3, [pid 5228] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5225] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5223] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5236] munmap(0x7fa2d45d3000, 1048576 [pid 5228] <... open resumed>) = 4 [pid 5223] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5236] <... munmap resumed>) = 0 [pid 5228] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5225] <... futex resumed>) = 0 [pid 5228] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5225] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5225] <... futex resumed>) = 0 [pid 5228] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5225] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5236] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5228] <... write resumed>) = 9 [pid 5223] <... mprotect resumed>) = 0 [pid 5081] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5228] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5228] <... futex resumed>) = 1 [pid 5225] <... futex resumed>) = 0 [pid 5081] lstat("./4/binderfs", [pid 5228] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5225] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] <... clone resumed>, parent_tid=[5239], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5239 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5236] <... openat resumed>) = 4 [pid 5228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5225] <... futex resumed>) = 0 [pid 5223] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] unlink("./4/binderfs" [pid 5236] ioctl(4, LOOP_SET_FD, 3 [pid 5228] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5225] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5223] <... futex resumed>) = 0 [pid 5228] <... openat resumed>) = 5 [pid 5081] <... unlink resumed>) = 0 [pid 5228] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5225] <... futex resumed>) = 0 [pid 5228] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5225] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5225] <... futex resumed>) = 0 [pid 5228] open("./bus", O_RDWR [pid 5225] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5228] <... open resumed>) = 6 [pid 5228] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5225] <... futex resumed>) = 0 [pid 5228] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5225] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5225] <... futex resumed>) = 0 [pid 5228] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5225] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5228] <... mmap resumed>) = 0x20000000 [pid 5228] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5228] <... futex resumed>) = 1 [pid 5225] <... futex resumed>) = 0 [pid 5081] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5228] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5225] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5225] <... futex resumed>) = 0 [ 63.028462][ T5227] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 63.045712][ T5227] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 63.053434][ T5219] EXT4-fs (loop0): This should not happen!! Data will be lost [ 63.053434][ T5219] [pid 5228] sendfile(4, 5, NULL, 2147483713 [pid 5225] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5239 attached [pid 5238] <... write resumed>) = 1048576 [pid 5236] <... ioctl resumed>) = 0 [ 63.086765][ T5236] loop3: detected capacity change from 0 to 2048 [ 63.096643][ T5116] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 63.104174][ T5219] EXT4-fs (loop0): Total free blocks count 0 [ 63.114310][ T5228] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 63.120705][ T5219] EXT4-fs (loop0): Free/Dirty block details [pid 5239] set_robust_list(0x7fa2d46d29e0, 24 [pid 5238] munmap(0x7fa2d45d3000, 1048576 [pid 5236] close(3 [pid 5239] <... set_robust_list resumed>) = 0 [pid 5238] <... munmap resumed>) = 0 [pid 5236] <... close resumed>) = 0 [pid 5223] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5238] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5236] mkdir("./bus", 0777 [pid 5238] <... openat resumed>) = 4 [pid 5238] ioctl(4, LOOP_SET_FD, 3 [pid 5236] <... mkdir resumed>) = 0 [pid 5225] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5225] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5225] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2d46b2000 [pid 5225] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5225] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5240], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5240 [pid 5225] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5225] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5240 attached [pid 5240] set_robust_list(0x7fa2d46d29e0, 24) = 0 [ 63.131999][ T5227] EXT4-fs (loop4): This should not happen!! Data will be lost [ 63.131999][ T5227] [ 63.136538][ T5219] EXT4-fs (loop0): free_blocks=2415919104 [ 63.147054][ T5228] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 63.162105][ T5219] EXT4-fs (loop0): dirty_blocks=16 [ 63.165201][ T5227] EXT4-fs (loop4): Total free blocks count 0 [ 63.176333][ T5227] EXT4-fs (loop4): Free/Dirty block details [pid 5238] <... ioctl resumed>) = 0 [pid 5236] mount("/dev/loop3", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5238] close(3 [pid 5219] <... sendfile resumed>) = 117 [pid 5235] creat(0x200001c0, 0420) = -1 EISDIR (Is a directory) [pid 5235] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5235] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5238] <... close resumed>) = 0 [pid 5219] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] exit_group(0 [pid 5235] <... futex resumed>) = ? [pid 5218] <... exit_group resumed>) = ? [pid 5235] +++ exited with 0 +++ [pid 5238] mkdir("./bus", 0777 [pid 5219] <... futex resumed>) = ? [pid 5081] <... umount2 resumed>) = 0 [pid 5225] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5238] <... mkdir resumed>) = 0 [pid 5219] +++ exited with 0 +++ [pid 5218] +++ exited with 0 +++ [pid 5081] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5218, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [ 63.184006][ T5238] loop1: detected capacity change from 0 to 2048 [ 63.186958][ T5228] EXT4-fs (loop2): This should not happen!! Data will be lost [ 63.186958][ T5228] [ 63.200076][ T5219] EXT4-fs (loop0): Block reservation details [ 63.200097][ T5219] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 63.207812][ T5227] EXT4-fs (loop4): free_blocks=2415919104 [ 63.214606][ T5228] EXT4-fs (loop2): Total free blocks count 0 [ 63.227076][ T5227] EXT4-fs (loop4): dirty_blocks=16 [pid 5081] lstat("./4/bus", [pid 5238] mount("/dev/loop1", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5076] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 3 [pid 5081] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] fstat(3, [pid 5081] <... openat resumed>) = 4 [pid 5081] fstat(4, [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(3, [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 63.231653][ T5228] EXT4-fs (loop2): Free/Dirty block details [ 63.243341][ T5228] EXT4-fs (loop2): free_blocks=2415919104 [ 63.255277][ T5228] EXT4-fs (loop2): dirty_blocks=16 [ 63.256133][ T5227] EXT4-fs (loop4): Block reservation details [ 63.260510][ T5228] EXT4-fs (loop2): Block reservation details [ 63.274507][ T5228] EXT4-fs (loop2): i_reserved_data_blocks=1 [pid 5240] creat(0x200001c0, 0420 [pid 5228] <... sendfile resumed>) = 117 [pid 5081] getdents64(4, [pid 5076] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5240] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5240] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5240] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5228] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5239] creat(0x200001c0, 0420 [pid 5076] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5227] <... sendfile resumed>) = 117 [pid 5228] <... futex resumed>) = 0 [pid 5225] exit_group(0 [pid 5081] getdents64(4, [pid 5240] <... futex resumed>) = ? [pid 5225] <... exit_group resumed>) = ? [pid 5240] +++ exited with 0 +++ [pid 5239] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5076] lstat("./4/binderfs", [pid 5239] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] +++ exited with 0 +++ [pid 5227] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] +++ exited with 0 +++ [pid 5081] close(4 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5239] <... futex resumed>) = 0 [pid 5223] exit_group(0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5225, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5081] <... close resumed>) = 0 [pid 5223] <... exit_group resumed>) = ? [pid 5081] rmdir("./4/bus" [pid 5076] unlink("./4/binderfs" [pid 5236] <... mount resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5236] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5236] chdir("./bus" [pid 5081] <... rmdir resumed>) = 0 [pid 5076] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5236] <... chdir resumed>) = 0 [pid 5236] ioctl(4, LOOP_CLR_FD) = 0 [pid 5236] close(4 [pid 5227] <... futex resumed>) = ? [pid 5081] getdents64(3, [ 63.276485][ T5236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 63.280685][ T5227] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 63.310582][ T33] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5078] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5239] +++ exited with 0 +++ [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5081] close(3 [pid 5078] fstat(3, [pid 5081] <... close resumed>) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5227] +++ exited with 0 +++ [pid 5223] +++ exited with 0 +++ [pid 5081] rmdir("./4" [pid 5078] getdents64(3, [pid 5081] <... rmdir resumed>) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5223, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5078] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5081] mkdir("./5", 0777 [pid 5078] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... mkdir resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5080] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] lstat("./4/binderfs", [pid 5081] <... openat resumed>) = 3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5080] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] unlink("./4/binderfs" [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] <... openat resumed>) = 3 [pid 5078] <... unlink resumed>) = 0 [pid 5081] close(3 [pid 5080] fstat(3, [pid 5078] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... close resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] getdents64(3, ./strace-static-x86_64: Process 5245 attached 0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5081] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5245 [pid 5080] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5245] set_robust_list(0x555555adb5e0, 24 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5245] <... set_robust_list resumed>) = 0 [pid 5236] <... close resumed>) = 0 [pid 5080] lstat("./4/binderfs", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5245] chdir("./5" [pid 5236] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] lstat("./4/bus", [pid 5245] <... chdir resumed>) = 0 [pid 5238] <... mount resumed>) = 0 [pid 5236] <... futex resumed>) = 1 [pid 5232] <... futex resumed>) = 0 [pid 5080] unlink("./4/binderfs" [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5245] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5238] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5236] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5232] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... unlink resumed>) = 0 [pid 5076] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5245] <... prctl resumed>) = 0 [pid 5238] <... openat resumed>) = 3 [pid 5236] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5232] <... futex resumed>) = 0 [pid 5080] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5245] setpgid(0, 0 [pid 5238] chdir("./bus" [pid 5236] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5232] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5245] <... setpgid resumed>) = 0 [pid 5238] <... chdir resumed>) = 0 [pid 5236] <... open resumed>) = 4 [pid 5076] <... openat resumed>) = 4 [pid 5245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5238] ioctl(4, LOOP_CLR_FD [pid 5236] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] fstat(4, [pid 5245] <... openat resumed>) = 3 [pid 5238] <... ioctl resumed>) = 0 [pid 5236] <... futex resumed>) = 1 [pid 5232] <... futex resumed>) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5245] write(3, "1000", 4 [pid 5238] close(4 [pid 5236] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5232] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... write resumed>) = 4 [pid 5245] close(3) = 0 [pid 5245] symlink("/dev/binderfs", "./binderfs") = 0 [ 63.333152][ T5238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [pid 5245] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5245] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2dc9d3000 [pid 5245] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5076] getdents64(4, [pid 5245] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5232] <... futex resumed>) = 0 [pid 5245] <... clone resumed>, parent_tid=[5246], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5246 [pid 5245] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5245] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5232] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5236] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5236] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5076] getdents64(4, [pid 5238] <... close resumed>) = 0 [pid 5238] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] <... write resumed>) = 9 [pid 5076] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5238] <... futex resumed>) = 1 [pid 5237] <... futex resumed>) = 0 [pid 5236] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] close(4 [pid 5238] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5237] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] <... futex resumed>) = 1 [pid 5232] <... futex resumed>) = 0 [pid 5076] <... close resumed>) = 0 ./strace-static-x86_64: Process 5246 attached [pid 5238] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5237] <... futex resumed>) = 0 [pid 5236] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5232] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] rmdir("./4/bus" [pid 5246] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5238] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5237] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5236] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5232] <... futex resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5236] openat(AT_FDCWD, "./bus", O_RDONLY [ 63.388945][ T5116] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 63.402932][ T56] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 63.426364][ T27] kauditd_printk_skb: 77 callbacks suppressed [pid 5232] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] getdents64(3, [pid 5246] <... set_robust_list resumed>) = 0 [pid 5238] <... open resumed>) = 4 [pid 5236] <... openat resumed>) = 5 [pid 5076] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5246] memfd_create("syzkaller", 0 [pid 5238] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5232] <... futex resumed>) = 0 [pid 5238] <... futex resumed>) = 1 [pid 5232] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5238] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5236] open("./bus", O_RDWR [pid 5232] <... futex resumed>) = 0 [pid 5076] close(3 [pid 5246] <... memfd_create resumed>) = 3 [pid 5232] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5246] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5237] <... futex resumed>) = 0 [pid 5236] <... open resumed>) = 6 [pid 5076] <... close resumed>) = 0 [pid 5246] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5237] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] rmdir("./4" [pid 5238] <... futex resumed>) = 0 [pid 5237] <... futex resumed>) = 1 [pid 5236] <... futex resumed>) = 1 [pid 5232] <... futex resumed>) = 0 [pid 5238] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5237] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5246] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5236] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5232] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... rmdir resumed>) = 0 [pid 5236] <... mmap resumed>) = 0x20000000 [pid 5232] <... futex resumed>) = 0 [pid 5232] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] mkdir("./5", 0777 [pid 5238] <... write resumed>) = 9 [pid 5238] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5237] <... futex resumed>) = 0 [pid 5238] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5237] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5238] <... openat resumed>) = 5 [pid 5237] <... futex resumed>) = 0 [pid 5236] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... mkdir resumed>) = 0 [pid 5236] <... futex resumed>) = 1 [pid 5232] <... futex resumed>) = 0 [pid 5236] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5236] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5232] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5238] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5237] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5236] sendfile(4, 5, NULL, 2147483713 [pid 5232] <... futex resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5238] <... futex resumed>) = 0 [pid 5237] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5232] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5238] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5237] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5238] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5237] <... futex resumed>) = 0 [pid 5238] open("./bus", O_RDWR [pid 5237] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5238] <... open resumed>) = 6 [pid 5238] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] close(3 [pid 5238] <... futex resumed>) = 1 [pid 5237] <... futex resumed>) = 0 [pid 5238] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5237] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5238] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5237] <... futex resumed>) = 0 [pid 5238] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5237] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... close resumed>) = 0 [pid 5238] <... mmap resumed>) = 0x20000000 [pid 5238] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5238] <... futex resumed>) = 1 [pid 5237] <... futex resumed>) = 0 [pid 5238] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5237] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5238] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5237] <... futex resumed>) = 0 [pid 5238] sendfile(4, 5, NULL, 2147483713 [ 63.426381][ T27] audit: type=1804 audit(1673802232.292:89): pid=5236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor211" name="/root/syzkaller.jToCGh/5/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 63.466821][ T27] audit: type=1804 audit(1673802232.322:90): pid=5236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor211" name="/root/syzkaller.jToCGh/5/bus/bus" dev="loop3" ino=18 res=1 errno=0 [pid 5237] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5247 [pid 5078] <... umount2 resumed>) = 0 [pid 5078] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./4/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5247 attached [pid 5078] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5247] set_robust_list(0x555555adb5e0, 24 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5247] <... set_robust_list resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5247] chdir("./5" [pid 5078] fstat(4, [pid 5247] <... chdir resumed>) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5247] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] getdents64(4, [pid 5247] <... prctl resumed>) = 0 [pid 5078] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5247] setpgid(0, 0 [pid 5078] getdents64(4, [pid 5247] <... setpgid resumed>) = 0 [pid 5078] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5246] <... write resumed>) = 1048576 [pid 5080] <... umount2 resumed>) = 0 [pid 5078] close(4 [pid 5237] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 63.508173][ T5236] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 63.540342][ T5238] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5247] <... openat resumed>) = 3 [pid 5246] munmap(0x7fa2d45d3000, 1048576 [pid 5237] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5232] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... close resumed>) = 0 [pid 5237] <... futex resumed>) = 0 [pid 5237] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2d46b2000 [pid 5237] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5237] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5248], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5248 [pid 5247] write(3, "1000", 4 [pid 5237] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5246] <... munmap resumed>) = 0 [pid 5237] <... futex resumed>) = 0 [pid 5232] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5248 attached [pid 5247] <... write resumed>) = 4 [pid 5246] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5237] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] rmdir("./4/bus" [pid 5248] set_robust_list(0x7fa2d46d29e0, 24 [pid 5247] close(3 [pid 5232] <... futex resumed>) = 0 [pid 5246] <... openat resumed>) = 4 [pid 5248] <... set_robust_list resumed>) = 0 [pid 5247] <... close resumed>) = 0 [pid 5232] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] lstat("./4/bus", [pid 5078] <... rmdir resumed>) = 0 [pid 5246] ioctl(4, LOOP_SET_FD, 3 [pid 5247] symlink("/dev/binderfs", "./binderfs" [pid 5232] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(3, [pid 5247] <... symlink resumed>) = 0 [ 63.544607][ T5236] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 63.568619][ T5236] EXT4-fs (loop3): This should not happen!! Data will be lost [ 63.568619][ T5236] [ 63.579839][ T5236] EXT4-fs (loop3): Total free blocks count 0 [ 63.587466][ T5236] EXT4-fs (loop3): Free/Dirty block details [ 63.595000][ T5246] loop5: detected capacity change from 0 to 2048 [ 63.602249][ T5236] EXT4-fs (loop3): free_blocks=2415919104 [pid 5246] <... ioctl resumed>) = 0 [pid 5237] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5232] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5080] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5247] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5246] close(3 [pid 5232] <... mprotect resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5247] <... futex resumed>) = 0 [pid 5246] <... close resumed>) = 0 [pid 5232] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 63.602698][ T27] audit: type=1804 audit(1673802232.352:91): pid=5236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor211" name="/root/syzkaller.jToCGh/5/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 63.608261][ T5236] EXT4-fs (loop3): dirty_blocks=16 [ 63.645359][ T5236] EXT4-fs (loop3): Block reservation details [pid 5078] close(3 [pid 5247] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5246] mkdir("./bus", 0777 [pid 5080] <... openat resumed>) = 4 [pid 5078] <... close resumed>) = 0 [pid 5247] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5246] <... mkdir resumed>) = 0 [pid 5078] rmdir("./4" [pid 5247] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5232] <... clone resumed>, parent_tid=[5249], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5249 [pid 5080] fstat(4, [pid 5078] <... rmdir resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5232] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] <... mprotect resumed>) = 0 [pid 5232] <... futex resumed>) = 0 [pid 5080] getdents64(4, [pid 5247] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5246] mount("/dev/loop5", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5232] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5078] mkdir("./5", 0777 [pid 5247] <... clone resumed>, parent_tid=[5250], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5250 [pid 5080] getdents64(4, [pid 5078] <... mkdir resumed>) = 0 [pid 5247] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5247] <... futex resumed>) = 0 [pid 5080] close(4 [pid 5078] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5247] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5236] <... sendfile resumed>) = 117 [pid 5080] <... close resumed>) = 0 ./strace-static-x86_64: Process 5249 attached ./strace-static-x86_64: Process 5250 attached [pid 5250] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5249] set_robust_list(0x7fa2d46d29e0, 24) = 0 [pid 5250] <... set_robust_list resumed>) = 0 [pid 5250] memfd_create("syzkaller", 0 [pid 5249] creat(0x200001c0, 0420) = -1 EISDIR (Is a directory) [pid 5250] <... memfd_create resumed>) = 3 [pid 5236] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... openat resumed>) = 3 [pid 5250] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 63.648029][ T5238] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 63.652139][ T5236] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 63.678970][ T27] audit: type=1804 audit(1673802232.362:92): pid=5238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor211" name="/root/syzkaller.GJ37E4/4/bus/bus" dev="loop1" ino=18 res=1 errno=0 [pid 5249] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] <... futex resumed>) = 0 [pid 5080] rmdir("./4/bus" [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5250] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5232] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5249] <... futex resumed>) = 0 [ 63.711342][ T27] audit: type=1804 audit(1673802232.362:93): pid=5238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor211" name="/root/syzkaller.GJ37E4/4/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 63.712808][ T5246] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [pid 5249] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5250] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5246] <... mount resumed>) = 0 [pid 5236] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5232] exit_group(0 [pid 5080] <... rmdir resumed>) = 0 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5236] <... futex resumed>) = ? [pid 5232] <... exit_group resumed>) = ? [pid 5080] getdents64(3, [pid 5078] close(3 [pid 5236] +++ exited with 0 +++ [pid 5080] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5078] <... close resumed>) = 0 [pid 5080] close(3 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... close resumed>) = 0 [pid 5080] rmdir("./4" [pid 5078] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5253 [pid 5080] <... rmdir resumed>) = 0 [pid 5246] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5080] mkdir("./5", 0777 [pid 5249] <... futex resumed>) = ? [pid 5246] <... openat resumed>) = 3 [pid 5080] <... mkdir resumed>) = 0 [pid 5246] chdir("./bus" [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5249] +++ exited with 0 +++ [pid 5246] <... chdir resumed>) = 0 [pid 5232] +++ exited with 0 +++ [pid 5080] <... openat resumed>) = 3 [pid 5246] ioctl(4, LOOP_CLR_FD [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5232, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5246] <... ioctl resumed>) = 0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5246] close(4 [pid 5080] close(3 [pid 5246] <... close resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5246] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5246] <... futex resumed>) = 1 [pid 5245] <... futex resumed>) = 0 [pid 5250] <... write resumed>) = 1048576 [pid 5246] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5245] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5254 [pid 5079] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5246] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5245] <... futex resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5246] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5245] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5254 attached ./strace-static-x86_64: Process 5253 attached [pid 5246] <... open resumed>) = 4 [pid 5079] <... openat resumed>) = 3 [pid 5254] set_robust_list(0x555555adb5e0, 24 [pid 5253] set_robust_list(0x555555adb5e0, 24 [pid 5246] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] fstat(3, [pid 5254] <... set_robust_list resumed>) = 0 [pid 5253] <... set_robust_list resumed>) = 0 [pid 5246] <... futex resumed>) = 1 [pid 5245] <... futex resumed>) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5254] chdir("./5" [pid 5246] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5245] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] chdir("./5" [pid 5079] getdents64(3, [pid 5254] <... chdir resumed>) = 0 [pid 5253] <... chdir resumed>) = 0 [pid 5250] munmap(0x7fa2d45d3000, 1048576 [pid 5246] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5245] <... futex resumed>) = 0 [pid 5079] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5250] <... munmap resumed>) = 0 [pid 5246] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5245] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5250] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5246] <... write resumed>) = 9 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5250] <... openat resumed>) = 4 [pid 5246] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5254] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] lstat("./5/binderfs", [pid 5254] <... prctl resumed>) = 0 [ 63.733856][ T27] audit: type=1804 audit(1673802232.372:94): pid=5238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor211" name="/root/syzkaller.GJ37E4/4/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 63.763969][ T5238] EXT4-fs (loop1): This should not happen!! Data will be lost [ 63.763969][ T5238] [pid 5250] ioctl(4, LOOP_SET_FD, 3 [pid 5246] <... futex resumed>) = 1 [pid 5245] <... futex resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5254] setpgid(0, 0 [pid 5253] <... prctl resumed>) = 0 [pid 5250] <... ioctl resumed>) = 0 [pid 5246] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5245] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] unlink("./5/binderfs" [pid 5246] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5245] <... futex resumed>) = 0 [pid 5079] <... unlink resumed>) = 0 [pid 5246] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5245] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5254] <... setpgid resumed>) = 0 [pid 5253] setpgid(0, 0 [pid 5246] <... openat resumed>) = 5 [pid 5246] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5245] <... futex resumed>) = 0 [pid 5246] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5245] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5246] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5245] <... futex resumed>) = 0 [pid 5246] open("./bus", O_RDWR [pid 5245] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5246] <... open resumed>) = 6 [pid 5246] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5245] <... futex resumed>) = 0 [pid 5250] close(3 [pid 5246] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5245] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5250] <... close resumed>) = 0 [pid 5246] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5245] <... futex resumed>) = 0 [pid 5250] mkdir("./bus", 0777 [ 63.816149][ T5238] EXT4-fs (loop1): Total free blocks count 0 [ 63.824452][ T5250] loop0: detected capacity change from 0 to 2048 [ 63.831946][ T5238] EXT4-fs (loop1): Free/Dirty block details [ 63.834684][ T27] audit: type=1804 audit(1673802232.702:95): pid=5246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor211" name="/root/syzkaller.z790Bp/5/bus/bus" dev="loop5" ino=18 res=1 errno=0 [ 63.847333][ T5238] EXT4-fs (loop1): free_blocks=2415919104 [pid 5246] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5245] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5254] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5253] <... setpgid resumed>) = 0 [pid 5250] <... mkdir resumed>) = 0 [pid 5246] <... mmap resumed>) = 0x20000000 [pid 5248] creat(0x200001c0, 0420 [pid 5238] <... sendfile resumed>) = 117 [pid 5250] mount("/dev/loop0", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5248] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5246] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5246] <... futex resumed>) = 1 [pid 5245] <... futex resumed>) = 0 [pid 5248] <... futex resumed>) = 0 [pid 5246] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5245] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5246] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5245] <... futex resumed>) = 0 [pid 5246] sendfile(4, 5, NULL, 2147483713 [ 63.869815][ T5238] EXT4-fs (loop1): dirty_blocks=16 [ 63.873753][ T5116] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 63.875897][ T5238] EXT4-fs (loop1): Block reservation details [ 63.893706][ T5238] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 5245] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5254] <... openat resumed>) = 3 [pid 5253] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5245] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5238] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5254] write(3, "1000", 4 [pid 5245] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] <... openat resumed>) = 3 [pid 5237] exit_group(0 [pid 5238] <... futex resumed>) = ? [pid 5254] <... write resumed>) = 4 [pid 5253] write(3, "1000", 4 [pid 5248] <... futex resumed>) = ? [pid 5245] <... futex resumed>) = 0 [pid 5237] <... exit_group resumed>) = ? [pid 5254] close(3 [pid 5253] <... write resumed>) = 4 [pid 5248] +++ exited with 0 +++ [pid 5245] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5254] <... close resumed>) = 0 [pid 5253] close(3 [pid 5254] symlink("/dev/binderfs", "./binderfs" [pid 5253] <... close resumed>) = 0 [pid 5245] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5238] +++ exited with 0 +++ [pid 5237] +++ exited with 0 +++ [pid 5253] symlink("/dev/binderfs", "./binderfs" [pid 5254] <... symlink resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5237, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5254] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] <... symlink resumed>) = 0 [pid 5245] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5254] <... futex resumed>) = 0 [pid 5253] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... mprotect resumed>) = 0 [pid 5077] <... restart_syscall resumed>) = 0 [pid 5254] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5253] <... futex resumed>) = 0 [pid 5245] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5254] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5253] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(3, 0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5254] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5253] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5077] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5253] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5254] <... mprotect resumed>) = 0 [pid 5077] lstat("./4/binderfs", [pid 5253] <... mprotect resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5254] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] unlink("./4/binderfs") = 0 [pid 5253] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [ 63.900908][ T27] audit: type=1804 audit(1673802232.732:96): pid=5246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor211" name="/root/syzkaller.z790Bp/5/bus/bus" dev="loop5" ino=18 res=1 errno=0 [ 63.920542][ T5246] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 63.925269][ T27] audit: type=1804 audit(1673802232.732:97): pid=5246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor211" name="/root/syzkaller.z790Bp/5/bus/bus" dev="loop5" ino=18 res=1 errno=0 [pid 5077] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5257 attached ./strace-static-x86_64: Process 5255 attached [pid 5254] <... clone resumed>, parent_tid=[5255], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5255 [pid 5253] <... clone resumed>, parent_tid=[5256], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5256 [pid 5245] <... clone resumed>, parent_tid=[5257], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5257 [pid 5079] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5256 attached [pid 5256] set_robust_list(0x7fa2dc9f39e0, 24) = 0 [pid 5256] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5257] set_robust_list(0x7fa2d46d29e0, 24 [pid 5255] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5254] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5257] <... set_robust_list resumed>) = 0 [pid 5256] <... futex resumed>) = 0 [pid 5255] <... set_robust_list resumed>) = 0 [pid 5254] <... futex resumed>) = 0 [pid 5253] <... futex resumed>) = 1 [pid 5245] <... futex resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5256] memfd_create("syzkaller", 0) = 3 [pid 5256] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2d45d3000 [pid 5255] memfd_create("syzkaller", 0 [pid 5254] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5253] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5245] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] lstat("./5/bus", [pid 5255] <... memfd_create resumed>) = 3 [pid 5255] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5255] <... mmap resumed>) = 0x7fa2d45d3000 [ 63.986448][ T5116] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 63.998940][ T5246] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 64.013187][ T5246] EXT4-fs (loop5): This should not happen!! Data will be lost [ 64.013187][ T5246] [ 64.022861][ T5246] EXT4-fs (loop5): Total free blocks count 0 [ 64.030707][ T5246] EXT4-fs (loop5): Free/Dirty block details [pid 5079] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5256] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5257] creat(0x200001c0, 0420 [pid 5255] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5246] <... sendfile resumed>) = 117 [pid 5077] <... umount2 resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5257] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5255] <... write resumed>) = 1048576 [pid 5246] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5079] <... openat resumed>) = 4 [pid 5257] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] munmap(0x7fa2d45d3000, 1048576 [pid 5246] <... futex resumed>) = 0 [pid 5245] exit_group(0 [pid 5079] fstat(4, [pid 5077] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./4/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(4, 0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, 0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5077] close(4) = 0 [pid 5077] rmdir("./4/bus" [pid 5257] <... futex resumed>) = ? [pid 5245] <... exit_group resumed>) = ? [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5257] +++ exited with 0 +++ [pid 5246] +++ exited with 0 +++ [pid 5079] getdents64(4, [pid 5077] getdents64(3, 0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [ 64.038971][ T5246] EXT4-fs (loop5): free_blocks=2415919104 [ 64.054084][ T5246] EXT4-fs (loop5): dirty_blocks=16 [ 64.059419][ T5246] EXT4-fs (loop5): Block reservation details [ 64.065807][ T5246] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 5077] rmdir("./4" [pid 5255] <... munmap resumed>) = 0 [pid 5245] +++ exited with 0 +++ [pid 5079] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5077] <... rmdir resumed>) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5245, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5077] mkdir("./5", 0777 [pid 5255] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5079] getdents64(4, [pid 5077] <... mkdir resumed>) = 0 [pid 5255] <... openat resumed>) = 4 [pid 5079] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5255] ioctl(4, LOOP_SET_FD, 3 [pid 5081] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] close(4 [pid 5077] <... openat resumed>) = 3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... close resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5081] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] <... openat resumed>) = 3 [pid 5077] close(3 [pid 5081] fstat(3, [pid 5077] <... close resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] getdents64(3, 0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5077] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5260 [pid 5081] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./5/binderfs") = 0 [pid 5081] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5250] <... mount resumed>) = 0 [pid 5250] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5250] chdir("./bus") = 0 [pid 5250] ioctl(4, LOOP_CLR_FD) = 0 [pid 5250] close(4) = 0 [pid 5250] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5250] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5247] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] rmdir("./5/bus" [pid 5247] <... futex resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5250] <... open resumed>) = 4 [pid 5250] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5250] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5256] <... write resumed>) = 1048576 [pid 5256] munmap(0x7fa2d45d3000, 1048576) = 0 [pid 5256] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5256] ioctl(4, LOOP_SET_FD, 3 [pid 5247] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] getdents64(3, [pid 5247] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5079] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5247] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] close(3 [pid 5247] <... futex resumed>) = 1 [pid 5255] <... ioctl resumed>) = 0 [pid 5255] close(3 [pid 5079] <... close resumed>) = 0 [pid 5247] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] rmdir("./5" [pid 5250] <... futex resumed>) = 0 [pid 5255] <... close resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5250] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5079] mkdir("./6", 0777 [pid 5255] mkdir("./bus", 0777 [pid 5079] <... mkdir resumed>) = 0 [pid 5255] <... mkdir resumed>) = 0 [pid 5250] <... write resumed>) = 9 [pid 5079] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5250] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] mount("/dev/loop4", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5079] <... openat resumed>) = 3 [pid 5250] <... futex resumed>) = 1 [pid 5247] <... futex resumed>) = 0 [ 64.079304][ T5250] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 64.109352][ T5255] loop4: detected capacity change from 0 to 2048 [ 64.122849][ T33] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5250] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5250] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5247] <... futex resumed>) = 0 [pid 5079] close(3 [pid 5250] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5247] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... close resumed>) = 0 [pid 5250] <... openat resumed>) = 5 ./strace-static-x86_64: Process 5260 attached [pid 5260] set_robust_list(0x555555adb5e0, 24) = 0 [pid 5260] chdir("./5") = 0 [pid 5260] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5260] setpgid(0, 0) = 0 [pid 5260] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5260] write(3, "1000", 4) = 4 [pid 5260] close(3) = 0 [pid 5260] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5260] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5260] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2dc9d3000 [pid 5260] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5260] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5261], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5261 [pid 5260] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5260] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5261 attached [pid 5261] set_robust_list(0x7fa2dc9f39e0, 24) = 0 [pid 5261] memfd_create("syzkaller", 0) = 3 [pid 5261] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2d45d3000 [pid 5250] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5250] <... futex resumed>) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5250] open("./bus", O_RDWR [pid 5247] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5250] <... open resumed>) = 6 [pid 5247] <... futex resumed>) = 0 [pid 5250] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5262 [pid 5250] <... futex resumed>) = 0 [pid 5247] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5250] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5250] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5247] <... futex resumed>) = 0 [pid 5250] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5247] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5250] <... mmap resumed>) = 0x20000000 [pid 5250] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5247] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5250] sendfile(4, 5, NULL, 2147483713 [pid 5247] <... futex resumed>) = 0 [pid 5247] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5256] <... ioctl resumed>) = 0 [pid 5256] close(3) = 0 [pid 5256] mkdir("./bus", 0777) = 0 [pid 5256] mount("/dev/loop2", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 5262 attached [pid 5262] set_robust_list(0x555555adb5e0, 24) = 0 [pid 5262] chdir("./6") = 0 [pid 5262] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5262] setpgid(0, 0) = 0 [pid 5262] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5262] write(3, "1000", 4) = 4 [pid 5262] close(3) = 0 [pid 5262] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5262] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5262] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2dc9d3000 [pid 5261] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5262] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE) = 0 [ 64.131828][ T5256] loop2: detected capacity change from 0 to 2048 [ 64.151298][ T27] audit: type=1804 audit(1673802233.012:98): pid=5250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor211" name="/root/syzkaller.DZuQa1/5/bus/bus" dev="loop0" ino=18 res=1 errno=0 [pid 5262] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5264], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5264 [pid 5262] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5261] <... write resumed>) = 1048576 [pid 5261] munmap(0x7fa2d45d3000, 1048576) = 0 [pid 5261] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5261] ioctl(4, LOOP_SET_FD, 3 [pid 5262] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5262] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5264 attached [pid 5247] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5247] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5261] <... ioctl resumed>) = 0 [pid 5247] <... futex resumed>) = 0 [pid 5247] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5261] close(3) = 0 [pid 5247] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5247] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5261] mkdir("./bus", 0777 [pid 5247] <... mprotect resumed>) = 0 [pid 5261] <... mkdir resumed>) = 0 [pid 5261] mount("/dev/loop1", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5255] <... mount resumed>) = 0 [pid 5247] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5255] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5264] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5247] <... clone resumed>, parent_tid=[5268], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5268 [pid 5081] lstat("./5/bus", [pid 5255] <... openat resumed>) = 3 [pid 5247] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] chdir("./bus" [pid 5247] <... futex resumed>) = 0 [pid 5247] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5255] <... chdir resumed>) = 0 [pid 5255] ioctl(4, LOOP_CLR_FD) = 0 [pid 5255] close(4) = 0 [pid 5255] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5254] <... futex resumed>) = 0 [pid 5255] <... futex resumed>) = 1 [pid 5254] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5254] <... futex resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5264] <... set_robust_list resumed>) = 0 [pid 5254] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5264] memfd_create("syzkaller", 0 [pid 5255] <... open resumed>) = 4 [pid 5081] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5255] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... openat resumed>) = 4 [pid 5255] <... futex resumed>) = 1 [pid 5254] <... futex resumed>) = 0 [pid 5081] fstat(4, [pid 5264] <... memfd_create resumed>) = 3 [pid 5255] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5254] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5255] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5254] <... futex resumed>) = 0 [pid 5254] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5264] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5255] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [ 64.217236][ T5250] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 64.228426][ T5261] loop1: detected capacity change from 0 to 2048 [ 64.251076][ T5250] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5081] getdents64(4, ./strace-static-x86_64: Process 5268 attached [pid 5255] <... write resumed>) = 9 [pid 5081] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5255] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(4, [pid 5255] <... futex resumed>) = 1 [pid 5254] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5255] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5254] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] close(4 [pid 5255] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5254] <... futex resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5255] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5254] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] rmdir("./5/bus" [pid 5255] <... openat resumed>) = 5 [pid 5268] set_robust_list(0x7fa2d46d29e0, 24 [pid 5264] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5255] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... rmdir resumed>) = 0 [pid 5256] <... mount resumed>) = 0 [pid 5255] <... futex resumed>) = 1 [pid 5081] getdents64(3, [pid 5254] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5255] open("./bus", O_RDWR [pid 5254] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5268] <... set_robust_list resumed>) = 0 [pid 5256] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5255] <... open resumed>) = 6 [pid 5254] <... futex resumed>) = 0 [pid 5081] close(3 [pid 5254] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... close resumed>) = 0 [pid 5255] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] rmdir("./5" [pid 5256] <... openat resumed>) = 3 [pid 5247] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 5255] <... futex resumed>) = 1 [pid 5254] <... futex resumed>) = 0 [pid 5256] chdir("./bus" [pid 5255] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5254] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... rmdir resumed>) = 0 [pid 5256] <... chdir resumed>) = 0 [pid 5264] <... write resumed>) = 1048576 [pid 5256] ioctl(4, LOOP_CLR_FD [pid 5255] <... mmap resumed>) = 0x20000000 [pid 5254] <... futex resumed>) = 0 [pid 5081] mkdir("./6", 0777 [pid 5256] <... ioctl resumed>) = 0 [pid 5254] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5256] close(4 [pid 5255] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... mkdir resumed>) = 0 [pid 5264] munmap(0x7fa2d45d3000, 1048576 [pid 5256] <... close resumed>) = 0 [pid 5255] <... futex resumed>) = 1 [pid 5254] <... futex resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5256] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5254] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... openat resumed>) = 3 [pid 5254] <... futex resumed>) = 0 [pid 5255] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5256] <... futex resumed>) = 1 [pid 5253] <... futex resumed>) = 0 [pid 5255] sendfile(4, 5, NULL, 2147483713 [ 64.268559][ T5250] EXT4-fs (loop0): This should not happen!! Data will be lost [ 64.268559][ T5250] [ 64.281187][ T5250] EXT4-fs (loop0): Total free blocks count 0 [ 64.289456][ T5250] EXT4-fs (loop0): Free/Dirty block details [ 64.298167][ T5250] EXT4-fs (loop0): free_blocks=2415919104 [ 64.305485][ T5250] EXT4-fs (loop0): dirty_blocks=16 [ 64.312002][ T5250] EXT4-fs (loop0): Block reservation details [pid 5254] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5268] creat(0x200001c0, 0420 [pid 5256] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5253] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5268] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5264] <... munmap resumed>) = 0 [pid 5256] <... open resumed>) = 4 [pid 5253] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] close(3 [pid 5268] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5256] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... close resumed>) = 0 [pid 5268] <... futex resumed>) = 0 [pid 5264] <... openat resumed>) = 4 [pid 5256] <... futex resumed>) = 1 [pid 5253] <... futex resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5268] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5264] ioctl(4, LOOP_SET_FD, 3 [pid 5256] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5253] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5256] <... write resumed>) = 9 [pid 5253] <... futex resumed>) = 0 [pid 5256] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5264] <... ioctl resumed>) = 0 [pid 5256] <... futex resumed>) = 0 [pid 5253] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5270 [pid 5256] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5253] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5256] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5253] <... futex resumed>) = 0 [pid 5264] close(3 [pid 5256] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5253] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5264] <... close resumed>) = 0 [pid 5256] <... openat resumed>) = 5 [pid 5250] <... sendfile resumed>) = 117 [pid 5264] mkdir("./bus", 0777 [pid 5256] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5253] <... futex resumed>) = 0 [pid 5250] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] <... mkdir resumed>) = 0 [pid 5256] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5253] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5250] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5270 attached [pid 5264] mount("/dev/loop3", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5256] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5253] <... futex resumed>) = 0 [pid 5250] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] exit_group(0 [pid 5270] set_robust_list(0x555555adb5e0, 24 [pid 5268] <... futex resumed>) = ? [pid 5261] <... mount resumed>) = 0 [pid 5256] open("./bus", O_RDWR [pid 5253] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5250] <... futex resumed>) = ? [pid 5247] <... exit_group resumed>) = ? [pid 5270] <... set_robust_list resumed>) = 0 [pid 5268] +++ exited with 0 +++ [pid 5261] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5256] <... open resumed>) = 6 [pid 5250] +++ exited with 0 +++ [pid 5270] chdir("./6" [pid 5261] <... openat resumed>) = 3 [pid 5256] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5270] <... chdir resumed>) = 0 [pid 5261] chdir("./bus" [pid 5256] <... futex resumed>) = 1 [pid 5253] <... futex resumed>) = 0 [pid 5247] +++ exited with 0 +++ [pid 5270] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5261] <... chdir resumed>) = 0 [pid 5256] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5253] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5270] <... prctl resumed>) = 0 [pid 5261] ioctl(4, LOOP_CLR_FD [pid 5256] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5254] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5253] <... futex resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5247, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5270] setpgid(0, 0 [pid 5261] <... ioctl resumed>) = 0 [pid 5256] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5254] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [ 64.319303][ T5250] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 64.340670][ T5264] loop3: detected capacity change from 0 to 2048 [ 64.342143][ T5255] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5253] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5270] <... setpgid resumed>) = 0 [pid 5261] close(4 [pid 5256] <... mmap resumed>) = 0x20000000 [pid 5254] <... futex resumed>) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5270] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5261] <... close resumed>) = 0 [pid 5256] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5270] <... openat resumed>) = 3 [pid 5261] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5256] <... futex resumed>) = 1 [pid 5254] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5253] <... futex resumed>) = 0 [pid 5270] write(3, "1000", 4 [pid 5261] <... futex resumed>) = 1 [pid 5260] <... futex resumed>) = 0 [pid 5256] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5253] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5270] <... write resumed>) = 4 [pid 5261] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5260] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5256] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5253] <... futex resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5270] close(3 [pid 5264] <... mount resumed>) = 0 [pid 5261] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 64.383270][ T5255] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 64.396307][ T5255] EXT4-fs (loop4): This should not happen!! Data will be lost [ 64.396307][ T5255] [ 64.406949][ T5255] EXT4-fs (loop4): Total free blocks count 0 [pid 5260] <... futex resumed>) = 0 [pid 5256] sendfile(4, 5, NULL, 2147483713 [pid 5254] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5253] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5270] <... close resumed>) = 0 [pid 5264] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5261] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5260] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... openat resumed>) = 3 [pid 5270] symlink("/dev/binderfs", "./binderfs" [pid 5264] <... openat resumed>) = 3 [pid 5261] <... open resumed>) = 4 [pid 5254] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5076] fstat(3, [pid 5270] <... symlink resumed>) = 0 [pid 5264] chdir("./bus" [pid 5261] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5254] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5270] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] <... chdir resumed>) = 0 [pid 5261] <... futex resumed>) = 1 [pid 5260] <... futex resumed>) = 0 [pid 5255] <... sendfile resumed>) = 117 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5254] <... clone resumed>, parent_tid=[5274], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5274 [pid 5254] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5254] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5274 attached [pid 5274] set_robust_list(0x7fa2d46d29e0, 24) = 0 [pid 5274] creat(0x200001c0, 0420) = -1 EISDIR (Is a directory) [pid 5274] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5254] <... futex resumed>) = 0 [ 64.433267][ T5255] EXT4-fs (loop4): Free/Dirty block details [ 64.439227][ T5255] EXT4-fs (loop4): free_blocks=2415919104 [ 64.441374][ T5256] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 64.452074][ T5255] EXT4-fs (loop4): dirty_blocks=16 [ 64.465221][ T5255] EXT4-fs (loop4): Block reservation details [ 64.471354][ T5255] EXT4-fs (loop4): i_reserved_data_blocks=1 [pid 5274] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5270] <... futex resumed>) = 0 [pid 5264] ioctl(4, LOOP_CLR_FD [pid 5261] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5260] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] getdents64(3, [pid 5260] <... futex resumed>) = 0 [pid 5254] exit_group(0 [pid 5255] <... futex resumed>) = -1 (errno 18446744073709551555) [pid 5274] <... futex resumed>) = ? [pid 5270] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5264] <... ioctl resumed>) = 0 [pid 5261] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5260] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5255] +++ exited with 0 +++ [pid 5254] <... exit_group resumed>) = ? [pid 5076] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5274] +++ exited with 0 +++ [pid 5254] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5254, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5080] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5080] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, 0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5080] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./5/binderfs") = 0 [pid 5080] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5270] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5264] close(4 [pid 5261] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5076] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5253] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5253] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5253] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2d46b2000 [pid 5253] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5253] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5275], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5275 [pid 5253] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5253] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] unlink("./5/binderfs") = 0 [pid 5076] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5261] <... write resumed>) = 9 [pid 5261] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5260] <... futex resumed>) = 0 [pid 5261] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 64.479815][ T5256] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 64.495001][ T5256] EXT4-fs (loop2): This should not happen!! Data will be lost [ 64.495001][ T5256] [ 64.505547][ T5116] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 64.506192][ T5256] EXT4-fs (loop2): Total free blocks count 0 [ 64.519272][ T5116] EXT4-fs (loop4): This should not happen!! Data will be lost [ 64.519272][ T5116] [pid 5260] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5270] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5264] <... close resumed>) = 0 [pid 5261] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5260] <... futex resumed>) = 0 [pid 5264] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5261] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5260] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5270] <... mprotect resumed>) = 0 [pid 5261] <... openat resumed>) = 5 [pid 5261] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5270] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5264] <... futex resumed>) = 1 [pid 5262] <... futex resumed>) = 0 [pid 5261] <... futex resumed>) = 1 [pid 5260] <... futex resumed>) = 0 [pid 5264] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5262] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5261] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5260] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5270] <... clone resumed>, parent_tid=[5276], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5276 [pid 5261] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5260] <... futex resumed>) = 0 [pid 5262] <... futex resumed>) = 0 [pid 5261] open("./bus", O_RDWR [pid 5260] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5270] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] <... open resumed>) = 4 [pid 5262] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5261] <... open resumed>) = 6 ./strace-static-x86_64: Process 5275 attached [pid 5270] <... futex resumed>) = 0 [pid 5264] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5262] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5275] set_robust_list(0x7fa2d46d29e0, 24 [pid 5270] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5264] <... futex resumed>) = 0 [pid 5262] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5261] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] <... set_robust_list resumed>) = 0 [pid 5264] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5262] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5276 attached [pid 5262] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5276] set_robust_list(0x7fa2dc9f39e0, 24) = 0 [pid 5276] memfd_create("syzkaller", 0) = 3 [pid 5261] <... futex resumed>) = 1 [pid 5276] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5264] <... write resumed>) = 9 [pid 5260] <... futex resumed>) = 0 [pid 5276] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5264] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5262] <... futex resumed>) = 0 [pid 5261] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5260] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5262] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5264] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5262] <... futex resumed>) = 0 [pid 5264] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5262] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5264] <... openat resumed>) = 5 [pid 5264] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5262] <... futex resumed>) = 0 [pid 5264] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5262] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5262] <... futex resumed>) = 0 [pid 5264] open("./bus", O_RDWR [pid 5262] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5264] <... open resumed>) = 6 [pid 5261] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5260] <... futex resumed>) = 0 [pid 5264] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5261] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5260] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 64.534524][ T56] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 64.553243][ T5256] EXT4-fs (loop2): Free/Dirty block details [ 64.559414][ T5256] EXT4-fs (loop2): free_blocks=2415919104 [ 64.566018][ T5256] EXT4-fs (loop2): dirty_blocks=16 [ 64.572149][ T5256] EXT4-fs (loop2): Block reservation details [ 64.579182][ T5256] EXT4-fs (loop2): i_reserved_data_blocks=1 [pid 5276] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5275] creat(0x200001c0, 0420 [pid 5264] <... futex resumed>) = 1 [pid 5262] <... futex resumed>) = 0 [pid 5261] <... mmap resumed>) = 0x20000000 [pid 5256] <... sendfile resumed>) = 117 [pid 5276] <... write resumed>) = 1048576 [pid 5275] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5264] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5262] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5261] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5256] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5276] munmap(0x7fa2d45d3000, 1048576 [pid 5275] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5262] <... futex resumed>) = 0 [pid 5261] <... futex resumed>) = 1 [pid 5260] <... futex resumed>) = 0 [pid 5256] <... futex resumed>) = 0 [pid 5276] <... munmap resumed>) = 0 [pid 5261] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5260] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5256] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5276] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5275] <... futex resumed>) = 0 [pid 5264] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5262] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5261] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5260] <... futex resumed>) = 0 [pid 5253] exit_group(0 [pid 5276] <... openat resumed>) = 4 [pid 5264] <... mmap resumed>) = 0x20000000 [pid 5261] sendfile(4, 5, NULL, 2147483713 [pid 5260] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5256] <... futex resumed>) = ? [pid 5253] <... exit_group resumed>) = ? [pid 5276] ioctl(4, LOOP_SET_FD, 3 [pid 5275] +++ exited with 0 +++ [pid 5256] +++ exited with 0 +++ [pid 5253] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5253, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5078] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5078] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5264] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5264] <... futex resumed>) = 1 [pid 5262] <... futex resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = 0 [pid 5276] <... ioctl resumed>) = 0 [pid 5078] fstat(3, [pid 5276] close(3 [pid 5264] sendfile(4, 5, NULL, 2147483713 [pid 5262] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5276] <... close resumed>) = 0 [pid 5262] <... futex resumed>) = 0 [pid 5078] getdents64(3, [pid 5276] mkdir("./bus", 0777 [pid 5078] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5276] <... mkdir resumed>) = 0 [pid 5078] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5276] mount("/dev/loop5", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5262] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5260] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5078] lstat("./5/binderfs", [pid 5260] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5260] <... futex resumed>) = 0 [pid 5078] unlink("./5/binderfs" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5260] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... unlink resumed>) = 0 [ 64.617393][ T5276] loop5: detected capacity change from 0 to 2048 [ 64.639153][ T5261] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5076] lstat("./5/bus", [pid 5260] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5080] lstat("./5/bus", [pid 5078] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5260] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5260] <... mprotect resumed>) = 0 [pid 5080] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5260] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5260] <... clone resumed>, parent_tid=[5277], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5277 [pid 5080] <... openat resumed>) = 4 [pid 5260] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] fstat(4, [pid 5076] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5277 attached [pid 5260] <... futex resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] fstat(4, [pid 5277] set_robust_list(0x7fa2d46d29e0, 24 [pid 5260] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] getdents64(4, [pid 5277] <... set_robust_list resumed>) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [ 64.647926][ T5264] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 64.678678][ T33] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5276] <... mount resumed>) = 0 [pid 5080] getdents64(4, [pid 5076] getdents64(4, [pid 5276] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5276] chdir("./bus") = 0 [pid 5276] ioctl(4, LOOP_CLR_FD) = 0 [pid 5276] close(4) = 0 [pid 5276] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5262] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5276] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5076] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5270] <... futex resumed>) = 0 [pid 5262] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] close(4 [pid 5076] getdents64(4, [pid 5270] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5262] <... futex resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5276] <... futex resumed>) = 0 [pid 5270] <... futex resumed>) = 1 [pid 5262] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] rmdir("./5/bus" [pid 5076] close(4 [pid 5276] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5270] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5262] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5276] <... open resumed>) = 4 [pid 5262] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... rmdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5276] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5262] <... mprotect resumed>) = 0 [pid 5080] getdents64(3, [pid 5076] rmdir("./5/bus" [pid 5276] <... futex resumed>) = 1 [pid 5270] <... futex resumed>) = 0 [pid 5262] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5276] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5270] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... rmdir resumed>) = 0 [pid 5276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5270] <... futex resumed>) = 0 [pid 5262] <... clone resumed>, parent_tid=[5280], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5280 [pid 5080] close(3 [pid 5076] getdents64(3, [pid 5276] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5270] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5262] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5276] <... write resumed>) = 9 [pid 5262] <... futex resumed>) = 0 [pid 5080] rmdir("./5" [pid 5076] close(3 [pid 5276] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5262] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5276] <... futex resumed>) = 1 [pid 5270] <... futex resumed>) = 0 [ 64.704692][ T5264] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 64.706839][ T33] EXT4-fs (loop2): This should not happen!! Data will be lost [ 64.706839][ T33] [ 64.718909][ T5264] EXT4-fs (loop3): This should not happen!! Data will be lost [ 64.718909][ T5264] [ 64.739534][ T5261] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5080] <... rmdir resumed>) = 0 [pid 5276] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5270] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... close resumed>) = 0 [pid 5276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5270] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5280 attached [pid 5276] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5270] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5280] set_robust_list(0x7fa2d46d29e0, 24 [pid 5276] <... openat resumed>) = 5 [pid 5280] <... set_robust_list resumed>) = 0 [pid 5276] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5270] <... futex resumed>) = 0 [pid 5276] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5270] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5270] <... futex resumed>) = 0 [pid 5276] open("./bus", O_RDWR [pid 5270] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5276] <... open resumed>) = 6 [pid 5276] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5270] <... futex resumed>) = 0 [pid 5276] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5270] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5270] <... futex resumed>) = 0 [pid 5276] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5270] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5276] <... mmap resumed>) = 0x20000000 [pid 5276] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] mkdir("./6", 0777 [pid 5076] rmdir("./5" [pid 5276] <... futex resumed>) = 1 [pid 5270] <... futex resumed>) = 0 [pid 5276] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5270] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5270] <... futex resumed>) = 0 [pid 5276] sendfile(4, 5, NULL, 2147483713 [ 64.771137][ T5264] EXT4-fs (loop3): Total free blocks count 0 [ 64.773383][ T5261] EXT4-fs (loop1): This should not happen!! Data will be lost [ 64.773383][ T5261] [ 64.787693][ T5261] EXT4-fs (loop1): Total free blocks count 0 [ 64.795748][ T5261] EXT4-fs (loop1): Free/Dirty block details [ 64.801873][ T5261] EXT4-fs (loop1): free_blocks=2415919104 [pid 5270] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5277] creat(0x200001c0, 0420 [pid 5262] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5261] <... sendfile resumed>) = 117 [pid 5080] <... mkdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5277] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5261] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] mkdir("./6", 0777 [pid 5277] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5261] <... futex resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5078] <... umount2 resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5277] <... futex resumed>) = 0 [pid 5260] exit_group(0 [pid 5078] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5260] <... exit_group resumed>) = ? [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 64.807180][ T5276] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 64.807864][ T5261] EXT4-fs (loop1): dirty_blocks=16 [ 64.828199][ T5261] EXT4-fs (loop1): Block reservation details [ 64.834287][ T5261] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 64.843339][ T5264] EXT4-fs (loop3): Free/Dirty block details [ 64.849248][ T5264] EXT4-fs (loop3): free_blocks=2415919104 [ 64.857989][ T5264] EXT4-fs (loop3): dirty_blocks=16 [pid 5076] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5277] +++ exited with 0 +++ [pid 5261] +++ exited with 0 +++ [pid 5260] +++ exited with 0 +++ [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] lstat("./5/bus", [pid 5270] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5260, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5270] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5270] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5270] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5270] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5078] <... openat resumed>) = 4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5270] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5078] fstat(4, [pid 5077] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5270] <... mprotect resumed>) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5270] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5078] getdents64(4, [pid 5077] fstat(3, [pid 5078] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5270] <... clone resumed>, parent_tid=[5281], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5281 [pid 5078] getdents64(4, [pid 5077] getdents64(3, [pid 5270] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5077] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5270] <... futex resumed>) = 0 [pid 5078] close(4 [pid 5077] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5270] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] rmdir("./5/bus" [pid 5077] lstat("./5/binderfs", [pid 5078] <... rmdir resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] getdents64(3, [pid 5077] unlink("./5/binderfs" [pid 5078] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5078] close(3 [pid 5077] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] close(3 [pid 5078] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5281 attached [pid 5078] rmdir("./5" [pid 5281] set_robust_list(0x7fa2d46d29e0, 24 [pid 5078] <... rmdir resumed>) = 0 [pid 5281] <... set_robust_list resumed>) = 0 [pid 5078] mkdir("./6", 0777) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5078] close(3) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555adb5d0) = 5282 [ 64.867803][ T5264] EXT4-fs (loop3): Block reservation details [ 64.873262][ T5276] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 64.887137][ T5276] EXT4-fs (loop5): This should not happen!! Data will be lost [ 64.887137][ T5276] [ 64.887176][ T5116] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 64.896893][ T5276] EXT4-fs (loop5): Total free blocks count 0 [ 64.909750][ T5264] EXT4-fs (loop3): i_reserved_data_blocks=1 [pid 5080] <... close resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5280] creat(0x200001c0, 0420) = -1 EISDIR (Is a directory) [pid 5280] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5280] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5264] <... sendfile resumed>) = 117 [pid 5264] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5264] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5262] exit_group(0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5280] <... futex resumed>) = ? [pid 5270] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5264] <... futex resumed>) = ? [pid 5262] <... exit_group resumed>) = ? [pid 5280] +++ exited with 0 +++ [pid 5264] +++ exited with 0 +++ [pid 5076] close(3./strace-static-x86_64: Process 5283 attached [pid 5283] set_robust_list(0x555555adb5e0, 24) = 0 [pid 5262] +++ exited with 0 +++ [pid 5076] <... close resumed>) = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5262, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- ./strace-static-x86_64: Process 5282 attached [pid 5079] restart_syscall(<... resuming interrupted clone ...> [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5283 [pid 5079] <... restart_syscall resumed>) = 0 [pid 5079] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5079] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(3, 0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5079] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] unlink("./6/binderfs") = 0 [pid 5079] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5283] chdir("./6") = 0 [pid 5283] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5282] set_robust_list(0x555555adb5e0, 24 [pid 5076] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5284 [pid 5282] <... set_robust_list resumed>) = 0 [pid 5283] <... prctl resumed>) = 0 [pid 5283] setpgid(0, 0) = 0 [pid 5283] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5282] chdir("./6") = 0 [ 64.915995][ T5276] EXT4-fs (loop5): Free/Dirty block details [ 64.931140][ T5116] EXT4-fs (loop1): This should not happen!! Data will be lost [ 64.931140][ T5116] [ 64.945330][ T5276] EXT4-fs (loop5): free_blocks=2415919104 [ 64.953218][ T5276] EXT4-fs (loop5): dirty_blocks=16 [ 64.957249][ T33] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5282] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 5284 attached [pid 5283] write(3, "1000", 4 [pid 5282] setpgid(0, 0 [pid 5283] <... write resumed>) = 4 [pid 5283] close(3) = 0 [pid 5283] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5283] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5283] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2dc9d3000 [pid 5283] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5284] set_robust_list(0x555555adb5e0, 24 [pid 5283] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5282] <... setpgid resumed>) = 0 [pid 5281] creat(0x200001c0, 0420 [pid 5276] <... sendfile resumed>) = 117 [pid 5284] <... set_robust_list resumed>) = 0 [pid 5282] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5281] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5276] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] <... clone resumed>, parent_tid=[5285], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5285 [pid 5281] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5281] <... futex resumed>) = 0 [pid 5283] <... futex resumed>) = 0 [pid 5281] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5270] exit_group(0 [pid 5283] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5281] <... futex resumed>) = ? [pid 5270] <... exit_group resumed>) = ? [pid 5281] +++ exited with 0 +++ ./strace-static-x86_64: Process 5285 attached [pid 5284] chdir("./6" [pid 5282] <... openat resumed>) = 3 [pid 5276] <... futex resumed>) = ? [pid 5285] set_robust_list(0x7fa2dc9f39e0, 24) = 0 [pid 5285] memfd_create("syzkaller", 0 [pid 5276] +++ exited with 0 +++ [pid 5270] +++ exited with 0 +++ [pid 5285] <... memfd_create resumed>) = 3 [pid 5284] <... chdir resumed>) = 0 [pid 5282] write(3, "1000", 4 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5270, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5285] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5285] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5284] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5282] <... write resumed>) = 4 [pid 5081] <... restart_syscall resumed>) = 0 [pid 5284] <... prctl resumed>) = 0 [pid 5282] close(3 [pid 5284] setpgid(0, 0 [pid 5282] <... close resumed>) = 0 [pid 5284] <... setpgid resumed>) = 0 [pid 5282] symlink("/dev/binderfs", "./binderfs" [pid 5284] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5282] <... symlink resumed>) = 0 [pid 5081] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5284] <... openat resumed>) = 3 [pid 5282] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5284] write(3, "1000", 4 [pid 5282] <... futex resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5284] <... write resumed>) = 4 [pid 5282] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5284] close(3 [pid 5282] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5081] <... openat resumed>) = 3 [pid 5284] <... close resumed>) = 0 [pid 5282] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5081] fstat(3, [pid 5284] symlink("/dev/binderfs", "./binderfs" [pid 5282] <... mprotect resumed>) = 0 [pid 5284] <... symlink resumed>) = 0 [pid 5282] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5284] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5284] <... futex resumed>) = 0 [pid 5282] <... clone resumed>, parent_tid=[5286], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5286 [pid 5081] getdents64(3, [pid 5284] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5282] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5284] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5282] <... futex resumed>) = 0 [pid 5081] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5284] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5282] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5079] <... umount2 resumed>) = 0 [pid 5284] <... mprotect resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./5/bus", ./strace-static-x86_64: Process 5286 attached [pid 5284] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] lstat("./6/binderfs", [pid 5286] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5286] <... set_robust_list resumed>) = 0 [pid 5284] <... clone resumed>, parent_tid=[5287], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5287 [pid 5081] unlink("./6/binderfs" [pid 5077] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5286] memfd_create("syzkaller", 0 [pid 5284] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... unlink resumed>) = 0 [pid 5286] <... memfd_create resumed>) = 3 [pid 5284] <... futex resumed>) = 0 [pid 5081] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5287 attached [pid 5286] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5284] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5287] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5286] <... mmap resumed>) = 0x7fa2d45d3000 [ 64.959225][ T5276] EXT4-fs (loop5): Block reservation details [ 64.978659][ T5276] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 64.989408][ T33] EXT4-fs (loop3): This should not happen!! Data will be lost [ 64.989408][ T33] [pid 5079] lstat("./6/bus", [pid 5287] <... set_robust_list resumed>) = 0 [pid 5286] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5287] memfd_create("syzkaller", 0) = 3 [pid 5079] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5287] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5287] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5079] openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(4, 0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5079] getdents64(4, 0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5079] close(4) = 0 [pid 5079] rmdir("./6/bus") = 0 [pid 5079] getdents64(3, 0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5077] <... openat resumed>) = 4 [pid 5285] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5079] close(3 [pid 5077] fstat(4, [pid 5079] <... close resumed>) = 0 [pid 5079] rmdir("./6") = 0 [pid 5079] mkdir("./7", 0777 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5286] <... write resumed>) = 1048576 [pid 5285] <... write resumed>) = 1048576 [pid 5079] <... mkdir resumed>) = 0 [pid 5077] getdents64(4, [pid 5287] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5079] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5077] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [ 65.044584][ T33] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5079] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5079] close(3 [pid 5077] getdents64(4, [pid 5079] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] close(4 [pid 5285] munmap(0x7fa2d45d3000, 1048576 [pid 5077] <... close resumed>) = 0 [pid 5285] <... munmap resumed>) = 0 [pid 5079] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5288 [pid 5077] rmdir("./5/bus" [pid 5285] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5077] <... rmdir resumed>) = 0 [pid 5285] <... openat resumed>) = 4 [pid 5077] getdents64(3, [pid 5285] ioctl(4, LOOP_SET_FD, 3 [pid 5077] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5288 attached [pid 5288] set_robust_list(0x555555adb5e0, 24) = 0 [pid 5288] chdir("./7") = 0 [pid 5288] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5288] setpgid(0, 0) = 0 [pid 5288] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5287] <... write resumed>) = 1048576 [pid 5077] close(3 [pid 5288] write(3, "1000", 4) = 4 [pid 5285] <... ioctl resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5288] close(3 [pid 5285] close(3 [pid 5288] <... close resumed>) = 0 [pid 5077] rmdir("./5" [pid 5288] symlink("/dev/binderfs", "./binderfs" [pid 5285] <... close resumed>) = 0 [pid 5288] <... symlink resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5288] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5286] munmap(0x7fa2d45d3000, 1048576 [pid 5285] mkdir("./bus", 0777 [pid 5077] mkdir("./6", 0777 [pid 5288] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5286] <... munmap resumed>) = 0 [pid 5285] <... mkdir resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5288] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5286] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5288] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5286] <... openat resumed>) = 4 [pid 5288] <... mprotect resumed>) = 0 [pid 5286] ioctl(4, LOOP_SET_FD, 3 [pid 5077] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5288] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5287] munmap(0x7fa2d45d3000, 1048576 [pid 5285] mount("/dev/loop4", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5077] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5289 attached [pid 5286] <... ioctl resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [ 65.093372][ T33] EXT4-fs (loop5): This should not happen!! Data will be lost [ 65.093372][ T33] [ 65.122190][ T5285] loop4: detected capacity change from 0 to 2048 [pid 5289] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5288] <... clone resumed>, parent_tid=[5289], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5289 [pid 5286] close(3 [pid 5289] <... set_robust_list resumed>) = 0 [pid 5288] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5286] <... close resumed>) = 0 [pid 5289] memfd_create("syzkaller", 0 [pid 5288] <... futex resumed>) = 0 [pid 5286] mkdir("./bus", 0777 [pid 5289] <... memfd_create resumed>) = 3 [pid 5288] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5286] <... mkdir resumed>) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5289] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5286] mount("/dev/loop2", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5077] close(3 [pid 5289] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5289] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5081] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... close resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5287] <... munmap resumed>) = 0 [pid 5081] lstat("./6/bus", [pid 5287] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5287] <... openat resumed>) = 4 [pid 5081] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5291 [pid 5287] ioctl(4, LOOP_SET_FD, 3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5285] <... mount resumed>) = 0 ./strace-static-x86_64: Process 5291 attached [pid 5287] <... ioctl resumed>) = 0 [pid 5285] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5081] openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5291] set_robust_list(0x555555adb5e0, 24 [pid 5287] close(3 [pid 5285] <... openat resumed>) = 3 [pid 5291] <... set_robust_list resumed>) = 0 [pid 5287] <... close resumed>) = 0 [pid 5285] chdir("./bus" [pid 5081] <... openat resumed>) = 4 [pid 5291] chdir("./6" [pid 5287] mkdir("./bus", 0777 [pid 5285] <... chdir resumed>) = 0 [pid 5081] fstat(4, [pid 5291] <... chdir resumed>) = 0 [pid 5285] ioctl(4, LOOP_CLR_FD [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5291] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5289] <... write resumed>) = 1048576 [pid 5287] <... mkdir resumed>) = 0 [pid 5286] <... mount resumed>) = 0 [pid 5285] <... ioctl resumed>) = 0 [pid 5081] getdents64(4, [pid 5291] <... prctl resumed>) = 0 [pid 5287] mount("/dev/loop0", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5286] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5285] close(4 [pid 5081] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5291] setpgid(0, 0 [pid 5289] munmap(0x7fa2d45d3000, 1048576 [pid 5286] <... openat resumed>) = 3 [pid 5285] <... close resumed>) = 0 [pid 5291] <... setpgid resumed>) = 0 [pid 5289] <... munmap resumed>) = 0 [pid 5286] chdir("./bus" [pid 5285] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(4, [pid 5291] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5289] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5286] <... chdir resumed>) = 0 [pid 5285] <... futex resumed>) = 1 [pid 5283] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5291] <... openat resumed>) = 3 [pid 5289] <... openat resumed>) = 4 [pid 5286] ioctl(4, LOOP_CLR_FD [pid 5285] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 65.147515][ T5286] loop2: detected capacity change from 0 to 2048 [ 65.185867][ T5287] loop0: detected capacity change from 0 to 2048 [pid 5283] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] close(4 [pid 5291] write(3, "1000", 4 [pid 5289] ioctl(4, LOOP_SET_FD, 3 [pid 5286] <... ioctl resumed>) = 0 [pid 5285] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5283] <... futex resumed>) = 0 [pid 5291] <... write resumed>) = 4 [pid 5286] close(4 [pid 5285] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5283] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... close resumed>) = 0 [pid 5291] close(3 [pid 5286] <... close resumed>) = 0 [pid 5285] <... open resumed>) = 4 [pid 5081] rmdir("./6/bus" [pid 5285] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5283] <... futex resumed>) = 0 [pid 5285] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5283] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] <... close resumed>) = 0 [pid 5286] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5285] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5283] <... futex resumed>) = 0 [pid 5291] symlink("/dev/binderfs", "./binderfs" [pid 5286] <... futex resumed>) = 1 [pid 5285] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5283] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5282] <... futex resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5291] <... symlink resumed>) = 0 [pid 5286] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5285] <... write resumed>) = 9 [pid 5282] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(3, [pid 5291] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] <... ioctl resumed>) = 0 [pid 5286] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5285] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5291] <... futex resumed>) = 0 [pid 5289] close(3 [pid 5286] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5285] <... futex resumed>) = 1 [pid 5283] <... futex resumed>) = 0 [pid 5282] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] close(3 [pid 5291] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5289] <... close resumed>) = 0 [pid 5286] <... open resumed>) = 4 [pid 5285] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5283] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... close resumed>) = 0 [pid 5291] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5081] rmdir("./6" [pid 5291] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5289] mkdir("./bus", 0777 [pid 5287] <... mount resumed>) = 0 [pid 5286] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5285] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5283] <... futex resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5291] <... mprotect resumed>) = 0 [pid 5287] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5286] <... futex resumed>) = 1 [pid 5285] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5283] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5282] <... futex resumed>) = 0 [pid 5081] mkdir("./7", 0777 [pid 5291] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5287] <... openat resumed>) = 3 [pid 5286] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5285] <... openat resumed>) = 5 [pid 5282] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5297 attached [pid 5289] <... mkdir resumed>) = 0 [pid 5287] chdir("./bus" [pid 5285] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] <... futex resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5286] <... write resumed>) = 9 [pid 5297] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5291] <... clone resumed>, parent_tid=[5297], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5297 [pid 5289] mount("/dev/loop3", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5287] <... chdir resumed>) = 0 [pid 5286] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5285] <... futex resumed>) = 1 [pid 5283] <... futex resumed>) = 0 [pid 5282] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... openat resumed>) = 3 [pid 5297] <... set_robust_list resumed>) = 0 [pid 5291] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] ioctl(4, LOOP_CLR_FD [pid 5286] <... futex resumed>) = 0 [pid 5285] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5283] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5297] memfd_create("syzkaller", 0 [pid 5291] <... futex resumed>) = 0 [pid 5287] <... ioctl resumed>) = 0 [pid 5286] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5285] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5283] <... futex resumed>) = 0 [pid 5282] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5297] <... memfd_create resumed>) = 3 [pid 5291] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5287] close(4 [pid 5286] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5285] open("./bus", O_RDWR [pid 5283] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5282] <... futex resumed>) = 0 [pid 5081] close(3 [pid 5297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5287] <... close resumed>) = 0 [pid 5286] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5285] <... open resumed>) = 6 [pid 5282] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... close resumed>) = 0 [pid 5297] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5287] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5286] <... openat resumed>) = 5 [pid 5285] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5287] <... futex resumed>) = 1 [pid 5286] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5285] <... futex resumed>) = 1 [pid 5284] <... futex resumed>) = 0 [pid 5283] <... futex resumed>) = 0 [ 65.219844][ T5289] loop3: detected capacity change from 0 to 2048 [pid 5297] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5287] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5286] <... futex resumed>) = 1 [pid 5285] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5284] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] <... futex resumed>) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5300 ./strace-static-x86_64: Process 5300 attached [pid 5297] <... write resumed>) = 1048576 [pid 5289] <... mount resumed>) = 0 [pid 5287] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5286] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5285] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5284] <... futex resumed>) = 0 [pid 5283] <... futex resumed>) = 0 [pid 5282] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5300] set_robust_list(0x555555adb5e0, 24 [pid 5289] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5287] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5286] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5285] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5284] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5283] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5282] <... futex resumed>) = 0 [pid 5300] <... set_robust_list resumed>) = 0 [pid 5300] chdir("./7") = 0 [pid 5300] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5289] <... openat resumed>) = 3 [pid 5300] setpgid(0, 0 [pid 5286] open("./bus", O_RDWR [pid 5300] <... setpgid resumed>) = 0 [pid 5289] chdir("./bus" [pid 5286] <... open resumed>) = 6 [pid 5285] <... mmap resumed>) = 0x20000000 [pid 5282] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5289] <... chdir resumed>) = 0 [pid 5287] <... open resumed>) = 4 [pid 5286] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5285] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5300] <... openat resumed>) = 3 [pid 5289] ioctl(4, LOOP_CLR_FD [pid 5300] write(3, "1000", 4) = 4 [pid 5300] close(3) = 0 [pid 5300] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5289] <... ioctl resumed>) = 0 [pid 5287] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5286] <... futex resumed>) = 0 [pid 5285] <... futex resumed>) = 1 [pid 5283] <... futex resumed>) = 0 [pid 5282] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5300] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] close(4 [pid 5287] <... futex resumed>) = 1 [pid 5286] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5285] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5284] <... futex resumed>) = 0 [pid 5283] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] <... futex resumed>) = 0 [pid 5300] <... futex resumed>) = 0 [pid 5297] munmap(0x7fa2d45d3000, 1048576 [pid 5289] <... close resumed>) = 0 [pid 5287] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5300] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5297] <... munmap resumed>) = 0 [pid 5289] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5286] <... mmap resumed>) = 0x20000000 [pid 5285] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5284] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] <... futex resumed>) = 0 [pid 5282] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5300] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5297] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5289] <... futex resumed>) = 1 [pid 5288] <... futex resumed>) = 0 [pid 5287] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5286] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5285] sendfile(4, 5, NULL, 2147483713 [pid 5284] <... futex resumed>) = 0 [pid 5283] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5282] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5300] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5297] <... openat resumed>) = 4 [pid 5289] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5288] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5286] <... futex resumed>) = 0 [pid 5284] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5282] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5300] <... mprotect resumed>) = 0 [pid 5297] ioctl(4, LOOP_SET_FD, 3 [pid 5289] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5288] <... futex resumed>) = 0 [pid 5287] <... write resumed>) = 9 [pid 5286] sendfile(4, 5, NULL, 2147483713 [pid 5282] <... futex resumed>) = 0 [pid 5300] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5289] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5288] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5287] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5287] <... futex resumed>) = 1 [pid 5284] <... futex resumed>) = 0 [pid 5300] <... clone resumed>, parent_tid=[5301], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5301 [pid 5289] <... open resumed>) = 4 [pid 5287] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5284] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5300] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5284] <... futex resumed>) = 0 [pid 5300] <... futex resumed>) = 0 [pid 5289] <... futex resumed>) = 1 [pid 5288] <... futex resumed>) = 0 [pid 5287] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5284] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5300] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5289] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5288] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] <... openat resumed>) = 5 ./strace-static-x86_64: Process 5301 attached [pid 5289] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5288] <... futex resumed>) = 0 [pid 5287] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5301] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5289] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5287] <... futex resumed>) = 1 [pid 5284] <... futex resumed>) = 0 [pid 5301] <... set_robust_list resumed>) = 0 [ 65.347328][ T5285] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 65.348698][ T5297] loop1: detected capacity change from 0 to 2048 [ 65.367107][ T5285] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 65.381389][ T5285] EXT4-fs (loop4): This should not happen!! Data will be lost [ 65.381389][ T5285] [pid 5301] memfd_create("syzkaller", 0 [pid 5297] <... ioctl resumed>) = 0 [pid 5289] <... write resumed>) = 9 [pid 5287] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5285] <... sendfile resumed>) = 117 [pid 5284] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5282] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5301] <... memfd_create resumed>) = 3 [pid 5297] close(3 [pid 5289] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5285] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5284] <... futex resumed>) = 0 [pid 5283] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5301] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5297] <... close resumed>) = 0 [pid 5289] <... futex resumed>) = 1 [pid 5287] open("./bus", O_RDWR [pid 5285] <... futex resumed>) = 0 [pid 5284] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5283] <... futex resumed>) = 0 [pid 5282] <... futex resumed>) = 0 [pid 5301] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5297] mkdir("./bus", 0777 [pid 5289] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5287] <... open resumed>) = 6 [pid 5285] creat(0x200001c0, 0420 [pid 5283] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5282] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5301] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5297] <... mkdir resumed>) = 0 [pid 5287] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5285] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5282] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5301] <... write resumed>) = 1048576 [pid 5297] mount("/dev/loop1", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5287] <... futex resumed>) = 1 [pid 5285] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5284] <... futex resumed>) = 0 [pid 5282] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5287] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5285] <... futex resumed>) = 1 [pid 5284] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] <... futex resumed>) = 0 [pid 5282] <... mprotect resumed>) = 0 [pid 5287] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5285] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5284] <... futex resumed>) = 0 [pid 5283] exit_group(0 [pid 5282] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5287] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5285] <... futex resumed>) = ? [pid 5284] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5283] <... exit_group resumed>) = ? [pid 5287] <... mmap resumed>) = 0x20000000 [pid 5285] +++ exited with 0 +++ [pid 5283] +++ exited with 0 +++ [pid 5282] <... clone resumed>, parent_tid=[5302], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5302 [pid 5287] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] <... futex resumed>) = 1 [pid 5284] <... futex resumed>) = 0 [pid 5282] <... futex resumed>) = 0 [pid 5287] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5284] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [ 65.392193][ T5285] EXT4-fs (loop4): Total free blocks count 0 [ 65.392245][ T5286] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1095: group 0, [ 65.398256][ T5285] EXT4-fs (loop4): Free/Dirty block details [ 65.398276][ T5285] EXT4-fs (loop4): free_blocks=2415919104 [ 65.398353][ T5285] EXT4-fs (loop4): dirty_blocks=16 [ 65.398369][ T5285] EXT4-fs (loop4): Block reservation details [ 65.398381][ T5285] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 65.435624][ T5286] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5282] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5288] <... futex resumed>) = 0 [pid 5287] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5284] <... futex resumed>) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5283, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5287] sendfile(4, 5, NULL, 2147483713 [pid 5284] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5288] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5302 attached [pid 5302] set_robust_list(0x7fa2d46d29e0, 24) = 0 [pid 5301] munmap(0x7fa2d45d3000, 1048576) = 0 [pid 5301] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5301] ioctl(4, LOOP_SET_FD, 3 [pid 5289] <... futex resumed>) = 0 [pid 5288] <... futex resumed>) = 1 [pid 5289] openat(AT_FDCWD, "./bus", O_RDONLY) = 5 [pid 5289] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5289] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5301] <... ioctl resumed>) = 0 [pid 5301] close(3) = 0 [pid 5301] mkdir("./bus", 0777 [pid 5282] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5301] <... mkdir resumed>) = 0 [pid 5288] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5288] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5288] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5289] <... futex resumed>) = 0 [pid 5288] <... futex resumed>) = 1 [pid 5080] <... openat resumed>) = 3 [pid 5289] open("./bus", O_RDWR) = 6 [pid 5288] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5289] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] fstat(3, [pid 5289] <... futex resumed>) = 0 [pid 5289] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5301] mount("/dev/loop5", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5288] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5288] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] getdents64(3, [pid 5289] <... futex resumed>) = 0 [pid 5288] <... futex resumed>) = 1 [pid 5289] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5288] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5289] <... mmap resumed>) = 0x20000000 [pid 5289] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5289] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5288] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5288] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5288] <... futex resumed>) = 1 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5289] <... futex resumed>) = 0 [ 65.447247][ T5286] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 65.454009][ T5287] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 65.460219][ T5286] EXT4-fs (loop2): This should not happen!! Data will be lost [ 65.460219][ T5286] [ 65.479476][ T5301] loop5: detected capacity change from 0 to 2048 [ 65.485222][ T5286] EXT4-fs (loop2): Total free blocks count 0 [pid 5288] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5297] <... mount resumed>) = 0 [pid 5289] sendfile(4, 5, NULL, 2147483713 [pid 5080] lstat("./6/binderfs", [pid 5297] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5297] chdir("./bus") = 0 [pid 5297] ioctl(4, LOOP_CLR_FD) = 0 [pid 5297] close(4) = 0 [pid 5284] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5297] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5284] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5297] <... futex resumed>) = 1 [pid 5284] <... futex resumed>) = 0 [pid 5297] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5284] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2d46b2000 [pid 5284] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5284] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5305], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5305 [pid 5284] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 65.505121][ T5286] EXT4-fs (loop2): Free/Dirty block details [ 65.514561][ T5286] EXT4-fs (loop2): free_blocks=2415919104 [ 65.527533][ T5289] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 65.538130][ T5287] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5284] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5291] <... futex resumed>) = 0 [pid 5080] unlink("./6/binderfs" [pid 5291] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] <... unlink resumed>) = 0 [pid 5297] <... futex resumed>) = 0 [pid 5291] <... futex resumed>) = 1 [pid 5288] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5297] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5291] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5288] <... futex resumed>) = 0 [pid 5297] <... open resumed>) = 4 [pid 5288] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5297] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5297] <... futex resumed>) = 1 [pid 5291] <... futex resumed>) = 0 [pid 5288] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5297] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5291] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5297] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5291] <... futex resumed>) = 0 [pid 5288] <... mprotect resumed>) = 0 [pid 5284] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 65.553885][ T5286] EXT4-fs (loop2): dirty_blocks=16 [ 65.558006][ T5287] EXT4-fs (loop0): This should not happen!! Data will be lost [ 65.558006][ T5287] [ 65.569557][ T5287] EXT4-fs (loop0): Total free blocks count 0 [ 65.577553][ T5287] EXT4-fs (loop0): Free/Dirty block details [ 65.585608][ T5287] EXT4-fs (loop0): free_blocks=2415919104 [ 65.587172][ T5116] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5297] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5291] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5288] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5305 attached ./strace-static-x86_64: Process 5307 attached [pid 5297] <... write resumed>) = 9 [pid 5297] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] <... clone resumed>, parent_tid=[5307], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5307 [pid 5297] <... futex resumed>) = 1 [pid 5291] <... futex resumed>) = 0 [pid 5288] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5297] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5291] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5297] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5291] <... futex resumed>) = 0 [pid 5288] <... futex resumed>) = 0 [pid 5297] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5291] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5288] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5297] <... openat resumed>) = 5 [pid 5297] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5291] <... futex resumed>) = 0 [pid 5297] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5291] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5297] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5291] <... futex resumed>) = 0 [pid 5297] open("./bus", O_RDWR [pid 5291] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5307] set_robust_list(0x7fa2d46d29e0, 24 [pid 5305] set_robust_list(0x7fa2d46d29e0, 24 [pid 5301] <... mount resumed>) = 0 [pid 5297] <... open resumed>) = 6 [pid 5287] <... sendfile resumed>) = 117 [pid 5287] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5287] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5307] <... set_robust_list resumed>) = 0 [pid 5305] <... set_robust_list resumed>) = 0 [pid 5301] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [ 65.592097][ T5287] EXT4-fs (loop0): dirty_blocks=16 [ 65.604717][ T5286] EXT4-fs (loop2): Block reservation details [ 65.609504][ T5287] EXT4-fs (loop0): Block reservation details [ 65.625432][ T5287] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 65.631379][ T5286] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 65.633220][ T5289] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5297] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5305] creat(0x200001c0, 0420 [pid 5302] creat(0x200001c0, 0420 [pid 5301] <... openat resumed>) = 3 [pid 5297] <... futex resumed>) = 1 [pid 5291] <... futex resumed>) = 0 [pid 5286] <... sendfile resumed>) = 117 [pid 5305] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5302] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5301] chdir("./bus" [pid 5297] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5291] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5286] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5305] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5302] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5301] <... chdir resumed>) = 0 [pid 5297] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5291] <... futex resumed>) = 0 [pid 5286] <... futex resumed>) = 0 [pid 5305] <... futex resumed>) = 0 [pid 5302] <... futex resumed>) = 0 [pid 5301] ioctl(4, LOOP_CLR_FD [pid 5297] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5291] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5286] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5305] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5302] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5301] <... ioctl resumed>) = 0 [pid 5297] <... mmap resumed>) = 0x20000000 [pid 5288] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5284] exit_group(0 [pid 5282] exit_group(0 [pid 5305] <... futex resumed>) = ? [pid 5302] <... futex resumed>) = ? [pid 5301] close(4 [pid 5297] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5286] <... futex resumed>) = ? [pid 5284] <... exit_group resumed>) = ? [pid 5282] <... exit_group resumed>) = ? [pid 5305] +++ exited with 0 +++ [pid 5302] +++ exited with 0 +++ [pid 5301] <... close resumed>) = 0 [pid 5297] <... futex resumed>) = 1 [pid 5291] <... futex resumed>) = 0 [pid 5287] <... futex resumed>) = ? [pid 5286] +++ exited with 0 +++ [pid 5282] +++ exited with 0 +++ [pid 5301] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5297] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5291] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5301] <... futex resumed>) = 1 [pid 5300] <... futex resumed>) = 0 [pid 5297] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5291] <... futex resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5282, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5307] creat(0x200001c0, 0420 [pid 5301] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5300] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5297] sendfile(4, 5, NULL, 2147483713 [pid 5291] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5289] <... sendfile resumed>) = 117 [pid 5287] +++ exited with 0 +++ [pid 5284] +++ exited with 0 +++ [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 5307] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5301] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5300] <... futex resumed>) = 0 [pid 5289] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... restart_syscall resumed>) = 0 [pid 5307] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5301] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5300] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5289] <... futex resumed>) = 0 [pid 5289] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5307] <... futex resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5284, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5301] <... open resumed>) = 4 [pid 5288] exit_group(0 [pid 5076] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5288] <... exit_group resumed>) = ? [pid 5289] <... futex resumed>) = ? [pid 5078] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5289] +++ exited with 0 +++ [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5307] +++ exited with 0 +++ [pid 5301] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] +++ exited with 0 +++ [pid 5078] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 3 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5288, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5079] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5078] fstat(3, [pid 5076] fstat(3, [pid 5301] <... futex resumed>) = 1 [pid 5300] <... futex resumed>) = 0 [pid 5301] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5300] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5300] <... futex resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] getdents64(3, [pid 5076] getdents64(3, [pid 5300] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5301] <... write resumed>) = 9 [pid 5079] <... openat resumed>) = 3 [pid 5078] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5076] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5301] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] fstat(3, [pid 5078] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] getdents64(3, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5301] <... futex resumed>) = 1 [pid 5300] <... futex resumed>) = 0 [pid 5078] lstat("./6/binderfs", [pid 5301] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5300] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5076] lstat("./6/binderfs", [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5300] <... futex resumed>) = 0 [pid 5301] <... openat resumed>) = 5 [ 65.638547][ T5116] EXT4-fs (loop4): This should not happen!! Data will be lost [ 65.638547][ T5116] [ 65.650504][ T5289] EXT4-fs (loop3): This should not happen!! Data will be lost [ 65.650504][ T5289] [ 65.669352][ T5289] EXT4-fs (loop3): Total free blocks count 0 [ 65.675501][ T5289] EXT4-fs (loop3): Free/Dirty block details [ 65.681475][ T5289] EXT4-fs (loop3): free_blocks=2415919104 [ 65.687352][ T5289] EXT4-fs (loop3): dirty_blocks=16 [ 65.692494][ T5289] EXT4-fs (loop3): Block reservation details [ 65.698556][ T5289] EXT4-fs (loop3): i_reserved_data_blocks=1 [pid 5300] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] unlink("./6/binderfs" [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5301] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = 0 [pid 5301] <... futex resumed>) = 0 [pid 5300] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... unlink resumed>) = 0 [pid 5076] unlink("./6/binderfs" [pid 5301] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5300] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5301] <... futex resumed>) = 0 [pid 5300] <... futex resumed>) = 1 [pid 5301] open("./bus", O_RDWR [pid 5300] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5301] <... open resumed>) = 6 [pid 5301] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5300] <... futex resumed>) = 0 [pid 5301] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5300] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./7/binderfs", [pid 5078] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... unlink resumed>) = 0 [pid 5291] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5291] <... futex resumed>) = 0 [pid 5291] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2d46b2000 [pid 5291] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5291] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5309], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5309 [pid 5291] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5291] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5309 attached [pid 5309] set_robust_list(0x7fa2d46d29e0, 24) = 0 [pid 5301] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5301] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 1 [pid 5301] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5300] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5300] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] lstat("./6/bus", [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5301] <... futex resumed>) = 0 [pid 5300] <... futex resumed>) = 1 [ 65.740055][ T5297] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 65.757956][ T5297] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 65.770641][ T5297] EXT4-fs (loop1): This should not happen!! Data will be lost [ 65.770641][ T5297] [pid 5301] sendfile(4, 5, NULL, 2147483713 [pid 5300] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] unlink("./7/binderfs" [pid 5291] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... unlink resumed>) = 0 [ 65.781274][ T5116] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 65.781326][ T5297] EXT4-fs (loop1): Total free blocks count 0 [ 65.799865][ T5297] EXT4-fs (loop1): Free/Dirty block details [ 65.800122][ T56] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 65.805905][ T5297] EXT4-fs (loop1): free_blocks=2415919104 [ 65.822560][ T5301] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, [pid 5300] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5297] <... sendfile resumed>) = 117 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5300] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5309] creat(0x200001c0, 0420 [pid 5300] <... futex resumed>) = 0 [pid 5309] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5300] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2d46b2000 [pid 5309] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5300] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5309] <... futex resumed>) = 0 [pid 5300] <... mprotect resumed>) = 0 [pid 5309] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5300] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5310], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5310 [pid 5300] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 65.824319][ T5297] EXT4-fs (loop1): dirty_blocks=16 [ 65.844103][ T5297] EXT4-fs (loop1): Block reservation details [ 65.850379][ T5297] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 65.857198][ T5116] EXT4-fs (loop2): This should not happen!! Data will be lost [ 65.857198][ T5116] [ 65.858254][ T33] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 65.867319][ T56] EXT4-fs (loop0): This should not happen!! Data will be lost [ 65.867319][ T56] [pid 5300] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5310 attached [pid 5297] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] getdents64(4, [pid 5291] exit_group(0 [pid 5309] <... futex resumed>) = ? [pid 5291] <... exit_group resumed>) = ? [pid 5309] +++ exited with 0 +++ [pid 5310] set_robust_list(0x7fa2d46d29e0, 24 [pid 5297] <... futex resumed>) = ? [pid 5080] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5310] <... set_robust_list resumed>) = 0 [pid 5297] +++ exited with 0 +++ [pid 5291] +++ exited with 0 +++ [pid 5080] getdents64(4, 0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5080] close(4 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5291, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5080] <... close resumed>) = 0 [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5080] rmdir("./6/bus" [pid 5077] <... restart_syscall resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5080] getdents64(3, 0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5077] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] close(3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] rmdir("./6" [pid 5077] <... openat resumed>) = 3 [pid 5080] <... rmdir resumed>) = 0 [ 65.887992][ T5301] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 65.889482][ T33] EXT4-fs (loop3): This should not happen!! Data will be lost [ 65.889482][ T33] [ 65.905181][ T5301] EXT4-fs (loop5): This should not happen!! Data will be lost [ 65.905181][ T5301] [pid 5077] fstat(3, [pid 5300] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] mkdir("./7", 0777 [pid 5079] <... umount2 resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 5077] getdents64(3, [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5077] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5080] <... openat resumed>) = 3 [pid 5079] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./6/binderfs", [pid 5080] close(3 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... close resumed>) = 0 [pid 5079] lstat("./7/bus", [pid 5078] lstat("./6/bus", [pid 5077] unlink("./6/binderfs" [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... unlink resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5312 [pid 5079] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5312 attached [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./7/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5312] set_robust_list(0x555555adb5e0, 24) = 0 [pid 5079] <... openat resumed>) = 4 [pid 5078] <... openat resumed>) = 4 [pid 5312] chdir("./7") = 0 [pid 5079] fstat(4, [pid 5078] fstat(4, [pid 5312] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5312] setpgid(0, 0) = 0 [pid 5312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5312] write(3, "1000", 4) = 4 [pid 5312] close(3) = 0 [pid 5312] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5312] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5312] <... futex resumed>) = 0 [pid 5079] getdents64(4, [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5312] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2dc9d3000 [pid 5079] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, [pid 5076] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5312] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5312] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5313], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5313 [pid 5312] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 65.954270][ T5301] EXT4-fs (loop5): Total free blocks count 0 [ 65.960314][ T5301] EXT4-fs (loop5): Free/Dirty block details [ 65.970291][ T5301] EXT4-fs (loop5): free_blocks=2415919104 [ 65.978605][ T5116] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 65.978948][ T5301] EXT4-fs (loop5): dirty_blocks=16 [pid 5312] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5079] getdents64(4, [pid 5078] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5313 attached [pid 5313] set_robust_list(0x7fa2dc9f39e0, 24) = 0 [pid 5313] memfd_create("syzkaller", 0 [pid 5079] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5078] getdents64(4, [pid 5076] lstat("./6/bus", [pid 5313] <... memfd_create resumed>) = 3 [pid 5079] close(4 [pid 5078] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5313] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2d45d3000 [pid 5310] creat(0x200001c0, 0420 [pid 5301] <... sendfile resumed>) = 117 [pid 5079] <... close resumed>) = 0 [pid 5078] close(4 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5301] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] rmdir("./7/bus" [pid 5078] <... close resumed>) = 0 [pid 5076] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5310] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5301] <... futex resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5078] rmdir("./6/bus" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5310] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5301] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5079] getdents64(3, [pid 5078] <... rmdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5310] <... futex resumed>) = 0 [pid 5300] exit_group(0 [pid 5079] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5078] getdents64(3, [pid 5077] <... umount2 resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5313] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5301] <... futex resumed>) = ? [pid 5300] <... exit_group resumed>) = ? [pid 5079] close(3 [pid 5078] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5077] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] fstat(4, [pid 5310] +++ exited with 0 +++ [pid 5301] +++ exited with 0 +++ [pid 5300] +++ exited with 0 +++ [pid 5079] <... close resumed>) = 0 [pid 5078] close(3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5300, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5079] rmdir("./7" [pid 5078] <... close resumed>) = 0 [pid 5076] getdents64(4, [pid 5079] <... rmdir resumed>) = 0 [pid 5078] rmdir("./6" [pid 5077] lstat("./6/bus", [pid 5076] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [ 66.016023][ T5301] EXT4-fs (loop5): Block reservation details [ 66.021178][ T5116] EXT4-fs (loop1): This should not happen!! Data will be lost [ 66.021178][ T5116] [ 66.022721][ T5301] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 5079] mkdir("./8", 0777 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(4, [pid 5081] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... mkdir resumed>) = 0 [pid 5078] mkdir("./7", 0777 [pid 5077] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] <... mkdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] close(4 [pid 5313] <... write resumed>) = 1048576 [pid 5081] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... openat resumed>) = 3 [pid 5078] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... close resumed>) = 0 [pid 5313] munmap(0x7fa2d45d3000, 1048576 [pid 5081] <... openat resumed>) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5078] <... openat resumed>) = 3 [pid 5077] <... openat resumed>) = 4 [pid 5076] rmdir("./6/bus" [pid 5313] <... munmap resumed>) = 0 [pid 5081] fstat(3, [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5077] fstat(4, [pid 5076] <... rmdir resumed>) = 0 [pid 5313] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] close(3 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(3, [pid 5081] getdents64(3, [pid 5079] <... close resumed>) = 0 [pid 5078] close(3 [pid 5076] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... close resumed>) = 0 [pid 5076] close(3 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... close resumed>) = 0 [pid 5079] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5314 [pid 5076] rmdir("./6" [pid 5313] <... openat resumed>) = 4 [pid 5081] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5078] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5315 [pid 5077] getdents64(4, [pid 5076] <... rmdir resumed>) = 0 [pid 5313] ioctl(4, LOOP_SET_FD, 3 [pid 5081] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5076] mkdir("./7", 0777 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5076] close(3) = 0 ./strace-static-x86_64: Process 5314 attached [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5315 attached [pid 5314] set_robust_list(0x555555adb5e0, 24 [pid 5313] <... ioctl resumed>) = 0 [pid 5081] lstat("./7/binderfs", [pid 5077] getdents64(4, [pid 5314] <... set_robust_list resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5316 [pid 5314] chdir("./8" [pid 5313] close(3 [pid 5081] unlink("./7/binderfs" [pid 5315] set_robust_list(0x555555adb5e0, 24 [pid 5077] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5315] <... set_robust_list resumed>) = 0 [pid 5314] <... chdir resumed>) = 0 [pid 5313] <... close resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 5077] close(4 [pid 5315] chdir("./7" [pid 5314] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5313] mkdir("./bus", 0777 [pid 5081] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... close resumed>) = 0 ./strace-static-x86_64: Process 5316 attached [pid 5314] <... prctl resumed>) = 0 [pid 5077] rmdir("./6/bus" [pid 5316] set_robust_list(0x555555adb5e0, 24 [pid 5315] <... chdir resumed>) = 0 [pid 5314] setpgid(0, 0 [pid 5313] <... mkdir resumed>) = 0 [pid 5316] <... set_robust_list resumed>) = 0 [pid 5314] <... setpgid resumed>) = 0 [pid 5316] chdir("./7" [pid 5314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5316] <... chdir resumed>) = 0 [pid 5314] <... openat resumed>) = 3 [pid 5316] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5314] write(3, "1000", 4 [pid 5316] <... prctl resumed>) = 0 [pid 5314] <... write resumed>) = 4 [pid 5316] setpgid(0, 0 [pid 5314] close(3 [pid 5316] <... setpgid resumed>) = 0 [pid 5314] <... close resumed>) = 0 [pid 5316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5314] symlink("/dev/binderfs", "./binderfs" [pid 5316] <... openat resumed>) = 3 [pid 5314] <... symlink resumed>) = 0 [pid 5316] write(3, "1000", 4 [pid 5314] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5316] <... write resumed>) = 4 [pid 5314] <... futex resumed>) = 0 [pid 5316] close(3 [pid 5315] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5314] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5313] mount("/dev/loop4", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5077] <... rmdir resumed>) = 0 [pid 5316] <... close resumed>) = 0 [pid 5315] <... prctl resumed>) = 0 [pid 5314] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5077] getdents64(3, [pid 5316] symlink("/dev/binderfs", "./binderfs" [pid 5315] setpgid(0, 0 [pid 5314] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5077] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5316] <... symlink resumed>) = 0 [pid 5315] <... setpgid resumed>) = 0 [pid 5314] <... mprotect resumed>) = 0 [pid 5077] close(3 [pid 5316] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5314] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] <... close resumed>) = 0 [pid 5316] <... futex resumed>) = 0 [pid 5315] <... openat resumed>) = 3 [pid 5077] rmdir("./6" [pid 5316] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5314] <... clone resumed>, parent_tid=[5318], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5318 [pid 5316] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5314] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5316] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5314] <... futex resumed>) = 0 [pid 5316] <... mprotect resumed>) = 0 [pid 5314] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5316] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5319], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5319 [pid 5316] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5316] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5318 attached [pid 5315] write(3, "1000", 4 [pid 5318] set_robust_list(0x7fa2dc9f39e0, 24) = 0 [pid 5315] <... write resumed>) = 4 [pid 5077] <... rmdir resumed>) = 0 [pid 5318] memfd_create("syzkaller", 0 [pid 5315] close(3 [pid 5077] mkdir("./7", 0777./strace-static-x86_64: Process 5319 attached [pid 5318] <... memfd_create resumed>) = 3 [pid 5315] <... close resumed>) = 0 [pid 5319] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5318] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5315] symlink("/dev/binderfs", "./binderfs" [pid 5077] <... mkdir resumed>) = 0 [pid 5319] <... set_robust_list resumed>) = 0 [pid 5318] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5315] <... symlink resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5319] memfd_create("syzkaller", 0 [pid 5318] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5315] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5313] <... mount resumed>) = 0 [pid 5319] <... memfd_create resumed>) = 3 [pid 5315] <... futex resumed>) = 0 [pid 5313] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] <... openat resumed>) = 3 [pid 5319] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5315] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5313] <... openat resumed>) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5319] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5315] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5313] chdir("./bus" [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5313] <... chdir resumed>) = 0 [pid 5313] ioctl(4, LOOP_CLR_FD) = 0 [pid 5313] close(4 [pid 5315] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5313] <... close resumed>) = 0 [pid 5077] close(3 [pid 5315] <... mprotect resumed>) = 0 [pid 5313] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... close resumed>) = 0 [pid 5319] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5315] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5313] <... futex resumed>) = 1 [pid 5312] <... futex resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5313] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 66.106029][ T5313] loop4: detected capacity change from 0 to 2048 [ 66.123743][ T5116] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 66.146378][ T5116] EXT4-fs (loop5): This should not happen!! Data will be lost [ 66.146378][ T5116] [pid 5312] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5315] <... clone resumed>, parent_tid=[5321], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5321 [pid 5313] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5312] <... futex resumed>) = 0 [pid 5315] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5313] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5312] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5315] <... futex resumed>) = 0 [pid 5313] <... open resumed>) = 4 [pid 5081] <... umount2 resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5322 [pid 5315] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5313] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5322 attached ./strace-static-x86_64: Process 5321 attached ) = 1 [pid 5312] <... futex resumed>) = 0 [pid 5081] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5322] set_robust_list(0x555555adb5e0, 24 [pid 5321] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5313] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5312] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5322] <... set_robust_list resumed>) = 0 [pid 5321] <... set_robust_list resumed>) = 0 [pid 5313] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5312] <... futex resumed>) = 0 [pid 5081] lstat("./7/bus", [pid 5322] chdir("./7" [pid 5321] memfd_create("syzkaller", 0 [pid 5313] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5312] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5322] <... chdir resumed>) = 0 [pid 5321] <... memfd_create resumed>) = 3 [pid 5313] <... write resumed>) = 9 [pid 5081] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5322] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5321] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5313] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5322] <... prctl resumed>) = 0 [pid 5321] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5313] <... futex resumed>) = 1 [pid 5312] <... futex resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./7/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5322] setpgid(0, 0 [pid 5318] <... write resumed>) = 1048576 [pid 5313] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5312] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5322] <... setpgid resumed>) = 0 [pid 5321] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5319] <... write resumed>) = 1048576 [pid 5313] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5312] <... futex resumed>) = 0 [pid 5081] <... openat resumed>) = 4 [pid 5322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5313] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5312] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] fstat(4, [pid 5322] <... openat resumed>) = 3 [pid 5313] <... openat resumed>) = 5 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5322] write(3, "1000", 4 [pid 5318] munmap(0x7fa2d45d3000, 1048576 [pid 5313] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(4, [pid 5322] <... write resumed>) = 4 [pid 5318] <... munmap resumed>) = 0 [pid 5313] <... futex resumed>) = 1 [pid 5312] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5322] close(3 [pid 5318] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5313] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5312] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(4, [pid 5322] <... close resumed>) = 0 [pid 5319] munmap(0x7fa2d45d3000, 1048576 [pid 5318] <... openat resumed>) = 4 [pid 5313] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5312] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5322] symlink("/dev/binderfs", "./binderfs" [pid 5319] <... munmap resumed>) = 0 [pid 5318] ioctl(4, LOOP_SET_FD, 3 [pid 5313] open("./bus", O_RDWR [pid 5312] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] close(4 [pid 5322] <... symlink resumed>) = 0 [pid 5319] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5313] <... open resumed>) = 6 [pid 5081] <... close resumed>) = 0 [pid 5322] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5321] <... write resumed>) = 1048576 [pid 5319] <... openat resumed>) = 4 [pid 5313] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] rmdir("./7/bus" [pid 5322] <... futex resumed>) = 0 [pid 5319] ioctl(4, LOOP_SET_FD, 3 [pid 5313] <... futex resumed>) = 1 [pid 5312] <... futex resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5322] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5321] munmap(0x7fa2d45d3000, 1048576 [pid 5313] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5312] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(3, [pid 5322] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5321] <... munmap resumed>) = 0 [pid 5313] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5312] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5322] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5321] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5313] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5312] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] close(3 [pid 5322] <... mprotect resumed>) = 0 [pid 5321] <... openat resumed>) = 4 [pid 5313] <... mmap resumed>) = 0x20000000 [pid 5081] <... close resumed>) = 0 [pid 5322] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5321] ioctl(4, LOOP_SET_FD, 3 [pid 5319] <... ioctl resumed>) = 0 [pid 5318] <... ioctl resumed>) = 0 [pid 5313] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] rmdir("./7" [pid 5319] close(3 [pid 5318] close(3 [pid 5313] <... futex resumed>) = 1 [pid 5312] <... futex resumed>) = 0 [pid 5319] <... close resumed>) = 0 [pid 5318] <... close resumed>) = 0 [pid 5313] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5312] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] mkdir("./bus", 0777 [pid 5318] mkdir("./bus", 0777 [pid 5313] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5312] <... futex resumed>) = 0 [pid 5319] <... mkdir resumed>) = 0 [pid 5318] <... mkdir resumed>) = 0 [pid 5313] sendfile(4, 5, NULL, 2147483713 [pid 5312] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5321] <... ioctl resumed>) = 0 [ 66.250248][ T5318] loop3: detected capacity change from 0 to 2048 [ 66.263469][ T5319] loop0: detected capacity change from 0 to 2048 [ 66.286047][ T5321] loop2: detected capacity change from 0 to 2048 [pid 5319] mount("/dev/loop0", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5318] mount("/dev/loop3", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5081] <... rmdir resumed>) = 0 [pid 5322] <... clone resumed>, parent_tid=[5323], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5323 ./strace-static-x86_64: Process 5323 attached [pid 5321] close(3 [pid 5081] mkdir("./8", 0777 [pid 5322] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5321] <... close resumed>) = 0 [pid 5323] <... set_robust_list resumed>) = 0 [pid 5322] <... futex resumed>) = 0 [pid 5321] mkdir("./bus", 0777 [pid 5081] <... mkdir resumed>) = 0 [pid 5323] memfd_create("syzkaller", 0) = 3 [pid 5322] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5321] <... mkdir resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5323] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5321] mount("/dev/loop2", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5081] <... openat resumed>) = 3 [pid 5323] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555adb5d0) = 5325 [pid 5323] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5312] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5312] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5319] <... mount resumed>) = 0 [ 66.298141][ T5313] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 66.326077][ T5313] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 66.341322][ T5313] EXT4-fs (loop4): This should not happen!! Data will be lost [pid 5312] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5319] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5312] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5312] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5319] <... openat resumed>) = 3 [pid 5312] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5330 attached [pid 5323] <... write resumed>) = 1048576 [pid 5319] chdir("./bus" [pid 5330] set_robust_list(0x7fa2d46d29e0, 24 [pid 5323] munmap(0x7fa2d45d3000, 1048576 [pid 5319] <... chdir resumed>) = 0 [pid 5312] <... clone resumed>, parent_tid=[5330], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5330 [pid 5330] <... set_robust_list resumed>) = 0 [pid 5323] <... munmap resumed>) = 0 [pid 5319] ioctl(4, LOOP_CLR_FD [pid 5312] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5319] <... ioctl resumed>) = 0 [pid 5312] <... futex resumed>) = 0 [pid 5323] <... openat resumed>) = 4 [pid 5319] close(4 [pid 5312] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5323] ioctl(4, LOOP_SET_FD, 3 [pid 5319] <... close resumed>) = 0 [pid 5319] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5316] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5325 attached [pid 5319] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5316] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] set_robust_list(0x555555adb5e0, 24 [pid 5319] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5316] <... futex resumed>) = 0 [pid 5325] <... set_robust_list resumed>) = 0 [pid 5319] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5316] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5325] chdir("./8" [pid 5321] <... mount resumed>) = 0 [pid 5319] <... open resumed>) = 4 [pid 5325] <... chdir resumed>) = 0 [pid 5319] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5319] <... futex resumed>) = 1 [pid 5316] <... futex resumed>) = 0 [pid 5325] <... prctl resumed>) = 0 [pid 5319] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5316] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] setpgid(0, 0 [pid 5319] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5316] <... futex resumed>) = 0 [pid 5325] <... setpgid resumed>) = 0 [pid 5321] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5319] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [ 66.341322][ T5313] [pid 5316] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5321] <... openat resumed>) = 3 [pid 5319] <... write resumed>) = 9 [pid 5325] <... openat resumed>) = 3 [pid 5321] chdir("./bus" [pid 5319] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] write(3, "1000", 4 [pid 5321] <... chdir resumed>) = 0 [pid 5319] <... futex resumed>) = 1 [pid 5316] <... futex resumed>) = 0 [pid 5325] <... write resumed>) = 4 [pid 5321] ioctl(4, LOOP_CLR_FD [pid 5319] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5318] <... mount resumed>) = 0 [pid 5316] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] close(3 [pid 5321] <... ioctl resumed>) = 0 [pid 5319] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5316] <... futex resumed>) = 0 [pid 5325] <... close resumed>) = 0 [pid 5323] <... ioctl resumed>) = 0 [pid 5321] close(4 [pid 5319] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5318] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5316] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5325] symlink("/dev/binderfs", "./binderfs" [pid 5323] close(3 [pid 5321] <... close resumed>) = 0 [pid 5319] <... openat resumed>) = 5 [pid 5318] <... openat resumed>) = 3 [pid 5325] <... symlink resumed>) = 0 [pid 5323] <... close resumed>) = 0 [pid 5321] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5318] chdir("./bus" [pid 5325] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] mkdir("./bus", 0777 [pid 5321] <... futex resumed>) = 1 [pid 5319] <... futex resumed>) = 1 [pid 5318] <... chdir resumed>) = 0 [pid 5316] <... futex resumed>) = 0 [pid 5315] <... futex resumed>) = 0 [pid 5325] <... futex resumed>) = 0 [pid 5323] <... mkdir resumed>) = 0 [pid 5321] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5319] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5318] ioctl(4, LOOP_CLR_FD [pid 5316] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5315] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5312] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5323] mount("/dev/loop1", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5321] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5319] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5318] <... ioctl resumed>) = 0 [pid 5316] <... futex resumed>) = 0 [pid 5315] <... futex resumed>) = 0 [pid 5325] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5321] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5319] open("./bus", O_RDWR [pid 5318] close(4 [pid 5316] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5315] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5325] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5321] <... open resumed>) = 4 [pid 5319] <... open resumed>) = 6 [pid 5318] <... close resumed>) = 0 [pid 5325] <... mprotect resumed>) = 0 [pid 5321] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5318] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5321] <... futex resumed>) = 1 [pid 5319] <... futex resumed>) = 1 [pid 5318] <... futex resumed>) = 1 [pid 5316] <... futex resumed>) = 0 [pid 5315] <... futex resumed>) = 0 [pid 5314] <... futex resumed>) = 0 [pid 5321] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5319] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5318] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5316] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5315] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5314] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] <... clone resumed>, parent_tid=[5333], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5333 [pid 5321] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5319] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5316] <... futex resumed>) = 0 [pid 5315] <... futex resumed>) = 0 [pid 5314] <... futex resumed>) = 0 [pid 5325] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5321] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5319] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5316] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5315] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5314] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5333 attached [pid 5325] <... futex resumed>) = 0 [ 66.379459][ T5323] loop1: detected capacity change from 0 to 2048 [ 66.416650][ T5313] EXT4-fs (loop4): Total free blocks count 0 [pid 5321] <... write resumed>) = 9 [pid 5319] <... mmap resumed>) = 0x20000000 [pid 5318] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5333] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5325] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5321] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] <... set_robust_list resumed>) = 0 [pid 5321] <... futex resumed>) = 1 [pid 5319] <... futex resumed>) = 1 [pid 5316] <... futex resumed>) = 0 [pid 5315] <... futex resumed>) = 0 [pid 5333] memfd_create("syzkaller", 0 [pid 5321] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5319] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5318] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5316] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5315] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] <... memfd_create resumed>) = 3 [pid 5321] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5319] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5318] <... open resumed>) = 4 [pid 5316] <... futex resumed>) = 0 [pid 5315] <... futex resumed>) = 0 [pid 5333] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5323] <... mount resumed>) = 0 [pid 5321] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5319] sendfile(4, 5, NULL, 2147483713 [pid 5318] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5316] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5315] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5333] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5330] creat(0x200001c0, 0420 [pid 5323] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5321] <... openat resumed>) = 5 [pid 5318] <... futex resumed>) = 1 [pid 5314] <... futex resumed>) = 0 [pid 5330] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5313] <... sendfile resumed>) = 117 [pid 5330] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5313] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5330] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5313] <... futex resumed>) = 0 [ 66.446101][ T5313] EXT4-fs (loop4): Free/Dirty block details [ 66.452674][ T5313] EXT4-fs (loop4): free_blocks=2415919104 [ 66.459295][ T5313] EXT4-fs (loop4): dirty_blocks=16 [ 66.464756][ T5313] EXT4-fs (loop4): Block reservation details [ 66.470765][ T5313] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 66.481509][ T5319] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5313] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5333] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5323] <... openat resumed>) = 3 [pid 5321] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5318] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5314] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] chdir("./bus" [pid 5321] <... futex resumed>) = 1 [pid 5323] <... chdir resumed>) = 0 [pid 5318] <... write resumed>) = 9 [pid 5315] <... futex resumed>) = 0 [pid 5314] <... futex resumed>) = 0 [pid 5312] exit_group(0 [pid 5318] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5330] <... futex resumed>) = ? [pid 5323] ioctl(4, LOOP_CLR_FD [pid 5321] open("./bus", O_RDWR [pid 5318] <... futex resumed>) = 0 [pid 5315] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5314] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5313] <... futex resumed>) = ? [pid 5312] <... exit_group resumed>) = ? [pid 5330] +++ exited with 0 +++ [pid 5323] <... ioctl resumed>) = 0 [pid 5321] <... open resumed>) = 6 [pid 5318] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5315] <... futex resumed>) = 0 [pid 5314] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5313] +++ exited with 0 +++ [pid 5312] +++ exited with 0 +++ [pid 5323] close(4 [pid 5321] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5315] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5314] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] <... close resumed>) = 0 [pid 5321] <... futex resumed>) = 0 [pid 5318] <... futex resumed>) = 0 [pid 5316] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5315] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5314] <... futex resumed>) = 1 [pid 5323] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5321] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5318] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5315] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5314] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5323] <... futex resumed>) = 1 [pid 5322] <... futex resumed>) = 0 [pid 5321] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5318] <... openat resumed>) = 5 [pid 5315] <... futex resumed>) = 0 [pid 5323] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5322] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5321] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5318] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5316] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5315] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5312, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5323] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5322] <... futex resumed>) = 0 [pid 5321] <... mmap resumed>) = 0x20000000 [pid 5318] <... futex resumed>) = 1 [pid 5314] <... futex resumed>) = 0 [ 66.498960][ T5319] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 66.512232][ T5319] EXT4-fs (loop0): This should not happen!! Data will be lost [ 66.512232][ T5319] [ 66.523356][ T5319] EXT4-fs (loop0): Total free blocks count 0 [ 66.529505][ T5319] EXT4-fs (loop0): Free/Dirty block details [ 66.540032][ T5319] EXT4-fs (loop0): free_blocks=2415919104 [pid 5323] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5322] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5321] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5318] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5314] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] <... open resumed>) = 4 [pid 5321] <... futex resumed>) = 1 [pid 5318] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5316] <... futex resumed>) = 0 [pid 5315] <... futex resumed>) = 0 [pid 5314] <... futex resumed>) = 0 [pid 5323] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5321] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5319] <... sendfile resumed>) = 117 [pid 5318] open("./bus", O_RDWR [pid 5316] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5315] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5314] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5333] <... write resumed>) = 1048576 [pid 5323] <... futex resumed>) = 1 [pid 5322] <... futex resumed>) = 0 [pid 5321] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5319] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5318] <... open resumed>) = 6 [pid 5316] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5315] <... futex resumed>) = 0 [pid 5333] munmap(0x7fa2d45d3000, 1048576 [pid 5323] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5322] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5321] sendfile(4, 5, NULL, 2147483713 [pid 5319] <... futex resumed>) = 0 [pid 5318] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5316] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5315] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5333] <... munmap resumed>) = 0 [pid 5323] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5322] <... futex resumed>) = 0 [pid 5319] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5318] <... futex resumed>) = 1 [pid 5316] <... mprotect resumed>) = 0 [pid 5314] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5333] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5323] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5322] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5318] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5316] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5314] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5333] <... openat resumed>) = 4 [pid 5080] <... openat resumed>) = 3 [pid 5333] ioctl(4, LOOP_SET_FD, 3 [pid 5316] <... clone resumed>, parent_tid=[5335], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5335 [pid 5080] fstat(3, ./strace-static-x86_64: Process 5335 attached [pid 5323] <... write resumed>) = 9 [pid 5318] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5316] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5314] <... futex resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5316] <... futex resumed>) = 0 [pid 5080] getdents64(3, [pid 5316] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5080] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 66.545890][ T5319] EXT4-fs (loop0): dirty_blocks=16 [ 66.551034][ T5319] EXT4-fs (loop0): Block reservation details [ 66.557956][ T5319] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 66.577003][ T5321] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 66.581622][ T5333] loop5: detected capacity change from 0 to 2048 [pid 5080] unlink("./7/binderfs") = 0 [pid 5335] set_robust_list(0x7fa2d46d29e0, 24 [pid 5323] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5318] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5314] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5335] <... set_robust_list resumed>) = 0 [pid 5323] <... futex resumed>) = 1 [pid 5322] <... futex resumed>) = 0 [pid 5318] <... mmap resumed>) = 0x20000000 [pid 5335] creat(0x200001c0, 0420 [pid 5323] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5322] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5318] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5335] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5323] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5322] <... futex resumed>) = 0 [pid 5318] <... futex resumed>) = 1 [pid 5314] <... futex resumed>) = 0 [pid 5335] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5322] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5318] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5314] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5335] <... futex resumed>) = 1 [pid 5323] <... openat resumed>) = 5 [pid 5318] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5316] <... futex resumed>) = 0 [pid 5314] <... futex resumed>) = 0 [pid 5335] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5323] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 66.593375][ T5321] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 66.610573][ T5321] EXT4-fs (loop2): This should not happen!! Data will be lost [ 66.610573][ T5321] [ 66.621441][ T5321] EXT4-fs (loop2): Total free blocks count 0 [ 66.623433][ T5318] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 66.627937][ T5321] EXT4-fs (loop2): Free/Dirty block details [pid 5318] sendfile(4, 5, NULL, 2147483713 [pid 5316] exit_group(0 [pid 5314] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5335] <... futex resumed>) = ? [pid 5323] <... futex resumed>) = 1 [pid 5322] <... futex resumed>) = 0 [pid 5316] <... exit_group resumed>) = ? [pid 5315] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5335] +++ exited with 0 +++ [pid 5323] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5322] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5315] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5322] <... futex resumed>) = 0 [pid 5315] <... futex resumed>) = 0 [pid 5323] open("./bus", O_RDWR [pid 5322] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5315] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5323] <... open resumed>) = 6 [pid 5315] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5323] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5315] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5323] <... futex resumed>) = 1 [pid 5322] <... futex resumed>) = 0 [pid 5315] <... mprotect resumed>) = 0 [pid 5323] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5322] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5315] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5323] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5322] <... futex resumed>) = 0 [pid 5323] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5322] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5315] <... clone resumed>, parent_tid=[5336], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5336 [pid 5323] <... mmap resumed>) = 0x20000000 [pid 5319] <... futex resumed>) = ? [pid 5315] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5315] <... futex resumed>) = 0 [pid 5323] <... futex resumed>) = 1 [pid 5322] <... futex resumed>) = 0 [pid 5315] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5323] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5322] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5322] <... futex resumed>) = 0 [ 66.643117][ T33] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 66.648214][ T5321] EXT4-fs (loop2): free_blocks=2415919104 [ 66.666225][ T5321] EXT4-fs (loop2): dirty_blocks=16 [ 66.671367][ T5321] EXT4-fs (loop2): Block reservation details [ 66.677546][ T5321] EXT4-fs (loop2): i_reserved_data_blocks=1 [pid 5323] sendfile(4, 5, NULL, 2147483713 [pid 5322] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5336 attached [pid 5333] <... ioctl resumed>) = 0 [pid 5321] <... sendfile resumed>) = 117 [pid 5319] +++ exited with 0 +++ [pid 5316] +++ exited with 0 +++ [pid 5314] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5314] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5314] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2d46b2000 [pid 5314] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5314] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5337], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5337 [pid 5314] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5314] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5315] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 5337 attached [pid 5337] set_robust_list(0x7fa2d46d29e0, 24) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 5080] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./7/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./7/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./7/bus") = 0 [pid 5080] getdents64(3, 0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [pid 5080] rmdir("./7") = 0 [pid 5080] mkdir("./8", 0777) = 0 [ 66.688836][ T5318] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 66.691724][ T5323] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1095: group 0, [ 66.701147][ T5318] EXT4-fs (loop3): This should not happen!! Data will be lost [ 66.701147][ T5318] [ 66.701172][ T5318] EXT4-fs (loop3): Total free blocks count 0 [ 66.701191][ T5318] EXT4-fs (loop3): Free/Dirty block details [ 66.709442][ T5323] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 66.719191][ T33] EXT4-fs (loop4): This should not happen!! Data will be lost [ 66.719191][ T33] [pid 5336] set_robust_list(0x7fa2d46d29e0, 24 [pid 5333] close(3 [pid 5321] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5316, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5336] <... set_robust_list resumed>) = 0 [pid 5333] <... close resumed>) = 0 [pid 5321] <... futex resumed>) = 0 [pid 5321] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5333] mkdir("./bus", 0777 [pid 5336] creat(0x200001c0, 0420 [pid 5333] <... mkdir resumed>) = 0 [pid 5322] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5322] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5322] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2d46b2000 [pid 5322] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5322] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5336] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5333] mount("/dev/loop5", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5322] <... clone resumed>, parent_tid=[5338], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5338 [pid 5322] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5322] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5336] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5315] exit_group(0) = ? [pid 5314] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5314] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3 [pid 5336] <... futex resumed>) = ? [pid 5080] <... close resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... openat resumed>) = 3 [pid 5321] <... futex resumed>) = ? [pid 5336] +++ exited with 0 +++ [pid 5321] +++ exited with 0 +++ [pid 5315] +++ exited with 0 +++ [pid 5076] fstat(3, [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5315, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(3, ./strace-static-x86_64: Process 5339 attached [pid 5080] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5339 ./strace-static-x86_64: Process 5338 attached [pid 5338] set_robust_list(0x7fa2d46d29e0, 24) = 0 [pid 5078] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5339] set_robust_list(0x555555adb5e0, 24 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5339] <... set_robust_list resumed>) = 0 [pid 5076] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5339] chdir("./8" [pid 5078] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5339] <... chdir resumed>) = 0 [ 66.748501][ T5323] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 66.752262][ T5318] EXT4-fs (loop3): free_blocks=2415919104 [ 66.775509][ T5318] EXT4-fs (loop3): dirty_blocks=16 [ 66.780839][ T5318] EXT4-fs (loop3): Block reservation details [ 66.792628][ T5318] EXT4-fs (loop3): i_reserved_data_blocks=1 [pid 5339] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5337] creat(0x200001c0, 0420 [pid 5318] <... sendfile resumed>) = 117 [pid 5078] fstat(3, [pid 5076] lstat("./7/binderfs", [pid 5337] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5337] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5337] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5339] <... prctl resumed>) = 0 [pid 5318] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5314] exit_group(0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5339] setpgid(0, 0 [pid 5337] <... futex resumed>) = ? [pid 5318] <... futex resumed>) = ? [pid 5314] <... exit_group resumed>) = ? [pid 5337] +++ exited with 0 +++ [pid 5078] getdents64(3, [pid 5318] +++ exited with 0 +++ [pid 5314] +++ exited with 0 +++ [pid 5339] <... setpgid resumed>) = 0 [pid 5076] unlink("./7/binderfs" [pid 5339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5076] <... unlink resumed>) = 0 [pid 5078] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5339] <... openat resumed>) = 3 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5314, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5339] write(3, "1000", 4 [pid 5079] restart_syscall(<... resuming interrupted clone ...> [pid 5078] lstat("./7/binderfs", [pid 5339] <... write resumed>) = 4 [pid 5079] <... restart_syscall resumed>) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5339] close(3 [ 66.804666][ T5323] EXT4-fs (loop1): This should not happen!! Data will be lost [ 66.804666][ T5323] [ 66.820680][ T5323] EXT4-fs (loop1): Total free blocks count 0 [ 66.828667][ T56] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 66.833943][ T5323] EXT4-fs (loop1): Free/Dirty block details [pid 5078] unlink("./7/binderfs" [pid 5339] <... close resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5339] symlink("/dev/binderfs", "./binderfs" [pid 5079] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5339] <... symlink resumed>) = 0 [pid 5322] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5339] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5339] <... futex resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5339] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] fstat(3, [pid 5339] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5339] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5079] getdents64(3, [pid 5339] <... mprotect resumed>) = 0 [pid 5079] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5339] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5079] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5339] <... clone resumed>, parent_tid=[5342], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5342 [pid 5079] lstat("./8/binderfs", [pid 5339] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5339] <... futex resumed>) = 0 [pid 5079] unlink("./8/binderfs" [pid 5339] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5079] <... unlink resumed>) = 0 [pid 5079] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5333] <... mount resumed>) = 0 [pid 5333] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5333] chdir("./bus") = 0 [pid 5333] ioctl(4, LOOP_CLR_FD) = 0 [pid 5333] close(4 [pid 5338] creat(0x200001c0, 0420 [pid 5333] <... close resumed>) = 0 [pid 5323] <... sendfile resumed>) = 117 [pid 5338] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5338] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5342 attached [pid 5338] <... futex resumed>) = 0 [pid 5333] <... futex resumed>) = 1 [pid 5325] <... futex resumed>) = 0 [pid 5323] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5342] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5338] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5333] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5325] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] <... futex resumed>) = 0 [pid 5322] exit_group(0 [pid 5342] <... set_robust_list resumed>) = 0 [pid 5338] <... futex resumed>) = ? [pid 5333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5325] <... futex resumed>) = 0 [pid 5322] <... exit_group resumed>) = ? [pid 5076] <... umount2 resumed>) = 0 [pid 5342] memfd_create("syzkaller", 0 [pid 5338] +++ exited with 0 +++ [ 66.847861][ T33] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 66.848027][ T5323] EXT4-fs (loop1): free_blocks=2415919104 [ 66.860342][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 66.866032][ T5323] EXT4-fs (loop1): dirty_blocks=16 [ 66.883620][ T5323] EXT4-fs (loop1): Block reservation details [ 66.890192][ T5323] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 66.896674][ T56] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5333] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5076] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5333] <... open resumed>) = 4 [pid 5325] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5342] <... memfd_create resumed>) = 3 [pid 5333] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5323] +++ exited with 0 +++ [pid 5322] +++ exited with 0 +++ [pid 5076] lstat("./7/bus", [pid 5342] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5333] <... futex resumed>) = 0 [pid 5325] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5333] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5322, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5076] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5333] <... write resumed>) = 9 [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5333] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... restart_syscall resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./7/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5342] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5333] <... futex resumed>) = 0 [pid 5325] <... futex resumed>) = 0 [pid 5342] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5333] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5325] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... umount2 resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5325] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] <... futex resumed>) = 0 [pid 5325] <... futex resumed>) = 1 [pid 5077] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] fstat(4, [pid 5333] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5325] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5333] <... openat resumed>) = 5 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5333] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] getdents64(4, [pid 5077] <... openat resumed>) = 3 [pid 5333] <... futex resumed>) = 1 [pid 5325] <... futex resumed>) = 0 [pid 5079] <... umount2 resumed>) = 0 [pid 5077] fstat(3, [pid 5076] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5333] open("./bus", O_RDWR [pid 5325] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] getdents64(4, [pid 5333] <... open resumed>) = 6 [pid 5325] <... futex resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(3, [pid 5076] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5333] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] lstat("./8/bus", [pid 5078] lstat("./7/bus", [pid 5333] <... futex resumed>) = 0 [pid 5325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5076] close(4 [pid 5333] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5325] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 5333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5325] <... futex resumed>) = 0 [ 66.896674][ T56] [ 66.920151][ T33] EXT4-fs (loop2): This should not happen!! Data will be lost [ 66.920151][ T33] [ 66.935379][ T9] EXT4-fs (loop3): This should not happen!! Data will be lost [ 66.935379][ T9] [pid 5079] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] rmdir("./7/bus" [pid 5333] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5325] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./7/binderfs", [pid 5342] <... write resumed>) = 1048576 [pid 5333] <... mmap resumed>) = 0x20000000 [pid 5079] openat(AT_FDCWD, "./8/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] openat(AT_FDCWD, "./7/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... rmdir resumed>) = 0 [pid 5333] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... openat resumed>) = 4 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5333] <... futex resumed>) = 1 [pid 5325] <... futex resumed>) = 0 [pid 5079] fstat(4, [pid 5078] <... openat resumed>) = 4 [pid 5077] unlink("./7/binderfs" [pid 5076] getdents64(3, [pid 5342] munmap(0x7fa2d45d3000, 1048576 [pid 5333] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5325] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] fstat(4, [pid 5342] <... munmap resumed>) = 0 [pid 5333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5325] <... futex resumed>) = 0 [pid 5079] getdents64(4, [pid 5077] <... unlink resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5342] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5333] sendfile(4, 5, NULL, 2147483713 [pid 5325] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] close(3 [pid 5342] <... openat resumed>) = 4 [pid 5078] getdents64(4, [pid 5342] ioctl(4, LOOP_SET_FD, 3 [pid 5079] getdents64(4, [pid 5076] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5342] <... ioctl resumed>) = 0 [pid 5342] close(3) = 0 [pid 5342] mkdir("./bus", 0777) = 0 [pid 5342] mount("/dev/loop4", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5079] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5076] rmdir("./7" [pid 5078] getdents64(4, 0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5079] close(4 [pid 5078] close(4 [pid 5079] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5079] rmdir("./8/bus" [pid 5076] mkdir("./8", 0777 [pid 5078] rmdir("./7/bus" [pid 5076] <... mkdir resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5078] getdents64(3, [pid 5079] getdents64(3, [pid 5078] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5079] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5078] close(3 [pid 5076] <... openat resumed>) = 3 [pid 5079] close(3 [pid 5078] <... close resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5079] rmdir("./8" [pid 5078] rmdir("./7" [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] <... rmdir resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5076] close(3 [pid 5325] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5079] mkdir("./9", 0777 [pid 5078] mkdir("./8", 0777 [pid 5076] <... close resumed>) = 0 [pid 5325] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... mkdir resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [ 67.017703][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 67.019070][ T5342] loop4: detected capacity change from 0 to 2048 [ 67.034922][ T9] EXT4-fs (loop1): This should not happen!! Data will be lost [ 67.034922][ T9] [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5325] <... futex resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] <... openat resumed>) = 3 [pid 5078] <... openat resumed>) = 3 [pid 5325] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5325] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5325] <... mprotect resumed>) = 0 [pid 5079] close(3 [pid 5078] close(3 [pid 5077] <... umount2 resumed>) = 0 [pid 5325] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5079] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5344 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5325] <... clone resumed>, parent_tid=[5345], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5345 [pid 5325] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5346 [pid 5078] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5347 [pid 5325] <... futex resumed>) = 0 [pid 5325] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5347 attached ./strace-static-x86_64: Process 5344 attached ./strace-static-x86_64: Process 5346 attached [pid 5346] set_robust_list(0x555555adb5e0, 24./strace-static-x86_64: Process 5345 attached ) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5347] set_robust_list(0x555555adb5e0, 24 [pid 5346] chdir("./9" [pid 5345] set_robust_list(0x7fa2d46d29e0, 24 [pid 5344] set_robust_list(0x555555adb5e0, 24 [pid 5347] <... set_robust_list resumed>) = 0 [pid 5346] <... chdir resumed>) = 0 [pid 5345] <... set_robust_list resumed>) = 0 [pid 5077] lstat("./7/bus", [pid 5346] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5346] setpgid(0, 0) = 0 [pid 5346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5346] write(3, "1000", 4) = 4 [pid 5346] close(3 [pid 5344] <... set_robust_list resumed>) = 0 [pid 5347] chdir("./8" [pid 5346] <... close resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5346] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5346] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5344] chdir("./8" [pid 5347] <... chdir resumed>) = 0 [pid 5077] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 67.058920][ T5333] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 67.090623][ T5333] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 67.104207][ T5333] EXT4-fs (loop5): This should not happen!! Data will be lost [ 67.104207][ T5333] [pid 5346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5344] <... chdir resumed>) = 0 [pid 5346] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5346] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5346] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5347] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5346] <... clone resumed>, parent_tid=[5350], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5350 [pid 5344] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5346] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5342] <... mount resumed>) = 0 [pid 5347] <... prctl resumed>) = 0 [pid 5344] <... prctl resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./7/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5347] setpgid(0, 0 [pid 5346] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5344] setpgid(0, 0 [pid 5342] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5350 attached [pid 5347] <... setpgid resumed>) = 0 [pid 5344] <... setpgid resumed>) = 0 [pid 5342] <... openat resumed>) = 3 [pid 5077] fstat(4, [pid 5350] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5344] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5342] chdir("./bus" [pid 5350] <... set_robust_list resumed>) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5347] <... openat resumed>) = 3 [pid 5342] <... chdir resumed>) = 0 [pid 5344] <... openat resumed>) = 3 [pid 5350] memfd_create("syzkaller", 0 [pid 5347] write(3, "1000", 4 [pid 5344] write(3, "1000", 4 [pid 5342] ioctl(4, LOOP_CLR_FD [pid 5077] getdents64(4, [pid 5342] <... ioctl resumed>) = 0 [pid 5347] <... write resumed>) = 4 [pid 5344] <... write resumed>) = 4 [pid 5342] close(4 [pid 5350] <... memfd_create resumed>) = 3 [pid 5077] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5347] close(3 [pid 5344] close(3 [pid 5350] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5342] <... close resumed>) = 0 [pid 5077] getdents64(4, [pid 5347] <... close resumed>) = 0 [pid 5344] <... close resumed>) = 0 [pid 5342] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5350] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5347] symlink("/dev/binderfs", "./binderfs" [pid 5344] symlink("/dev/binderfs", "./binderfs" [pid 5342] <... futex resumed>) = 1 [pid 5339] <... futex resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5347] <... symlink resumed>) = 0 [pid 5342] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5339] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] close(4 [pid 5344] <... symlink resumed>) = 0 [pid 5339] <... futex resumed>) = 0 [pid 5339] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5325] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] <... close resumed>) = 0 [pid 5350] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5347] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5344] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5342] <... open resumed>) = 4 [pid 5347] <... futex resumed>) = 0 [pid 5344] <... futex resumed>) = 0 [pid 5077] rmdir("./7/bus" [pid 5347] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5344] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5342] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 67.116600][ T5333] EXT4-fs (loop5): Total free blocks count 0 [ 67.132962][ T5333] EXT4-fs (loop5): Free/Dirty block details [ 67.157653][ T5333] EXT4-fs (loop5): free_blocks=2415919104 [pid 5347] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5344] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5342] <... futex resumed>) = 1 [pid 5339] <... futex resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5347] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5344] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5342] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5339] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] getdents64(3, [pid 5347] <... mprotect resumed>) = 0 [pid 5344] <... mprotect resumed>) = 0 [pid 5342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5339] <... futex resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5350] <... write resumed>) = 1048576 [pid 5347] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5344] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5342] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5339] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] close(3./strace-static-x86_64: Process 5352 attached ./strace-static-x86_64: Process 5351 attached [pid 5350] munmap(0x7fa2d45d3000, 1048576 [pid 5345] creat(0x200001c0, 0420 [pid 5342] <... write resumed>) = 9 [pid 5333] <... sendfile resumed>) = 117 [pid 5077] <... close resumed>) = 0 [pid 5352] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5351] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5345] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5333] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5352] <... set_robust_list resumed>) = 0 [pid 5351] <... set_robust_list resumed>) = 0 [pid 5350] <... munmap resumed>) = 0 [pid 5347] <... clone resumed>, parent_tid=[5351], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5351 [pid 5345] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5344] <... clone resumed>, parent_tid=[5352], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5352 [pid 5342] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] <... futex resumed>) = 0 [pid 5077] rmdir("./7" [pid 5352] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5351] memfd_create("syzkaller", 0 [pid 5350] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5347] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5345] <... futex resumed>) = 0 [pid 5344] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5342] <... futex resumed>) = 1 [pid 5339] <... futex resumed>) = 0 [pid 5333] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5352] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5351] <... memfd_create resumed>) = 3 [pid 5350] <... openat resumed>) = 4 [pid 5347] <... futex resumed>) = 0 [pid 5345] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5344] <... futex resumed>) = 0 [pid 5339] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] exit_group(0 [pid 5077] <... rmdir resumed>) = 0 [pid 5342] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5352] memfd_create("syzkaller", 0 [pid 5351] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5350] ioctl(4, LOOP_SET_FD, 3 [pid 5347] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5345] <... futex resumed>) = ? [pid 5344] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5342] <... openat resumed>) = 5 [pid 5339] <... futex resumed>) = 0 [pid 5333] <... futex resumed>) = ? [pid 5325] <... exit_group resumed>) = ? [pid 5077] mkdir("./8", 0777 [pid 5352] <... memfd_create resumed>) = 3 [pid 5351] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5345] +++ exited with 0 +++ [pid 5342] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5339] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5352] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5350] <... ioctl resumed>) = 0 [pid 5342] <... futex resumed>) = 0 [pid 5339] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5333] +++ exited with 0 +++ [pid 5325] +++ exited with 0 +++ [pid 5077] <... mkdir resumed>) = 0 [pid 5352] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5350] close(3 [pid 5342] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5339] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5325, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5077] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5350] <... close resumed>) = 0 [pid 5342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5339] <... futex resumed>) = 0 [pid 5350] mkdir("./bus", 0777 [pid 5342] open("./bus", O_RDWR [pid 5339] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5352] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5351] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5350] <... mkdir resumed>) = 0 [pid 5342] <... open resumed>) = 6 [pid 5077] <... openat resumed>) = 3 [pid 5350] mount("/dev/loop3", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5342] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5342] <... futex resumed>) = 1 [pid 5339] <... futex resumed>) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5342] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5339] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] close(3 [pid 5342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5339] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... close resumed>) = 0 [pid 5351] <... write resumed>) = 1048576 [pid 5342] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5339] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5342] <... mmap resumed>) = 0x20000000 [pid 5081] <... openat resumed>) = 3 [ 67.173162][ T5333] EXT4-fs (loop5): dirty_blocks=16 [ 67.192869][ T5333] EXT4-fs (loop5): Block reservation details [ 67.199750][ T5333] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 67.215603][ T5350] loop3: detected capacity change from 0 to 2048 ./strace-static-x86_64: Process 5355 attached [pid 5352] <... write resumed>) = 1048576 [pid 5351] munmap(0x7fa2d45d3000, 1048576 [pid 5350] <... mount resumed>) = 0 [pid 5342] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] fstat(3, [pid 5355] set_robust_list(0x555555adb5e0, 24 [pid 5352] munmap(0x7fa2d45d3000, 1048576 [pid 5351] <... munmap resumed>) = 0 [pid 5350] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5342] <... futex resumed>) = 1 [pid 5339] <... futex resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5355 [pid 5350] <... openat resumed>) = 3 [pid 5342] sendfile(4, 5, NULL, 2147483713 [pid 5339] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(3, [pid 5351] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5350] chdir("./bus" [pid 5339] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5339] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5350] <... chdir resumed>) = 0 [pid 5355] <... set_robust_list resumed>) = 0 [pid 5350] ioctl(4, LOOP_CLR_FD [pid 5081] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5355] chdir("./8" [pid 5350] <... ioctl resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5355] <... chdir resumed>) = 0 [pid 5351] <... openat resumed>) = 4 [pid 5355] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5350] close(4 [pid 5081] lstat("./8/binderfs", [pid 5355] <... prctl resumed>) = 0 [pid 5355] setpgid(0, 0 [pid 5350] <... close resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5355] <... setpgid resumed>) = 0 [pid 5351] ioctl(4, LOOP_SET_FD, 3 [pid 5350] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] unlink("./8/binderfs" [pid 5355] <... openat resumed>) = 3 [pid 5350] <... futex resumed>) = 1 [pid 5346] <... futex resumed>) = 0 [pid 5355] write(3, "1000", 4) = 4 [pid 5355] close(3) = 0 [pid 5355] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5355] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5355] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2dc9d3000 [pid 5355] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5355] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5356], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5356 [pid 5355] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5355] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5352] <... munmap resumed>) = 0 [pid 5346] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... unlink resumed>) = 0 [pid 5350] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5352] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5346] <... futex resumed>) = 0 [pid 5352] ioctl(4, LOOP_SET_FD, 3 [pid 5081] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5356 attached [pid 5352] <... ioctl resumed>) = 0 [pid 5351] <... ioctl resumed>) = 0 [pid 5350] <... open resumed>) = 4 [pid 5346] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5356] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5352] close(3 [pid 5351] close(3 [pid 5356] <... set_robust_list resumed>) = 0 [pid 5352] <... close resumed>) = 0 [pid 5351] <... close resumed>) = 0 [pid 5356] memfd_create("syzkaller", 0 [pid 5352] mkdir("./bus", 0777 [pid 5351] mkdir("./bus", 0777 [pid 5356] <... memfd_create resumed>) = 3 [pid 5352] <... mkdir resumed>) = 0 [pid 5351] <... mkdir resumed>) = 0 [pid 5356] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5352] mount("/dev/loop0", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5351] mount("/dev/loop2", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5356] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5350] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5339] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5356] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5350] <... futex resumed>) = 1 [pid 5346] <... futex resumed>) = 0 [pid 5339] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5356] <... write resumed>) = 1048576 [ 67.279060][ T5351] loop2: detected capacity change from 0 to 2048 [ 67.288689][ T5352] loop0: detected capacity change from 0 to 2048 [ 67.295315][ T5342] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 67.311596][ T5116] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5350] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5346] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5339] <... futex resumed>) = 0 [pid 5351] <... mount resumed>) = 0 [pid 5351] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5351] chdir("./bus") = 0 [pid 5351] ioctl(4, LOOP_CLR_FD) = 0 [pid 5350] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5346] <... futex resumed>) = 0 [pid 5339] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5350] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5346] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5339] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5351] close(4) = 0 [pid 5350] <... write resumed>) = 9 [pid 5339] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5351] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5347] <... futex resumed>) = 0 [pid 5351] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5347] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5347] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5356] munmap(0x7fa2d45d3000, 1048576 [pid 5339] <... mprotect resumed>) = 0 [pid 5350] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5346] <... futex resumed>) = 0 [pid 5350] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5346] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5351] <... open resumed>) = 4 [pid 5356] <... munmap resumed>) = 0 [pid 5351] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5350] <... openat resumed>) = 5 [pid 5346] <... futex resumed>) = 0 [pid 5339] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5356] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5351] <... futex resumed>) = 1 [pid 5350] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5347] <... futex resumed>) = 0 [pid 5346] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5356] <... openat resumed>) = 4 [pid 5351] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5350] <... futex resumed>) = 0 [pid 5347] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5346] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5356] ioctl(4, LOOP_SET_FD, 3 [pid 5351] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5350] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5347] <... futex resumed>) = 0 [pid 5346] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5339] <... clone resumed>, parent_tid=[5361], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5361 [pid 5351] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5350] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5347] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5346] <... futex resumed>) = 0 [pid 5339] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5352] <... mount resumed>) = 0 [pid 5350] open("./bus", O_RDWR [pid 5346] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5339] <... futex resumed>) = 0 [pid 5352] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5351] <... write resumed>) = 9 [pid 5356] <... ioctl resumed>) = 0 [pid 5352] <... openat resumed>) = 3 [pid 5351] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5350] <... open resumed>) = 6 [pid 5339] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5356] close(3 [pid 5352] chdir("./bus" [pid 5351] <... futex resumed>) = 1 [pid 5350] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5347] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5361 attached [pid 5356] <... close resumed>) = 0 [pid 5352] <... chdir resumed>) = 0 [pid 5351] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5350] <... futex resumed>) = 1 [pid 5347] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5346] <... futex resumed>) = 0 [pid 5361] set_robust_list(0x7fa2d46d29e0, 24 [pid 5356] mkdir("./bus", 0777 [pid 5352] ioctl(4, LOOP_CLR_FD [pid 5351] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5350] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5347] <... futex resumed>) = 0 [pid 5346] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5361] <... set_robust_list resumed>) = 0 [pid 5356] <... mkdir resumed>) = 0 [pid 5352] <... ioctl resumed>) = 0 [pid 5351] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5350] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5347] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5346] <... futex resumed>) = 0 [pid 5356] mount("/dev/loop1", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5352] close(4 [pid 5351] <... openat resumed>) = 5 [ 67.337167][ T5116] EXT4-fs (loop5): This should not happen!! Data will be lost [ 67.337167][ T5116] [ 67.373883][ T5356] loop1: detected capacity change from 0 to 2048 [pid 5350] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5346] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5352] <... close resumed>) = 0 [pid 5351] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = 0 [pid 5351] <... futex resumed>) = 1 [pid 5347] <... futex resumed>) = 0 [pid 5351] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5350] <... mmap resumed>) = 0x20000000 [pid 5347] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5352] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5351] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5350] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5347] <... futex resumed>) = 0 [pid 5081] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5352] <... futex resumed>) = 1 [pid 5351] open("./bus", O_RDWR [pid 5350] <... futex resumed>) = 1 [pid 5347] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5346] <... futex resumed>) = 0 [pid 5344] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5352] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5351] <... open resumed>) = 6 [pid 5350] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5346] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5344] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] lstat("./8/bus", [pid 5352] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5351] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5352] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5351] <... futex resumed>) = 1 [pid 5350] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5347] <... futex resumed>) = 0 [pid 5346] <... futex resumed>) = 0 [pid 5344] <... futex resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5356] <... mount resumed>) = 0 [pid 5352] <... open resumed>) = 4 [pid 5351] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5350] sendfile(4, 5, NULL, 2147483713 [pid 5347] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5346] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5339] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5356] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5352] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5351] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5347] <... futex resumed>) = 0 [pid 5344] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5356] <... openat resumed>) = 3 [pid 5352] <... futex resumed>) = 0 [pid 5351] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5347] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5356] chdir("./bus" [pid 5352] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5351] <... mmap resumed>) = 0x20000000 [pid 5344] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] openat(AT_FDCWD, "./8/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5356] <... chdir resumed>) = 0 [pid 5352] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5351] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5344] <... futex resumed>) = 0 [pid 5356] ioctl(4, LOOP_CLR_FD [pid 5352] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5351] <... futex resumed>) = 1 [pid 5347] <... futex resumed>) = 0 [pid 5081] <... openat resumed>) = 4 [pid 5356] <... ioctl resumed>) = 0 [pid 5351] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5347] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5344] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5356] close(4 [pid 5352] <... write resumed>) = 9 [pid 5351] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5347] <... futex resumed>) = 0 [pid 5081] fstat(4, [pid 5356] <... close resumed>) = 0 [pid 5352] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5351] sendfile(4, 5, NULL, 2147483713 [pid 5347] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5356] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5352] <... futex resumed>) = 1 [pid 5344] <... futex resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5344] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5081] getdents64(4, [pid 5352] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5344] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5356] <... futex resumed>) = 1 [pid 5355] <... futex resumed>) = 0 [pid 5352] <... openat resumed>) = 5 [pid 5356] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5355] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5352] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(4, [pid 5356] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5355] <... futex resumed>) = 0 [pid 5352] <... futex resumed>) = 1 [pid 5344] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5356] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5355] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5344] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5352] open("./bus", O_RDWR [pid 5344] <... futex resumed>) = 0 [pid 5081] close(4 [pid 5344] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... close resumed>) = 0 [ 67.409666][ T5342] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5356] <... open resumed>) = 4 [pid 5355] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5352] <... open resumed>) = 6 [pid 5347] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5346] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5344] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 67.476200][ T5351] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 67.498305][ T5350] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 67.500391][ T5342] EXT4-fs (loop4): This should not happen!! Data will be lost [ 67.500391][ T5342] [pid 5081] rmdir("./8/bus" [pid 5356] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5352] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5346] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5344] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5355] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... rmdir resumed>) = 0 [pid 5347] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5356] <... futex resumed>) = 0 [pid 5352] <... futex resumed>) = 0 [pid 5346] <... futex resumed>) = 0 [pid 5344] <... futex resumed>) = 0 [pid 5081] getdents64(3, [pid 5356] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5352] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5344] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5356] <... write resumed>) = 9 [pid 5352] <... mmap resumed>) = 0x20000000 [pid 5346] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5081] close(3 [pid 5356] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5355] <... futex resumed>) = 0 [pid 5352] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5347] <... futex resumed>) = 0 [pid 5346] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... close resumed>) = 0 [pid 5356] <... futex resumed>) = 0 [pid 5355] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5352] <... futex resumed>) = 1 [pid 5347] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5346] <... mprotect resumed>) = 0 [pid 5344] <... futex resumed>) = 0 [pid 5081] rmdir("./8" [pid 5356] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5352] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5346] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5344] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... rmdir resumed>) = 0 [pid 5352] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5344] <... futex resumed>) = 0 [pid 5081] mkdir("./9", 0777 [ 67.523118][ T5342] EXT4-fs (loop4): Total free blocks count 0 [ 67.529867][ T5342] EXT4-fs (loop4): Free/Dirty block details [ 67.537541][ T5342] EXT4-fs (loop4): free_blocks=2415919104 [ 67.554342][ T5342] EXT4-fs (loop4): dirty_blocks=16 [ 67.560523][ T5342] EXT4-fs (loop4): Block reservation details [pid 5352] sendfile(4, 5, NULL, 2147483713 [pid 5346] <... clone resumed>, parent_tid=[5364], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5364 [pid 5344] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... mkdir resumed>) = 0 [pid 5355] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5347] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5346] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5361] creat(0x200001c0, 0420 [pid 5355] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5347] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5346] <... futex resumed>) = 0 [pid 5342] <... sendfile resumed>) = 117 [pid 5081] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5364 attached [pid 5346] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5364] set_robust_list(0x7fa2d46d29e0, 24 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5364] <... set_robust_list resumed>) = 0 [pid 5081] close(3 [pid 5361] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5356] <... futex resumed>) = 0 [pid 5355] <... futex resumed>) = 1 [pid 5347] <... mprotect resumed>) = 0 [pid 5342] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... close resumed>) = 0 [pid 5361] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5356] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5355] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5347] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5342] <... futex resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5361] <... futex resumed>) = 0 [pid 5356] <... openat resumed>) = 5 [pid 5339] exit_group(0 [pid 5356] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5339] <... exit_group resumed>) = ? [pid 5081] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5365 [pid 5356] <... futex resumed>) = 0 [pid 5356] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5365 attached [pid 5365] set_robust_list(0x555555adb5e0, 24) = 0 [pid 5365] chdir("./9") = 0 [pid 5365] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5365] setpgid(0, 0) = 0 [pid 5365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5365] write(3, "1000", 4./strace-static-x86_64: Process 5366 attached ) = 4 [pid 5355] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5365] close(3) = 0 [pid 5365] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5365] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2dc9d3000 [pid 5365] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5365] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5367], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5367 [ 67.565467][ T5352] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 67.568084][ T5342] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 67.589639][ T5350] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 67.610323][ T5351] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5365] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5366] set_robust_list(0x7fa2d46d29e0, 24 [pid 5365] <... futex resumed>) = 0 [pid 5361] +++ exited with 0 +++ [pid 5355] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5347] <... clone resumed>, parent_tid=[5366], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5366 [pid 5346] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5344] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5342] +++ exited with 0 +++ [pid 5339] +++ exited with 0 +++ [pid 5365] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5344] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5339, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5344] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5344] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5367 attached [pid 5344] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5080] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5367] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5344] <... mprotect resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5367] <... set_robust_list resumed>) = 0 [pid 5344] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] fstat(3, [pid 5367] memfd_create("syzkaller", 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5367] <... memfd_create resumed>) = 3 [pid 5366] <... set_robust_list resumed>) = 0 [pid 5356] <... futex resumed>) = 0 [pid 5355] <... futex resumed>) = 1 [pid 5347] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5344] <... clone resumed>, parent_tid=[5368], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5368 [pid 5080] getdents64(3, [pid 5367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5356] open("./bus", O_RDWR [pid 5344] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5367] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5356] <... open resumed>) = 6 [pid 5344] <... futex resumed>) = 0 [pid 5080] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5356] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5355] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5347] <... futex resumed>) = 0 [pid 5344] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5356] <... futex resumed>) = 0 [pid 5080] lstat("./8/binderfs", [pid 5356] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./8/binderfs" [pid 5355] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5347] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... unlink resumed>) = 0 [pid 5367] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5355] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [ 67.624059][ T5350] EXT4-fs (loop3): This should not happen!! Data will be lost [ 67.624059][ T5350] [ 67.630634][ T5352] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 67.635914][ T5351] EXT4-fs (loop2): This should not happen!! Data will be lost [ 67.635914][ T5351] [ 67.656621][ T5350] EXT4-fs (loop3): Total free blocks count 0 [ 67.663209][ T5350] EXT4-fs (loop3): Free/Dirty block details [ 67.670072][ T5350] EXT4-fs (loop3): free_blocks=2415919104 [pid 5080] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5368 attached [pid 5356] <... futex resumed>) = 0 [pid 5355] <... futex resumed>) = 1 [pid 5368] set_robust_list(0x7fa2d46d29e0, 24 [pid 5356] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5355] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5356] <... mmap resumed>) = 0x20000000 [pid 5356] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5356] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5368] <... set_robust_list resumed>) = 0 [pid 5355] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5344] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 67.676499][ T5350] EXT4-fs (loop3): dirty_blocks=16 [ 67.676893][ T5116] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 67.681621][ T5350] EXT4-fs (loop3): Block reservation details [ 67.699857][ T5351] EXT4-fs (loop2): Total free blocks count 0 [ 67.706675][ T5351] EXT4-fs (loop2): Free/Dirty block details [ 67.713122][ T5351] EXT4-fs (loop2): free_blocks=2415919104 [ 67.719304][ T5351] EXT4-fs (loop2): dirty_blocks=16 [pid 5355] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5347] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5356] <... futex resumed>) = 0 [pid 5356] sendfile(4, 5, NULL, 2147483713 [pid 5355] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5367] <... write resumed>) = 1048576 [pid 5367] munmap(0x7fa2d45d3000, 1048576) = 0 [pid 5367] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5367] ioctl(4, LOOP_SET_FD, 3 [pid 5366] creat(0x200001c0, 0420 [pid 5364] creat(0x200001c0, 0420 [pid 5351] <... sendfile resumed>) = 117 [pid 5350] <... sendfile resumed>) = 117 [ 67.719786][ T5352] EXT4-fs (loop0): This should not happen!! Data will be lost [ 67.719786][ T5352] [ 67.724941][ T5351] EXT4-fs (loop2): Block reservation details [ 67.740975][ T5350] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 67.748282][ T5351] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 67.754407][ T5356] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 67.755206][ T5116] EXT4-fs (loop4): This should not happen!! Data will be lost [pid 5366] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5364] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5351] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5350] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5366] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5364] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5351] <... futex resumed>) = 0 [pid 5350] <... futex resumed>) = 0 [pid 5346] exit_group(0) = ? [pid 5366] <... futex resumed>) = 0 [pid 5364] <... futex resumed>) = ? [pid 5351] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5366] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5364] +++ exited with 0 +++ [pid 5355] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5350] +++ exited with 0 +++ [pid 5347] exit_group(0 [pid 5346] +++ exited with 0 +++ [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5346, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5079] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5079] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(3, [pid 5366] <... futex resumed>) = ? [pid 5355] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5351] <... futex resumed>) = ? [pid 5347] <... exit_group resumed>) = ? [pid 5080] <... umount2 resumed>) = 0 [pid 5079] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5079] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5355] <... futex resumed>) = 0 [pid 5351] +++ exited with 0 +++ [pid 5079] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] unlink("./9/binderfs") = 0 [pid 5366] +++ exited with 0 +++ [pid 5355] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5347] +++ exited with 0 +++ [pid 5079] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5355] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5080] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5367] <... ioctl resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5347, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5367] close(3 [pid 5080] lstat("./8/bus", [pid 5078] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5367] <... close resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5367] mkdir("./bus", 0777 [pid 5080] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5367] <... mkdir resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... openat resumed>) = 3 [pid 5367] mount("/dev/loop5", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5080] openat(AT_FDCWD, "./8/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] fstat(3, [pid 5080] <... openat resumed>) = 4 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 67.755206][ T5116] [ 67.769801][ T5367] loop5: detected capacity change from 0 to 2048 [ 67.788665][ T5352] EXT4-fs (loop0): Total free blocks count 0 [ 67.790431][ T5356] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 67.795696][ T5352] EXT4-fs (loop0): Free/Dirty block details [ 67.815771][ T5352] EXT4-fs (loop0): free_blocks=2415919104 [ 67.821536][ T5352] EXT4-fs (loop0): dirty_blocks=16 [pid 5355] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5080] fstat(4, [pid 5078] getdents64(3, [pid 5355] <... mprotect resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5080] getdents64(4, [pid 5078] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] getdents64(4, [pid 5078] lstat("./8/binderfs", [pid 5080] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] close(4 [pid 5078] unlink("./8/binderfs" [pid 5080] <... close resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5355] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] rmdir("./8/bus" [pid 5078] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... rmdir resumed>) = 0 [pid 5355] <... clone resumed>, parent_tid=[5369], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5369 [pid 5080] getdents64(3, [pid 5355] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5369 attached [pid 5080] close(3) = 0 [pid 5080] rmdir("./8") = 0 [pid 5080] mkdir("./9", 0777) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5355] <... futex resumed>) = 0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5355] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5370 [pid 5369] set_robust_list(0x7fa2d46d29e0, 24./strace-static-x86_64: Process 5370 attached [pid 5370] set_robust_list(0x555555adb5e0, 24) = 0 [pid 5370] chdir("./9") = 0 [pid 5369] <... set_robust_list resumed>) = 0 [ 67.834629][ T5352] EXT4-fs (loop0): Block reservation details [ 67.842626][ T5118] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 67.858312][ T5352] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 67.865509][ T33] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5370] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5368] creat(0x200001c0, 0420 [pid 5352] <... sendfile resumed>) = 117 [pid 5370] setpgid(0, 0 [pid 5368] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5367] <... mount resumed>) = 0 [pid 5352] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5368] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5367] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5352] <... futex resumed>) = 0 [pid 5368] <... futex resumed>) = 0 [pid 5367] <... openat resumed>) = 3 [pid 5352] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5368] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5367] chdir("./bus") = 0 [pid 5367] ioctl(4, LOOP_CLR_FD [pid 5370] <... setpgid resumed>) = 0 [pid 5367] <... ioctl resumed>) = 0 [pid 5344] exit_group(0 [pid 5367] close(4) = 0 [pid 5367] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5367] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5352] <... futex resumed>) = ? [pid 5344] <... exit_group resumed>) = ? [pid 5355] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5352] +++ exited with 0 +++ [pid 5368] <... futex resumed>) = ? [pid 5365] <... futex resumed>) = 0 [ 67.878516][ T5118] EXT4-fs (loop3): This should not happen!! Data will be lost [ 67.878516][ T5118] [ 67.891365][ T33] EXT4-fs (loop2): This should not happen!! Data will be lost [ 67.891365][ T33] [ 67.892022][ T5356] EXT4-fs (loop1): This should not happen!! Data will be lost [ 67.892022][ T5356] [ 67.912831][ T5356] EXT4-fs (loop1): Total free blocks count 0 [ 67.919418][ T5356] EXT4-fs (loop1): Free/Dirty block details [pid 5370] <... openat resumed>) = 3 [pid 5368] +++ exited with 0 +++ [pid 5365] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5344] +++ exited with 0 +++ [pid 5079] <... umount2 resumed>) = 0 [pid 5370] write(3, "1000", 4 [pid 5367] <... futex resumed>) = 0 [pid 5365] <... futex resumed>) = 1 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5344, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5370] <... write resumed>) = 4 [pid 5367] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5365] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5370] close(3 [pid 5367] <... open resumed>) = 4 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5370] <... close resumed>) = 0 [pid 5369] creat(0x200001c0, 0420 [pid 5367] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5356] <... sendfile resumed>) = 117 [pid 5079] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5370] symlink("/dev/binderfs", "./binderfs" [pid 5369] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5367] <... futex resumed>) = 1 [pid 5365] <... futex resumed>) = 0 [pid 5356] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = 0 [pid 5370] <... symlink resumed>) = 0 [pid 5369] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5367] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5365] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5356] <... futex resumed>) = 0 [pid 5079] lstat("./9/bus", [pid 5078] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5370] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5369] <... futex resumed>) = 0 [pid 5367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5365] <... futex resumed>) = 0 [pid 5356] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5355] exit_group(0 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5370] <... futex resumed>) = 0 [pid 5367] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5365] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5356] <... futex resumed>) = ? [pid 5355] <... exit_group resumed>) = ? [pid 5079] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] lstat("./8/bus", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5369] +++ exited with 0 +++ [pid 5367] <... write resumed>) = 9 [pid 5356] +++ exited with 0 +++ [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5370] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5367] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5355] +++ exited with 0 +++ [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 5370] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5367] <... futex resumed>) = 1 [pid 5365] <... futex resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./9/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] fstat(3, [pid 5370] <... mprotect resumed>) = 0 [pid 5367] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5365] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... openat resumed>) = 4 [pid 5078] openat(AT_FDCWD, "./8/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5355, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5370] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5365] <... futex resumed>) = 0 [pid 5079] fstat(4, [pid 5367] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5365] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... openat resumed>) = 4 [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5076] getdents64(3, [pid 5370] <... clone resumed>, parent_tid=[5373], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5373 [pid 5367] <... openat resumed>) = 5 [pid 5079] getdents64(4, [pid 5078] fstat(4, ./strace-static-x86_64: Process 5373 attached [pid 5370] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5367] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 67.943181][ T5356] EXT4-fs (loop1): free_blocks=2415919104 [ 67.948960][ T5356] EXT4-fs (loop1): dirty_blocks=16 [ 67.955295][ T5356] EXT4-fs (loop1): Block reservation details [ 67.961302][ T5356] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 5079] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5077] <... restart_syscall resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5370] <... futex resumed>) = 0 [pid 5367] <... futex resumed>) = 1 [pid 5365] <... futex resumed>) = 0 [pid 5079] getdents64(4, [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5370] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5365] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5367] open("./bus", O_RDWR [pid 5365] <... futex resumed>) = 0 [pid 5079] close(4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] getdents64(4, [pid 5079] <... close resumed>) = 0 [pid 5367] <... open resumed>) = 6 [pid 5365] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] rmdir("./9/bus" [pid 5367] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... rmdir resumed>) = 0 [pid 5078] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5077] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] lstat("./8/binderfs", [pid 5367] <... futex resumed>) = 1 [pid 5365] <... futex resumed>) = 0 [pid 5079] getdents64(3, [pid 5078] getdents64(4, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5367] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5365] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5078] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5077] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5365] <... futex resumed>) = 0 [pid 5079] close(3 [pid 5078] close(4 [pid 5077] <... openat resumed>) = 3 [pid 5367] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5365] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] fstat(3, [pid 5076] unlink("./8/binderfs" [pid 5079] rmdir("./9") = 0 [pid 5367] <... mmap resumed>) = 0x20000000 [pid 5079] mkdir("./10", 0777 [pid 5367] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... mkdir resumed>) = 0 [pid 5078] rmdir("./8/bus" [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5367] <... futex resumed>) = 1 [pid 5365] <... futex resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5365] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... openat resumed>) = 3 [pid 5078] <... rmdir resumed>) = 0 [pid 5367] sendfile(4, 5, NULL, 2147483713 [pid 5365] <... futex resumed>) = 0 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5078] getdents64(3, [pid 5077] getdents64(3, [pid 5076] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5365] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] close(3) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555adb5d0) = 5374 [pid 5373] set_robust_list(0x7fa2dc9f39e0, 24) = 0 [pid 5373] memfd_create("syzkaller", 0 [pid 5077] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5078] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5373] <... memfd_create resumed>) = 3 [pid 5078] close(3 [pid 5077] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5373] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... close resumed>) = 0 [pid 5373] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5373] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5078] rmdir("./8" [pid 5077] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5078] mkdir("./9", 0777 [pid 5077] unlink("./8/binderfs") = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... openat resumed>) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5078] close(3) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555adb5d0) = 5375 [pid 5373] <... write resumed>) = 1048576 [pid 5373] munmap(0x7fa2d45d3000, 1048576) = 0 [pid 5373] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5373] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5373] close(3) = 0 [pid 5373] mkdir("./bus", 0777) = 0 [pid 5373] mount("/dev/loop4", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 5374 attached [pid 5374] set_robust_list(0x555555adb5e0, 24) = 0 [pid 5374] chdir("./10") = 0 [pid 5374] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5374] setpgid(0, 0) = 0 [pid 5374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5374] write(3, "1000", 4) = 4 [pid 5374] close(3) = 0 [pid 5374] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5374] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5374] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2dc9d3000 [pid 5365] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5374] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5374] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5376], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5376 [pid 5374] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5374] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5376 attached [pid 5376] set_robust_list(0x7fa2dc9f39e0, 24) = 0 [pid 5365] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5376] memfd_create("syzkaller", 0 [pid 5365] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5365] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5365] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5377], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5377 [pid 5365] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 68.044707][ T9] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 68.052622][ T5373] loop4: detected capacity change from 0 to 2048 [ 68.058223][ T5367] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5365] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5375 attached [pid 5376] <... memfd_create resumed>) = 3 [pid 5376] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2d45d3000 ./strace-static-x86_64: Process 5377 attached [pid 5377] set_robust_list(0x7fa2d46d29e0, 24) = 0 [pid 5375] set_robust_list(0x555555adb5e0, 24 [pid 5376] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5375] <... set_robust_list resumed>) = 0 [pid 5375] chdir("./9" [pid 5373] <... mount resumed>) = 0 [pid 5375] <... chdir resumed>) = 0 [pid 5375] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5373] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5375] setpgid(0, 0 [pid 5373] <... openat resumed>) = 3 [pid 5375] <... setpgid resumed>) = 0 [pid 5373] chdir("./bus" [pid 5375] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5373] <... chdir resumed>) = 0 [pid 5375] <... openat resumed>) = 3 [pid 5373] ioctl(4, LOOP_CLR_FD [pid 5375] write(3, "1000", 4 [pid 5373] <... ioctl resumed>) = 0 [pid 5375] <... write resumed>) = 4 [pid 5373] close(4 [pid 5375] close(3) = 0 [pid 5373] <... close resumed>) = 0 [pid 5375] symlink("/dev/binderfs", "./binderfs" [pid 5373] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5375] <... symlink resumed>) = 0 [pid 5373] <... futex resumed>) = 1 [pid 5370] <... futex resumed>) = 0 [pid 5375] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5373] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5370] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5375] <... futex resumed>) = 0 [pid 5373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5370] <... futex resumed>) = 0 [pid 5373] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5370] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5376] <... write resumed>) = 1048576 [pid 5375] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5373] <... open resumed>) = 4 [pid 5375] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5373] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5365] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 68.084002][ T33] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 68.103324][ T9] EXT4-fs (loop0): This should not happen!! Data will be lost [ 68.103324][ T9] [ 68.114316][ T33] EXT4-fs (loop1): This should not happen!! Data will be lost [ 68.114316][ T33] [pid 5375] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5376] munmap(0x7fa2d45d3000, 1048576 [pid 5375] <... mprotect resumed>) = 0 [pid 5373] <... futex resumed>) = 1 [pid 5370] <... futex resumed>) = 0 [pid 5376] <... munmap resumed>) = 0 [pid 5375] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5373] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5370] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5370] <... futex resumed>) = 0 [pid 5376] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5375] <... clone resumed>, parent_tid=[5380], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5380 [pid 5373] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5370] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5375] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5376] <... openat resumed>) = 4 [pid 5375] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5376] ioctl(4, LOOP_SET_FD, 3 [pid 5373] <... write resumed>) = 9 [pid 5373] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... umount2 resumed>) = 0 [pid 5373] <... futex resumed>) = 1 [pid 5370] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5380 attached [pid 5376] <... ioctl resumed>) = 0 [pid 5373] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5370] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5370] <... futex resumed>) = 0 [pid 5373] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5370] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5373] <... openat resumed>) = 5 [pid 5373] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5370] <... futex resumed>) = 0 [pid 5373] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5370] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5370] <... futex resumed>) = 0 [pid 5373] open("./bus", O_RDWR [pid 5370] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5373] <... open resumed>) = 6 [pid 5373] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5370] <... futex resumed>) = 0 [pid 5373] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5370] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5370] <... futex resumed>) = 0 [pid 5373] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [ 68.154577][ T5367] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 68.166890][ T5367] EXT4-fs (loop5): This should not happen!! Data will be lost [ 68.166890][ T5367] [ 68.188027][ T5376] loop3: detected capacity change from 0 to 2048 [pid 5370] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5380] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5376] close(3 [pid 5373] <... mmap resumed>) = 0x20000000 [pid 5380] <... set_robust_list resumed>) = 0 [pid 5376] <... close resumed>) = 0 [pid 5373] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] lstat("./8/bus", [pid 5076] <... umount2 resumed>) = 0 [pid 5373] <... futex resumed>) = 1 [pid 5370] <... futex resumed>) = 0 [pid 5380] memfd_create("syzkaller", 0 [pid 5376] mkdir("./bus", 0777 [pid 5373] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5370] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5370] <... futex resumed>) = 0 [pid 5077] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5380] <... memfd_create resumed>) = 3 [ 68.201506][ T5367] EXT4-fs (loop5): Total free blocks count 0 [ 68.209160][ T5367] EXT4-fs (loop5): Free/Dirty block details [ 68.223978][ T5367] EXT4-fs (loop5): free_blocks=2415919104 [ 68.241230][ T5367] EXT4-fs (loop5): dirty_blocks=16 [pid 5373] sendfile(4, 5, NULL, 2147483713 [pid 5370] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5380] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5376] <... mkdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./8/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(4, 0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5076] lstat("./8/bus", [pid 5077] getdents64(4, 0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] close(4) = 0 [pid 5076] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5380] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5376] mount("/dev/loop3", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5077] rmdir("./8/bus") = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(3, [pid 5076] openat(AT_FDCWD, "./8/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5077] close(3 [pid 5076] fstat(4, [pid 5077] <... close resumed>) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] rmdir("./8" [pid 5076] getdents64(4, [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5077] mkdir("./9", 0777 [pid 5076] getdents64(4, [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] close(4 [pid 5077] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] rmdir("./8/bus" [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... rmdir resumed>) = 0 [pid 5077] close(3 [pid 5076] getdents64(3, [pid 5380] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5377] creat(0x200001c0, 0420 [pid 5367] <... sendfile resumed>) = 117 [pid 5077] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5377] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] close(3 [pid 5377] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... close resumed>) = 0 [pid 5377] <... futex resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5382 [pid 5076] rmdir("./8" [pid 5377] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] <... rmdir resumed>) = 0 [pid 5076] mkdir("./9", 0777) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555adb5d0) = 5383 ./strace-static-x86_64: Process 5382 attached [pid 5380] <... write resumed>) = 1048576 [pid 5370] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5367] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5365] exit_group(0 [pid 5370] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5365] <... exit_group resumed>) = ? [pid 5377] <... futex resumed>) = ? [pid 5367] <... futex resumed>) = ? ./strace-static-x86_64: Process 5383 attached [pid 5370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5383] set_robust_list(0x555555adb5e0, 24 [pid 5377] +++ exited with 0 +++ [pid 5370] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5383] <... set_robust_list resumed>) = 0 [pid 5370] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5383] chdir("./9") = 0 [pid 5370] <... mprotect resumed>) = 0 [pid 5383] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5370] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5383] <... prctl resumed>) = 0 [pid 5383] setpgid(0, 0) = 0 [pid 5383] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5376] <... mount resumed>) = 0 [pid 5383] <... openat resumed>) = 3 [pid 5382] set_robust_list(0x555555adb5e0, 24 [pid 5380] munmap(0x7fa2d45d3000, 1048576 [pid 5383] write(3, "1000", 4 [pid 5367] +++ exited with 0 +++ [pid 5365] +++ exited with 0 +++ [pid 5370] <... clone resumed>, parent_tid=[5385], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5385 [pid 5383] <... write resumed>) = 4 [pid 5383] close(3 [pid 5380] <... munmap resumed>) = 0 [pid 5370] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5382] <... set_robust_list resumed>) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5365, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- ./strace-static-x86_64: Process 5385 attached [pid 5383] <... close resumed>) = 0 [pid 5385] set_robust_list(0x7fa2d46d29e0, 24 [ 68.243178][ T5373] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 68.246459][ T5367] EXT4-fs (loop5): Block reservation details [ 68.283849][ T5367] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 68.290141][ T5373] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5383] symlink("/dev/binderfs", "./binderfs" [pid 5385] <... set_robust_list resumed>) = 0 [pid 5383] <... symlink resumed>) = 0 [pid 5370] <... futex resumed>) = 0 [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5382] chdir("./9" [pid 5380] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5376] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5383] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5383] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2dc9d3000 [pid 5383] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5383] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5386], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5386 [pid 5383] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5383] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5382] <... chdir resumed>) = 0 [pid 5380] <... openat resumed>) = 4 [pid 5376] <... openat resumed>) = 3 [pid 5370] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 5386 attached [pid 5386] set_robust_list(0x7fa2dc9f39e0, 24) = 0 [pid 5386] memfd_create("syzkaller", 0) = 3 [pid 5386] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2d45d3000 [pid 5382] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5380] ioctl(4, LOOP_SET_FD, 3 [pid 5376] chdir("./bus" [pid 5382] <... prctl resumed>) = 0 [pid 5376] <... chdir resumed>) = 0 [pid 5382] setpgid(0, 0 [pid 5380] <... ioctl resumed>) = 0 [pid 5376] ioctl(4, LOOP_CLR_FD [pid 5081] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5386] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5382] <... setpgid resumed>) = 0 [pid 5380] close(3 [pid 5376] <... ioctl resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5380] <... close resumed>) = 0 [pid 5376] close(4 [pid 5081] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5382] <... openat resumed>) = 3 [ 68.323952][ T5373] EXT4-fs (loop4): This should not happen!! Data will be lost [ 68.323952][ T5373] [ 68.334751][ T5373] EXT4-fs (loop4): Total free blocks count 0 [ 68.341449][ T5373] EXT4-fs (loop4): Free/Dirty block details [ 68.347710][ T5380] loop2: detected capacity change from 0 to 2048 [ 68.356016][ T5373] EXT4-fs (loop4): free_blocks=2415919104 [ 68.362431][ T5373] EXT4-fs (loop4): dirty_blocks=16 [ 68.368492][ T5373] EXT4-fs (loop4): Block reservation details [pid 5380] mkdir("./bus", 0777 [pid 5385] creat(0x200001c0, 0420 [pid 5376] <... close resumed>) = 0 [pid 5373] <... sendfile resumed>) = 117 [pid 5081] <... openat resumed>) = 3 [pid 5386] <... write resumed>) = 1048576 [pid 5385] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5382] write(3, "1000", 4 [pid 5380] <... mkdir resumed>) = 0 [pid 5376] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5373] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] fstat(3, [pid 5386] munmap(0x7fa2d45d3000, 1048576 [pid 5385] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5382] <... write resumed>) = 4 [pid 5380] mount("/dev/loop2", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5376] <... futex resumed>) = 1 [pid 5374] <... futex resumed>) = 0 [pid 5373] <... futex resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5386] <... munmap resumed>) = 0 [pid 5385] <... futex resumed>) = 1 [pid 5382] close(3 [pid 5376] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5373] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5370] <... futex resumed>) = 0 [pid 5081] getdents64(3, [pid 5386] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5385] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5382] <... close resumed>) = 0 [pid 5374] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5370] exit_group(0 [pid 5081] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5386] <... openat resumed>) = 4 [pid 5385] <... futex resumed>) = ? [pid 5382] symlink("/dev/binderfs", "./binderfs" [pid 5376] <... futex resumed>) = 0 [pid 5374] <... futex resumed>) = 1 [pid 5373] <... futex resumed>) = ? [pid 5370] <... exit_group resumed>) = ? [pid 5081] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5386] ioctl(4, LOOP_SET_FD, 3 [pid 5385] +++ exited with 0 +++ [pid 5382] <... symlink resumed>) = 0 [pid 5376] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5374] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5373] +++ exited with 0 +++ [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5370] +++ exited with 0 +++ [pid 5386] <... ioctl resumed>) = 0 [pid 5382] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5376] <... open resumed>) = 4 [pid 5081] lstat("./9/binderfs", [pid 5386] close(3 [pid 5382] <... futex resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5370, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5386] <... close resumed>) = 0 [pid 5382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] unlink("./9/binderfs" [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 5386] mkdir("./bus", 0777 [pid 5382] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5380] <... mount resumed>) = 0 [pid 5376] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... unlink resumed>) = 0 [pid 5080] <... restart_syscall resumed>) = 0 [pid 5386] <... mkdir resumed>) = 0 [pid 5382] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5380] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5376] <... futex resumed>) = 1 [pid 5374] <... futex resumed>) = 0 [pid 5081] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5386] mount("/dev/loop0", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5382] <... mprotect resumed>) = 0 [pid 5380] <... openat resumed>) = 3 [pid 5376] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5374] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5382] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5382] <... clone resumed>, parent_tid=[5389], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5389 [pid 5080] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5382] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... openat resumed>) = 3 [pid 5382] <... futex resumed>) = 0 [pid 5080] fstat(3, [pid 5382] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, 0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5080] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./9/binderfs") = 0 [ 68.375776][ T5373] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 68.396824][ T5386] loop0: detected capacity change from 0 to 2048 [ 68.411193][ T33] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5080] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5389 attached [pid 5380] chdir("./bus" [pid 5376] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5374] <... futex resumed>) = 0 [pid 5389] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5380] <... chdir resumed>) = 0 [pid 5376] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5374] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5389] <... set_robust_list resumed>) = 0 [pid 5380] ioctl(4, LOOP_CLR_FD [pid 5389] memfd_create("syzkaller", 0 [pid 5380] <... ioctl resumed>) = 0 [pid 5389] <... memfd_create resumed>) = 3 [pid 5380] close(4 [pid 5389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5380] <... close resumed>) = 0 [pid 5389] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5380] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5375] <... futex resumed>) = 0 [pid 5380] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5375] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5375] <... futex resumed>) = 0 [pid 5380] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5375] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5380] <... open resumed>) = 4 [pid 5380] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5375] <... futex resumed>) = 0 [pid 5380] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5375] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5375] <... futex resumed>) = 0 [pid 5380] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5376] <... write resumed>) = 9 [pid 5375] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5389] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5380] <... write resumed>) = 9 [pid 5376] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 5380] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5376] <... futex resumed>) = 1 [pid 5374] <... futex resumed>) = 0 [pid 5081] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5380] <... futex resumed>) = 1 [pid 5376] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5375] <... futex resumed>) = 0 [pid 5374] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5380] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5376] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5375] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5374] <... futex resumed>) = 0 [ 68.424751][ T5118] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 68.424782][ T33] EXT4-fs (loop5): This should not happen!! Data will be lost [ 68.424782][ T33] [ 68.438260][ T5118] EXT4-fs (loop4): This should not happen!! Data will be lost [ 68.438260][ T5118] [pid 5081] lstat("./9/bus", [pid 5386] <... mount resumed>) = 0 [pid 5380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5376] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5375] <... futex resumed>) = 0 [pid 5374] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5386] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5380] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5376] <... openat resumed>) = 5 [pid 5375] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5386] <... openat resumed>) = 3 [pid 5380] <... openat resumed>) = 5 [pid 5376] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5386] chdir("./bus" [pid 5380] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5376] <... futex resumed>) = 1 [pid 5374] <... futex resumed>) = 0 [pid 5386] <... chdir resumed>) = 0 [pid 5380] <... futex resumed>) = 1 [pid 5376] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5375] <... futex resumed>) = 0 [pid 5374] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5386] ioctl(4, LOOP_CLR_FD [pid 5380] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5376] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5375] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5374] <... futex resumed>) = 0 [pid 5386] <... ioctl resumed>) = 0 [pid 5380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5376] open("./bus", O_RDWR [pid 5375] <... futex resumed>) = 0 [pid 5374] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5386] close(4 [pid 5380] open("./bus", O_RDWR [pid 5376] <... open resumed>) = 6 [pid 5375] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5386] <... close resumed>) = 0 [pid 5380] <... open resumed>) = 6 [pid 5376] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5386] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5380] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5376] <... futex resumed>) = 1 [pid 5374] <... futex resumed>) = 0 [pid 5386] <... futex resumed>) = 1 [pid 5383] <... futex resumed>) = 0 [pid 5380] <... futex resumed>) = 1 [pid 5376] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5375] <... futex resumed>) = 0 [pid 5374] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5386] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5383] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5380] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5376] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5375] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5374] <... futex resumed>) = 0 [pid 5386] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5383] <... futex resumed>) = 0 [pid 5380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5376] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5375] <... futex resumed>) = 0 [pid 5374] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5386] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5383] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5380] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5376] <... mmap resumed>) = 0x20000000 [pid 5375] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5389] <... write resumed>) = 1048576 [pid 5386] <... open resumed>) = 4 [pid 5380] <... mmap resumed>) = 0x20000000 [pid 5376] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./9/bus", [pid 5081] openat(AT_FDCWD, "./9/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... openat resumed>) = 4 [pid 5080] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] fstat(4, [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] openat(AT_FDCWD, "./9/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] getdents64(4, [pid 5080] <... openat resumed>) = 4 [ 68.518337][ T27] kauditd_printk_skb: 74 callbacks suppressed [ 68.518354][ T27] audit: type=1804 audit(1673802237.382:173): pid=5376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor211" name="/root/syzkaller.jToCGh/10/bus/bus" dev="loop3" ino=18 res=1 errno=0 [pid 5389] munmap(0x7fa2d45d3000, 1048576 [pid 5386] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5380] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5376] <... futex resumed>) = 1 [pid 5374] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5080] fstat(4, [pid 5386] <... futex resumed>) = 0 [pid 5383] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5380] <... futex resumed>) = 1 [pid 5376] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5375] <... futex resumed>) = 0 [pid 5374] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(4, [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5386] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5380] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5376] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5375] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5374] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5080] getdents64(4, [pid 5380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 68.551541][ T27] audit: type=1804 audit(1673802237.382:174): pid=5380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor211" name="/root/syzkaller.EWCxeb/9/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 68.575026][ T27] audit: type=1804 audit(1673802237.392:175): pid=5376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor211" name="/root/syzkaller.jToCGh/10/bus/bus" dev="loop3" ino=18 res=1 errno=0 [pid 5376] sendfile(4, 5, NULL, 2147483713 [pid 5375] <... futex resumed>) = 0 [pid 5374] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] close(4 [pid 5080] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [ 68.597644][ T27] audit: type=1804 audit(1673802237.392:176): pid=5380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor211" name="/root/syzkaller.EWCxeb/9/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 68.619454][ T5376] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 68.620007][ T27] audit: type=1804 audit(1673802237.392:177): pid=5376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor211" name="/root/syzkaller.jToCGh/10/bus/bus" dev="loop3" ino=18 res=1 errno=0 [pid 5383] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5380] sendfile(4, 5, NULL, 2147483713 [pid 5375] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... close resumed>) = 0 [pid 5080] getdents64(4, [pid 5386] <... futex resumed>) = 0 [pid 5383] <... futex resumed>) = 1 [pid 5374] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] rmdir("./9/bus" [pid 5080] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5389] <... munmap resumed>) = 0 [pid 5386] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5374] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... rmdir resumed>) = 0 [pid 5080] close(4 [pid 5386] <... write resumed>) = 9 [pid 5374] <... futex resumed>) = 0 [pid 5081] getdents64(3, [pid 5080] <... close resumed>) = 0 [pid 5386] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5374] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5080] rmdir("./9/bus" [pid 5386] <... futex resumed>) = 0 [pid 5374] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5081] close(3 [pid 5080] <... rmdir resumed>) = 0 [pid 5386] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5374] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... close resumed>) = 0 [pid 5080] getdents64(3, [pid 5374] <... mprotect resumed>) = 0 [pid 5081] rmdir("./9" [pid 5080] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5389] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5383] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5374] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... rmdir resumed>) = 0 [pid 5080] close(3 [pid 5081] mkdir("./10", 0777 [pid 5080] <... close resumed>) = 0 [pid 5374] <... clone resumed>, parent_tid=[5392], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5392 [pid 5081] <... mkdir resumed>) = 0 [pid 5080] rmdir("./9" [pid 5374] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5080] <... rmdir resumed>) = 0 [pid 5374] <... futex resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5080] mkdir("./10", 0777 [pid 5374] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5080] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5392 attached [pid 5389] <... openat resumed>) = 4 [pid 5383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 68.645174][ T5380] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 68.657333][ T27] audit: type=1804 audit(1673802237.412:178): pid=5380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor211" name="/root/syzkaller.EWCxeb/9/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 68.697742][ T5376] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5392] set_robust_list(0x7fa2d46d29e0, 24 [pid 5081] close(3 [pid 5080] <... openat resumed>) = 3 [pid 5392] <... set_robust_list resumed>) = 0 [pid 5389] ioctl(4, LOOP_SET_FD, 3 [pid 5383] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... close resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] close(3 [pid 5081] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5393 [pid 5080] <... close resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5389] <... ioctl resumed>) = 0 [pid 5386] <... futex resumed>) = 0 [pid 5383] <... futex resumed>) = 1 [pid 5386] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5383] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5394 ./strace-static-x86_64: Process 5393 attached [pid 5386] <... openat resumed>) = 5 [pid 5375] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5393] set_robust_list(0x555555adb5e0, 24 [pid 5375] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5393] <... set_robust_list resumed>) = 0 [pid 5375] <... futex resumed>) = 0 [pid 5393] chdir("./10" [pid 5375] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5393] <... chdir resumed>) = 0 [pid 5375] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5393] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5375] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5393] <... prctl resumed>) = 0 [pid 5375] <... mprotect resumed>) = 0 [pid 5393] setpgid(0, 0 [pid 5375] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5393] <... setpgid resumed>) = 0 [pid 5393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5375] <... clone resumed>, parent_tid=[5395], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5395 [pid 5393] <... openat resumed>) = 3 [pid 5375] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5393] write(3, "1000", 4 [pid 5375] <... futex resumed>) = 0 [pid 5393] <... write resumed>) = 4 [pid 5386] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5375] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5395 attached [pid 5393] close(3 [pid 5386] <... futex resumed>) = 1 [pid 5383] <... futex resumed>) = 0 [pid 5395] set_robust_list(0x7fa2d46d29e0, 24 [pid 5393] <... close resumed>) = 0 [pid 5386] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5383] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5374] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5395] <... set_robust_list resumed>) = 0 [pid 5393] symlink("/dev/binderfs", "./binderfs" [pid 5389] close(3 [pid 5386] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5383] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5394 attached [pid 5393] <... symlink resumed>) = 0 [pid 5389] <... close resumed>) = 0 [pid 5386] open("./bus", O_RDWR [pid 5383] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5394] set_robust_list(0x555555adb5e0, 24 [pid 5393] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5389] mkdir("./bus", 0777 [pid 5386] <... open resumed>) = 6 [pid 5393] <... futex resumed>) = 0 [pid 5393] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2dc9d3000 [pid 5393] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5386] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5394] <... set_robust_list resumed>) = 0 [pid 5393] <... mprotect resumed>) = 0 [pid 5389] <... mkdir resumed>) = 0 [pid 5386] <... futex resumed>) = 0 [ 68.710198][ T5380] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 68.722709][ T5376] EXT4-fs (loop3): This should not happen!! Data will be lost [ 68.722709][ T5376] [ 68.734771][ T5389] loop1: detected capacity change from 0 to 2048 [ 68.744087][ T27] audit: type=1804 audit(1673802237.612:179): pid=5386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor211" name="/root/syzkaller.DZuQa1/9/bus/bus" dev="loop0" ino=18 res=1 errno=0 [pid 5383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5394] chdir("./10" [pid 5393] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5389] mount("/dev/loop1", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5386] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5383] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5386] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5393] <... clone resumed>, parent_tid=[5396], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5396 [pid 5386] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5393] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5386] <... mmap resumed>) = 0x20000000 [pid 5393] <... futex resumed>) = 0 [pid 5386] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5394] <... chdir resumed>) = 0 [pid 5393] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5386] <... futex resumed>) = 0 [pid 5394] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5386] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5383] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5396 attached [pid 5396] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5394] <... prctl resumed>) = 0 [pid 5383] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5396] <... set_robust_list resumed>) = 0 [pid 5394] setpgid(0, 0 [pid 5383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5396] memfd_create("syzkaller", 0 [pid 5394] <... setpgid resumed>) = 0 [pid 5383] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5396] <... memfd_create resumed>) = 3 [pid 5396] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2d45d3000 [pid 5394] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5386] <... futex resumed>) = 0 [pid 5383] <... futex resumed>) = 1 [pid 5375] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5394] <... openat resumed>) = 3 [pid 5389] <... mount resumed>) = 0 [pid 5386] sendfile(4, 5, NULL, 2147483713 [pid 5389] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5389] chdir("./bus") = 0 [pid 5389] ioctl(4, LOOP_CLR_FD) = 0 [ 68.777735][ T5376] EXT4-fs (loop3): Total free blocks count 0 [ 68.787714][ T5380] EXT4-fs (loop2): This should not happen!! Data will be lost [ 68.787714][ T5380] [ 68.807029][ T5376] EXT4-fs (loop3): Free/Dirty block details [ 68.814048][ T5376] EXT4-fs (loop3): free_blocks=2415919104 [pid 5396] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5389] close(4 [pid 5396] <... write resumed>) = 1048576 [pid 5389] <... close resumed>) = 0 [pid 5394] write(3, "1000", 4 [pid 5389] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5383] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5394] <... write resumed>) = 4 [pid 5389] <... futex resumed>) = 1 [pid 5382] <... futex resumed>) = 0 [pid 5394] close(3 [pid 5389] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5382] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5394] <... close resumed>) = 0 [pid 5389] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5382] <... futex resumed>) = 0 [pid 5394] symlink("/dev/binderfs", "./binderfs" [pid 5389] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5382] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5396] munmap(0x7fa2d45d3000, 1048576) = 0 [pid 5396] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5396] ioctl(4, LOOP_SET_FD, 3 [pid 5394] <... symlink resumed>) = 0 [pid 5389] <... open resumed>) = 4 [pid 5389] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5382] <... futex resumed>) = 0 [ 68.820743][ T27] audit: type=1804 audit(1673802237.642:180): pid=5386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor211" name="/root/syzkaller.DZuQa1/9/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 68.854319][ T5386] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5394] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5389] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5382] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5394] <... futex resumed>) = 0 [pid 5389] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5382] <... futex resumed>) = 0 [pid 5389] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5382] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5394] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5389] <... write resumed>) = 9 [pid 5383] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5389] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5382] <... futex resumed>) = 0 [pid 5389] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5382] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5389] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5382] <... futex resumed>) = 0 [pid 5396] <... ioctl resumed>) = 0 [pid 5389] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5382] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5396] close(3 [pid 5389] <... openat resumed>) = 5 [pid 5396] <... close resumed>) = 0 [pid 5394] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5389] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5383] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5396] mkdir("./bus", 0777 [pid 5389] <... futex resumed>) = 1 [pid 5382] <... futex resumed>) = 0 [pid 5396] <... mkdir resumed>) = 0 [pid 5389] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5382] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5396] mount("/dev/loop5", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5389] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 68.872254][ T5396] loop5: detected capacity change from 0 to 2048 [ 68.873112][ T5380] EXT4-fs (loop2): Total free blocks count 0 [ 68.882435][ T5376] EXT4-fs (loop3): dirty_blocks=16 [ 68.892405][ T5380] EXT4-fs (loop2): Free/Dirty block details [ 68.898984][ T5386] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 68.900322][ T5376] EXT4-fs (loop3): Block reservation details [ 68.911417][ T5380] EXT4-fs (loop2): free_blocks=2415919104 [pid 5382] <... futex resumed>) = 0 [pid 5389] open("./bus", O_RDWR [pid 5382] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5389] <... open resumed>) = 6 [pid 5389] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5382] <... futex resumed>) = 0 [pid 5389] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5382] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5389] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5382] <... futex resumed>) = 0 [pid 5389] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5382] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5389] <... mmap resumed>) = 0x20000000 [pid 5394] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5389] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5383] <... futex resumed>) = 0 [pid 5389] <... futex resumed>) = 1 [pid 5382] <... futex resumed>) = 0 [pid 5389] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5382] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5389] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5382] <... futex resumed>) = 0 [pid 5389] sendfile(4, 5, NULL, 2147483713 [pid 5382] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5394] <... mprotect resumed>) = 0 [ 68.932241][ T27] audit: type=1804 audit(1673802237.652:181): pid=5386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor211" name="/root/syzkaller.DZuQa1/9/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 68.955326][ T5386] EXT4-fs (loop0): This should not happen!! Data will be lost [ 68.955326][ T5386] [ 68.965381][ T5380] EXT4-fs (loop2): dirty_blocks=16 [ 68.969631][ T5389] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1095: group 0, [pid 5383] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5394] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5383] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5382] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5382] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2d46b2000 [pid 5382] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5382] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5400], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5400 [pid 5382] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5383] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5382] <... futex resumed>) = 0 [ 68.970508][ T5380] EXT4-fs (loop2): Block reservation details [ 68.970530][ T5389] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 68.978823][ T5386] EXT4-fs (loop0): Total free blocks count 0 [ 68.978842][ T5386] EXT4-fs (loop0): Free/Dirty block details [ 68.978861][ T5386] EXT4-fs (loop0): free_blocks=2415919104 [ 68.989193][ T5376] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 68.994471][ T5380] EXT4-fs (loop2): i_reserved_data_blocks=1 [pid 5392] creat(0x200001c0, 0420 [pid 5382] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5376] <... sendfile resumed>) = 117 [pid 5383] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 5401 attached [pid 5394] <... clone resumed>, parent_tid=[5401], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5401 [pid 5392] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5376] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5400 attached [pid 5396] <... mount resumed>) = 0 [pid 5392] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5376] <... futex resumed>) = 0 [pid 5400] set_robust_list(0x7fa2d46d29e0, 24 [pid 5396] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5392] <... futex resumed>) = 0 [pid 5376] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5374] exit_group(0 [pid 5401] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5400] <... set_robust_list resumed>) = 0 [pid 5396] <... openat resumed>) = 3 [pid 5394] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5383] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5376] <... futex resumed>) = ? [pid 5374] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 5403 attached [pid 5401] <... set_robust_list resumed>) = 0 [pid 5396] chdir("./bus" [pid 5394] <... futex resumed>) = 0 [pid 5392] +++ exited with 0 +++ [pid 5376] +++ exited with 0 +++ [pid 5374] +++ exited with 0 +++ [pid 5396] <... chdir resumed>) = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5374, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5396] ioctl(4, LOOP_CLR_FD) = 0 [pid 5396] close(4 [pid 5079] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5396] <... close resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5396] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5396] <... futex resumed>) = 1 [pid 5393] <... futex resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5396] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5393] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] fstat(3, [pid 5396] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5393] <... futex resumed>) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5396] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5393] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] getdents64(3, [pid 5403] set_robust_list(0x7fa2d46d29e0, 24 [pid 5396] <... open resumed>) = 4 [pid 5394] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5383] <... clone resumed>, parent_tid=[5403], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5403 [pid 5079] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5396] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5383] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5403] <... set_robust_list resumed>) = 0 [pid 5401] memfd_create("syzkaller", 0 [pid 5396] <... futex resumed>) = 1 [pid 5393] <... futex resumed>) = 0 [pid 5383] <... futex resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5396] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5393] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] lstat("./10/binderfs", [pid 5396] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5393] <... futex resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 69.023981][ T27] audit: type=1804 audit(1673802237.792:182): pid=5389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor211" name="/root/syzkaller.GJ37E4/9/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 69.047789][ T5389] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 69.060285][ T5386] EXT4-fs (loop0): dirty_blocks=16 [ 69.065961][ T5386] EXT4-fs (loop0): Block reservation details [pid 5396] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5393] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] unlink("./10/binderfs" [pid 5401] <... memfd_create resumed>) = 3 [pid 5396] <... write resumed>) = 9 [pid 5383] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... unlink resumed>) = 0 [pid 5382] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5401] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5396] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5401] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5396] <... futex resumed>) = 1 [pid 5393] <... futex resumed>) = 0 [pid 5403] creat(0x200001c0, 0420 [pid 5401] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5396] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5395] creat(0x200001c0, 0420 [pid 5393] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5386] <... sendfile resumed>) = 117 [pid 5380] <... sendfile resumed>) = 117 [pid 5403] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5396] <... openat resumed>) = 5 [pid 5393] <... futex resumed>) = 0 [pid 5403] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5396] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5395] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5393] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5386] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5380] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5403] <... futex resumed>) = 1 [pid 5396] <... futex resumed>) = 0 [pid 5393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5383] <... futex resumed>) = 0 [pid 5403] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5396] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5395] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5393] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5386] <... futex resumed>) = 0 [pid 5383] exit_group(0 [pid 5380] <... futex resumed>) = 0 [pid 5403] <... futex resumed>) = ? [pid 5396] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5393] <... futex resumed>) = 0 [pid 5383] <... exit_group resumed>) = ? [pid 5403] +++ exited with 0 +++ [pid 5396] open("./bus", O_RDWR [pid 5393] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5396] <... open resumed>) = 6 [pid 5375] exit_group(0 [pid 5396] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5375] <... exit_group resumed>) = ? [pid 5396] <... futex resumed>) = 1 [pid 5393] <... futex resumed>) = 0 [pid 5396] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5393] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5396] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5393] <... futex resumed>) = 0 [ 69.091596][ T5386] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 69.102247][ T5389] EXT4-fs (loop1): This should not happen!! Data will be lost [ 69.102247][ T5389] [ 69.115023][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 69.116482][ T5389] EXT4-fs (loop1): Total free blocks count 0 [ 69.135326][ T5389] EXT4-fs (loop1): Free/Dirty block details [pid 5396] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5395] <... futex resumed>) = ? [pid 5393] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5396] <... mmap resumed>) = 0x20000000 [pid 5396] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5393] <... futex resumed>) = 0 [pid 5396] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5395] +++ exited with 0 +++ [pid 5393] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5386] +++ exited with 0 +++ [pid 5383] +++ exited with 0 +++ [pid 5380] +++ exited with 0 +++ [pid 5375] +++ exited with 0 +++ [pid 5396] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5393] <... futex resumed>) = 0 [pid 5396] sendfile(4, 5, NULL, 2147483713 [pid 5393] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5375, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5401] <... write resumed>) = 1048576 [pid 5400] creat(0x200001c0, 0420 [pid 5389] <... sendfile resumed>) = 117 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5383, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 5401] munmap(0x7fa2d45d3000, 1048576 [pid 5400] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5389] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5401] <... munmap resumed>) = 0 [pid 5400] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5389] <... futex resumed>) = 0 [pid 5401] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5400] <... futex resumed>) = 0 [ 69.142050][ T5389] EXT4-fs (loop1): free_blocks=2415919104 [ 69.149927][ T5389] EXT4-fs (loop1): dirty_blocks=16 [ 69.151754][ T9] EXT4-fs (loop3): This should not happen!! Data will be lost [ 69.151754][ T9] [ 69.159086][ T5389] EXT4-fs (loop1): Block reservation details [ 69.171708][ T5389] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 69.172089][ T5396] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5382] exit_group(0 [pid 5079] <... umount2 resumed>) = 0 [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 5401] <... openat resumed>) = 4 [pid 5382] <... exit_group resumed>) = ? [pid 5076] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... restart_syscall resumed>) = 0 [pid 5078] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] fstat(3, [pid 5401] ioctl(4, LOOP_SET_FD, 3 [pid 5400] +++ exited with 0 +++ [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] getdents64(3, [pid 5389] +++ exited with 0 +++ [pid 5382] +++ exited with 0 +++ [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./10/bus", [pid 5078] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5382, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5079] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] lstat("./9/binderfs", [pid 5077] <... restart_syscall resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] openat(AT_FDCWD, "./10/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] unlink("./9/binderfs" [pid 5079] <... openat resumed>) = 4 [pid 5078] <... unlink resumed>) = 0 [pid 5077] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5401] <... ioctl resumed>) = 0 [pid 5079] fstat(4, [pid 5078] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 69.195984][ T5396] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 69.209693][ T5396] EXT4-fs (loop5): This should not happen!! Data will be lost [ 69.209693][ T5396] [ 69.222383][ T5401] loop4: detected capacity change from 0 to 2048 [ 69.229636][ T5396] EXT4-fs (loop5): Total free blocks count 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5401] close(3 [pid 5393] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5079] getdents64(4, [pid 5077] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 3 [pid 5393] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5077] fstat(3, [pid 5393] <... futex resumed>) = 0 [pid 5079] getdents64(4, [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5393] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5077] getdents64(3, [pid 5401] <... close resumed>) = 0 [pid 5393] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5079] close(4 [pid 5077] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5076] fstat(3, [pid 5393] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5079] <... close resumed>) = 0 [pid 5077] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5393] <... mprotect resumed>) = 0 [pid 5079] rmdir("./10/bus" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5401] mkdir("./bus", 0777 [pid 5393] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5079] <... rmdir resumed>) = 0 [pid 5077] lstat("./9/binderfs", [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(3, [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5393] <... clone resumed>, parent_tid=[5404], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5404 [pid 5079] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5077] unlink("./9/binderfs" [pid 5393] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] close(3 [pid 5077] <... unlink resumed>) = 0 [pid 5393] <... futex resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5077] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5401] <... mkdir resumed>) = 0 [pid 5393] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] rmdir("./10" [pid 5076] getdents64(3, [pid 5079] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5404 attached [pid 5079] mkdir("./11", 0777 [pid 5404] set_robust_list(0x7fa2d46d29e0, 24 [pid 5079] <... mkdir resumed>) = 0 [pid 5404] <... set_robust_list resumed>) = 0 [pid 5401] mount("/dev/loop4", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5079] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [ 69.236536][ T9] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 69.236993][ T5396] EXT4-fs (loop5): Free/Dirty block details [ 69.255174][ T5396] EXT4-fs (loop5): free_blocks=2415919104 [ 69.261240][ T5396] EXT4-fs (loop5): dirty_blocks=16 [ 69.266989][ T5396] EXT4-fs (loop5): Block reservation details [ 69.281356][ T33] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5076] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5079] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5076] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] close(3) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5404] creat(0x200001c0, 0420 [pid 5396] <... sendfile resumed>) = 117 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5404] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5396] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] lstat("./9/binderfs", [pid 5404] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5396] <... futex resumed>) = 0 [pid 5079] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5405 [pid 5404] <... futex resumed>) = 1 [pid 5396] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5393] <... futex resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5404] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5393] exit_group(0 [pid 5076] unlink("./9/binderfs" [pid 5404] <... futex resumed>) = ? [pid 5396] <... futex resumed>) = ? [pid 5393] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 5405 attached [pid 5404] +++ exited with 0 +++ [pid 5396] +++ exited with 0 +++ [pid 5393] +++ exited with 0 +++ [ 69.283925][ T5396] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 69.301914][ T9] EXT4-fs (loop2): This should not happen!! Data will be lost [ 69.301914][ T9] [ 69.312901][ T33] EXT4-fs (loop1): This should not happen!! Data will be lost [ 69.312901][ T33] [pid 5077] <... umount2 resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5405] set_robust_list(0x555555adb5e0, 24 [pid 5077] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5405] <... set_robust_list resumed>) = 0 [pid 5401] <... mount resumed>) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5393, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5405] chdir("./11" [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5077] lstat("./9/bus", [pid 5405] <... chdir resumed>) = 0 [pid 5081] <... restart_syscall resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5405] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5405] <... prctl resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5405] setpgid(0, 0 [pid 5081] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] openat(AT_FDCWD, "./9/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5405] <... setpgid resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... openat resumed>) = 4 [pid 5405] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] fstat(4, [pid 5405] <... openat resumed>) = 3 [pid 5081] <... openat resumed>) = 3 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5405] write(3, "1000", 4 [pid 5081] fstat(3, [pid 5077] getdents64(4, [pid 5405] <... write resumed>) = 4 [pid 5401] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5401] <... openat resumed>) = 3 [pid 5401] chdir("./bus") = 0 [pid 5401] ioctl(4, LOOP_CLR_FD) = 0 [pid 5401] close(4 [pid 5405] close(3 [pid 5401] <... close resumed>) = 0 [pid 5081] getdents64(3, [pid 5077] getdents64(4, [pid 5405] <... close resumed>) = 0 [pid 5401] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5077] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5405] symlink("/dev/binderfs", "./binderfs" [pid 5081] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] close(4 [pid 5405] <... symlink resumed>) = 0 [pid 5401] <... futex resumed>) = 1 [pid 5394] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5401] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5394] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5401] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5394] <... futex resumed>) = 0 [pid 5401] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5394] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5405] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5401] <... open resumed>) = 4 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... close resumed>) = 0 [pid 5405] <... futex resumed>) = 0 [pid 5401] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5394] <... futex resumed>) = 0 [pid 5078] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5401] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5394] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5401] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5394] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5401] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5394] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5405] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5401] <... write resumed>) = 9 [pid 5081] lstat("./10/binderfs", [pid 5078] lstat("./9/bus", [pid 5077] rmdir("./9/bus" [pid 5076] <... umount2 resumed>) = 0 [pid 5405] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5401] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5401] <... futex resumed>) = 1 [pid 5394] <... futex resumed>) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5401] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5394] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] unlink("./10/binderfs" [pid 5405] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5078] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... rmdir resumed>) = 0 [pid 5401] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5394] <... futex resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5405] <... mprotect resumed>) = 0 [pid 5401] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5394] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] getdents64(3, [pid 5076] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5405] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5401] <... openat resumed>) = 5 [pid 5077] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5401] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] openat(AT_FDCWD, "./9/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] close(3 [pid 5405] <... clone resumed>, parent_tid=[5408], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5408 [pid 5401] <... futex resumed>) = 1 [pid 5394] <... futex resumed>) = 0 [pid 5078] <... openat resumed>) = 4 [pid 5077] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5405] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] rmdir("./9" [pid 5405] <... futex resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [ 69.345758][ T9] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 69.358996][ T9] EXT4-fs (loop0): This should not happen!! Data will be lost [ 69.358996][ T9] [pid 5405] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5077] mkdir("./10", 0777) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5077] close(3) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555adb5d0) = 5409 ./strace-static-x86_64: Process 5408 attached [pid 5408] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5394] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5401] open("./bus", O_RDWR [pid 5394] <... futex resumed>) = 0 [pid 5078] fstat(4, [pid 5076] lstat("./9/bus", [pid 5401] <... open resumed>) = 6 [pid 5394] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5401] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5394] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] getdents64(4, [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5401] <... futex resumed>) = 0 [pid 5394] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5401] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5394] <... futex resumed>) = 0 [pid 5078] getdents64(4, [pid 5076] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5401] <... mmap resumed>) = 0x20000000 [pid 5394] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5408] <... set_robust_list resumed>) = 0 [pid 5401] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5394] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] close(4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5401] <... futex resumed>) = 0 [pid 5394] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... close resumed>) = 0 [pid 5408] memfd_create("syzkaller", 0 [pid 5401] sendfile(4, 5, NULL, 2147483713 [pid 5394] <... futex resumed>) = 0 [pid 5078] rmdir("./9/bus" [pid 5076] openat(AT_FDCWD, "./9/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5408] <... memfd_create resumed>) = 3 [pid 5394] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5408] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2d45d3000 [pid 5078] <... rmdir resumed>) = 0 [pid 5408] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5078] getdents64(3, [pid 5076] <... openat resumed>) = 4 [pid 5408] <... write resumed>) = 1048576 [pid 5408] munmap(0x7fa2d45d3000, 1048576 [pid 5078] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5076] fstat(4, [pid 5078] close(3) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] rmdir("./9"./strace-static-x86_64: Process 5409 attached [pid 5076] getdents64(4, [pid 5078] <... rmdir resumed>) = 0 [pid 5078] mkdir("./10", 0777 [pid 5076] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5078] <... mkdir resumed>) = 0 [pid 5076] getdents64(4, [pid 5078] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5409] set_robust_list(0x555555adb5e0, 24 [pid 5078] <... openat resumed>) = 3 [pid 5076] close(4 [pid 5409] <... set_robust_list resumed>) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5076] <... close resumed>) = 0 [pid 5409] chdir("./10" [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] rmdir("./9/bus" [pid 5409] <... chdir resumed>) = 0 [pid 5078] close(3 [pid 5409] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] <... close resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5409] <... prctl resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] getdents64(3, [pid 5409] setpgid(0, 0 [pid 5408] <... munmap resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5409] <... setpgid resumed>) = 0 [pid 5408] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 69.409950][ T9] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 69.439893][ T5401] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5408] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5410 attached [pid 5409] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5394] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5078] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5410 [pid 5076] close(3 [pid 5409] <... openat resumed>) = 3 [pid 5394] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... close resumed>) = 0 [pid 5409] write(3, "1000", 4 [pid 5394] <... futex resumed>) = 0 [pid 5076] rmdir("./9" [pid 5410] set_robust_list(0x555555adb5e0, 24 [pid 5409] <... write resumed>) = 4 [pid 5394] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5408] <... ioctl resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5408] close(3 [pid 5394] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5410] <... set_robust_list resumed>) = 0 [pid 5409] close(3 [pid 5394] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5076] mkdir("./10", 0777 [pid 5409] <... close resumed>) = 0 [pid 5394] <... mprotect resumed>) = 0 [pid 5408] <... close resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5394] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5409] symlink("/dev/binderfs", "./binderfs" [pid 5076] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5409] <... symlink resumed>) = 0 [pid 5394] <... clone resumed>, parent_tid=[5411], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5411 [pid 5076] <... openat resumed>) = 3 [pid 5409] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5394] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5410] chdir("./10" [pid 5409] <... futex resumed>) = 0 [pid 5394] <... futex resumed>) = 0 [pid 5409] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5394] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5410] <... chdir resumed>) = 0 [pid 5409] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5409] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5076] close(3 [pid 5409] <... mprotect resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5410] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5409] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5410] <... prctl resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5408] mkdir("./bus", 0777 [pid 5410] setpgid(0, 0 [pid 5409] <... clone resumed>, parent_tid=[5412], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5412 [pid 5408] <... mkdir resumed>) = 0 [pid 5408] mount("/dev/loop3", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5410] <... setpgid resumed>) = 0 [pid 5409] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5413 [pid 5410] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5409] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5411 attached ./strace-static-x86_64: Process 5412 attached [pid 5411] set_robust_list(0x7fa2d46d29e0, 24 [pid 5410] <... openat resumed>) = 3 [ 69.467299][ T9] EXT4-fs (loop5): This should not happen!! Data will be lost [ 69.467299][ T9] [ 69.471064][ T5408] loop3: detected capacity change from 0 to 2048 [pid 5409] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5413 attached [pid 5412] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5410] write(3, "1000", 4 [pid 5412] <... set_robust_list resumed>) = 0 [pid 5411] <... set_robust_list resumed>) = 0 [pid 5410] <... write resumed>) = 4 [pid 5413] set_robust_list(0x555555adb5e0, 24 [pid 5412] memfd_create("syzkaller", 0 [pid 5410] close(3 [pid 5413] <... set_robust_list resumed>) = 0 [pid 5413] chdir("./10") = 0 [pid 5413] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5413] setpgid(0, 0) = 0 [pid 5413] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5413] write(3, "1000", 4 [pid 5412] <... memfd_create resumed>) = 3 [pid 5410] <... close resumed>) = 0 [pid 5410] symlink("/dev/binderfs", "./binderfs" [pid 5413] <... write resumed>) = 4 [pid 5412] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5410] <... symlink resumed>) = 0 [pid 5413] close(3 [pid 5412] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5410] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5413] <... close resumed>) = 0 [pid 5394] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5413] symlink("/dev/binderfs", "./binderfs" [pid 5081] <... umount2 resumed>) = 0 [pid 5413] <... symlink resumed>) = 0 [pid 5413] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 69.510598][ T5401] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5413] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2dc9d3000 [pid 5413] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5413] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5414], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5414 [pid 5413] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5413] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5412] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5410] <... futex resumed>) = 0 [pid 5081] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5410] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2dc9d3000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5410] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 5414 attached ) = 0 [pid 5081] lstat("./10/bus", [pid 5414] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5410] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5410] <... clone resumed>, parent_tid=[5415], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5415 [pid 5410] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5414] <... set_robust_list resumed>) = 0 [pid 5410] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5415 attached [pid 5414] memfd_create("syzkaller", 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5415] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5414] <... memfd_create resumed>) = 3 [pid 5081] openat(AT_FDCWD, "./10/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5415] <... set_robust_list resumed>) = 0 [pid 5414] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] <... openat resumed>) = 4 [pid 5415] memfd_create("syzkaller", 0 [pid 5414] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5412] <... write resumed>) = 1048576 [pid 5081] fstat(4, [pid 5415] <... memfd_create resumed>) = 3 [pid 5414] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./10/bus" [pid 5415] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5412] munmap(0x7fa2d45d3000, 1048576 [pid 5081] <... rmdir resumed>) = 0 [pid 5081] getdents64(3, 0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./10") = 0 [pid 5081] mkdir("./11", 0777) = 0 [ 69.551310][ T5401] EXT4-fs (loop4): This should not happen!! Data will be lost [ 69.551310][ T5401] [ 69.589704][ T5401] EXT4-fs (loop4): Total free blocks count 0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5415] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] close(3 [pid 5412] <... munmap resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5412] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5081] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5418 [pid 5408] <... mount resumed>) = 0 [pid 5408] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5408] chdir("./bus") = 0 [pid 5408] ioctl(4, LOOP_CLR_FD [pid 5415] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5408] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5418 attached [pid 5412] <... openat resumed>) = 4 [pid 5408] close(4 [pid 5418] set_robust_list(0x555555adb5e0, 24 [pid 5412] ioctl(4, LOOP_SET_FD, 3 [pid 5408] <... close resumed>) = 0 [pid 5418] <... set_robust_list resumed>) = 0 [pid 5408] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5418] chdir("./11" [pid 5408] <... futex resumed>) = 1 [pid 5405] <... futex resumed>) = 0 [pid 5418] <... chdir resumed>) = 0 [pid 5408] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5405] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5418] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5405] <... futex resumed>) = 0 [pid 5418] <... prctl resumed>) = 0 [pid 5408] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5405] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5418] setpgid(0, 0 [pid 5408] <... open resumed>) = 4 [pid 5418] <... setpgid resumed>) = 0 [pid 5408] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5408] <... futex resumed>) = 1 [pid 5405] <... futex resumed>) = 0 [pid 5418] <... openat resumed>) = 3 [pid 5412] <... ioctl resumed>) = 0 [pid 5408] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5405] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5418] write(3, "1000", 4 [pid 5412] close(3 [pid 5408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5405] <... futex resumed>) = 0 [pid 5418] <... write resumed>) = 4 [pid 5412] <... close resumed>) = 0 [pid 5408] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5405] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5418] close(3 [pid 5412] mkdir("./bus", 0777 [pid 5408] <... write resumed>) = 9 [pid 5418] <... close resumed>) = 0 [pid 5408] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5418] symlink("/dev/binderfs", "./binderfs" [pid 5412] <... mkdir resumed>) = 0 [pid 5408] <... futex resumed>) = 1 [pid 5405] <... futex resumed>) = 0 [pid 5418] <... symlink resumed>) = 0 [pid 5414] <... write resumed>) = 1048576 [pid 5412] mount("/dev/loop1", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5418] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5414] munmap(0x7fa2d45d3000, 1048576 [pid 5418] <... futex resumed>) = 0 [pid 5414] <... munmap resumed>) = 0 [pid 5418] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5414] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5418] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5414] <... openat resumed>) = 4 [pid 5418] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE) = 0 [ 69.596827][ T5401] EXT4-fs (loop4): Free/Dirty block details [ 69.603672][ T5401] EXT4-fs (loop4): free_blocks=2415919104 [ 69.632783][ T5412] loop1: detected capacity change from 0 to 2048 [pid 5414] ioctl(4, LOOP_SET_FD, 3 [pid 5408] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5405] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5418] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5405] <... futex resumed>) = 0 [pid 5418] <... clone resumed>, parent_tid=[5419], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5419 [pid 5418] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5418] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5414] <... ioctl resumed>) = 0 [pid 5414] close(3) = 0 [pid 5414] mkdir("./bus", 0777 [pid 5405] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5408] openat(AT_FDCWD, "./bus", O_RDONLY) = 5 [pid 5408] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5405] <... futex resumed>) = 0 [pid 5408] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5405] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5405] <... futex resumed>) = 0 [pid 5408] open("./bus", O_RDWR [pid 5405] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5408] <... open resumed>) = 6 [pid 5414] <... mkdir resumed>) = 0 [pid 5408] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5415] <... write resumed>) = 1048576 [pid 5408] <... futex resumed>) = 1 [pid 5405] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5419 attached [pid 5408] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5405] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5419] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5415] munmap(0x7fa2d45d3000, 1048576 [pid 5414] mount("/dev/loop0", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5412] <... mount resumed>) = 0 [pid 5411] creat(0x200001c0, 0420 [pid 5408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5405] <... futex resumed>) = 0 [pid 5401] <... sendfile resumed>) = 117 [pid 5419] <... set_robust_list resumed>) = 0 [pid 5415] <... munmap resumed>) = 0 [pid 5412] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5411] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5408] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5405] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5401] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5419] memfd_create("syzkaller", 0 [pid 5415] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5412] <... openat resumed>) = 3 [pid 5411] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5408] <... mmap resumed>) = 0x20000000 [pid 5394] exit_group(0 [pid 5419] <... memfd_create resumed>) = 3 [pid 5412] chdir("./bus" [pid 5411] <... futex resumed>) = ? [pid 5408] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5394] <... exit_group resumed>) = ? [pid 5401] <... futex resumed>) = ? [pid 5419] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5412] <... chdir resumed>) = 0 [pid 5411] +++ exited with 0 +++ [pid 5408] <... futex resumed>) = 1 [pid 5405] <... futex resumed>) = 0 [pid 5419] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5412] ioctl(4, LOOP_CLR_FD [pid 5408] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5405] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5419] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5415] <... openat resumed>) = 4 [pid 5412] <... ioctl resumed>) = 0 [pid 5408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5405] <... futex resumed>) = 0 [pid 5401] +++ exited with 0 +++ [pid 5394] +++ exited with 0 +++ [pid 5415] ioctl(4, LOOP_SET_FD, 3 [pid 5412] close(4 [ 69.653494][ T5401] EXT4-fs (loop4): dirty_blocks=16 [ 69.660701][ T5414] loop0: detected capacity change from 0 to 2048 [ 69.663342][ T5401] EXT4-fs (loop4): Block reservation details [ 69.683354][ T5401] EXT4-fs (loop4): i_reserved_data_blocks=1 [pid 5408] sendfile(4, 5, NULL, 2147483713 [pid 5405] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5419] <... write resumed>) = 1048576 [pid 5415] <... ioctl resumed>) = 0 [pid 5414] <... mount resumed>) = 0 [pid 5412] <... close resumed>) = 0 [pid 5419] munmap(0x7fa2d45d3000, 1048576 [pid 5415] close(3 [pid 5419] <... munmap resumed>) = 0 [pid 5415] <... close resumed>) = 0 [pid 5419] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5415] mkdir("./bus", 0777 [pid 5419] <... openat resumed>) = 4 [pid 5414] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5412] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5394, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5414] <... openat resumed>) = 3 [pid 5412] <... futex resumed>) = 1 [pid 5409] <... futex resumed>) = 0 [pid 5080] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5414] chdir("./bus" [pid 5412] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5409] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5414] <... chdir resumed>) = 0 [pid 5412] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5409] <... futex resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5414] ioctl(4, LOOP_CLR_FD [pid 5412] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5409] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... openat resumed>) = 3 [pid 5414] <... ioctl resumed>) = 0 [pid 5412] <... open resumed>) = 4 [pid 5080] fstat(3, [pid 5414] close(4 [pid 5412] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5419] ioctl(4, LOOP_SET_FD, 3 [pid 5415] <... mkdir resumed>) = 0 [pid 5414] <... close resumed>) = 0 [pid 5412] <... futex resumed>) = 1 [pid 5409] <... futex resumed>) = 0 [pid 5080] getdents64(3, [pid 5414] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5412] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5409] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5414] <... futex resumed>) = 1 [pid 5413] <... futex resumed>) = 0 [pid 5412] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5409] <... futex resumed>) = 0 [pid 5080] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5414] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5413] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5412] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5409] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5413] <... futex resumed>) = 0 [pid 5412] <... write resumed>) = 9 [pid 5080] lstat("./10/binderfs", [pid 5414] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [ 69.716781][ T5415] loop2: detected capacity change from 0 to 2048 [ 69.731289][ T5408] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 69.746388][ T5408] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5413] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5412] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5415] mount("/dev/loop2", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5414] <... open resumed>) = 4 [pid 5412] <... futex resumed>) = 1 [pid 5409] <... futex resumed>) = 0 [pid 5080] unlink("./10/binderfs" [pid 5419] <... ioctl resumed>) = 0 [pid 5414] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5412] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5409] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... unlink resumed>) = 0 [pid 5414] <... futex resumed>) = 1 [pid 5413] <... futex resumed>) = 0 [pid 5412] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5409] <... futex resumed>) = 0 [pid 5080] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5414] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5413] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5412] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5409] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5419] close(3 [pid 5414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5413] <... futex resumed>) = 0 [pid 5412] <... openat resumed>) = 5 [pid 5405] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5414] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5413] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5412] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5405] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5419] <... close resumed>) = 0 [pid 5414] <... write resumed>) = 9 [pid 5412] <... futex resumed>) = 1 [pid 5409] <... futex resumed>) = 0 [pid 5405] <... futex resumed>) = 0 [pid 5414] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5412] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5409] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5405] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5414] <... futex resumed>) = 1 [pid 5413] <... futex resumed>) = 0 [pid 5412] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5409] <... futex resumed>) = 0 [pid 5405] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5414] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5413] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5412] open("./bus", O_RDWR [pid 5409] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5405] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 69.760551][ T5408] EXT4-fs (loop3): This should not happen!! Data will be lost [ 69.760551][ T5408] [ 69.771523][ T5419] loop5: detected capacity change from 0 to 2048 [ 69.782597][ T5408] EXT4-fs (loop3): Total free blocks count 0 [ 69.789008][ T5408] EXT4-fs (loop3): Free/Dirty block details [ 69.796717][ T5408] EXT4-fs (loop3): free_blocks=2415919104 [ 69.799306][ T5118] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5413] <... futex resumed>) = 0 [pid 5412] <... open resumed>) = 6 [pid 5405] <... mprotect resumed>) = 0 [pid 5419] mkdir("./bus", 0777 [pid 5415] <... mount resumed>) = 0 [pid 5414] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5413] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5412] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5405] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5415] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5414] <... openat resumed>) = 5 [pid 5412] <... futex resumed>) = 1 [pid 5409] <... futex resumed>) = 0 [pid 5415] <... openat resumed>) = 3 [pid 5414] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5412] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5409] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5405] <... clone resumed>, parent_tid=[5426], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5426 [pid 5415] chdir("./bus" [pid 5414] <... futex resumed>) = 1 [pid 5413] <... futex resumed>) = 0 [pid 5412] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5409] <... futex resumed>) = 0 [pid 5405] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5419] <... mkdir resumed>) = 0 [pid 5415] <... chdir resumed>) = 0 [pid 5414] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5413] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5412] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5409] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5405] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5426 attached [pid 5419] mount("/dev/loop5", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5415] ioctl(4, LOOP_CLR_FD [pid 5414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5413] <... futex resumed>) = 0 [pid 5412] <... mmap resumed>) = 0x20000000 [pid 5405] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5415] <... ioctl resumed>) = 0 [pid 5414] open("./bus", O_RDWR [pid 5413] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5412] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5415] close(4 [pid 5414] <... open resumed>) = 6 [pid 5412] <... futex resumed>) = 1 [pid 5409] <... futex resumed>) = 0 [pid 5426] set_robust_list(0x7fa2d46d29e0, 24 [pid 5415] <... close resumed>) = 0 [pid 5414] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5412] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5409] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5408] <... sendfile resumed>) = 117 [pid 5415] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5414] <... futex resumed>) = 1 [pid 5413] <... futex resumed>) = 0 [pid 5412] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5409] <... futex resumed>) = 0 [pid 5415] <... futex resumed>) = 1 [pid 5414] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5413] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5412] sendfile(4, 5, NULL, 2147483713 [pid 5410] <... futex resumed>) = 0 [pid 5409] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5415] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5413] <... futex resumed>) = 0 [pid 5410] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5414] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5413] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5410] <... futex resumed>) = 0 [pid 5426] <... set_robust_list resumed>) = 0 [pid 5415] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5414] <... mmap resumed>) = 0x20000000 [pid 5410] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5408] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5426] creat(0x200001c0, 0420 [pid 5415] <... open resumed>) = 4 [pid 5414] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5415] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5414] <... futex resumed>) = 1 [pid 5413] <... futex resumed>) = 0 [pid 5408] <... futex resumed>) = 0 [pid 5426] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5415] <... futex resumed>) = 1 [pid 5414] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5413] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5410] <... futex resumed>) = 0 [pid 5408] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5426] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5415] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5413] <... futex resumed>) = 0 [pid 5410] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5426] <... futex resumed>) = 1 [pid 5415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5414] sendfile(4, 5, NULL, 2147483713 [pid 5413] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5410] <... futex resumed>) = 0 [pid 5405] <... futex resumed>) = 0 [pid 5415] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5410] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5426] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5415] <... write resumed>) = 9 [pid 5405] exit_group(0 [pid 5426] <... futex resumed>) = ? [pid 5415] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5408] <... futex resumed>) = ? [pid 5405] <... exit_group resumed>) = ? [pid 5426] +++ exited with 0 +++ [pid 5415] <... futex resumed>) = 1 [pid 5410] <... futex resumed>) = 0 [pid 5410] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5408] +++ exited with 0 +++ [pid 5415] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5405] +++ exited with 0 +++ [pid 5410] <... futex resumed>) = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5405, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5079] restart_syscall(<... resuming interrupted clone ...> [pid 5415] <... openat resumed>) = 5 [pid 5410] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... restart_syscall resumed>) = 0 [pid 5415] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5410] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5415] <... futex resumed>) = 0 [pid 5410] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5415] open("./bus", O_RDWR [pid 5410] <... futex resumed>) = 0 [pid 5079] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5410] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5415] <... open resumed>) = 6 [pid 5079] fstat(3, [pid 5415] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 69.803125][ T5408] EXT4-fs (loop3): dirty_blocks=16 [ 69.820791][ T5408] EXT4-fs (loop3): Block reservation details [ 69.829835][ T5408] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 69.839077][ T5118] EXT4-fs (loop4): This should not happen!! Data will be lost [ 69.839077][ T5118] [pid 5079] getdents64(3, 0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5415] <... futex resumed>) = 1 [pid 5415] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5410] <... futex resumed>) = 0 [pid 5079] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5410] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5409] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5409] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] lstat("./11/binderfs", [pid 5409] <... futex resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5409] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] unlink("./11/binderfs" [pid 5409] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5079] <... unlink resumed>) = 0 [pid 5409] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5079] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5413] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5409] <... mprotect resumed>) = 0 [pid 5413] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5409] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5415] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5413] <... futex resumed>) = 0 [pid 5410] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 5415] <... mmap resumed>) = 0x20000000 [pid 5410] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5415] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5410] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5415] <... futex resumed>) = 0 [ 69.879954][ T5412] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 69.895815][ T5414] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 69.911811][ T5116] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5410] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5415] sendfile(4, 5, NULL, 2147483713 [pid 5410] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5429 attached [pid 5413] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5412] <... sendfile resumed>) = 117 [pid 5410] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5413] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5409] <... clone resumed>, parent_tid=[5429], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5429 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5413] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5409] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [ 69.914963][ T5412] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 69.937452][ T5412] EXT4-fs (loop1): This should not happen!! Data will be lost [ 69.937452][ T5412] [ 69.937803][ T5415] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1095: group 0, [ 69.947158][ T5412] EXT4-fs (loop1): Total free blocks count 0 [ 69.947178][ T5412] EXT4-fs (loop1): Free/Dirty block details [ 69.947195][ T5412] EXT4-fs (loop1): free_blocks=2415919104 [ 69.947214][ T5412] EXT4-fs (loop1): dirty_blocks=16 [pid 5080] lstat("./10/bus", [pid 5419] <... mount resumed>) = 0 [pid 5413] <... mprotect resumed>) = 0 [pid 5409] <... futex resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5429] set_robust_list(0x7fa2d46d29e0, 24 [pid 5419] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5412] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5429] <... set_robust_list resumed>) = 0 [pid 5412] <... futex resumed>) = 0 [pid 5429] creat(0x200001c0, 0420 [pid 5412] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5429] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5429] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 69.947230][ T5412] EXT4-fs (loop1): Block reservation details [ 69.947246][ T5412] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 69.955543][ T5415] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 69.961766][ T5414] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 70.000710][ T5116] EXT4-fs (loop3): This should not happen!! Data will be lost [ 70.000710][ T5116] [pid 5429] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5419] <... openat resumed>) = 3 [pid 5413] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5409] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5419] chdir("./bus" [pid 5410] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5409] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5419] <... chdir resumed>) = 0 [pid 5413] <... clone resumed>, parent_tid=[5430], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5430 [pid 5410] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5409] exit_group(0 [pid 5419] ioctl(4, LOOP_CLR_FD [pid 5080] openat(AT_FDCWD, "./10/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5429] <... futex resumed>) = ? [pid 5419] <... ioctl resumed>) = 0 [pid 5413] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5412] <... futex resumed>) = ? [pid 5410] <... futex resumed>) = 0 [pid 5409] <... exit_group resumed>) = ? [pid 5080] <... openat resumed>) = 4 [pid 5429] +++ exited with 0 +++ [pid 5412] +++ exited with 0 +++ [pid 5419] close(4 [pid 5413] <... futex resumed>) = 0 [pid 5410] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5409] +++ exited with 0 +++ [pid 5413] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] fstat(4, [pid 5410] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5409, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5419] <... close resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5419] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5410] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5080] getdents64(4, [pid 5079] <... umount2 resumed>) = 0 [pid 5419] <... futex resumed>) = 1 [pid 5410] <... mprotect resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5418] <... futex resumed>) = 0 [pid 5077] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5419] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5418] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5410] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] getdents64(4, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5418] <... futex resumed>) = 0 [pid 5419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5419] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5418] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5077] <... openat resumed>) = 3 [ 70.013759][ T5415] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 70.022630][ T5414] EXT4-fs (loop0): This should not happen!! Data will be lost [ 70.022630][ T5414] [ 70.037228][ T5415] EXT4-fs (loop2): This should not happen!! Data will be lost [ 70.037228][ T5415] [ 70.044307][ T5414] EXT4-fs (loop0): Total free blocks count 0 [ 70.061317][ T5414] EXT4-fs (loop0): Free/Dirty block details [ 70.071576][ T5414] EXT4-fs (loop0): free_blocks=2415919104 [pid 5419] <... open resumed>) = 4 [pid 5410] <... clone resumed>, parent_tid=[5431], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5431 [pid 5080] close(4 [pid 5077] fstat(3, [pid 5419] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5418] <... futex resumed>) = 0 [pid 5419] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5418] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5418] <... futex resumed>) = 0 [pid 5419] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5418] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5419] <... write resumed>) = 9 [pid 5419] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5418] <... futex resumed>) = 0 [pid 5419] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5418] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5418] <... futex resumed>) = 0 [pid 5419] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5418] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5419] <... openat resumed>) = 5 [pid 5419] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5430 attached ) = 1 [pid 5418] <... futex resumed>) = 0 [pid 5079] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5430] set_robust_list(0x7fa2d46d29e0, 24 [pid 5419] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5418] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5410] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... close resumed>) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5430] <... set_robust_list resumed>) = 0 [pid 5419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5418] <... futex resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5419] open("./bus", O_RDWR [pid 5418] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5430] creat(0x200001c0, 0420 [pid 5419] <... open resumed>) = 6 [pid 5414] <... sendfile resumed>) = 117 [pid 5410] <... futex resumed>) = 0 [pid 5080] rmdir("./10/bus" [pid 5079] lstat("./11/bus", [pid 5077] getdents64(3, ./strace-static-x86_64: Process 5431 attached [pid 5430] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5419] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5431] set_robust_list(0x7fa2d46d29e0, 24 [pid 5430] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5419] <... futex resumed>) = 1 [pid 5418] <... futex resumed>) = 0 [pid 5079] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5431] <... set_robust_list resumed>) = 0 [pid 5430] <... futex resumed>) = 1 [pid 5419] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5418] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5413] <... futex resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5430] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5418] <... futex resumed>) = 0 [pid 5414] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5413] exit_group(0 [pid 5410] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... rmdir resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./11/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5430] <... futex resumed>) = ? [pid 5419] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5418] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5413] <... exit_group resumed>) = ? [pid 5079] <... openat resumed>) = 4 [pid 5430] +++ exited with 0 +++ [pid 5419] <... mmap resumed>) = 0x20000000 [pid 5414] <... futex resumed>) = ? [pid 5080] getdents64(3, [pid 5079] fstat(4, [pid 5077] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5419] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5419] <... futex resumed>) = 1 [pid 5418] <... futex resumed>) = 0 [pid 5079] getdents64(4, [pid 5419] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5418] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5418] <... futex resumed>) = 0 [ 70.077607][ T5414] EXT4-fs (loop0): dirty_blocks=16 [ 70.087447][ T5414] EXT4-fs (loop0): Block reservation details [ 70.094776][ T5414] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 70.101715][ T5415] EXT4-fs (loop2): Total free blocks count 0 [ 70.108105][ T5415] EXT4-fs (loop2): Free/Dirty block details [ 70.115553][ T5415] EXT4-fs (loop2): free_blocks=2415919104 [ 70.122299][ T5415] EXT4-fs (loop2): dirty_blocks=16 [pid 5079] getdents64(4, [pid 5419] sendfile(4, 5, NULL, 2147483713 [pid 5418] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5431] creat(0x200001c0, 0420 [pid 5415] <... sendfile resumed>) = 117 [pid 5414] +++ exited with 0 +++ [pid 5413] +++ exited with 0 +++ [pid 5080] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5079] close(4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5431] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5415] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] close(3 [pid 5077] lstat("./10/binderfs", [pid 5415] <... futex resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5413, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5415] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] rmdir("./10" [pid 5077] unlink("./10/binderfs" [pid 5076] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... rmdir resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] mkdir("./11", 0777 [pid 5077] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... mkdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5079] <... close resumed>) = 0 [pid 5076] fstat(3, [pid 5080] <... openat resumed>) = 3 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5076] getdents64(3, [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5080] close(3 [pid 5076] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5410] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5432 [pid 5076] unlink("./10/binderfs") = 0 [pid 5076] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 70.127776][ T5415] EXT4-fs (loop2): Block reservation details [ 70.133949][ T5415] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 70.147281][ T5419] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 70.163235][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5079] rmdir("./11/bus"./strace-static-x86_64: Process 5432 attached [pid 5431] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5418] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5079] <... rmdir resumed>) = 0 [pid 5410] exit_group(0 [pid 5415] <... futex resumed>) = ? [pid 5410] <... exit_group resumed>) = ? [pid 5415] +++ exited with 0 +++ [pid 5431] <... futex resumed>) = ? [pid 5418] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] getdents64(3, [pid 5431] +++ exited with 0 +++ [pid 5418] <... futex resumed>) = 0 [pid 5410] +++ exited with 0 +++ [pid 5079] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5432] set_robust_list(0x555555adb5e0, 24 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5410, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5078] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5078] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(3, 0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5418] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] close(3 [pid 5432] <... set_robust_list resumed>) = 0 [pid 5418] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5432] chdir("./11" [pid 5418] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5079] <... close resumed>) = 0 [pid 5078] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] unlink("./10/binderfs") = 0 [ 70.176040][ T5116] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 70.178229][ T5419] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 70.198521][ T5116] EXT4-fs (loop0): This should not happen!! Data will be lost [ 70.198521][ T5116] [ 70.213631][ T9] EXT4-fs (loop1): This should not happen!! Data will be lost [ 70.213631][ T9] [pid 5078] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5432] <... chdir resumed>) = 0 [pid 5418] <... mprotect resumed>) = 0 [pid 5079] rmdir("./11" [pid 5432] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5418] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5432] <... prctl resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5433 attached [pid 5432] setpgid(0, 0 [pid 5418] <... clone resumed>, parent_tid=[5433], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5433 [pid 5079] mkdir("./12", 0777 [pid 5433] set_robust_list(0x7fa2d46d29e0, 24 [pid 5432] <... setpgid resumed>) = 0 [pid 5418] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5433] <... set_robust_list resumed>) = 0 [pid 5432] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5418] <... futex resumed>) = 0 [pid 5079] <... mkdir resumed>) = 0 [pid 5432] <... openat resumed>) = 3 [pid 5418] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./10/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./10/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] openat(AT_FDCWD, "/dev/loop3", O_RDWR [ 70.225360][ T5419] EXT4-fs (loop5): This should not happen!! Data will be lost [ 70.225360][ T5419] [ 70.236297][ T5118] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 70.249401][ T5118] EXT4-fs (loop2): This should not happen!! Data will be lost [ 70.249401][ T5118] [ 70.261102][ T5419] EXT4-fs (loop5): Total free blocks count 0 [ 70.268495][ T5419] EXT4-fs (loop5): Free/Dirty block details [pid 5432] write(3, "1000", 4) = 4 [pid 5079] <... openat resumed>) = 3 [pid 5077] <... openat resumed>) = 4 [pid 5432] close(3 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5078] <... umount2 resumed>) = 0 [pid 5077] fstat(4, [pid 5076] <... umount2 resumed>) = 0 [pid 5433] creat(0x200001c0, 0420 [pid 5432] <... close resumed>) = 0 [pid 5419] <... sendfile resumed>) = 117 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5433] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5432] symlink("/dev/binderfs", "./binderfs" [pid 5419] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] close(3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5433] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5432] <... symlink resumed>) = 0 [pid 5419] <... futex resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5078] lstat("./10/bus", [pid 5077] getdents64(4, [pid 5433] <... futex resumed>) = 1 [pid 5432] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5419] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5418] <... futex resumed>) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5433] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5432] <... futex resumed>) = 0 [pid 5418] exit_group(0 [pid 5078] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5433] <... futex resumed>) = ? [pid 5432] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5419] <... futex resumed>) = ? [pid 5418] <... exit_group resumed>) = ? [pid 5079] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5434 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./10/bus", [pid 5433] +++ exited with 0 +++ [pid 5432] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5419] +++ exited with 0 +++ [pid 5418] +++ exited with 0 +++ [pid 5078] openat(AT_FDCWD, "./10/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5432] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5418, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5078] <... openat resumed>) = 4 [pid 5076] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5432] <... mprotect resumed>) = 0 [pid 5078] fstat(4, [pid 5077] getdents64(4, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5432] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5076] openat(AT_FDCWD, "./10/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] getdents64(4, [pid 5077] close(4 [pid 5076] <... openat resumed>) = 4 [pid 5432] <... clone resumed>, parent_tid=[5435], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5435 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5077] <... close resumed>) = 0 [pid 5076] fstat(4, [pid 5432] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] getdents64(4, [pid 5077] rmdir("./10/bus" [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5432] <... futex resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5078] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(4, [pid 5432] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] fstat(3, [pid 5078] close(4 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... close resumed>) = 0 [pid 5076] getdents64(4, [pid 5081] getdents64(3, [pid 5078] rmdir("./10/bus" [pid 5077] getdents64(3, [pid 5076] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5081] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 5081] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] getdents64(3, [pid 5077] close(3 [pid 5076] <... close resumed>) = 0 ./strace-static-x86_64: Process 5435 attached [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] rmdir("./10/bus" [pid 5435] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5081] lstat("./11/binderfs", [pid 5078] close(3 [pid 5077] rmdir("./10" [pid 5076] <... rmdir resumed>) = 0 [pid 5435] <... set_robust_list resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 5435] memfd_create("syzkaller", 0 [pid 5081] unlink("./11/binderfs" [pid 5078] rmdir("./10" [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5435] <... memfd_create resumed>) = 3 [pid 5081] <... unlink resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] mkdir("./11", 0777 [pid 5076] close(3 [pid 5435] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 70.278213][ T5419] EXT4-fs (loop5): free_blocks=2415919104 [ 70.291078][ T5419] EXT4-fs (loop5): dirty_blocks=16 [ 70.297055][ T5419] EXT4-fs (loop5): Block reservation details [ 70.308968][ T5419] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 5078] mkdir("./11", 0777 [pid 5076] <... close resumed>) = 0 ./strace-static-x86_64: Process 5434 attached [pid 5435] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5078] <... mkdir resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] rmdir("./10" [pid 5078] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... rmdir resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5076] mkdir("./11", 0777 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5076] <... mkdir resumed>) = 0 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] close(3 [pid 5076] <... openat resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5434] set_robust_list(0x555555adb5e0, 24 [pid 5077] <... openat resumed>) = 3 [pid 5076] close(3 [pid 5078] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5436 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] <... close resumed>) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5434] <... set_robust_list resumed>) = 0 [pid 5077] close(3 [pid 5076] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5437 [pid 5077] <... close resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5434] chdir("./12"./strace-static-x86_64: Process 5436 attached [pid 5435] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5436] set_robust_list(0x555555adb5e0, 24 [pid 5434] <... chdir resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5438 ./strace-static-x86_64: Process 5438 attached ./strace-static-x86_64: Process 5437 attached [pid 5436] <... set_robust_list resumed>) = 0 [pid 5434] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5436] chdir("./11" [pid 5434] <... prctl resumed>) = 0 [ 70.342723][ T5116] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5438] set_robust_list(0x555555adb5e0, 24 [pid 5437] set_robust_list(0x555555adb5e0, 24 [pid 5436] <... chdir resumed>) = 0 [pid 5434] setpgid(0, 0 [pid 5436] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5438] <... set_robust_list resumed>) = 0 [pid 5437] <... set_robust_list resumed>) = 0 [pid 5436] setpgid(0, 0 [pid 5434] <... setpgid resumed>) = 0 [pid 5436] <... setpgid resumed>) = 0 [pid 5436] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5436] write(3, "1000", 4) = 4 [pid 5436] close(3) = 0 [pid 5436] symlink("/dev/binderfs", "./binderfs" [pid 5438] chdir("./11" [pid 5437] chdir("./11" [pid 5436] <... symlink resumed>) = 0 [pid 5434] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5438] <... chdir resumed>) = 0 [pid 5437] <... chdir resumed>) = 0 [pid 5436] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5438] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5437] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5436] <... futex resumed>) = 0 [pid 5434] <... openat resumed>) = 3 [pid 5438] <... prctl resumed>) = 0 [pid 5437] <... prctl resumed>) = 0 [pid 5436] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5434] write(3, "1000", 4 [pid 5438] setpgid(0, 0 [pid 5437] setpgid(0, 0 [pid 5436] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5434] <... write resumed>) = 4 [pid 5438] <... setpgid resumed>) = 0 [pid 5437] <... setpgid resumed>) = 0 [pid 5436] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5434] close(3 [pid 5438] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5437] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5436] <... mprotect resumed>) = 0 [pid 5434] <... close resumed>) = 0 [pid 5438] <... openat resumed>) = 3 [pid 5437] <... openat resumed>) = 3 [pid 5436] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5435] <... write resumed>) = 1048576 [pid 5434] symlink("/dev/binderfs", "./binderfs" [pid 5438] write(3, "1000", 4 [pid 5437] write(3, "1000", 4 [pid 5435] munmap(0x7fa2d45d3000, 1048576 [pid 5438] <... write resumed>) = 4 [pid 5437] <... write resumed>) = 4 [pid 5436] <... clone resumed>, parent_tid=[5439], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5439 [pid 5435] <... munmap resumed>) = 0 [pid 5434] <... symlink resumed>) = 0 [pid 5438] close(3 [pid 5437] close(3 [pid 5436] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5435] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5434] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5438] <... close resumed>) = 0 [pid 5437] <... close resumed>) = 0 [pid 5436] <... futex resumed>) = 0 [pid 5434] <... futex resumed>) = 0 [pid 5438] symlink("/dev/binderfs", "./binderfs" [pid 5437] symlink("/dev/binderfs", "./binderfs" [pid 5436] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5435] <... openat resumed>) = 4 [pid 5434] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 5439 attached [pid 5438] <... symlink resumed>) = 0 [pid 5437] <... symlink resumed>) = 0 [pid 5434] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5435] ioctl(4, LOOP_SET_FD, 3 [pid 5439] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5438] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5434] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5439] <... set_robust_list resumed>) = 0 [pid 5438] <... futex resumed>) = 0 [pid 5437] <... futex resumed>) = 0 [pid 5434] <... mprotect resumed>) = 0 [pid 5439] memfd_create("syzkaller", 0 [pid 5438] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5437] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5434] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5439] <... memfd_create resumed>) = 3 [pid 5438] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5437] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5439] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5438] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5437] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5434] <... clone resumed>, parent_tid=[5440], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5440 [pid 5439] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5438] <... mprotect resumed>) = 0 [pid 5437] <... mprotect resumed>) = 0 [pid 5434] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5440 attached [pid 5438] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5437] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5435] <... ioctl resumed>) = 0 [pid 5434] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5441 attached [pid 5440] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5439] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5435] close(3 [pid 5441] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5440] <... set_robust_list resumed>) = 0 [pid 5435] <... close resumed>) = 0 [pid 5441] <... set_robust_list resumed>) = 0 [pid 5440] memfd_create("syzkaller", 0 [pid 5435] mkdir("./bus", 0777 [pid 5441] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5440] <... memfd_create resumed>) = 3 [pid 5438] <... clone resumed>, parent_tid=[5441], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5441 [pid 5437] <... clone resumed>, parent_tid=[5442], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5442 [pid 5435] <... mkdir resumed>) = 0 [pid 5434] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5442 attached [pid 5440] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5438] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5435] mount("/dev/loop4", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5442] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5441] <... futex resumed>) = 0 [pid 5440] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5438] <... futex resumed>) = 1 [pid 5437] <... futex resumed>) = 0 [pid 5442] <... set_robust_list resumed>) = 0 [pid 5441] memfd_create("syzkaller", 0 [pid 5440] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5081] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5438] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5442] memfd_create("syzkaller", 0 [ 70.384987][ T5116] EXT4-fs (loop5): This should not happen!! Data will be lost [ 70.384987][ T5116] [ 70.417407][ T5435] loop4: detected capacity change from 0 to 2048 [pid 5441] <... memfd_create resumed>) = 3 [pid 5439] <... write resumed>) = 1048576 [pid 5437] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5442] <... memfd_create resumed>) = 3 [pid 5441] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5439] munmap(0x7fa2d45d3000, 1048576 [pid 5435] <... mount resumed>) = 0 [pid 5081] lstat("./11/bus", [pid 5442] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5441] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5439] <... munmap resumed>) = 0 [pid 5435] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5442] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5439] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5081] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5439] <... openat resumed>) = 4 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5439] ioctl(4, LOOP_SET_FD, 3 [pid 5081] openat(AT_FDCWD, "./11/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5442] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5441] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5440] <... write resumed>) = 1048576 [pid 5439] <... ioctl resumed>) = 0 [pid 5435] <... openat resumed>) = 3 [pid 5081] <... openat resumed>) = 4 [pid 5440] munmap(0x7fa2d45d3000, 1048576 [pid 5435] chdir("./bus" [pid 5081] fstat(4, [pid 5435] <... chdir resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5435] ioctl(4, LOOP_CLR_FD [pid 5081] getdents64(4, [pid 5442] <... write resumed>) = 1048576 [pid 5441] <... write resumed>) = 1048576 [pid 5440] <... munmap resumed>) = 0 [pid 5435] <... ioctl resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5442] munmap(0x7fa2d45d3000, 1048576 [pid 5441] munmap(0x7fa2d45d3000, 1048576 [pid 5440] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5439] close(3 [pid 5435] close(4 [pid 5081] getdents64(4, [pid 5442] <... munmap resumed>) = 0 [pid 5441] <... munmap resumed>) = 0 [pid 5440] <... openat resumed>) = 4 [pid 5435] <... close resumed>) = 0 [pid 5440] ioctl(4, LOOP_SET_FD, 3 [pid 5435] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5441] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5439] <... close resumed>) = 0 [pid 5435] <... futex resumed>) = 1 [pid 5432] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5435] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5432] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] close(4 [pid 5439] mkdir("./bus", 0777 [pid 5435] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5432] <... futex resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5439] <... mkdir resumed>) = 0 [pid 5435] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5432] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] rmdir("./11/bus" [pid 5439] mount("/dev/loop2", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5435] <... open resumed>) = 4 [pid 5435] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... rmdir resumed>) = 0 [pid 5081] getdents64(3, [pid 5435] <... futex resumed>) = 1 [pid 5432] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5432] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5435] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5432] <... futex resumed>) = 0 [pid 5081] close(3 [pid 5432] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... close resumed>) = 0 [pid 5435] <... write resumed>) = 9 [pid 5081] rmdir("./11" [pid 5435] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5442] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5081] <... rmdir resumed>) = 0 [pid 5435] <... futex resumed>) = 1 [pid 5432] <... futex resumed>) = 0 [pid 5081] mkdir("./12", 0777 [pid 5442] <... openat resumed>) = 4 [pid 5441] <... openat resumed>) = 4 [pid 5435] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5432] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5442] ioctl(4, LOOP_SET_FD, 3 [pid 5441] ioctl(4, LOOP_SET_FD, 3 [pid 5435] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5432] <... futex resumed>) = 0 [pid 5081] <... mkdir resumed>) = 0 [ 70.492044][ T5439] loop2: detected capacity change from 0 to 2048 [ 70.520538][ T5440] loop3: detected capacity change from 0 to 2048 [pid 5441] <... ioctl resumed>) = 0 [pid 5440] <... ioctl resumed>) = 0 [pid 5435] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5432] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5441] close(3 [pid 5440] close(3 [pid 5435] <... openat resumed>) = 5 [pid 5081] <... openat resumed>) = 3 [pid 5441] <... close resumed>) = 0 [pid 5440] <... close resumed>) = 0 [pid 5435] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5441] mkdir("./bus", 0777 [pid 5440] mkdir("./bus", 0777 [pid 5435] <... futex resumed>) = 1 [pid 5432] <... futex resumed>) = 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5441] <... mkdir resumed>) = 0 [pid 5440] <... mkdir resumed>) = 0 [pid 5435] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5432] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] close(3 [pid 5442] <... ioctl resumed>) = 0 [pid 5441] mount("/dev/loop1", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5440] mount("/dev/loop3", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5435] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5432] <... futex resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5442] close(3 [pid 5439] <... mount resumed>) = 0 [pid 5435] open("./bus", O_RDWR [pid 5432] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5442] <... close resumed>) = 0 [pid 5439] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5435] <... open resumed>) = 6 [pid 5442] mkdir("./bus", 0777 [pid 5439] <... openat resumed>) = 3 [pid 5435] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5447 [pid 5439] chdir("./bus" [pid 5435] <... futex resumed>) = 1 [pid 5432] <... futex resumed>) = 0 [pid 5439] <... chdir resumed>) = 0 [pid 5435] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5432] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5439] ioctl(4, LOOP_CLR_FD [pid 5435] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5432] <... futex resumed>) = 0 [pid 5439] <... ioctl resumed>) = 0 [pid 5435] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5432] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5442] <... mkdir resumed>) = 0 [pid 5439] close(4 [pid 5435] <... mmap resumed>) = 0x20000000 [pid 5442] mount("/dev/loop0", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5439] <... close resumed>) = 0 [pid 5435] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5439] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5435] <... futex resumed>) = 1 [pid 5432] <... futex resumed>) = 0 [pid 5439] <... futex resumed>) = 1 [pid 5436] <... futex resumed>) = 0 [pid 5435] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5432] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5439] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5436] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5435] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5432] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5447 attached [pid 5439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5436] <... futex resumed>) = 0 [pid 5435] sendfile(4, 5, NULL, 2147483713 [pid 5432] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5447] set_robust_list(0x555555adb5e0, 24 [pid 5441] <... mount resumed>) = 0 [pid 5440] <... mount resumed>) = 0 [pid 5439] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5436] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5447] <... set_robust_list resumed>) = 0 [pid 5447] chdir("./12") = 0 [pid 5447] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5447] setpgid(0, 0) = 0 [pid 5447] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 70.546405][ T5441] loop1: detected capacity change from 0 to 2048 [ 70.546716][ T5442] loop0: detected capacity change from 0 to 2048 [pid 5447] write(3, "1000", 4) = 4 [pid 5447] close(3) = 0 [pid 5447] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5447] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5447] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2dc9d3000 [pid 5447] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5447] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5441] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5439] <... open resumed>) = 4 [pid 5442] <... mount resumed>) = 0 [pid 5441] <... openat resumed>) = 3 [pid 5440] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5439] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5447] <... clone resumed>, parent_tid=[5454], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5454 [pid 5442] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5441] chdir("./bus" [pid 5440] <... openat resumed>) = 3 [pid 5439] <... futex resumed>) = 1 [pid 5436] <... futex resumed>) = 0 [pid 5447] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5442] <... openat resumed>) = 3 [pid 5441] <... chdir resumed>) = 0 [pid 5440] chdir("./bus" [pid 5439] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5436] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5447] <... futex resumed>) = 0 [pid 5442] chdir("./bus" [pid 5441] ioctl(4, LOOP_CLR_FD [pid 5440] <... chdir resumed>) = 0 [pid 5439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5436] <... futex resumed>) = 0 [pid 5447] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5442] <... chdir resumed>) = 0 [pid 5441] <... ioctl resumed>) = 0 [pid 5440] ioctl(4, LOOP_CLR_FD [pid 5439] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5436] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5454 attached [pid 5454] set_robust_list(0x7fa2dc9f39e0, 24) = 0 [pid 5454] memfd_create("syzkaller", 0) = 3 [pid 5454] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2d45d3000 [pid 5442] ioctl(4, LOOP_CLR_FD [pid 5441] close(4 [pid 5440] <... ioctl resumed>) = 0 [pid 5442] <... ioctl resumed>) = 0 [pid 5441] <... close resumed>) = 0 [pid 5440] close(4 [pid 5439] <... write resumed>) = 9 [pid 5442] close(4 [pid 5441] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5440] <... close resumed>) = 0 [pid 5439] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5432] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 70.604471][ T5435] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 70.632616][ T5435] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 70.646586][ T5435] EXT4-fs (loop4): This should not happen!! Data will be lost [pid 5442] <... close resumed>) = 0 [pid 5441] <... futex resumed>) = 1 [pid 5440] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5439] <... futex resumed>) = 1 [pid 5438] <... futex resumed>) = 0 [pid 5436] <... futex resumed>) = 0 [pid 5432] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5442] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5441] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5440] <... futex resumed>) = 1 [pid 5439] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5438] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5436] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5434] <... futex resumed>) = 0 [pid 5432] <... futex resumed>) = 0 [pid 5454] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5442] <... futex resumed>) = 1 [pid 5441] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5440] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5439] <... openat resumed>) = 5 [pid 5438] <... futex resumed>) = 0 [pid 5436] <... futex resumed>) = 0 [pid 5434] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5432] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5454] <... write resumed>) = 1048576 [pid 5442] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5441] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5440] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5439] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5438] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5437] <... futex resumed>) = 0 [pid 5436] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5435] <... sendfile resumed>) = 117 [pid 5434] <... futex resumed>) = 0 [pid 5432] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5441] <... open resumed>) = 4 [pid 5440] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5439] <... futex resumed>) = 0 [pid 5437] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5436] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5435] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5434] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5432] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5454] munmap(0x7fa2d45d3000, 1048576 [pid 5442] <... futex resumed>) = 0 [pid 5441] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5439] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5437] <... futex resumed>) = 1 [pid 5436] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5435] <... futex resumed>) = 0 [pid 5454] <... munmap resumed>) = 0 [pid 5442] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5441] <... futex resumed>) = 1 [pid 5440] <... open resumed>) = 4 [pid 5439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5438] <... futex resumed>) = 0 [pid 5437] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5436] <... futex resumed>) = 0 [pid 5435] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5432] <... mprotect resumed>) = 0 [pid 5454] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5441] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5440] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5439] open("./bus", O_RDWR [pid 5438] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5436] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5432] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5454] <... openat resumed>) = 4 [pid 5441] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5440] <... futex resumed>) = 1 [pid 5439] <... open resumed>) = 6 [pid 5438] <... futex resumed>) = 0 [pid 5434] <... futex resumed>) = 0 [pid 5454] ioctl(4, LOOP_SET_FD, 3 [pid 5441] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5440] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5439] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5438] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5434] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5455 attached [pid 5442] <... open resumed>) = 4 [pid 5454] <... ioctl resumed>) = 0 [ 70.646586][ T5435] [ 70.657622][ T5435] EXT4-fs (loop4): Total free blocks count 0 [ 70.665169][ T5435] EXT4-fs (loop4): Free/Dirty block details [ 70.671811][ T5435] EXT4-fs (loop4): free_blocks=2415919104 [ 70.678074][ T5435] EXT4-fs (loop4): dirty_blocks=16 [ 70.684077][ T5435] EXT4-fs (loop4): Block reservation details [ 70.690412][ T5435] EXT4-fs (loop4): i_reserved_data_blocks=1 [pid 5454] close(3) = 0 [pid 5454] mkdir("./bus", 0777 [pid 5442] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5439] <... futex resumed>) = 1 [pid 5436] <... futex resumed>) = 0 [pid 5434] <... futex resumed>) = 0 [pid 5432] <... clone resumed>, parent_tid=[5455], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5455 [pid 5442] <... futex resumed>) = 1 [pid 5441] <... write resumed>) = 9 [pid 5440] <... write resumed>) = 9 [pid 5439] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5437] <... futex resumed>) = 0 [pid 5436] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5434] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5432] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5442] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5437] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5436] <... futex resumed>) = 0 [pid 5439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5432] <... futex resumed>) = 0 [pid 5440] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5441] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5455] set_robust_list(0x7fa2d46d29e0, 24 [pid 5437] <... futex resumed>) = 0 [pid 5436] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5432] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5439] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5440] <... futex resumed>) = 1 [pid 5437] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5434] <... futex resumed>) = 0 [pid 5454] <... mkdir resumed>) = 0 [pid 5439] <... mmap resumed>) = 0x20000000 [pid 5454] mount("/dev/loop5", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5434] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5434] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5440] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5455] <... set_robust_list resumed>) = 0 [pid 5442] <... write resumed>) = 9 [pid 5441] <... futex resumed>) = 1 [pid 5439] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5438] <... futex resumed>) = 0 [pid 5455] creat(0x200001c0, 0420 [pid 5442] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5441] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5440] <... openat resumed>) = 5 [pid 5438] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5439] <... futex resumed>) = 1 [pid 5436] <... futex resumed>) = 0 [pid 5455] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5442] <... futex resumed>) = 1 [pid 5441] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5440] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5438] <... futex resumed>) = 0 [pid 5437] <... futex resumed>) = 0 [pid 5436] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5439] sendfile(4, 5, NULL, 2147483713 [pid 5455] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5442] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5441] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5440] <... futex resumed>) = 1 [pid 5438] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5437] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5436] <... futex resumed>) = 0 [pid 5434] <... futex resumed>) = 0 [pid 5442] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5441] <... openat resumed>) = 5 [pid 5437] <... futex resumed>) = 0 [pid 5436] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5437] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5434] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5442] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5441] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5440] open("./bus", O_RDWR [pid 5434] <... futex resumed>) = 0 [pid 5455] <... futex resumed>) = 1 [pid 5442] <... openat resumed>) = 5 [pid 5441] <... futex resumed>) = 1 [pid 5440] <... open resumed>) = 6 [pid 5438] <... futex resumed>) = 0 [pid 5434] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5432] <... futex resumed>) = 0 [pid 5455] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5442] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5441] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5440] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5438] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5434] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5432] exit_group(0 [pid 5455] <... futex resumed>) = ? [pid 5442] <... futex resumed>) = 1 [pid 5441] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5440] <... futex resumed>) = 0 [pid 5438] <... futex resumed>) = 0 [pid 5437] <... futex resumed>) = 0 [pid 5435] <... futex resumed>) = ? [pid 5434] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5432] <... exit_group resumed>) = ? [pid 5455] +++ exited with 0 +++ [pid 5442] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5441] open("./bus", O_RDWR [pid 5440] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5438] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5437] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5435] +++ exited with 0 +++ [pid 5434] <... futex resumed>) = 0 [pid 5437] <... futex resumed>) = 0 [pid 5432] +++ exited with 0 +++ [pid 5434] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5442] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5441] <... open resumed>) = 6 [pid 5437] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5432, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5442] open("./bus", O_RDWR [pid 5440] <... mmap resumed>) = 0x20000000 [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 5441] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... restart_syscall resumed>) = 0 [pid 5442] <... open resumed>) = 6 [pid 5441] <... futex resumed>) = 1 [pid 5440] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5438] <... futex resumed>) = 0 [pid 5442] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5441] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5440] <... futex resumed>) = 1 [pid 5438] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5434] <... futex resumed>) = 0 [pid 5442] <... futex resumed>) = 1 [pid 5441] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5440] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5438] <... futex resumed>) = 0 [pid 5437] <... futex resumed>) = 0 [pid 5434] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5442] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5441] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5440] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5438] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5437] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5434] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5442] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5437] <... futex resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5442] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5441] <... mmap resumed>) = 0x20000000 [pid 5440] sendfile(4, 5, NULL, 2147483713 [ 70.709694][ T5454] loop5: detected capacity change from 0 to 2048 [pid 5437] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5434] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... openat resumed>) = 3 [pid 5442] <... mmap resumed>) = 0x20000000 [pid 5441] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, 0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5080] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./11/binderfs") = 0 [pid 5080] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5441] <... futex resumed>) = 1 [pid 5442] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5438] <... futex resumed>) = 0 [pid 5436] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5442] <... futex resumed>) = 1 [pid 5441] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5438] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] <... futex resumed>) = 0 [pid 5436] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5442] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5441] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5438] <... futex resumed>) = 0 [pid 5437] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5436] <... futex resumed>) = 0 [pid 5442] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5441] sendfile(4, 5, NULL, 2147483713 [pid 5438] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5437] <... futex resumed>) = 0 [pid 5436] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5442] sendfile(4, 5, NULL, 2147483713 [pid 5437] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5436] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5436] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE) = 0 [ 70.756251][ T5439] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 70.772657][ T5440] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 70.779000][ T5439] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5436] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5434] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 70.804568][ T5116] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 70.804953][ T5439] EXT4-fs (loop2): This should not happen!! Data will be lost [ 70.804953][ T5439] [ 70.823166][ T5442] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 70.832758][ T5439] EXT4-fs (loop2): Total free blocks count 0 [ 70.843136][ T5116] EXT4-fs (loop4): This should not happen!! Data will be lost [ 70.843136][ T5116] [pid 5434] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5438] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5437] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5436] <... clone resumed>, parent_tid=[5456], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5456 [pid 5434] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5456 attached [pid 5456] set_robust_list(0x7fa2d46d29e0, 24) = 0 [pid 5456] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5438] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5436] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5434] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5456] <... futex resumed>) = 0 [pid 5454] <... mount resumed>) = 0 [pid 5438] <... futex resumed>) = 0 [pid 5437] <... futex resumed>) = 0 [pid 5436] <... futex resumed>) = 1 [pid 5434] <... mmap resumed>) = 0x7fa2d46b2000 [ 70.849262][ T5440] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 70.857913][ T5442] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 70.872588][ T5439] EXT4-fs (loop2): Free/Dirty block details [ 70.887397][ T5441] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5454] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5438] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5437] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5436] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5434] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5437] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5434] <... mprotect resumed>) = 0 [pid 5454] <... openat resumed>) = 3 [pid 5438] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5454] chdir("./bus" [pid 5438] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5434] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5454] <... chdir resumed>) = 0 [pid 5437] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5438] <... mprotect resumed>) = 0 [pid 5454] ioctl(4, LOOP_CLR_FD) = 0 [pid 5438] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5437] <... mprotect resumed>) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 5454] close(4 [pid 5437] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5434] <... clone resumed>, parent_tid=[5459], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5459 [pid 5454] <... close resumed>) = 0 [ 70.892344][ T5440] EXT4-fs (loop3): This should not happen!! Data will be lost [ 70.892344][ T5440] [ 70.906105][ T5441] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 70.916979][ T5439] EXT4-fs (loop2): free_blocks=2415919104 [ 70.934119][ T5442] EXT4-fs (loop0): This should not happen!! Data will be lost [ 70.934119][ T5442] [pid 5454] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5438] <... clone resumed>, parent_tid=[5460], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5460 [pid 5434] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5454] <... futex resumed>) = 1 [pid 5447] <... futex resumed>) = 0 [pid 5438] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] <... clone resumed>, parent_tid=[5461], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5461 [pid 5434] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5459 attached [pid 5454] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5459] set_robust_list(0x7fa2d46d29e0, 24 [pid 5454] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5447] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5438] <... futex resumed>) = 0 [pid 5437] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5434] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5461 attached ./strace-static-x86_64: Process 5460 attached [pid 5459] <... set_robust_list resumed>) = 0 [pid 5454] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5447] <... futex resumed>) = 0 [pid 5438] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5437] <... futex resumed>) = 0 [pid 5436] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 70.954074][ T5441] EXT4-fs (loop1): This should not happen!! Data will be lost [ 70.954074][ T5441] [ 70.963898][ T5441] EXT4-fs (loop1): Total free blocks count 0 [ 70.973101][ T5439] EXT4-fs (loop2): dirty_blocks=16 [ 70.976334][ T5441] EXT4-fs (loop1): Free/Dirty block details [ 70.978638][ T5439] EXT4-fs (loop2): Block reservation details [ 70.986950][ T5441] EXT4-fs (loop1): free_blocks=2415919104 [ 70.995966][ T5440] EXT4-fs (loop3): Total free blocks count 0 [pid 5080] lstat("./11/bus", [pid 5461] set_robust_list(0x7fa2d46d29e0, 24 [pid 5460] set_robust_list(0x7fa2d46d29e0, 24 [pid 5447] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5437] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5454] <... open resumed>) = 4 [pid 5454] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5454] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5447] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5447] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5454] <... futex resumed>) = 0 [pid 5447] <... futex resumed>) = 1 [pid 5454] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5447] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5461] <... set_robust_list resumed>) = 0 [pid 5460] <... set_robust_list resumed>) = 0 [pid 5454] <... write resumed>) = 9 [pid 5080] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5454] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5454] <... futex resumed>) = 1 [pid 5447] <... futex resumed>) = 0 [pid 5454] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5447] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5454] <... openat resumed>) = 5 [pid 5447] <... futex resumed>) = 0 [pid 5454] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5447] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5454] <... futex resumed>) = 0 [pid 5447] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5454] open("./bus", O_RDWR [pid 5447] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5454] <... open resumed>) = 6 [pid 5447] <... futex resumed>) = 0 [pid 5454] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5447] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5454] <... futex resumed>) = 0 [pid 5447] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] openat(AT_FDCWD, "./11/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5454] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5447] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5454] <... mmap resumed>) = 0x20000000 [pid 5447] <... futex resumed>) = 0 [pid 5454] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5447] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5454] <... futex resumed>) = 0 [pid 5447] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5454] sendfile(4, 5, NULL, 2147483713 [pid 5447] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5080] <... openat resumed>) = 4 [ 70.995988][ T5440] EXT4-fs (loop3): Free/Dirty block details [ 70.996007][ T5440] EXT4-fs (loop3): free_blocks=2415919104 [ 71.006355][ T5441] EXT4-fs (loop1): dirty_blocks=16 [ 71.016182][ T5442] EXT4-fs (loop0): Total free blocks count 0 [ 71.026833][ T5440] EXT4-fs (loop3): dirty_blocks=16 [ 71.032247][ T5440] EXT4-fs (loop3): Block reservation details [ 71.039641][ T5442] EXT4-fs (loop0): Free/Dirty block details [pid 5447] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5438] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5434] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] fstat(4, [pid 5459] creat(0x200001c0, 0420 [pid 5440] <... sendfile resumed>) = 117 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5439] <... sendfile resumed>) = 117 [pid 5439] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5439] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5437] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5459] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5456] creat(0x200001c0, 0420 [pid 5440] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] getdents64(4, [pid 5447] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5447] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5447] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2d46b2000 [pid 5447] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5447] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5462], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5462 [pid 5447] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5447] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5462 attached [pid 5462] set_robust_list(0x7fa2d46d29e0, 24 [pid 5459] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5456] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5440] <... futex resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5459] <... futex resumed>) = 0 [pid 5456] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5440] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5434] exit_group(0 [pid 5080] getdents64(4, [pid 5462] <... set_robust_list resumed>) = 0 [ 71.044238][ T5454] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 71.046302][ T5442] EXT4-fs (loop0): free_blocks=2415919104 [ 71.066672][ T5440] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 71.067753][ T5441] EXT4-fs (loop1): Block reservation details [ 71.073726][ T5442] EXT4-fs (loop0): dirty_blocks=16 [ 71.083719][ T5439] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 71.090193][ T5441] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 71.090984][ T5442] EXT4-fs (loop0): Block reservation details [pid 5461] creat(0x200001c0, 0420 [pid 5460] creat(0x200001c0, 0420 [pid 5456] <... futex resumed>) = 0 [pid 5442] <... sendfile resumed>) = 117 [pid 5441] <... sendfile resumed>) = 117 [pid 5440] <... futex resumed>) = ? [pid 5434] <... exit_group resumed>) = ? [pid 5080] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5461] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5460] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5459] +++ exited with 0 +++ [pid 5456] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5440] +++ exited with 0 +++ [pid 5436] exit_group(0 [pid 5434] +++ exited with 0 +++ [pid 5080] close(4 [pid 5461] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5460] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5456] <... futex resumed>) = ? [pid 5436] <... exit_group resumed>) = ? [pid 5080] <... close resumed>) = 0 [pid 5461] <... futex resumed>) = 0 [pid 5460] <... futex resumed>) = 0 [pid 5456] +++ exited with 0 +++ [pid 5080] rmdir("./11/bus" [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5434, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5461] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5460] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] <... rmdir resumed>) = 0 [pid 5079] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] getdents64(3, [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5079] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5439] <... futex resumed>) = ? [pid 5080] close(3 [pid 5079] <... openat resumed>) = 3 [pid 5080] <... close resumed>) = 0 [pid 5079] fstat(3, [pid 5080] rmdir("./11" [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5442] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5439] +++ exited with 0 +++ [pid 5436] +++ exited with 0 +++ [pid 5080] <... rmdir resumed>) = 0 [pid 5079] getdents64(3, [pid 5442] <... futex resumed>) = 0 [pid 5441] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] mkdir("./12", 0777 [pid 5079] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5436, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5442] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5441] <... futex resumed>) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 5079] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5441] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5438] exit_group(0 [pid 5437] exit_group(0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5461] <... futex resumed>) = ? [pid 5460] <... futex resumed>) = ? [pid 5442] <... futex resumed>) = ? [pid 5441] <... futex resumed>) = ? [pid 5438] <... exit_group resumed>) = ? [pid 5437] <... exit_group resumed>) = ? [pid 5080] <... openat resumed>) = 3 [pid 5079] lstat("./12/binderfs", [pid 5078] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5461] +++ exited with 0 +++ [pid 5460] +++ exited with 0 +++ [pid 5442] +++ exited with 0 +++ [pid 5441] +++ exited with 0 +++ [pid 5438] +++ exited with 0 +++ [pid 5437] +++ exited with 0 +++ [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] unlink("./12/binderfs" [pid 5078] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5438, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5437, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5080] close(3 [pid 5079] <... unlink resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5447] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] <... close resumed>) = 0 [pid 5079] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] fstat(3, [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] getdents64(3, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5463 [pid 5078] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5077] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 71.103745][ T5442] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 71.104815][ T5454] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 71.127711][ T5454] EXT4-fs (loop5): This should not happen!! Data will be lost [ 71.127711][ T5454] [ 71.138056][ T5454] EXT4-fs (loop5): Total free blocks count 0 [ 71.144227][ T5454] EXT4-fs (loop5): Free/Dirty block details [ 71.150174][ T5454] EXT4-fs (loop5): free_blocks=2415919104 [pid 5078] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5463 attached [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] fstat(3, [pid 5076] fstat(3, [pid 5463] set_robust_list(0x555555adb5e0, 24 [pid 5462] creat(0x200001c0, 0420 [pid 5454] <... sendfile resumed>) = 117 [pid 5463] <... set_robust_list resumed>) = 0 [pid 5462] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5454] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5463] chdir("./12" [pid 5462] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5454] <... futex resumed>) = 0 [pid 5463] <... chdir resumed>) = 0 [pid 5462] <... futex resumed>) = 0 [pid 5463] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5462] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5454] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5463] <... prctl resumed>) = 0 [pid 5463] setpgid(0, 0) = 0 [pid 5447] exit_group(0 [pid 5463] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5462] <... futex resumed>) = ? [pid 5454] <... futex resumed>) = ? [pid 5447] <... exit_group resumed>) = ? [pid 5463] <... openat resumed>) = 3 [pid 5462] +++ exited with 0 +++ [pid 5454] +++ exited with 0 +++ [pid 5447] +++ exited with 0 +++ [pid 5463] write(3, "1000", 4) = 4 [pid 5463] close(3) = 0 [pid 5463] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5463] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5463] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2dc9d3000 [pid 5463] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5463] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5464], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5464 [pid 5463] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5463] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5464 attached [pid 5464] set_robust_list(0x7fa2dc9f39e0, 24) = 0 [pid 5464] memfd_create("syzkaller", 0) = 3 [pid 5464] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2d45d3000 [pid 5078] lstat("./11/binderfs", [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5447, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] getdents64(3, [pid 5077] getdents64(3, [pid 5076] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5077] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5078] unlink("./11/binderfs" [pid 5077] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... unlink resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] lstat("./11/binderfs", [pid 5076] lstat("./11/binderfs", [pid 5081] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] unlink("./11/binderfs" [pid 5076] unlink("./11/binderfs" [pid 5081] <... openat resumed>) = 3 [pid 5077] <... unlink resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5081] fstat(3, [pid 5077] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 71.156201][ T5454] EXT4-fs (loop5): dirty_blocks=16 [ 71.161831][ T5454] EXT4-fs (loop5): Block reservation details [ 71.168389][ T5454] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 71.170517][ T33] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 71.192838][ T5116] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5076] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, [pid 5464] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5464] munmap(0x7fa2d45d3000, 1048576) = 0 [pid 5464] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5081] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5464] <... openat resumed>) = 4 [pid 5464] ioctl(4, LOOP_SET_FD, 3 [pid 5081] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5464] <... ioctl resumed>) = 0 [pid 5464] close(3) = 0 [pid 5464] mkdir("./bus", 0777) = 0 [ 71.194429][ T33] EXT4-fs (loop3): This should not happen!! Data will be lost [ 71.194429][ T33] [ 71.218204][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 71.230537][ T5116] EXT4-fs (loop2): This should not happen!! Data will be lost [ 71.230537][ T5116] [ 71.242410][ T5464] loop4: detected capacity change from 0 to 2048 [pid 5464] mount("/dev/loop4", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./12/binderfs") = 0 [pid 5081] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = 0 [pid 5079] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./12/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5464] <... mount resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./12/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5464] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5079] fstat(4, [pid 5464] <... openat resumed>) = 3 [pid 5464] chdir("./bus") = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5464] ioctl(4, LOOP_CLR_FD [pid 5079] getdents64(4, [pid 5464] <... ioctl resumed>) = 0 [pid 5079] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5464] close(4 [pid 5079] getdents64(4, [pid 5464] <... close resumed>) = 0 [pid 5079] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5464] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5463] <... futex resumed>) = 0 [pid 5463] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5463] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5464] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000) = 4 [pid 5464] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5463] <... futex resumed>) = 0 [pid 5463] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 71.243888][ T33] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 71.261197][ T9] EXT4-fs (loop1): This should not happen!! Data will be lost [ 71.261197][ T9] [ 71.264596][ T33] EXT4-fs (loop0): This should not happen!! Data will be lost [ 71.264596][ T33] [ 71.282174][ T56] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 71.296167][ T56] EXT4-fs (loop5): This should not happen!! Data will be lost [ 71.296167][ T56] [pid 5463] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5464] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5081] <... umount2 resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5464] <... write resumed>) = 9 [pid 5079] close(4 [pid 5081] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] rmdir("./12/bus" [pid 5464] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] lstat("./12/bus", [pid 5079] <... rmdir resumed>) = 0 [pid 5464] <... futex resumed>) = 1 [pid 5463] <... futex resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(3, [pid 5464] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5463] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5463] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] close(3 [pid 5463] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] openat(AT_FDCWD, "./12/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... close resumed>) = 0 [pid 5464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] <... openat resumed>) = 4 [pid 5079] rmdir("./12" [pid 5464] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5081] fstat(4, [pid 5079] <... rmdir resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] mkdir("./13", 0777 [pid 5081] getdents64(4, [pid 5079] <... mkdir resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5079] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5081] getdents64(4, [pid 5079] <... openat resumed>) = 3 [pid 5081] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5081] close(4 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] <... close resumed>) = 0 [pid 5079] close(3 [pid 5081] rmdir("./12/bus" [pid 5079] <... close resumed>) = 0 [pid 5464] <... openat resumed>) = 5 [pid 5078] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = 0 [pid 5464] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5463] <... futex resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5464] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5463] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(3, [pid 5464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5463] <... futex resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5464] open("./bus", O_RDWR [pid 5463] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5464] <... open resumed>) = 6 [pid 5081] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5078] lstat("./11/bus", [pid 5077] lstat("./11/bus", [pid 5076] lstat("./11/bus", [pid 5464] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] close(3 [pid 5079] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5467 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5464] <... futex resumed>) = 1 [pid 5463] <... futex resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5078] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5467 attached [pid 5464] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5463] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] rmdir("./12" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5467] set_robust_list(0x555555adb5e0, 24 [pid 5464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5463] <... futex resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./11/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5467] <... set_robust_list resumed>) = 0 [pid 5464] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5463] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... rmdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./11/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] openat(AT_FDCWD, "./11/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... openat resumed>) = 4 [pid 5467] chdir("./13" [pid 5464] <... mmap resumed>) = 0x20000000 [pid 5081] mkdir("./13", 0777 [pid 5078] <... openat resumed>) = 4 [pid 5077] <... openat resumed>) = 4 [pid 5076] fstat(4, [pid 5467] <... chdir resumed>) = 0 [pid 5464] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... mkdir resumed>) = 0 [pid 5078] fstat(4, [pid 5077] fstat(4, [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5467] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5464] <... futex resumed>) = 1 [pid 5463] <... futex resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(4, [pid 5467] <... prctl resumed>) = 0 [pid 5464] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5463] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... openat resumed>) = 3 [pid 5078] getdents64(4, [pid 5077] getdents64(4, [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5078] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5077] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] getdents64(4, [pid 5077] getdents64(4, [pid 5081] close(3 [pid 5078] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5077] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5467] setpgid(0, 0 [pid 5464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5463] <... futex resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5078] close(4 [pid 5077] close(4 [pid 5076] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5467] <... setpgid resumed>) = 0 [pid 5464] sendfile(4, 5, NULL, 2147483713 [pid 5463] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] getdents64(4, [pid 5467] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5467] <... openat resumed>) = 3 [pid 5076] close(4 [pid 5467] write(3, "1000", 4 [pid 5076] <... close resumed>) = 0 [pid 5467] <... write resumed>) = 4 [pid 5076] rmdir("./11/bus" [pid 5467] close(3 [pid 5076] <... rmdir resumed>) = 0 [pid 5467] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 5467] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5467] <... symlink resumed>) = 0 [pid 5076] close(3 [pid 5467] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... close resumed>) = 0 [pid 5467] <... futex resumed>) = 0 [pid 5076] rmdir("./11" [pid 5467] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5467] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5076] mkdir("./12", 0777 [pid 5467] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5076] <... mkdir resumed>) = 0 [pid 5467] <... mprotect resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5467] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5076] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5467] <... clone resumed>, parent_tid=[5468], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5468 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5467] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] rmdir("./11/bus" [pid 5077] rmdir("./11/bus" [pid 5076] close(3 [pid 5467] <... futex resumed>) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5469 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5467] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555adb5d0) = 5470 ./strace-static-x86_64: Process 5469 attached [pid 5078] getdents64(3, [pid 5077] getdents64(3, [pid 5469] set_robust_list(0x555555adb5e0, 24 [pid 5078] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5077] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5469] <... set_robust_list resumed>) = 0 [pid 5469] chdir("./13"./strace-static-x86_64: Process 5468 attached ) = 0 ./strace-static-x86_64: Process 5470 attached [pid 5469] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5468] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5470] set_robust_list(0x555555adb5e0, 24 [pid 5469] <... prctl resumed>) = 0 [pid 5468] <... set_robust_list resumed>) = 0 [pid 5470] <... set_robust_list resumed>) = 0 [pid 5469] setpgid(0, 0 [pid 5468] memfd_create("syzkaller", 0 [pid 5470] chdir("./12" [pid 5469] <... setpgid resumed>) = 0 [pid 5468] <... memfd_create resumed>) = 3 [pid 5470] <... chdir resumed>) = 0 [pid 5469] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5468] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5470] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5469] <... openat resumed>) = 3 [pid 5468] <... mmap resumed>) = 0x7fa2d45d3000 [ 71.433478][ T5464] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 71.456501][ T5464] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 71.473328][ T5464] EXT4-fs (loop4): This should not happen!! Data will be lost [ 71.473328][ T5464] [pid 5470] <... prctl resumed>) = 0 [pid 5469] write(3, "1000", 4 [pid 5078] close(3 [pid 5077] close(3 [pid 5470] setpgid(0, 0 [pid 5469] <... write resumed>) = 4 [pid 5470] <... setpgid resumed>) = 0 [pid 5469] close(3 [pid 5470] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5469] <... close resumed>) = 0 [pid 5470] <... openat resumed>) = 3 [pid 5469] symlink("/dev/binderfs", "./binderfs" [pid 5470] write(3, "1000", 4 [pid 5469] <... symlink resumed>) = 0 [pid 5470] <... write resumed>) = 4 [pid 5469] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5470] close(3 [pid 5469] <... futex resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5470] <... close resumed>) = 0 [pid 5469] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] rmdir("./11" [pid 5470] symlink("/dev/binderfs", "./binderfs" [pid 5469] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5077] rmdir("./11" [pid 5463] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5470] <... symlink resumed>) = 0 [pid 5469] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5468] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5463] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... rmdir resumed>) = 0 [pid 5470] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5469] <... mprotect resumed>) = 0 [pid 5463] <... futex resumed>) = 0 [pid 5470] <... futex resumed>) = 0 [pid 5469] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5463] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5470] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5463] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5078] mkdir("./12", 0777 [pid 5077] <... rmdir resumed>) = 0 [pid 5470] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5469] <... clone resumed>, parent_tid=[5471], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5471 [pid 5463] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5470] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5469] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5463] <... mprotect resumed>) = 0 [pid 5470] <... mprotect resumed>) = 0 [pid 5469] <... futex resumed>) = 0 [pid 5463] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5470] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5469] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5463] <... clone resumed>, parent_tid=[5472], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5472 [pid 5078] <... mkdir resumed>) = 0 [pid 5077] mkdir("./12", 0777./strace-static-x86_64: Process 5471 attached [pid 5470] <... clone resumed>, parent_tid=[5473], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5473 [pid 5463] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5470] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5463] <... futex resumed>) = 0 [pid 5470] <... futex resumed>) = 0 [pid 5463] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] <... mkdir resumed>) = 0 [pid 5470] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5473 attached [pid 5078] <... openat resumed>) = 3 [pid 5077] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5473] set_robust_list(0x7fa2dc9f39e0, 24) = 0 ./strace-static-x86_64: Process 5472 attached [pid 5473] memfd_create("syzkaller", 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5077] <... openat resumed>) = 3 [pid 5473] <... memfd_create resumed>) = 3 [pid 5472] set_robust_list(0x7fa2d46d29e0, 24 [pid 5471] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5473] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5472] <... set_robust_list resumed>) = 0 [pid 5468] <... write resumed>) = 1048576 [pid 5473] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5472] creat(0x200001c0, 0420 [pid 5471] <... set_robust_list resumed>) = 0 [pid 5468] munmap(0x7fa2d45d3000, 1048576 [pid 5464] <... sendfile resumed>) = 117 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5472] <... creat resumed>) = -1 EISDIR (Is a directory) [ 71.484890][ T5464] EXT4-fs (loop4): Total free blocks count 0 [ 71.491452][ T5464] EXT4-fs (loop4): Free/Dirty block details [ 71.499149][ T5464] EXT4-fs (loop4): free_blocks=2415919104 [ 71.506584][ T5464] EXT4-fs (loop4): dirty_blocks=16 [ 71.519717][ T5464] EXT4-fs (loop4): Block reservation details [pid 5471] memfd_create("syzkaller", 0 [pid 5468] <... munmap resumed>) = 0 [pid 5464] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5472] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5464] <... futex resumed>) = 0 [pid 5471] <... memfd_create resumed>) = 3 [pid 5078] close(3 [pid 5468] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5472] <... futex resumed>) = 1 [pid 5463] <... futex resumed>) = 0 [pid 5473] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5472] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5471] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5468] <... openat resumed>) = 4 [pid 5464] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5463] exit_group(0 [pid 5078] <... close resumed>) = 0 [pid 5077] close(3 [pid 5473] <... write resumed>) = 1048576 [pid 5472] <... futex resumed>) = ? [pid 5471] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5468] ioctl(4, LOOP_SET_FD, 3 [pid 5464] <... futex resumed>) = ? [pid 5463] <... exit_group resumed>) = ? [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 71.532522][ T5464] EXT4-fs (loop4): i_reserved_data_blocks=1 [pid 5077] <... close resumed>) = 0 [pid 5472] +++ exited with 0 +++ [pid 5471] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5464] +++ exited with 0 +++ [pid 5463] +++ exited with 0 +++ [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5474 attached [pid 5473] munmap(0x7fa2d45d3000, 1048576 [pid 5468] <... ioctl resumed>) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5463, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5078] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5474 [pid 5474] set_robust_list(0x555555adb5e0, 24 [pid 5473] <... munmap resumed>) = 0 [pid 5468] close(3 [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 5474] <... set_robust_list resumed>) = 0 [pid 5473] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5468] <... close resumed>) = 0 [pid 5080] <... restart_syscall resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5475 [pid 5474] chdir("./12" [pid 5473] <... openat resumed>) = 4 [pid 5468] mkdir("./bus", 0777 [pid 5474] <... chdir resumed>) = 0 [pid 5473] ioctl(4, LOOP_SET_FD, 3 [pid 5468] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5475 attached [pid 5474] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5473] <... ioctl resumed>) = 0 [pid 5471] <... write resumed>) = 1048576 [pid 5468] mount("/dev/loop3", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5080] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5475] set_robust_list(0x555555adb5e0, 24 [pid 5474] <... prctl resumed>) = 0 [pid 5471] munmap(0x7fa2d45d3000, 1048576 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5475] <... set_robust_list resumed>) = 0 [pid 5474] setpgid(0, 0 [pid 5473] close(3 [pid 5080] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5471] <... munmap resumed>) = 0 [pid 5475] chdir("./12" [pid 5474] <... setpgid resumed>) = 0 [pid 5473] <... close resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5475] <... chdir resumed>) = 0 [pid 5474] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5473] mkdir("./bus", 0777 [pid 5471] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5080] fstat(3, [pid 5475] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5474] <... openat resumed>) = 3 [pid 5473] <... mkdir resumed>) = 0 [pid 5468] <... mount resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5475] <... prctl resumed>) = 0 [pid 5474] write(3, "1000", 4 [pid 5473] mount("/dev/loop0", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5471] <... openat resumed>) = 4 [pid 5468] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5080] getdents64(3, [pid 5475] setpgid(0, 0 [pid 5474] <... write resumed>) = 4 [pid 5471] ioctl(4, LOOP_SET_FD, 3 [pid 5468] <... openat resumed>) = 3 [pid 5080] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5475] <... setpgid resumed>) = 0 [pid 5474] close(3 [pid 5468] chdir("./bus" [pid 5080] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5474] <... close resumed>) = 0 [pid 5468] <... chdir resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5474] symlink("/dev/binderfs", "./binderfs" [pid 5468] ioctl(4, LOOP_CLR_FD [pid 5080] lstat("./12/binderfs", [pid 5474] <... symlink resumed>) = 0 [pid 5468] <... ioctl resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5474] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 71.571631][ T5468] loop3: detected capacity change from 0 to 2048 [ 71.589636][ T5473] loop0: detected capacity change from 0 to 2048 [pid 5468] close(4 [pid 5080] unlink("./12/binderfs" [pid 5475] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5474] <... futex resumed>) = 0 [pid 5471] <... ioctl resumed>) = 0 [pid 5468] <... close resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 5475] <... openat resumed>) = 3 [pid 5474] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5468] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5475] write(3, "1000", 4 [pid 5474] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5471] close(3 [pid 5468] <... futex resumed>) = 1 [pid 5467] <... futex resumed>) = 0 [pid 5475] <... write resumed>) = 4 [pid 5474] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5471] <... close resumed>) = 0 [pid 5468] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5467] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5474] <... mprotect resumed>) = 0 [pid 5468] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5467] <... futex resumed>) = 0 [pid 5474] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5468] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5467] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5468] <... open resumed>) = 4 [pid 5474] <... clone resumed>, parent_tid=[5480], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5480 [pid 5468] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5474] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5468] <... futex resumed>) = 1 [pid 5467] <... futex resumed>) = 0 [pid 5474] <... futex resumed>) = 0 [pid 5468] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5467] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5474] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5468] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5467] <... futex resumed>) = 0 [pid 5468] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5467] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5468] <... write resumed>) = 9 [pid 5468] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5467] <... futex resumed>) = 0 [pid 5468] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5467] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5468] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5467] <... futex resumed>) = 0 [pid 5468] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5467] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5468] <... openat resumed>) = 5 [pid 5468] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5467] <... futex resumed>) = 0 [pid 5468] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5467] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5480 attached [pid 5473] <... mount resumed>) = 0 [pid 5468] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5467] <... futex resumed>) = 0 [pid 5480] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5473] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5468] open("./bus", O_RDWR [pid 5467] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5480] <... set_robust_list resumed>) = 0 [pid 5475] close(3 [pid 5473] <... openat resumed>) = 3 [pid 5468] <... open resumed>) = 6 [pid 5471] mkdir("./bus", 0777 [pid 5480] memfd_create("syzkaller", 0 [pid 5473] chdir("./bus" [pid 5468] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5480] <... memfd_create resumed>) = 3 [pid 5473] <... chdir resumed>) = 0 [pid 5468] <... futex resumed>) = 1 [pid 5467] <... futex resumed>) = 0 [pid 5480] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5473] ioctl(4, LOOP_CLR_FD [pid 5468] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5467] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5480] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5473] <... ioctl resumed>) = 0 [pid 5468] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5467] <... futex resumed>) = 0 [pid 5473] close(4 [pid 5468] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5467] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5480] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5475] <... close resumed>) = 0 [pid 5473] <... close resumed>) = 0 [pid 5471] <... mkdir resumed>) = 0 [pid 5468] <... mmap resumed>) = 0x20000000 [pid 5473] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5468] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5473] <... futex resumed>) = 1 [pid 5470] <... futex resumed>) = 0 [pid 5468] <... futex resumed>) = 1 [pid 5467] <... futex resumed>) = 0 [pid 5475] symlink("/dev/binderfs", "./binderfs" [pid 5473] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5471] mount("/dev/loop5", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5470] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5468] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5467] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5475] <... symlink resumed>) = 0 [pid 5473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5470] <... futex resumed>) = 0 [pid 5468] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5467] <... futex resumed>) = 0 [pid 5475] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5473] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5470] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5468] sendfile(4, 5, NULL, 2147483713 [pid 5467] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5475] <... futex resumed>) = 0 [pid 5475] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2dc9d3000 [pid 5475] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5475] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5481], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5481 [pid 5475] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 71.612079][ T5471] loop5: detected capacity change from 0 to 2048 [ 71.634353][ T9] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 71.647687][ T9] EXT4-fs (loop4): This should not happen!! Data will be lost [ 71.647687][ T9] [pid 5475] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5473] <... open resumed>) = 4 [pid 5473] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5470] <... futex resumed>) = 0 [pid 5470] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5470] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5473] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 5473] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5470] <... futex resumed>) = 0 [pid 5473] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5470] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5470] <... futex resumed>) = 0 [pid 5470] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5480] <... write resumed>) = 1048576 [pid 5473] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5480] munmap(0x7fa2d45d3000, 1048576) = 0 [pid 5480] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5480] ioctl(4, LOOP_SET_FD, 3 [pid 5473] <... openat resumed>) = 5 [pid 5473] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5470] <... futex resumed>) = 0 [pid 5473] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5470] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5480] <... ioctl resumed>) = 0 [pid 5480] close(3 [pid 5470] <... futex resumed>) = 0 [pid 5473] open("./bus", O_RDWR [pid 5470] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5480] <... close resumed>) = 0 [pid 5480] mkdir("./bus", 0777 [pid 5473] <... open resumed>) = 6 [pid 5473] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5470] <... futex resumed>) = 0 [pid 5473] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5470] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5470] <... futex resumed>) = 0 [pid 5473] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5470] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5480] <... mkdir resumed>) = 0 [pid 5473] <... mmap resumed>) = 0x20000000 [pid 5480] mount("/dev/loop2", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5473] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5470] <... futex resumed>) = 0 [pid 5473] sendfile(4, 5, NULL, 2147483713 [pid 5470] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5467] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5470] <... futex resumed>) = 0 [pid 5467] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5470] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5467] <... futex resumed>) = 0 [pid 5467] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2d46b2000 [pid 5467] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5467] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5483], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5483 [pid 5467] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5467] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5483 attached [pid 5483] set_robust_list(0x7fa2d46d29e0, 24) = 0 ./strace-static-x86_64: Process 5481 attached [pid 5481] set_robust_list(0x7fa2dc9f39e0, 24) = 0 [pid 5481] memfd_create("syzkaller", 0) = 3 [pid 5481] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2d45d3000 [ 71.690813][ T5468] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 71.695805][ T5480] loop2: detected capacity change from 0 to 2048 [pid 5481] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5080] <... umount2 resumed>) = 0 [pid 5080] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5471] <... mount resumed>) = 0 [pid 5080] lstat("./12/bus", [pid 5471] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5471] chdir("./bus") = 0 [pid 5471] ioctl(4, LOOP_CLR_FD) = 0 [pid 5471] close(4) = 0 [pid 5471] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5469] <... futex resumed>) = 0 [pid 5469] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5469] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5471] <... futex resumed>) = 1 [pid 5471] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5481] <... write resumed>) = 1048576 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5471] <... open resumed>) = 4 [pid 5467] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./12/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5470] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] <... openat resumed>) = 4 [ 71.742727][ T5473] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 71.765233][ T5473] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 71.778252][ T5473] EXT4-fs (loop0): This should not happen!! Data will be lost [ 71.778252][ T5473] [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, [pid 5481] munmap(0x7fa2d45d3000, 1048576 [pid 5471] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5470] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5481] <... munmap resumed>) = 0 [pid 5471] <... futex resumed>) = 1 [pid 5469] <... futex resumed>) = 0 [pid 5080] getdents64(4, [pid 5481] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5471] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5470] <... futex resumed>) = 0 [pid 5469] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5480] <... mount resumed>) = 0 [pid 5481] <... openat resumed>) = 4 [pid 5471] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5469] <... futex resumed>) = 0 [pid 5080] close(4 [pid 5481] ioctl(4, LOOP_SET_FD, 3 [pid 5480] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5473] <... sendfile resumed>) = 117 [pid 5471] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5470] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5469] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... close resumed>) = 0 [pid 5480] <... openat resumed>) = 3 [pid 5470] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5480] chdir("./bus" [pid 5470] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5480] <... chdir resumed>) = 0 [pid 5470] <... mprotect resumed>) = 0 [pid 5480] ioctl(4, LOOP_CLR_FD [pid 5470] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5480] <... ioctl resumed>) = 0 [pid 5480] close(4 [pid 5470] <... clone resumed>, parent_tid=[5487], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5487 [pid 5480] <... close resumed>) = 0 [pid 5470] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5480] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5470] <... futex resumed>) = 0 [pid 5471] <... write resumed>) = 9 [pid 5080] rmdir("./12/bus" [pid 5480] <... futex resumed>) = 1 [pid 5474] <... futex resumed>) = 0 [pid 5473] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 71.788465][ T5473] EXT4-fs (loop0): Total free blocks count 0 [ 71.795148][ T5473] EXT4-fs (loop0): Free/Dirty block details [ 71.801094][ T5473] EXT4-fs (loop0): free_blocks=2415919104 [ 71.807887][ T5473] EXT4-fs (loop0): dirty_blocks=16 [ 71.813092][ T5473] EXT4-fs (loop0): Block reservation details [ 71.821552][ T5473] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 71.829666][ T5481] loop1: detected capacity change from 0 to 2048 [pid 5471] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5470] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5487 attached [pid 5481] <... ioctl resumed>) = 0 [pid 5480] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5474] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5473] <... futex resumed>) = 0 [pid 5471] <... futex resumed>) = 1 [pid 5469] <... futex resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5487] set_robust_list(0x7fa2d46d29e0, 24 [pid 5481] close(3 [pid 5480] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5474] <... futex resumed>) = 0 [pid 5473] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5471] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5469] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] getdents64(3, [pid 5487] <... set_robust_list resumed>) = 0 [pid 5481] <... close resumed>) = 0 [pid 5480] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5474] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5471] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5469] <... futex resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5487] creat(0x200001c0, 0420 [pid 5481] mkdir("./bus", 0777 [pid 5471] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5469] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] close(3 [pid 5487] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5481] <... mkdir resumed>) = 0 [pid 5480] <... open resumed>) = 4 [pid 5471] <... openat resumed>) = 5 [pid 5080] <... close resumed>) = 0 [pid 5487] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5481] mount("/dev/loop1", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5480] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5471] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] rmdir("./12" [pid 5487] <... futex resumed>) = 1 [pid 5480] <... futex resumed>) = 1 [pid 5474] <... futex resumed>) = 0 [pid 5471] <... futex resumed>) = 1 [pid 5470] <... futex resumed>) = 0 [pid 5469] <... futex resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5487] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5480] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5474] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5471] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5470] exit_group(0 [pid 5487] <... futex resumed>) = ? [pid 5480] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5474] <... futex resumed>) = 0 [pid 5473] <... futex resumed>) = ? [pid 5471] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5470] <... exit_group resumed>) = ? [pid 5469] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] mkdir("./13", 0777 [pid 5487] +++ exited with 0 +++ [pid 5480] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5474] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5473] +++ exited with 0 +++ [pid 5471] open("./bus", O_RDWR [pid 5469] <... futex resumed>) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 5470] +++ exited with 0 +++ [pid 5471] <... open resumed>) = 6 [pid 5469] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5480] <... write resumed>) = 9 [pid 5471] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... openat resumed>) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5480] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5470, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5471] <... futex resumed>) = 1 [pid 5469] <... futex resumed>) = 0 [pid 5469] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5469] <... futex resumed>) = 0 [pid 5080] close(3 [pid 5480] <... futex resumed>) = 1 [pid 5474] <... futex resumed>) = 0 [pid 5471] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5469] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... close resumed>) = 0 [pid 5076] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555adb5d0) = 5490 [pid 5480] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5474] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5471] <... mmap resumed>) = 0x20000000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5480] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5474] <... futex resumed>) = 0 [pid 5471] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 71.839721][ T5468] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 71.878003][ T5468] EXT4-fs (loop3): This should not happen!! Data will be lost [ 71.878003][ T5468] [pid 5076] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5480] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5474] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5471] <... futex resumed>) = 1 [pid 5469] <... futex resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5469] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5480] <... openat resumed>) = 5 [pid 5471] sendfile(4, 5, NULL, 2147483713 [pid 5469] <... futex resumed>) = 0 [pid 5076] fstat(3, [pid 5469] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5481] <... mount resumed>) = 0 [pid 5480] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] getdents64(3, [pid 5480] <... futex resumed>) = 1 [pid 5474] <... futex resumed>) = 0 [pid 5480] open("./bus", O_RDWR [pid 5474] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5481] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5480] <... open resumed>) = 6 [pid 5474] <... futex resumed>) = 0 [pid 5481] <... openat resumed>) = 3 [pid 5076] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5481] chdir("./bus" [pid 5480] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5474] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5481] <... chdir resumed>) = 0 [pid 5480] <... futex resumed>) = 0 [pid 5474] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5076] lstat("./12/binderfs", [pid 5481] ioctl(4, LOOP_CLR_FD [pid 5480] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5474] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5474] <... futex resumed>) = 0 [pid 5481] <... ioctl resumed>) = 0 [pid 5480] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5474] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] unlink("./12/binderfs" [pid 5481] close(4 [pid 5480] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5076] <... unlink resumed>) = 0 [pid 5480] <... mmap resumed>) = 0x20000000 [pid 5076] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5481] <... close resumed>) = 0 [pid 5480] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5481] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5474] <... futex resumed>) = 0 [pid 5474] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5480] sendfile(4, 5, NULL, 2147483713 [pid 5481] <... futex resumed>) = 1 [pid 5475] <... futex resumed>) = 0 [pid 5474] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5490 attached [pid 5481] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5475] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5490] set_robust_list(0x555555adb5e0, 24 [pid 5481] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5475] <... futex resumed>) = 0 [pid 5490] <... set_robust_list resumed>) = 0 [pid 5481] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [ 71.901334][ T5468] EXT4-fs (loop3): Total free blocks count 0 [ 71.912640][ T5468] EXT4-fs (loop3): Free/Dirty block details [ 71.921781][ T5471] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 71.922973][ T5468] EXT4-fs (loop3): free_blocks=2415919104 [pid 5475] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5490] chdir("./13" [pid 5481] <... open resumed>) = 4 [pid 5469] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5481] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 71.957565][ T5480] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 71.966754][ T5471] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 71.984814][ T5468] EXT4-fs (loop3): dirty_blocks=16 [ 71.985640][ T5471] EXT4-fs (loop5): This should not happen!! Data will be lost [ 71.985640][ T5471] [pid 5469] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5490] <... chdir resumed>) = 0 [pid 5481] <... futex resumed>) = 1 [pid 5475] <... futex resumed>) = 0 [pid 5469] <... futex resumed>) = 0 [pid 5481] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5475] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5469] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5481] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5475] <... futex resumed>) = 0 [pid 5469] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5481] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5475] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5469] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5481] <... write resumed>) = 9 [pid 5469] <... mprotect resumed>) = 0 [pid 5481] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5469] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5490] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5481] <... futex resumed>) = 1 [pid 5475] <... futex resumed>) = 0 [pid 5474] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5481] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5475] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5469] <... clone resumed>, parent_tid=[5491], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5491 [pid 5481] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5475] <... futex resumed>) = 0 [pid 5469] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5491 attached [pid 5490] <... prctl resumed>) = 0 [pid 5481] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5475] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5474] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5469] <... futex resumed>) = 0 [pid 5491] set_robust_list(0x7fa2d46d29e0, 24 [pid 5490] setpgid(0, 0 [pid 5481] <... openat resumed>) = 5 [pid 5474] <... futex resumed>) = 0 [pid 5469] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5491] <... set_robust_list resumed>) = 0 [pid 5490] <... setpgid resumed>) = 0 [pid 5481] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5474] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5490] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5481] <... futex resumed>) = 1 [pid 5475] <... futex resumed>) = 0 [pid 5474] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5490] <... openat resumed>) = 3 [pid 5481] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5475] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5474] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5490] write(3, "1000", 4 [pid 5481] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5475] <... futex resumed>) = 0 [pid 5474] <... mprotect resumed>) = 0 [pid 5490] <... write resumed>) = 4 [pid 5481] open("./bus", O_RDWR [pid 5475] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5474] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5492 attached [pid 5491] creat(0x200001c0, 0420 [pid 5490] close(3 [pid 5481] <... open resumed>) = 6 [pid 5471] <... sendfile resumed>) = 117 [pid 5492] set_robust_list(0x7fa2d46d29e0, 24 [pid 5491] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5490] <... close resumed>) = 0 [pid 5481] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5474] <... clone resumed>, parent_tid=[5492], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5492 [pid 5471] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5492] <... set_robust_list resumed>) = 0 [pid 5491] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5490] symlink("/dev/binderfs", "./binderfs" [pid 5481] <... futex resumed>) = 1 [pid 5475] <... futex resumed>) = 0 [pid 5474] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5471] <... futex resumed>) = 0 [pid 5491] <... futex resumed>) = 1 [pid 5490] <... symlink resumed>) = 0 [pid 5481] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5475] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5474] <... futex resumed>) = 0 [pid 5471] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5469] <... futex resumed>) = 0 [pid 5491] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5490] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5481] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5475] <... futex resumed>) = 0 [pid 5474] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5469] exit_group(0 [pid 5491] <... futex resumed>) = ? [pid 5490] <... futex resumed>) = 0 [pid 5481] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5475] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5471] <... futex resumed>) = ? [pid 5469] <... exit_group resumed>) = ? [pid 5491] +++ exited with 0 +++ [pid 5490] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5481] <... mmap resumed>) = 0x20000000 [pid 5471] +++ exited with 0 +++ [pid 5469] +++ exited with 0 +++ [pid 5490] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5481] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5490] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5481] <... futex resumed>) = 1 [pid 5475] <... futex resumed>) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5469, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5490] <... mprotect resumed>) = 0 [pid 5481] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 71.990399][ T56] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 71.999935][ T5471] EXT4-fs (loop5): Total free blocks count 0 [ 72.018786][ T5471] EXT4-fs (loop5): Free/Dirty block details [ 72.025285][ T5471] EXT4-fs (loop5): free_blocks=2415919104 [ 72.029299][ T5468] EXT4-fs (loop3): Block reservation details [ 72.031072][ T5471] EXT4-fs (loop5): dirty_blocks=16 [ 72.042254][ T5471] EXT4-fs (loop5): Block reservation details [ 72.048373][ T5471] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 5475] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5490] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5481] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5475] <... futex resumed>) = 0 [pid 5081] <... restart_syscall resumed>) = 0 [pid 5481] sendfile(4, 5, NULL, 2147483713 [pid 5475] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5490] <... clone resumed>, parent_tid=[5493], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5493 [pid 5490] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5490] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5490] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 5493 attached [pid 5081] fstat(3, [pid 5493] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5493] <... set_robust_list resumed>) = 0 [pid 5081] getdents64(3, [pid 5493] memfd_create("syzkaller", 0 [pid 5081] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5493] <... memfd_create resumed>) = 3 [pid 5474] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5493] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5493] <... mmap resumed>) = 0x7fa2d45d3000 [ 72.069444][ T5468] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 72.073470][ T5480] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 72.086929][ T5481] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 72.087819][ T56] EXT4-fs (loop0): This should not happen!! Data will be lost [ 72.087819][ T56] [ 72.112453][ T5480] EXT4-fs (loop2): This should not happen!! Data will be lost [pid 5483] creat(0x200001c0, 0420 [pid 5468] <... sendfile resumed>) = 117 [pid 5081] lstat("./13/binderfs", [pid 5483] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5468] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5483] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5468] <... futex resumed>) = 0 [pid 5081] unlink("./13/binderfs" [pid 5483] <... futex resumed>) = 0 [pid 5468] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5467] exit_group(0 [pid 5081] <... unlink resumed>) = 0 [pid 5468] <... futex resumed>) = ? [pid 5467] <... exit_group resumed>) = ? [pid 5081] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5493] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5483] +++ exited with 0 +++ [pid 5468] +++ exited with 0 +++ [pid 5467] +++ exited with 0 +++ [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5467, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5079] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5079] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5079] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(3, [pid 5475] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5079] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5475] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = 0 [pid 5475] <... futex resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5475] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] lstat("./13/binderfs", [pid 5475] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 72.112453][ T5480] [ 72.122559][ T5480] EXT4-fs (loop2): Total free blocks count 0 [ 72.136590][ T5480] EXT4-fs (loop2): Free/Dirty block details [ 72.143719][ T5480] EXT4-fs (loop2): free_blocks=2415919104 [ 72.149633][ T5480] EXT4-fs (loop2): dirty_blocks=16 [pid 5475] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5079] unlink("./13/binderfs" [pid 5475] <... mprotect resumed>) = 0 [pid 5079] <... unlink resumed>) = 0 [pid 5076] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5475] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5079] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5475] <... clone resumed>, parent_tid=[5494], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5494 [pid 5475] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5475] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./12/bus", [pid 5493] <... write resumed>) = 1048576 [pid 5493] munmap(0x7fa2d45d3000, 1048576) = 0 [pid 5493] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5493] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5494 attached [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 72.160865][ T56] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 72.173488][ T5480] EXT4-fs (loop2): Block reservation details [ 72.179422][ T5481] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 72.179556][ T5480] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 72.198346][ T56] EXT4-fs (loop5): This should not happen!! Data will be lost [ 72.198346][ T56] [pid 5494] set_robust_list(0x7fa2d46d29e0, 24 [pid 5076] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5494] <... set_robust_list resumed>) = 0 [pid 5475] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./12/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] fstat(4, [pid 5492] creat(0x200001c0, 0420 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5492] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5480] <... sendfile resumed>) = 117 [pid 5076] getdents64(4, [pid 5492] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5480] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5492] <... futex resumed>) = 0 [pid 5480] <... futex resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5492] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5480] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5493] <... ioctl resumed>) = 0 [ 72.208409][ T33] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 72.220067][ T5493] loop4: detected capacity change from 0 to 2048 [ 72.221786][ T33] EXT4-fs (loop3): This should not happen!! Data will be lost [ 72.221786][ T33] [ 72.229896][ T5481] EXT4-fs (loop1): This should not happen!! Data will be lost [ 72.229896][ T5481] [pid 5474] exit_group(0 [pid 5076] getdents64(4, [pid 5493] close(3 [pid 5492] <... futex resumed>) = ? [pid 5474] <... exit_group resumed>) = ? [pid 5079] <... umount2 resumed>) = 0 [pid 5492] +++ exited with 0 +++ [pid 5081] <... umount2 resumed>) = 0 [pid 5493] <... close resumed>) = 0 [pid 5480] <... futex resumed>) = ? [pid 5076] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5493] mkdir("./bus", 0777 [pid 5480] +++ exited with 0 +++ [pid 5474] +++ exited with 0 +++ [pid 5076] close(4 [pid 5493] <... mkdir resumed>) = 0 [pid 5079] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5474, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5078] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5078] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5493] mount("/dev/loop4", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 5081] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] fstat(3, [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./13/bus", [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] rmdir("./12/bus" [pid 5494] creat(0x200001c0, 0420 [pid 5481] <... sendfile resumed>) = 117 [pid 5081] lstat("./13/bus", [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(3, [pid 5076] <... rmdir resumed>) = 0 [pid 5494] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5481] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5076] getdents64(3, [pid 5494] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5481] <... futex resumed>) = 0 [pid 5081] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5494] <... futex resumed>) = 0 [pid 5481] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5475] exit_group(0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./13/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] close(3 [pid 5481] <... futex resumed>) = ? [pid 5475] <... exit_group resumed>) = ? [pid 5081] openat(AT_FDCWD, "./13/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... openat resumed>) = 4 [pid 5078] lstat("./12/binderfs", [pid 5076] <... close resumed>) = 0 [pid 5494] +++ exited with 0 +++ [pid 5481] +++ exited with 0 +++ [pid 5079] fstat(4, [pid 5076] rmdir("./12" [pid 5475] +++ exited with 0 +++ [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5079] getdents64(4, [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] mkdir("./13", 0777 [pid 5081] <... openat resumed>) = 4 [pid 5079] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [ 72.264877][ T5481] EXT4-fs (loop1): Total free blocks count 0 [ 72.273298][ T5481] EXT4-fs (loop1): Free/Dirty block details [ 72.282368][ T5481] EXT4-fs (loop1): free_blocks=2415919104 [ 72.291010][ T5481] EXT4-fs (loop1): dirty_blocks=16 [ 72.296649][ T5481] EXT4-fs (loop1): Block reservation details [ 72.304794][ T5481] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 5078] unlink("./12/binderfs" [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5475, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5076] <... mkdir resumed>) = 0 [pid 5081] fstat(4, [pid 5079] getdents64(4, [pid 5076] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5076] <... openat resumed>) = 3 [pid 5079] close(4 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5079] <... close resumed>) = 0 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] rmdir("./13/bus" [pid 5076] close(3 [pid 5079] <... rmdir resumed>) = 0 [pid 5078] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... restart_syscall resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5079] getdents64(3, [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5079] close(3 [pid 5076] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5496 [pid 5079] <... close resumed>) = 0 [pid 5079] rmdir("./13") = 0 [pid 5079] mkdir("./14", 0777) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5079] close(3) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555adb5d0) = 5497 ./strace-static-x86_64: Process 5496 attached [pid 5496] set_robust_list(0x555555adb5e0, 24) = 0 [pid 5496] chdir("./13") = 0 ./strace-static-x86_64: Process 5497 attached [pid 5496] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5497] set_robust_list(0x555555adb5e0, 24 [pid 5496] <... prctl resumed>) = 0 [pid 5496] setpgid(0, 0) = 0 [pid 5497] <... set_robust_list resumed>) = 0 [pid 5496] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5497] chdir("./14" [pid 5496] <... openat resumed>) = 3 [pid 5497] <... chdir resumed>) = 0 [pid 5497] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5497] setpgid(0, 0) = 0 [pid 5077] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5497] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5496] write(3, "1000", 4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5496] <... write resumed>) = 4 [pid 5077] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5497] <... openat resumed>) = 3 [pid 5496] close(3 [pid 5077] <... openat resumed>) = 3 [pid 5497] write(3, "1000", 4 [pid 5496] <... close resumed>) = 0 [pid 5081] getdents64(4, [pid 5077] fstat(3, [pid 5497] <... write resumed>) = 4 [pid 5496] symlink("/dev/binderfs", "./binderfs" [pid 5081] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5497] close(3 [pid 5496] <... symlink resumed>) = 0 [pid 5081] getdents64(4, [pid 5077] getdents64(3, [pid 5497] <... close resumed>) = 0 [pid 5496] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5081] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5077] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5497] symlink("/dev/binderfs", "./binderfs" [pid 5496] <... futex resumed>) = 0 [pid 5081] close(4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5497] <... symlink resumed>) = 0 [pid 5496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] lstat("./12/binderfs", [pid 5497] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5496] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5081] <... close resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5497] <... futex resumed>) = 0 [pid 5496] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5081] rmdir("./13/bus" [pid 5077] unlink("./12/binderfs" [pid 5497] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5496] <... mprotect resumed>) = 0 [pid 5497] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5496] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] <... unlink resumed>) = 0 [pid 5497] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... rmdir resumed>) = 0 [pid 5077] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5497] <... mprotect resumed>) = 0 [pid 5496] <... clone resumed>, parent_tid=[5498], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5498 [pid 5081] getdents64(3, [pid 5497] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5496] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5496] <... futex resumed>) = 0 [pid 5497] <... clone resumed>, parent_tid=[5500], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5500 [pid 5496] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5497] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5497] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5500 attached [pid 5500] set_robust_list(0x7fa2dc9f39e0, 24) = 0 [pid 5500] memfd_create("syzkaller", 0) = 3 [pid 5500] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2d45d3000 ./strace-static-x86_64: Process 5498 attached [pid 5498] set_robust_list(0x7fa2dc9f39e0, 24) = 0 [pid 5498] memfd_create("syzkaller", 0) = 3 [pid 5498] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2d45d3000 [pid 5081] close(3) = 0 [pid 5081] rmdir("./13" [pid 5493] <... mount resumed>) = 0 [pid 5498] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5493] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5081] <... rmdir resumed>) = 0 [pid 5081] mkdir("./14", 0777 [pid 5493] <... openat resumed>) = 3 [pid 5081] <... mkdir resumed>) = 0 [pid 5493] chdir("./bus" [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5493] <... chdir resumed>) = 0 [pid 5493] ioctl(4, LOOP_CLR_FD [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5493] <... ioctl resumed>) = 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5493] close(4 [pid 5081] close(3) = 0 [pid 5493] <... close resumed>) = 0 [pid 5493] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5493] <... futex resumed>) = 1 [pid 5490] <... futex resumed>) = 0 [pid 5490] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5493] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5490] <... futex resumed>) = 0 [pid 5490] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5493] <... open resumed>) = 4 [pid 5081] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5501 [pid 5493] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5490] <... futex resumed>) = 0 [pid 5493] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5490] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5493] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5490] <... futex resumed>) = 0 [pid 5493] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [ 72.325283][ T56] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 72.349502][ T33] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 72.362530][ T56] EXT4-fs (loop2): This should not happen!! Data will be lost [ 72.362530][ T56] [pid 5490] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5493] <... write resumed>) = 9 [pid 5498] <... write resumed>) = 1048576 [pid 5498] munmap(0x7fa2d45d3000, 1048576) = 0 [pid 5498] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5498] ioctl(4, LOOP_SET_FD, 3 [pid 5493] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5498] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5501 attached [pid 5498] close(3) = 0 [pid 5501] set_robust_list(0x555555adb5e0, 24) = 0 [pid 5500] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5498] mkdir("./bus", 0777 [pid 5501] chdir("./14") = 0 [pid 5498] <... mkdir resumed>) = 0 [pid 5501] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5498] mount("/dev/loop0", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5501] <... prctl resumed>) = 0 [pid 5501] setpgid(0, 0) = 0 [pid 5501] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5501] write(3, "1000", 4) = 4 [pid 5501] close(3) = 0 [pid 5500] <... write resumed>) = 1048576 [pid 5490] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5501] symlink("/dev/binderfs", "./binderfs" [pid 5490] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5501] <... symlink resumed>) = 0 [pid 5490] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5501] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5501] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2dc9d3000 [pid 5501] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5501] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5500] munmap(0x7fa2d45d3000, 1048576 [pid 5078] <... umount2 resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5500] <... munmap resumed>) = 0 [pid 5500] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5500] <... openat resumed>) = 4 [ 72.403105][ T33] EXT4-fs (loop1): This should not happen!! Data will be lost [ 72.403105][ T33] [ 72.407626][ T5498] loop0: detected capacity change from 0 to 2048 [pid 5501] <... clone resumed>, parent_tid=[5503], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5503 [pid 5500] ioctl(4, LOOP_SET_FD, 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5501] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5500] <... ioctl resumed>) = 0 [pid 5078] lstat("./12/bus", [pid 5077] lstat("./12/bus", [pid 5493] <... futex resumed>) = 1 [pid 5490] <... futex resumed>) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5503 attached [pid 5501] <... futex resumed>) = 0 [pid 5493] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5490] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=15000000} [pid 5078] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5501] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5503] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5493] <... openat resumed>) = 5 [pid 5078] openat(AT_FDCWD, "./12/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] openat(AT_FDCWD, "./12/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5503] <... set_robust_list resumed>) = 0 [pid 5493] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... openat resumed>) = 4 [pid 5077] <... openat resumed>) = 4 [pid 5503] memfd_create("syzkaller", 0 [pid 5500] close(3) = 0 [pid 5500] mkdir("./bus", 0777) = 0 [pid 5498] <... mount resumed>) = 0 [pid 5493] <... futex resumed>) = 1 [pid 5490] <... futex resumed>) = 0 [pid 5503] <... memfd_create resumed>) = 3 [pid 5078] fstat(4, [pid 5077] fstat(4, [pid 5503] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5498] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5493] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5490] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5498] <... openat resumed>) = 3 [pid 5490] <... futex resumed>) = 0 [pid 5078] getdents64(4, [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5493] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5498] chdir("./bus" [pid 5490] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5498] <... chdir resumed>) = 0 [pid 5493] open("./bus", O_RDWR [pid 5078] getdents64(4, [pid 5077] getdents64(4, [pid 5503] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5498] ioctl(4, LOOP_CLR_FD [pid 5078] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5077] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5078] close(4 [pid 5077] getdents64(4, [pid 5078] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5498] <... ioctl resumed>) = 0 [pid 5078] rmdir("./12/bus" [pid 5077] close(4 [pid 5500] mount("/dev/loop3", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5498] close(4 [pid 5493] <... open resumed>) = 6 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5498] <... close resumed>) = 0 [pid 5078] getdents64(3, [pid 5498] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] rmdir("./12/bus" [pid 5498] <... futex resumed>) = 1 [pid 5496] <... futex resumed>) = 0 [pid 5493] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5496] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5496] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5503] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5498] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5493] <... futex resumed>) = 1 [pid 5490] <... futex resumed>) = 0 [pid 5078] close(3 [pid 5077] <... rmdir resumed>) = 0 [pid 5498] <... open resumed>) = 4 [pid 5493] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5490] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... close resumed>) = 0 [pid 5077] getdents64(3, [pid 5498] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5496] <... futex resumed>) = 0 [pid 5498] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5496] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5496] <... futex resumed>) = 0 [pid 5493] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5490] <... futex resumed>) = 0 [pid 5078] rmdir("./12" [pid 5077] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5498] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5496] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5493] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [ 72.475977][ T5500] loop3: detected capacity change from 0 to 2048 [pid 5490] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5500] <... mount resumed>) = 0 [pid 5498] <... write resumed>) = 9 [pid 5493] <... mmap resumed>) = 0x20000000 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] close(3 [pid 5500] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5498] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5493] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] mkdir("./13", 0777 [pid 5077] <... close resumed>) = 0 [pid 5503] <... write resumed>) = 1048576 [pid 5500] <... openat resumed>) = 3 [pid 5498] <... futex resumed>) = 1 [pid 5496] <... futex resumed>) = 0 [pid 5493] <... futex resumed>) = 1 [pid 5490] <... futex resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5077] rmdir("./12" [pid 5503] munmap(0x7fa2d45d3000, 1048576 [pid 5500] chdir("./bus" [pid 5498] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5496] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5493] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5490] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] <... rmdir resumed>) = 0 [pid 5503] <... munmap resumed>) = 0 [pid 5500] <... chdir resumed>) = 0 [pid 5498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5496] <... futex resumed>) = 0 [pid 5493] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5490] <... futex resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5077] mkdir("./13", 0777 [pid 5503] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5500] ioctl(4, LOOP_CLR_FD [pid 5498] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5496] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5493] sendfile(4, 5, NULL, 2147483713 [pid 5490] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5077] <... mkdir resumed>) = 0 [pid 5503] <... openat resumed>) = 4 [pid 5500] <... ioctl resumed>) = 0 [pid 5498] <... openat resumed>) = 5 [pid 5500] close(4 [pid 5498] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5503] ioctl(4, LOOP_SET_FD, 3 [pid 5500] <... close resumed>) = 0 [pid 5498] <... futex resumed>) = 1 [pid 5496] <... futex resumed>) = 0 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5500] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5498] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5496] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5500] <... futex resumed>) = 1 [pid 5498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5497] <... futex resumed>) = 0 [pid 5496] <... futex resumed>) = 0 [pid 5500] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5498] open("./bus", O_RDWR [pid 5497] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5496] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5500] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5498] <... open resumed>) = 6 [pid 5497] <... futex resumed>) = 0 [pid 5500] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5498] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5497] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5500] <... open resumed>) = 4 [pid 5498] <... futex resumed>) = 1 [pid 5496] <... futex resumed>) = 0 [ 72.560886][ T5493] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 72.577062][ T5493] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 72.589986][ T5493] EXT4-fs (loop4): This should not happen!! Data will be lost [ 72.589986][ T5493] [ 72.593271][ T5503] loop5: detected capacity change from 0 to 2048 [pid 5078] close(3 [pid 5077] <... openat resumed>) = 3 [pid 5500] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5498] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5496] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5500] <... futex resumed>) = 1 [pid 5498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5497] <... futex resumed>) = 0 [pid 5496] <... futex resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5500] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5498] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5497] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5496] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5500] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5498] <... mmap resumed>) = 0x20000000 [pid 5497] <... futex resumed>) = 0 [pid 5490] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] close(3 [pid 5500] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5498] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5497] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5508 [pid 5077] <... close resumed>) = 0 [pid 5500] <... write resumed>) = 9 [pid 5498] <... futex resumed>) = 1 [pid 5496] <... futex resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5508 attached [pid 5500] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5498] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5496] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5490] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5500] <... futex resumed>) = 1 [pid 5498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5497] <... futex resumed>) = 0 [pid 5496] <... futex resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5509 [pid 5500] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5498] sendfile(4, 5, NULL, 2147483713 [pid 5497] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5496] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5509 attached [pid 5508] set_robust_list(0x555555adb5e0, 24 [pid 5503] <... ioctl resumed>) = 0 [pid 5500] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5493] <... sendfile resumed>) = 117 [pid 5490] <... futex resumed>) = 0 [pid 5509] set_robust_list(0x555555adb5e0, 24 [pid 5508] <... set_robust_list resumed>) = 0 [pid 5493] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5490] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5509] <... set_robust_list resumed>) = 0 [pid 5508] chdir("./13" [pid 5493] <... futex resumed>) = 0 [pid 5490] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5509] chdir("./13" [pid 5508] <... chdir resumed>) = 0 [pid 5493] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5490] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5509] <... chdir resumed>) = 0 [pid 5508] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5490] <... mprotect resumed>) = 0 [pid 5509] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5508] <... prctl resumed>) = 0 [pid 5490] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5509] <... prctl resumed>) = 0 [ 72.600300][ T5493] EXT4-fs (loop4): Total free blocks count 0 [ 72.612414][ T5493] EXT4-fs (loop4): Free/Dirty block details [ 72.619325][ T5493] EXT4-fs (loop4): free_blocks=2415919104 [ 72.626036][ T5493] EXT4-fs (loop4): dirty_blocks=16 [ 72.631447][ T5493] EXT4-fs (loop4): Block reservation details [ 72.638526][ T5493] EXT4-fs (loop4): i_reserved_data_blocks=1 [pid 5508] setpgid(0, 0 [pid 5509] setpgid(0, 0 [pid 5508] <... setpgid resumed>) = 0 [pid 5503] close(3 [pid 5500] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5497] <... futex resumed>) = 0 [pid 5490] <... clone resumed>, parent_tid=[5510], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5510 [pid 5503] <... close resumed>) = 0 [pid 5500] <... openat resumed>) = 5 [pid 5497] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5503] mkdir("./bus", 0777 [pid 5500] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5497] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5509] <... setpgid resumed>) = 0 [pid 5508] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5503] <... mkdir resumed>) = 0 [pid 5500] <... futex resumed>) = 0 [pid 5497] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5490] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5503] mount("/dev/loop5", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5500] open("./bus", O_RDWR [pid 5497] <... futex resumed>) = 0 [pid 5509] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5508] <... openat resumed>) = 3 [pid 5500] <... open resumed>) = 6 [pid 5497] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5490] <... futex resumed>) = 0 [pid 5500] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5497] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5490] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5509] <... openat resumed>) = 3 [pid 5508] write(3, "1000", 4 [pid 5500] <... futex resumed>) = 0 [pid 5497] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5510 attached [pid 5500] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5497] <... futex resumed>) = 0 [pid 5510] set_robust_list(0x7fa2d46d29e0, 24 [pid 5500] <... mmap resumed>) = 0x20000000 [pid 5497] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5510] <... set_robust_list resumed>) = 0 [pid 5500] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5497] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5510] creat(0x200001c0, 0420 [pid 5500] <... futex resumed>) = 0 [pid 5497] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5510] <... creat resumed>) = -1 EISDIR (Is a directory) [ 72.650187][ T5498] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 72.665629][ T5498] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 72.679622][ T5498] EXT4-fs (loop0): This should not happen!! Data will be lost [ 72.679622][ T5498] [ 72.692136][ T5498] EXT4-fs (loop0): Total free blocks count 0 [ 72.699330][ T5498] EXT4-fs (loop0): Free/Dirty block details [pid 5500] sendfile(4, 5, NULL, 2147483713 [pid 5497] <... futex resumed>) = 0 [pid 5510] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5509] write(3, "1000", 4 [pid 5508] <... write resumed>) = 4 [pid 5497] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5496] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5510] <... futex resumed>) = 1 [pid 5496] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5510] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5496] <... futex resumed>) = 0 [pid 5496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2d46b2000 [pid 5496] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5496] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5511], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5511 [pid 5496] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5490] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5511 attached [pid 5509] <... write resumed>) = 4 [pid 5508] close(3 [pid 5496] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5511] set_robust_list(0x7fa2d46d29e0, 24 [pid 5509] close(3 [pid 5508] <... close resumed>) = 0 [pid 5490] exit_group(0 [pid 5511] <... set_robust_list resumed>) = 0 [pid 5509] <... close resumed>) = 0 [pid 5508] symlink("/dev/binderfs", "./binderfs" [pid 5493] <... futex resumed>) = ? [pid 5490] <... exit_group resumed>) = ? [pid 5510] <... futex resumed>) = ? [pid 5510] +++ exited with 0 +++ [pid 5511] creat(0x200001c0, 0420 [pid 5509] symlink("/dev/binderfs", "./binderfs" [pid 5508] <... symlink resumed>) = 0 [pid 5498] <... sendfile resumed>) = 117 [pid 5493] +++ exited with 0 +++ [pid 5490] +++ exited with 0 +++ [ 72.704096][ T5500] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 72.705728][ T5498] EXT4-fs (loop0): free_blocks=2415919104 [ 72.727238][ T5498] EXT4-fs (loop0): dirty_blocks=16 [ 72.729753][ T5500] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 72.733589][ T5498] EXT4-fs (loop0): Block reservation details [ 72.747561][ T5500] EXT4-fs (loop3): This should not happen!! Data will be lost [ 72.747561][ T5500] [pid 5511] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5509] <... symlink resumed>) = 0 [pid 5508] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5490, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5511] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5509] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5508] <... futex resumed>) = 0 [pid 5497] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5497] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5511] <... futex resumed>) = 1 [pid 5509] <... futex resumed>) = 0 [pid 5508] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5497] <... futex resumed>) = 0 [pid 5496] <... futex resumed>) = 0 [pid 5511] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5509] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5508] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5503] <... mount resumed>) = 0 [pid 5080] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5509] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5508] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5509] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5508] <... mprotect resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5509] <... mprotect resumed>) = 0 [pid 5508] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5503] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5497] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... openat resumed>) = 3 [pid 5509] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] fstat(3, [pid 5508] <... clone resumed>, parent_tid=[5514], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5514 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5514 attached [pid 5509] <... clone resumed>, parent_tid=[5515], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5515 [pid 5508] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5503] <... openat resumed>) = 3 [pid 5497] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5080] getdents64(3, [pid 5509] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5508] <... futex resumed>) = 0 [pid 5498] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5509] <... futex resumed>) = 0 [pid 5508] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5498] <... futex resumed>) = 0 [pid 5080] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5514] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5509] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5503] chdir("./bus" [pid 5498] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5497] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./13/binderfs", ./strace-static-x86_64: Process 5515 attached {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5515] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5080] unlink("./13/binderfs" [pid 5515] <... set_robust_list resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 5515] memfd_create("syzkaller", 0 [pid 5514] <... set_robust_list resumed>) = 0 [pid 5503] <... chdir resumed>) = 0 [pid 5497] <... mprotect resumed>) = 0 [pid 5496] exit_group(0 [pid 5080] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5515] <... memfd_create resumed>) = 3 [ 72.751555][ T5498] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 72.762606][ T5500] EXT4-fs (loop3): Total free blocks count 0 [ 72.775599][ T5500] EXT4-fs (loop3): Free/Dirty block details [ 72.781646][ T5500] EXT4-fs (loop3): free_blocks=2415919104 [ 72.787983][ T5500] EXT4-fs (loop3): dirty_blocks=16 [ 72.793715][ T5500] EXT4-fs (loop3): Block reservation details [ 72.800185][ T5500] EXT4-fs (loop3): i_reserved_data_blocks=1 [pid 5515] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2d45d3000 [pid 5514] memfd_create("syzkaller", 0 [pid 5511] <... futex resumed>) = ? [pid 5503] ioctl(4, LOOP_CLR_FD [pid 5500] <... sendfile resumed>) = 117 [pid 5497] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5496] <... exit_group resumed>) = ? [pid 5514] <... memfd_create resumed>) = 3 [pid 5503] <... ioctl resumed>) = 0 [pid 5500] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5514] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5503] close(4 [pid 5500] <... futex resumed>) = 0 [pid 5497] <... clone resumed>, parent_tid=[5516], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5516 [pid 5514] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5503] <... close resumed>) = 0 [pid 5500] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5497] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5514] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5503] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5497] <... futex resumed>) = 0 [pid 5503] <... futex resumed>) = 1 [pid 5501] <... futex resumed>) = 0 [pid 5497] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5503] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5501] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5503] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5501] <... futex resumed>) = 0 [pid 5503] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5501] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5503] <... open resumed>) = 4 [pid 5503] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5501] <... futex resumed>) = 0 [pid 5503] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5501] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5503] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5501] <... futex resumed>) = 0 [pid 5503] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5501] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5511] +++ exited with 0 +++ [pid 5503] <... write resumed>) = 9 [pid 5503] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5498] <... futex resumed>) = ? [pid 5503] <... futex resumed>) = 1 [pid 5501] <... futex resumed>) = 0 [pid 5503] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5501] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5514] <... write resumed>) = 1048576 [pid 5503] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5501] <... futex resumed>) = 0 [pid 5498] +++ exited with 0 +++ [pid 5496] +++ exited with 0 +++ [pid 5503] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5501] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5496, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5503] <... openat resumed>) = 5 [pid 5503] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5501] <... futex resumed>) = 0 [pid 5503] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5501] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5503] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5501] <... futex resumed>) = 0 [pid 5076] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5503] open("./bus", O_RDWR [pid 5501] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5503] <... open resumed>) = 6 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5503] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5503] <... futex resumed>) = 1 [pid 5501] <... futex resumed>) = 0 [pid 5503] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5501] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... openat resumed>) = 3 [pid 5503] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5501] <... futex resumed>) = 0 [pid 5503] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5501] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] fstat(3, [pid 5503] <... mmap resumed>) = 0x20000000 [pid 5503] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5503] <... futex resumed>) = 1 [pid 5501] <... futex resumed>) = 0 [pid 5076] getdents64(3, [pid 5503] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5501] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5503] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5501] <... futex resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [ 72.806967][ T33] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 72.845771][ T33] EXT4-fs (loop4): This should not happen!! Data will be lost [ 72.845771][ T33] [pid 5503] sendfile(4, 5, NULL, 2147483713 [pid 5501] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5516 attached [pid 5515] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5515] munmap(0x7fa2d45d3000, 1048576) = 0 [pid 5515] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5515] ioctl(4, LOOP_SET_FD, 3 [pid 5516] set_robust_list(0x7fa2d46d29e0, 24 [pid 5514] munmap(0x7fa2d45d3000, 1048576 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5516] <... set_robust_list resumed>) = 0 [pid 5515] <... ioctl resumed>) = 0 [pid 5514] <... munmap resumed>) = 0 [pid 5497] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] lstat("./13/binderfs", [pid 5516] creat(0x200001c0, 0420 [pid 5514] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5516] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5514] <... openat resumed>) = 4 [pid 5076] unlink("./13/binderfs" [pid 5516] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5514] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... unlink resumed>) = 0 [pid 5516] <... futex resumed>) = 0 [pid 5515] close(3 [pid 5503] <... sendfile resumed>) = 117 [pid 5515] <... close resumed>) = 0 [pid 5515] mkdir("./bus", 0777) = 0 [pid 5501] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5515] mount("/dev/loop1", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5501] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5501] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2d46b2000 [pid 5501] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5501] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5517], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5517 [pid 5503] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5501] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5503] <... futex resumed>) = 0 [pid 5501] <... futex resumed>) = 0 [pid 5503] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5501] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5497] exit_group(0 [pid 5500] <... futex resumed>) = ? [pid 5497] <... exit_group resumed>) = ? [pid 5500] +++ exited with 0 +++ [ 72.850882][ T5503] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 72.867203][ T5515] loop1: detected capacity change from 0 to 2048 [ 72.876872][ T5503] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 72.889387][ T5503] EXT4-fs (loop5): This should not happen!! Data will be lost [ 72.889387][ T5503] [ 72.890108][ T5514] loop2: detected capacity change from 0 to 2048 [ 72.899056][ T5503] EXT4-fs (loop5): Total free blocks count 0 [pid 5076] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5516] +++ exited with 0 +++ [pid 5497] +++ exited with 0 +++ [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5497, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5080] <... umount2 resumed>) = 0 [pid 5079] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5079] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(3, 0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5079] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] unlink("./14/binderfs") = 0 [pid 5079] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5501] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5517 attached [pid 5517] set_robust_list(0x7fa2d46d29e0, 24) = 0 [pid 5517] creat(0x200001c0, 0420) = -1 EISDIR (Is a directory) [pid 5517] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5517] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5514] <... ioctl resumed>) = 0 [ 72.899076][ T5503] EXT4-fs (loop5): Free/Dirty block details [ 72.899094][ T5503] EXT4-fs (loop5): free_blocks=2415919104 [ 72.899114][ T5503] EXT4-fs (loop5): dirty_blocks=16 [ 72.899132][ T5503] EXT4-fs (loop5): Block reservation details [ 72.899148][ T5503] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 72.948233][ T33] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5514] close(3) = 0 [pid 5514] mkdir("./bus", 0777 [pid 5501] exit_group(0 [pid 5517] <... futex resumed>) = ? [pid 5503] <... futex resumed>) = ? [pid 5501] <... exit_group resumed>) = ? [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5517] +++ exited with 0 +++ [pid 5503] +++ exited with 0 +++ [pid 5501] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5501, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5081] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, [pid 5080] lstat("./13/bus", [pid 5081] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./14/binderfs", [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./14/binderfs") = 0 [pid 5081] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5514] <... mkdir resumed>) = 0 [pid 5514] mount("/dev/loop2", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5515] <... mount resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./13/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5515] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5080] <... openat resumed>) = 4 [pid 5515] <... openat resumed>) = 3 [pid 5080] fstat(4, [pid 5515] chdir("./bus" [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5515] <... chdir resumed>) = 0 [pid 5080] getdents64(4, [pid 5515] ioctl(4, LOOP_CLR_FD [pid 5080] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5515] <... ioctl resumed>) = 0 [pid 5080] getdents64(4, [pid 5515] close(4 [pid 5080] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5515] <... close resumed>) = 0 [pid 5080] close(4 [pid 5515] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... close resumed>) = 0 [pid 5515] <... futex resumed>) = 1 [pid 5509] <... futex resumed>) = 0 [pid 5080] rmdir("./13/bus" [pid 5515] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5509] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... rmdir resumed>) = 0 [pid 5509] <... futex resumed>) = 0 [pid 5080] getdents64(3, [pid 5509] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [pid 5080] rmdir("./13") = 0 [pid 5080] mkdir("./14", 0777) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555adb5d0) = 5520 [ 72.964133][ T56] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 72.987374][ T56] EXT4-fs (loop3): This should not happen!! Data will be lost [ 72.987374][ T56] [ 72.993239][ T33] EXT4-fs (loop0): This should not happen!! Data will be lost [ 72.993239][ T33] ./strace-static-x86_64: Process 5520 attached [pid 5515] <... open resumed>) = 4 [pid 5520] set_robust_list(0x555555adb5e0, 24) = 0 [pid 5520] chdir("./14") = 0 [pid 5520] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5520] setpgid(0, 0) = 0 [pid 5520] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5520] write(3, "1000", 4 [pid 5515] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5520] <... write resumed>) = 4 [pid 5520] close(3) = 0 [pid 5520] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5520] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5520] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2dc9d3000 [pid 5520] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5520] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5522], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5522 [pid 5520] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5520] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5515] <... futex resumed>) = 1 [pid 5509] <... futex resumed>) = 0 [pid 5509] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5509] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5515] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 5076] <... umount2 resumed>) = 0 [pid 5076] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5515] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./13/bus", [pid 5515] <... futex resumed>) = 1 [pid 5509] <... futex resumed>) = 0 [pid 5509] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5509] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./13/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] fstat(4, [pid 5515] openat(AT_FDCWD, "./bus", O_RDONLY) = 5 [pid 5079] <... umount2 resumed>) = 0 [pid 5515] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5509] <... futex resumed>) = 0 [pid 5515] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5509] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5515] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5509] <... futex resumed>) = 0 [pid 5515] open("./bus", O_RDWR [pid 5509] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5515] <... open resumed>) = 6 [pid 5515] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5509] <... futex resumed>) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(4, 0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./13/bus") = 0 [pid 5076] getdents64(3, 0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./13" [pid 5515] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5509] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 73.025903][ T9] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 73.052398][ T9] EXT4-fs (loop5): This should not happen!! Data will be lost [ 73.052398][ T9] [pid 5509] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5515] <... mmap resumed>) = 0x20000000 [pid 5076] <... rmdir resumed>) = 0 [pid 5515] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5509] <... futex resumed>) = 0 [pid 5515] <... futex resumed>) = 1 [pid 5509] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5515] sendfile(4, 5, NULL, 2147483713 [pid 5509] <... futex resumed>) = 0 [pid 5509] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] mkdir("./14", 0777) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555adb5d0) = 5524 ./strace-static-x86_64: Process 5524 attached [pid 5524] set_robust_list(0x555555adb5e0, 24) = 0 [pid 5524] chdir("./14") = 0 [pid 5524] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5524] setpgid(0, 0) = 0 [pid 5524] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5079] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5524] <... openat resumed>) = 3 [pid 5081] <... umount2 resumed>) = 0 [pid 5524] write(3, "1000", 4) = 4 [pid 5524] close(3) = 0 [pid 5524] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5524] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5524] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2dc9d3000 [pid 5524] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5524] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5525], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5525 [pid 5524] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5524] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5525 attached [pid 5525] set_robust_list(0x7fa2dc9f39e0, 24) = 0 [pid 5525] memfd_create("syzkaller", 0) = 3 [pid 5525] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5525] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5079] lstat("./14/bus", [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] lstat("./14/bus", [pid 5514] <... mount resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5514] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5081] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5522 attached [pid 5514] <... openat resumed>) = 3 [pid 5079] openat(AT_FDCWD, "./14/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5522] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5514] chdir("./bus" [pid 5081] openat(AT_FDCWD, "./14/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... openat resumed>) = 4 [pid 5522] <... set_robust_list resumed>) = 0 [pid 5514] <... chdir resumed>) = 0 [pid 5509] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... openat resumed>) = 4 [pid 5079] fstat(4, [pid 5522] memfd_create("syzkaller", 0 [pid 5514] ioctl(4, LOOP_CLR_FD [pid 5509] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] fstat(4, [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5522] <... memfd_create resumed>) = 3 [pid 5514] <... ioctl resumed>) = 0 [pid 5509] <... futex resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(4, [pid 5522] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5514] close(4 [pid 5509] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] getdents64(4, [pid 5522] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5514] <... close resumed>) = 0 [pid 5079] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5522] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5514] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5509] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5081] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5079] getdents64(4, [pid 5514] <... futex resumed>) = 1 [pid 5509] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5508] <... futex resumed>) = 0 [pid 5081] getdents64(4, [pid 5079] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5525] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5514] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5509] <... mprotect resumed>) = 0 [pid 5508] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5079] close(4 [pid 5514] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5509] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5508] <... futex resumed>) = 0 [ 73.136498][ T5515] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5081] close(4 [pid 5079] <... close resumed>) = 0 [pid 5514] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5508] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... close resumed>) = 0 [pid 5079] rmdir("./14/bus" [pid 5509] <... clone resumed>, parent_tid=[5526], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5526 [pid 5081] rmdir("./14/bus" [pid 5079] <... rmdir resumed>) = 0 [pid 5514] <... open resumed>) = 4 [pid 5509] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... rmdir resumed>) = 0 [pid 5079] getdents64(3, ./strace-static-x86_64: Process 5526 attached [pid 5514] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5509] <... futex resumed>) = 0 [pid 5081] getdents64(3, [pid 5079] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5526] set_robust_list(0x7fa2d46d29e0, 24 [pid 5514] <... futex resumed>) = 1 [pid 5509] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5508] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5079] close(3 [pid 5526] <... set_robust_list resumed>) = 0 [pid 5525] <... write resumed>) = 1048576 [pid 5522] <... write resumed>) = 1048576 [pid 5514] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5508] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] close(3 [pid 5522] munmap(0x7fa2d45d3000, 1048576) = 0 [pid 5522] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5522] ioctl(4, LOOP_SET_FD, 3 [pid 5525] munmap(0x7fa2d45d3000, 1048576 [pid 5514] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5508] <... futex resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5522] <... ioctl resumed>) = 0 [pid 5522] close(3) = 0 [pid 5522] mkdir("./bus", 0777) = 0 [pid 5522] mount("/dev/loop4", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5525] <... munmap resumed>) = 0 [pid 5514] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5508] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] rmdir("./14" [pid 5079] rmdir("./14" [pid 5525] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5514] <... write resumed>) = 9 [pid 5081] <... rmdir resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5514] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5508] <... futex resumed>) = 0 [pid 5514] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5508] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] mkdir("./15", 0777 [pid 5079] mkdir("./15", 0777 [pid 5525] <... openat resumed>) = 4 [pid 5514] <... openat resumed>) = 5 [pid 5508] <... futex resumed>) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5079] <... mkdir resumed>) = 0 [pid 5525] ioctl(4, LOOP_SET_FD, 3 [pid 5514] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5508] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [ 73.194036][ T5515] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 73.221074][ T5515] EXT4-fs (loop1): This should not happen!! Data will be lost [ 73.221074][ T5515] [ 73.228415][ T5522] loop4: detected capacity change from 0 to 2048 [ 73.232434][ T5515] EXT4-fs (loop1): Total free blocks count 0 [pid 5079] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5514] <... futex resumed>) = 0 [pid 5508] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] <... openat resumed>) = 3 [pid 5079] <... openat resumed>) = 3 [pid 5514] open("./bus", O_RDWR [pid 5508] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5514] <... open resumed>) = 6 [pid 5508] <... futex resumed>) = 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5514] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5508] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] close(3 [pid 5079] close(3 [pid 5514] <... futex resumed>) = 0 [pid 5509] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5508] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] <... close resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5514] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5508] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5514] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5508] <... futex resumed>) = 0 [pid 5514] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5508] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5527 ./strace-static-x86_64: Process 5528 attached [pid 5525] <... ioctl resumed>) = 0 [pid 5514] <... mmap resumed>) = 0x20000000 [pid 5079] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5528 [pid 5514] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5508] <... futex resumed>) = 0 [pid 5514] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5508] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5514] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5508] <... futex resumed>) = 0 [pid 5514] sendfile(4, 5, NULL, 2147483713 [pid 5508] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5525] close(3./strace-static-x86_64: Process 5527 attached [pid 5528] set_robust_list(0x555555adb5e0, 24 [pid 5525] <... close resumed>) = 0 [pid 5528] <... set_robust_list resumed>) = 0 [pid 5527] set_robust_list(0x555555adb5e0, 24 [pid 5525] mkdir("./bus", 0777 [pid 5528] chdir("./15" [pid 5527] <... set_robust_list resumed>) = 0 [pid 5525] <... mkdir resumed>) = 0 [ 73.245693][ T5515] EXT4-fs (loop1): Free/Dirty block details [ 73.252443][ T5525] loop0: detected capacity change from 0 to 2048 [ 73.252572][ T5515] EXT4-fs (loop1): free_blocks=2415919104 [ 73.274384][ T5515] EXT4-fs (loop1): dirty_blocks=16 [pid 5528] <... chdir resumed>) = 0 [pid 5527] chdir("./15" [pid 5525] mount("/dev/loop0", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5528] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5527] <... chdir resumed>) = 0 [pid 5528] <... prctl resumed>) = 0 [pid 5528] setpgid(0, 0) = 0 [pid 5528] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5527] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5526] creat(0x200001c0, 0420 [pid 5522] <... mount resumed>) = 0 [pid 5515] <... sendfile resumed>) = 117 [pid 5528] write(3, "1000", 4 [pid 5526] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5522] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5528] <... write resumed>) = 4 [pid 5526] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5522] <... openat resumed>) = 3 [pid 5528] close(3 [pid 5526] <... futex resumed>) = 0 [pid 5522] chdir("./bus" [pid 5528] <... close resumed>) = 0 [pid 5526] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5522] <... chdir resumed>) = 0 [pid 5528] symlink("/dev/binderfs", "./binderfs" [pid 5522] ioctl(4, LOOP_CLR_FD [pid 5528] <... symlink resumed>) = 0 [pid 5522] <... ioctl resumed>) = 0 [pid 5528] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5522] close(4 [pid 5528] <... futex resumed>) = 0 [pid 5527] <... prctl resumed>) = 0 [pid 5522] <... close resumed>) = 0 [pid 5515] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5508] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5528] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5527] setpgid(0, 0 [pid 5522] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5515] <... futex resumed>) = 0 [pid 5509] exit_group(0 [pid 5508] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5528] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5527] <... setpgid resumed>) = 0 [pid 5526] <... futex resumed>) = ? [pid 5522] <... futex resumed>) = 1 [pid 5520] <... futex resumed>) = 0 [pid 5509] <... exit_group resumed>) = ? [pid 5508] <... futex resumed>) = 0 [pid 5528] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5527] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5526] +++ exited with 0 +++ [pid 5522] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5520] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5515] +++ exited with 0 +++ [pid 5509] +++ exited with 0 +++ [pid 5508] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5528] <... mprotect resumed>) = 0 [pid 5527] <... openat resumed>) = 3 [pid 5522] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5520] <... futex resumed>) = 0 [pid 5508] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5528] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5527] write(3, "1000", 4 [pid 5525] <... mount resumed>) = 0 [pid 5522] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5520] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5508] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5509, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5527] <... write resumed>) = 4 [pid 5525] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5522] <... open resumed>) = 4 [pid 5508] <... mprotect resumed>) = 0 [pid 5077] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5528] <... clone resumed>, parent_tid=[5533], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5533 [pid 5527] close(3 [pid 5525] <... openat resumed>) = 3 [pid 5522] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5508] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5528] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5527] <... close resumed>) = 0 [pid 5525] chdir("./bus" [pid 5522] <... futex resumed>) = 1 [pid 5520] <... futex resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5533 attached [pid 5528] <... futex resumed>) = 0 [pid 5527] symlink("/dev/binderfs", "./binderfs" [pid 5525] <... chdir resumed>) = 0 [pid 5522] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5520] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5508] <... clone resumed>, parent_tid=[5534], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5534 [pid 5077] <... openat resumed>) = 3 [pid 5533] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5528] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5527] <... symlink resumed>) = 0 [pid 5525] ioctl(4, LOOP_CLR_FD [pid 5522] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5520] <... futex resumed>) = 0 [pid 5508] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] fstat(3, ./strace-static-x86_64: Process 5534 attached [pid 5533] <... set_robust_list resumed>) = 0 [pid 5527] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5520] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5534] set_robust_list(0x7fa2d46d29e0, 24 [pid 5527] <... futex resumed>) = 0 [pid 5077] getdents64(3, [pid 5534] <... set_robust_list resumed>) = 0 [pid 5527] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5527] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5077] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5527] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5527] <... mprotect resumed>) = 0 [pid 5077] lstat("./13/binderfs", [ 73.296318][ T5514] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 73.301180][ T5515] EXT4-fs (loop1): Block reservation details [ 73.317920][ T5515] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 73.324784][ T5514] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5527] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] unlink("./13/binderfs" [pid 5527] <... clone resumed>, parent_tid=[5535], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5535 [pid 5525] <... ioctl resumed>) = 0 [pid 5522] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5508] <... futex resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5533] memfd_create("syzkaller", 0 [pid 5527] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5527] <... futex resumed>) = 0 [pid 5527] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5535 attached [pid 5535] set_robust_list(0x7fa2dc9f39e0, 24) = 0 [pid 5535] memfd_create("syzkaller", 0 [pid 5533] <... memfd_create resumed>) = 3 [pid 5525] close(4 [pid 5522] <... write resumed>) = 9 [pid 5508] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5535] <... memfd_create resumed>) = 3 [pid 5522] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5535] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5522] <... futex resumed>) = 1 [pid 5520] <... futex resumed>) = 0 [pid 5535] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5522] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5520] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5533] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5525] <... close resumed>) = 0 [pid 5522] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5520] <... futex resumed>) = 0 [pid 5522] openat(AT_FDCWD, "./bus", O_RDONLY [ 73.368161][ T5514] EXT4-fs (loop2): This should not happen!! Data will be lost [ 73.368161][ T5514] [ 73.379505][ T5514] EXT4-fs (loop2): Total free blocks count 0 [ 73.386347][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 73.387282][ T5514] EXT4-fs (loop2): Free/Dirty block details [ 73.404599][ T5514] EXT4-fs (loop2): free_blocks=2415919104 [ 73.410442][ T5514] EXT4-fs (loop2): dirty_blocks=16 [pid 5520] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5534] creat(0x200001c0, 0420 [pid 5522] <... openat resumed>) = 5 [pid 5534] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5525] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5522] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5533] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5534] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5522] <... futex resumed>) = 1 [pid 5520] <... futex resumed>) = 0 [pid 5534] <... futex resumed>) = 1 [pid 5522] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5520] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5508] <... futex resumed>) = 0 [pid 5534] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5522] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5520] <... futex resumed>) = 0 [pid 5525] <... futex resumed>) = 1 [pid 5524] <... futex resumed>) = 0 [pid 5522] open("./bus", O_RDWR [pid 5520] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5535] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5533] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5525] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5524] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5522] <... open resumed>) = 6 [pid 5514] <... sendfile resumed>) = 117 [pid 5535] <... write resumed>) = 1048576 [pid 5525] <... open resumed>) = 4 [pid 5524] <... futex resumed>) = 0 [pid 5522] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5514] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5508] exit_group(0 [pid 5535] munmap(0x7fa2d45d3000, 1048576 [pid 5534] <... futex resumed>) = ? [pid 5525] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5524] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5522] <... futex resumed>) = 1 [pid 5520] <... futex resumed>) = 0 [pid 5514] <... futex resumed>) = ? [pid 5508] <... exit_group resumed>) = ? [pid 5535] <... munmap resumed>) = 0 [pid 5534] +++ exited with 0 +++ [pid 5533] <... write resumed>) = 1048576 [pid 5525] <... futex resumed>) = 0 [pid 5524] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5522] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5520] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5514] +++ exited with 0 +++ [pid 5508] +++ exited with 0 +++ [pid 5077] <... umount2 resumed>) = 0 [pid 5535] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5533] munmap(0x7fa2d45d3000, 1048576 [pid 5525] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5524] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5522] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5520] <... futex resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5508, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5077] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5535] <... openat resumed>) = 4 [pid 5533] <... munmap resumed>) = 0 [pid 5525] <... write resumed>) = 9 [pid 5524] <... futex resumed>) = 0 [pid 5522] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5520] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5535] ioctl(4, LOOP_SET_FD, 3 [pid 5533] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5525] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5524] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5522] <... mmap resumed>) = 0x20000000 [pid 5078] <... restart_syscall resumed>) = 0 [pid 5077] lstat("./13/bus", [pid 5525] <... futex resumed>) = 0 [pid 5524] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5522] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5525] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5524] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5522] <... futex resumed>) = 1 [pid 5520] <... futex resumed>) = 0 [pid 5077] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5525] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5524] <... futex resumed>) = 0 [pid 5522] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5520] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5533] <... openat resumed>) = 4 [pid 5525] openat(AT_FDCWD, "./bus", O_RDONLY [ 73.416082][ T5514] EXT4-fs (loop2): Block reservation details [ 73.426491][ T5514] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 73.438069][ T9] EXT4-fs (loop1): This should not happen!! Data will be lost [ 73.438069][ T9] [pid 5524] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5522] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5520] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./13/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5535] <... ioctl resumed>) = 0 [pid 5533] ioctl(4, LOOP_SET_FD, 3 [pid 5525] <... openat resumed>) = 5 [pid 5522] sendfile(4, 5, NULL, 2147483713 [pid 5520] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... openat resumed>) = 4 [pid 5535] close(3 [pid 5533] <... ioctl resumed>) = 0 [pid 5525] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5535] <... close resumed>) = 0 [pid 5535] mkdir("./bus", 0777 [pid 5533] close(3 [pid 5535] <... mkdir resumed>) = 0 [pid 5533] <... close resumed>) = 0 [pid 5535] mount("/dev/loop5", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5533] mkdir("./bus", 0777) = 0 [pid 5533] mount("/dev/loop3", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5078] <... openat resumed>) = 3 [pid 5078] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(3, 0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5078] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5525] <... futex resumed>) = 1 [pid 5524] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] fstat(4, [pid 5525] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5524] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] lstat("./13/binderfs", [pid 5525] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5524] <... futex resumed>) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5525] open("./bus", O_RDWR [pid 5524] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] unlink("./13/binderfs" [pid 5077] getdents64(4, [pid 5525] <... open resumed>) = 6 [pid 5078] <... unlink resumed>) = 0 [ 73.499600][ T5535] loop5: detected capacity change from 0 to 2048 [ 73.509276][ T5533] loop3: detected capacity change from 0 to 2048 [ 73.515207][ T5522] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 73.535491][ T5522] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5078] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5535] <... mount resumed>) = 0 [pid 5525] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5535] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5525] <... futex resumed>) = 1 [pid 5524] <... futex resumed>) = 0 [pid 5077] getdents64(4, [pid 5535] <... openat resumed>) = 3 [pid 5525] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5524] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5535] chdir("./bus" [pid 5525] <... mmap resumed>) = 0x20000000 [pid 5524] <... futex resumed>) = 0 [pid 5077] close(4 [pid 5535] <... chdir resumed>) = 0 [pid 5525] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5524] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... close resumed>) = 0 [pid 5535] ioctl(4, LOOP_CLR_FD [pid 5525] <... futex resumed>) = 0 [pid 5524] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] rmdir("./13/bus" [pid 5535] <... ioctl resumed>) = 0 [pid 5525] sendfile(4, 5, NULL, 2147483713 [pid 5524] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... rmdir resumed>) = 0 [pid 5535] close(4 [pid 5524] <... futex resumed>) = 0 [pid 5077] getdents64(3, [pid 5535] <... close resumed>) = 0 [pid 5524] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5535] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] close(3 [pid 5535] <... futex resumed>) = 1 [pid 5527] <... futex resumed>) = 0 [pid 5077] <... close resumed>) = 0 [ 73.535995][ T27] kauditd_printk_skb: 81 callbacks suppressed [ 73.536009][ T27] audit: type=1804 audit(1673802242.402:264): pid=5525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor211" name="/root/syzkaller.DZuQa1/14/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 73.567857][ T5525] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 73.591195][ T5522] EXT4-fs (loop4): This should not happen!! Data will be lost [pid 5535] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5527] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] rmdir("./13" [pid 5535] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5533] <... mount resumed>) = 0 [pid 5527] <... futex resumed>) = 0 [pid 5524] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5520] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] <... rmdir resumed>) = 0 [pid 5535] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [ 73.591195][ T5522] [ 73.601609][ T5522] EXT4-fs (loop4): Total free blocks count 0 [ 73.601832][ T56] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 73.623509][ T5522] EXT4-fs (loop4): Free/Dirty block details [ 73.623914][ T56] EXT4-fs (loop2): This should not happen!! Data will be lost [ 73.623914][ T56] [pid 5527] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5524] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] mkdir("./14", 0777 [pid 5535] <... open resumed>) = 4 [pid 5533] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5527] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5524] <... futex resumed>) = 0 [pid 5520] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... mkdir resumed>) = 0 [pid 5524] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5524] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5077] <... openat resumed>) = 3 [pid 5524] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5524] <... mprotect resumed>) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5535] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5527] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5524] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] close(3 [pid 5535] <... futex resumed>) = 0 [pid 5533] <... openat resumed>) = 3 [pid 5527] <... futex resumed>) = 0 [pid 5520] <... futex resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5535] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5527] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5524] <... clone resumed>, parent_tid=[5540], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5540 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5527] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5524] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5527] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5524] <... futex resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5541 [pid 5527] <... mprotect resumed>) = 0 [pid 5524] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 73.629842][ T27] audit: type=1804 audit(1673802242.412:265): pid=5525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor211" name="/root/syzkaller.DZuQa1/14/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 73.662731][ T5525] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 73.663143][ T5522] EXT4-fs (loop4): free_blocks=2415919104 [ 73.675456][ T5525] EXT4-fs (loop0): This should not happen!! Data will be lost [ 73.675456][ T5525] [ 73.691627][ T5525] EXT4-fs (loop0): Total free blocks count 0 [pid 5527] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5542 attached ./strace-static-x86_64: Process 5541 attached ./strace-static-x86_64: Process 5540 attached [pid 5533] chdir("./bus" [pid 5520] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5527] <... clone resumed>, parent_tid=[5542], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5542 [pid 5527] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5540] set_robust_list(0x7fa2d46d29e0, 24 [pid 5527] <... futex resumed>) = 0 [pid 5540] <... set_robust_list resumed>) = 0 [pid 5527] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5542] set_robust_list(0x7fa2d46d29e0, 24 [pid 5541] set_robust_list(0x555555adb5e0, 24 [pid 5533] <... chdir resumed>) = 0 [pid 5542] <... set_robust_list resumed>) = 0 [pid 5541] <... set_robust_list resumed>) = 0 [pid 5520] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5533] ioctl(4, LOOP_CLR_FD [pid 5542] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5541] chdir("./14" [pid 5542] <... write resumed>) = 9 [pid 5541] <... chdir resumed>) = 0 [pid 5533] <... ioctl resumed>) = 0 [pid 5520] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5542] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5541] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5542] <... futex resumed>) = 1 [pid 5541] <... prctl resumed>) = 0 [pid 5527] <... futex resumed>) = 0 [pid 5542] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5541] setpgid(0, 0 [pid 5527] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5541] <... setpgid resumed>) = 0 [pid 5535] <... futex resumed>) = 0 [pid 5527] <... futex resumed>) = 1 [pid 5541] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5535] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5527] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5541] <... openat resumed>) = 3 [pid 5535] <... openat resumed>) = 5 [pid 5541] write(3, "1000", 4 [pid 5535] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5541] <... write resumed>) = 4 [pid 5535] <... futex resumed>) = 1 [pid 5533] close(4 [pid 5527] <... futex resumed>) = 0 [pid 5520] <... mprotect resumed>) = 0 [pid 5541] close(3 [pid 5540] creat(0x200001c0, 0420 [ 73.699631][ T5525] EXT4-fs (loop0): Free/Dirty block details [ 73.705904][ T5525] EXT4-fs (loop0): free_blocks=2415919104 [ 73.711678][ T5525] EXT4-fs (loop0): dirty_blocks=16 [ 73.719702][ T5525] EXT4-fs (loop0): Block reservation details [ 73.728824][ T5525] EXT4-fs (loop0): i_reserved_data_blocks=1 [pid 5535] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5533] <... close resumed>) = 0 [pid 5527] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5525] <... sendfile resumed>) = 117 [pid 5520] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5541] <... close resumed>) = 0 [pid 5540] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5535] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5527] <... futex resumed>) = 0 [pid 5524] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5078] <... umount2 resumed>) = 0 [pid 5541] symlink("/dev/binderfs", "./binderfs" [pid 5540] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5535] open("./bus", O_RDWR [pid 5527] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5533] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5525] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5541] <... symlink resumed>) = 0 [pid 5540] <... futex resumed>) = 0 [pid 5535] <... open resumed>) = 6 [pid 5541] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5540] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5535] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5524] exit_group(0 [pid 5541] <... futex resumed>) = 0 [pid 5540] <... futex resumed>) = ? [pid 5535] <... futex resumed>) = 1 [pid 5527] <... futex resumed>) = 0 [pid 5524] <... exit_group resumed>) = ? [pid 5541] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5540] +++ exited with 0 +++ [pid 5535] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5527] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5543 attached [pid 5541] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5535] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5527] <... futex resumed>) = 0 [pid 5543] set_robust_list(0x7fa2d46d29e0, 24 [pid 5541] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5535] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5527] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5543] <... set_robust_list resumed>) = 0 [pid 5541] <... mprotect resumed>) = 0 [pid 5535] <... mmap resumed>) = 0x20000000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5543] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5541] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5535] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5527] <... futex resumed>) = 0 [pid 5078] lstat("./13/bus", [pid 5541] <... clone resumed>, parent_tid=[5544], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5544 [pid 5535] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5527] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5541] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5535] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5533] <... futex resumed>) = 1 [pid 5528] <... futex resumed>) = 0 [pid 5527] <... futex resumed>) = 0 [pid 5078] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5544 attached [pid 5541] <... futex resumed>) = 0 [ 73.735760][ T27] audit: type=1804 audit(1673802242.582:266): pid=5535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor211" name="/root/syzkaller.z790Bp/15/bus/bus" dev="loop5" ino=18 res=1 errno=0 [ 73.748222][ T5522] EXT4-fs (loop4): dirty_blocks=16 [ 73.768610][ T5522] EXT4-fs (loop4): Block reservation details [ 73.775145][ T27] audit: type=1804 audit(1673802242.632:267): pid=5535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor211" name="/root/syzkaller.z790Bp/15/bus/bus" dev="loop5" ino=18 res=1 errno=0 [pid 5535] sendfile(4, 5, NULL, 2147483713 [pid 5533] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5528] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5527] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5525] <... futex resumed>) = ? [pid 5520] <... clone resumed>, parent_tid=[5543], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5543 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5544] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5541] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5528] <... futex resumed>) = 0 [pid 5522] <... sendfile resumed>) = 117 [pid 5078] openat(AT_FDCWD, "./13/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5544] <... set_robust_list resumed>) = 0 [pid 5528] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... openat resumed>) = 4 [pid 5544] memfd_create("syzkaller", 0 [pid 5078] fstat(4, [pid 5544] <... memfd_create resumed>) = 3 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 73.799910][ T5522] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 73.805921][ T5535] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 73.806484][ T27] audit: type=1804 audit(1673802242.642:268): pid=5535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor211" name="/root/syzkaller.z790Bp/15/bus/bus" dev="loop5" ino=18 res=1 errno=0 [pid 5544] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5525] +++ exited with 0 +++ [pid 5524] +++ exited with 0 +++ [pid 5522] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5520] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] getdents64(4, [pid 5544] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5543] <... futex resumed>) = 0 [pid 5533] <... open resumed>) = 4 [pid 5522] <... futex resumed>) = 0 [pid 5520] <... futex resumed>) = 1 [pid 5078] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5544] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5543] creat(0x200001c0, 0420 [pid 5078] getdents64(4, [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5524, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5543] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5078] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5543] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] close(4 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5543] <... futex resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5543] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5078] rmdir("./13/bus") = 0 [pid 5076] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] getdents64(3, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5533] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5522] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5520] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5076] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5544] <... write resumed>) = 1048576 [pid 5533] <... futex resumed>) = 1 [pid 5528] <... futex resumed>) = 0 [pid 5520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] close(3 [pid 5076] <... openat resumed>) = 3 [pid 5528] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... close resumed>) = 0 [pid 5076] fstat(3, [pid 5528] <... futex resumed>) = 0 [pid 5078] rmdir("./13" [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5533] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5528] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5520] exit_group(0 [pid 5078] <... rmdir resumed>) = 0 [pid 5076] getdents64(3, [pid 5078] mkdir("./14", 0777 [pid 5076] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5543] <... futex resumed>) = ? [pid 5522] <... futex resumed>) = ? [pid 5520] <... exit_group resumed>) = ? [pid 5078] <... mkdir resumed>) = 0 [pid 5076] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5543] +++ exited with 0 +++ [pid 5522] +++ exited with 0 +++ [pid 5078] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... openat resumed>) = 3 [pid 5076] lstat("./14/binderfs", [pid 5520] +++ exited with 0 +++ [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5533] <... write resumed>) = 9 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] unlink("./14/binderfs" [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5520, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5078] close(3 [pid 5533] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... unlink resumed>) = 0 [pid 5527] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... close resumed>) = 0 [pid 5076] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5527] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5542] <... futex resumed>) = 0 [pid 5527] <... futex resumed>) = 1 [pid 5080] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5527] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... openat resumed>) = 3 [pid 5078] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5545 [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, [pid 5544] munmap(0x7fa2d45d3000, 1048576 [pid 5080] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 ./strace-static-x86_64: Process 5545 attached [pid 5533] <... futex resumed>) = 1 [pid 5528] <... futex resumed>) = 0 [pid 5080] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5544] <... munmap resumed>) = 0 [pid 5533] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5528] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5544] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5080] lstat("./14/binderfs", [pid 5544] <... openat resumed>) = 4 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5544] ioctl(4, LOOP_SET_FD, 3 [ 73.849295][ T5535] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 73.864012][ T5535] EXT4-fs (loop5): This should not happen!! Data will be lost [ 73.864012][ T5535] [ 73.881973][ T5535] EXT4-fs (loop5): Total free blocks count 0 [ 73.888806][ T5535] EXT4-fs (loop5): Free/Dirty block details [ 73.895174][ T5535] EXT4-fs (loop5): free_blocks=2415919104 [pid 5080] unlink("./14/binderfs" [pid 5545] set_robust_list(0x555555adb5e0, 24 [pid 5533] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5528] <... futex resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [ 73.902865][ T5535] EXT4-fs (loop5): dirty_blocks=16 [ 73.904803][ T5118] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 73.907351][ T5544] loop1: detected capacity change from 0 to 2048 [ 73.909963][ T5118] EXT4-fs (loop0): This should not happen!! Data will be lost [ 73.909963][ T5118] [ 73.940685][ T56] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5080] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5545] <... set_robust_list resumed>) = 0 [pid 5533] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5528] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5544] <... ioctl resumed>) = 0 [pid 5544] close(3) = 0 [pid 5544] mkdir("./bus", 0777) = 0 [pid 5544] mount("/dev/loop1", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5527] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5533] <... openat resumed>) = 5 [pid 5533] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5528] <... futex resumed>) = 0 [pid 5533] open("./bus", O_RDWR [pid 5528] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5545] chdir("./14" [pid 5533] <... open resumed>) = 6 [pid 5528] <... futex resumed>) = 0 [pid 5545] <... chdir resumed>) = 0 [pid 5545] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5545] setpgid(0, 0) = 0 [pid 5545] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5545] write(3, "1000", 4) = 4 [pid 5545] close(3) = 0 [pid 5545] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5545] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5545] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2dc9d3000 [pid 5545] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5545] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5547], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5547 [pid 5545] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5545] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5533] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 73.953682][ T27] audit: type=1804 audit(1673802242.822:269): pid=5533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor211" name="/root/syzkaller.jToCGh/15/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 73.956325][ T5535] EXT4-fs (loop5): Block reservation details [pid 5528] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5547 attached [pid 5533] <... futex resumed>) = 0 [pid 5528] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5076] <... umount2 resumed>) = 0 [pid 5547] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5533] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5547] <... set_robust_list resumed>) = 0 [pid 5542] creat(0x200001c0, 0420 [pid 5535] <... sendfile resumed>) = 117 [pid 5533] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5528] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5547] memfd_create("syzkaller", 0 [pid 5535] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5533] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5528] <... futex resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5547] <... memfd_create resumed>) = 3 [pid 5544] <... mount resumed>) = 0 [pid 5542] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5535] <... futex resumed>) = 0 [pid 5533] <... mmap resumed>) = 0x20000000 [pid 5528] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] lstat("./14/bus", [pid 5547] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5544] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5542] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5535] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5533] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5528] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 73.985020][ T27] audit: type=1804 audit(1673802242.852:270): pid=5533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor211" name="/root/syzkaller.jToCGh/15/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 74.000183][ T5535] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 74.019792][ T56] EXT4-fs (loop4): This should not happen!! Data will be lost [ 74.019792][ T56] [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5547] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5544] <... openat resumed>) = 3 [pid 5542] <... futex resumed>) = 0 [pid 5533] <... futex resumed>) = 0 [pid 5528] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5547] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5544] chdir("./bus" [pid 5542] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5533] sendfile(4, 5, NULL, 2147483713 [ 74.036251][ T27] audit: type=1804 audit(1673802242.902:271): pid=5533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor211" name="/root/syzkaller.jToCGh/15/bus/bus" dev="loop3" ino=18 res=1 errno=0 [pid 5528] <... futex resumed>) = 0 [pid 5527] exit_group(0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5544] <... chdir resumed>) = 0 [pid 5542] <... futex resumed>) = ? [pid 5527] <... exit_group resumed>) = ? [pid 5080] <... umount2 resumed>) = 0 [pid 5544] ioctl(4, LOOP_CLR_FD [pid 5542] +++ exited with 0 +++ [pid 5080] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5544] <... ioctl resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5544] close(4 [pid 5080] lstat("./14/bus", [pid 5547] <... write resumed>) = 1048576 [pid 5544] <... close resumed>) = 0 [pid 5535] <... futex resumed>) = ? [pid 5528] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] openat(AT_FDCWD, "./14/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5544] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5544] <... futex resumed>) = 1 [pid 5541] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5544] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5541] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] openat(AT_FDCWD, "./14/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5541] <... futex resumed>) = 0 [pid 5080] <... openat resumed>) = 4 [pid 5544] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5541] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] fstat(4, [pid 5547] munmap(0x7fa2d45d3000, 1048576 [pid 5535] +++ exited with 0 +++ [pid 5527] +++ exited with 0 +++ [pid 5544] <... open resumed>) = 4 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5080] getdents64(4, [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5527, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5080] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5081] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] getdents64(4, [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5081] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] close(4 [pid 5081] <... openat resumed>) = 3 [pid 5080] <... close resumed>) = 0 [pid 5081] fstat(3, [pid 5080] rmdir("./14/bus" [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5081] getdents64(3, [pid 5080] getdents64(3, [pid 5081] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5080] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5547] <... munmap resumed>) = 0 [pid 5544] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] close(3 [pid 5076] fstat(4, [pid 5547] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5544] <... futex resumed>) = 1 [pid 5541] <... futex resumed>) = 0 [ 74.078568][ T5533] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 74.104140][ T5533] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 74.120188][ T5533] EXT4-fs (loop3): This should not happen!! Data will be lost [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... close resumed>) = 0 [pid 5547] <... openat resumed>) = 4 [pid 5544] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5541] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] lstat("./15/binderfs", [pid 5080] rmdir("./14" [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5547] ioctl(4, LOOP_SET_FD, 3 [pid 5544] <... write resumed>) = 9 [pid 5541] <... futex resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5541] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] unlink("./15/binderfs" [pid 5080] mkdir("./15", 0777 [pid 5081] <... unlink resumed>) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 5081] umount2("./15/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5076] getdents64(4, [pid 5080] close(3 [pid 5544] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... close resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555adb5d0) = 5549 ./strace-static-x86_64: Process 5549 attached [pid 5549] set_robust_list(0x555555adb5e0, 24) = 0 [pid 5549] chdir("./15") = 0 [pid 5549] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5549] setpgid(0, 0) = 0 [pid 5549] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5547] <... ioctl resumed>) = 0 [pid 5544] <... futex resumed>) = 1 [pid 5541] <... futex resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5549] <... openat resumed>) = 3 [pid 5541] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5549] write(3, "1000", 4 [pid 5547] close(3 [pid 5544] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5541] <... futex resumed>) = 0 [pid 5528] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] getdents64(4, [pid 5549] <... write resumed>) = 4 [ 74.120188][ T5533] [ 74.132411][ T5533] EXT4-fs (loop3): Total free blocks count 0 [ 74.140665][ T5533] EXT4-fs (loop3): Free/Dirty block details [ 74.147040][ T5547] loop2: detected capacity change from 0 to 2048 [ 74.153816][ T9] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 74.167637][ T5533] EXT4-fs (loop3): free_blocks=2415919104 [ 74.174122][ T5533] EXT4-fs (loop3): dirty_blocks=16 [pid 5541] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5549] close(3) = 0 [pid 5547] <... close resumed>) = 0 [pid 5544] <... openat resumed>) = 5 [pid 5533] <... sendfile resumed>) = 117 [pid 5528] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5547] mkdir("./bus", 0777 [pid 5544] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5533] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5528] <... futex resumed>) = 0 [pid 5076] close(4 [pid 5547] <... mkdir resumed>) = 0 [pid 5544] <... futex resumed>) = 1 [pid 5533] <... futex resumed>) = 0 [pid 5528] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] <... close resumed>) = 0 [pid 5547] mount("/dev/loop2", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5544] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5533] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5528] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5076] rmdir("./14/bus" [pid 5528] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5076] <... rmdir resumed>) = 0 [pid 5528] <... mprotect resumed>) = 0 [pid 5076] getdents64(3, [pid 5528] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5076] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 5528] <... clone resumed>, parent_tid=[5550], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5550 [pid 5076] <... close resumed>) = 0 [pid 5528] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] rmdir("./14" [pid 5528] <... futex resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5528] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] mkdir("./15", 0777) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555adb5d0) = 5551 ./strace-static-x86_64: Process 5551 attached [pid 5551] set_robust_list(0x555555adb5e0, 24) = 0 [pid 5551] chdir("./15") = 0 [pid 5551] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5551] setpgid(0, 0) = 0 [pid 5551] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5551] write(3, "1000", 4) = 4 [pid 5551] close(3) = 0 [pid 5551] symlink("/dev/binderfs", "./binderfs" [pid 5541] <... futex resumed>) = 0 [pid 5541] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5544] <... futex resumed>) = 0 [pid 5541] <... futex resumed>) = 1 [pid 5551] <... symlink resumed>) = 0 [pid 5549] symlink("/dev/binderfs", "./binderfs" [pid 5544] open("./bus", O_RDWR [pid 5541] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5550 attached [pid 5551] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5549] <... symlink resumed>) = 0 [pid 5544] <... open resumed>) = 6 [pid 5551] <... futex resumed>) = 0 [pid 5550] set_robust_list(0x7fa2d46d29e0, 24 [pid 5549] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5544] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5551] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5550] <... set_robust_list resumed>) = 0 [pid 5549] <... futex resumed>) = 0 [pid 5544] <... futex resumed>) = 1 [pid 5541] <... futex resumed>) = 0 [pid 5551] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5550] creat(0x200001c0, 0420 [pid 5549] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5544] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5541] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5549] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5550] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5541] <... futex resumed>) = 0 [pid 5551] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5550] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5549] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5544] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5541] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5544] <... mmap resumed>) = 0x20000000 [pid 5551] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5550] <... futex resumed>) = 1 [pid 5549] <... mprotect resumed>) = 0 [pid 5544] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5528] <... futex resumed>) = 0 [pid 5550] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5549] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5544] <... futex resumed>) = 1 [pid 5541] <... futex resumed>) = 0 [pid 5528] exit_group(0 [pid 5551] <... clone resumed>, parent_tid=[5554], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5554 [pid 5550] <... futex resumed>) = ? [pid 5544] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5541] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5533] <... futex resumed>) = ? [pid 5528] <... exit_group resumed>) = ? [pid 5551] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5550] +++ exited with 0 +++ [pid 5549] <... clone resumed>, parent_tid=[5555], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5555 [pid 5547] <... mount resumed>) = 0 [pid 5544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5541] <... futex resumed>) = 0 [pid 5533] +++ exited with 0 +++ [pid 5528] +++ exited with 0 +++ ./strace-static-x86_64: Process 5555 attached [pid 5551] <... futex resumed>) = 0 [pid 5549] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5547] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5544] sendfile(4, 5, NULL, 2147483713 [pid 5541] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5554 attached [pid 5555] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5551] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5549] <... futex resumed>) = 0 [pid 5547] <... openat resumed>) = 3 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5528, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5555] <... set_robust_list resumed>) = 0 [pid 5549] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5547] chdir("./bus" [pid 5079] restart_syscall(<... resuming interrupted clone ...> [pid 5555] memfd_create("syzkaller", 0 [pid 5547] <... chdir resumed>) = 0 [pid 5079] <... restart_syscall resumed>) = 0 [pid 5555] <... memfd_create resumed>) = 3 [pid 5547] ioctl(4, LOOP_CLR_FD [pid 5555] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5547] <... ioctl resumed>) = 0 [ 74.179335][ T5533] EXT4-fs (loop3): Block reservation details [ 74.186014][ T5533] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 74.190135][ T9] EXT4-fs (loop5): This should not happen!! Data will be lost [ 74.190135][ T9] [ 74.201868][ T27] audit: type=1804 audit(1673802243.052:272): pid=5544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor211" name="/root/syzkaller.GJ37E4/14/bus/bus" dev="loop1" ino=18 res=1 errno=0 [pid 5555] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5547] close(4 [pid 5079] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5554] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5547] <... close resumed>) = 0 [pid 5081] umount2("./15/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5547] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5547] <... futex resumed>) = 1 [pid 5079] <... openat resumed>) = 3 [pid 5547] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5079] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(3, [pid 5555] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5079] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5079] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] unlink("./15/binderfs") = 0 [pid 5079] umount2("./15/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5545] <... futex resumed>) = 0 [pid 5545] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5554] <... set_robust_list resumed>) = 0 [pid 5541] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5541] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5541] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2d46b2000 [pid 5541] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5541] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5556], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5556 [pid 5541] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5541] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5547] <... futex resumed>) = 0 [pid 5545] <... futex resumed>) = 1 [pid 5554] memfd_create("syzkaller", 0 [pid 5547] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5545] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5547] <... open resumed>) = 4 [ 74.266470][ T5544] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 74.282119][ T27] audit: type=1804 audit(1673802243.092:273): pid=5544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor211" name="/root/syzkaller.GJ37E4/14/bus/bus" dev="loop1" ino=18 res=1 errno=0 [pid 5547] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5545] <... futex resumed>) = 0 [pid 5554] <... memfd_create resumed>) = 3 [pid 5547] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5545] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] lstat("./15/bus", [pid 5547] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5555] <... write resumed>) = 1048576 [pid 5547] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5545] <... futex resumed>) = 0 [pid 5555] munmap(0x7fa2d45d3000, 1048576 [pid 5547] <... write resumed>) = 9 [pid 5545] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5554] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5547] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5545] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5555] <... munmap resumed>) = 0 [pid 5554] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5547] <... futex resumed>) = 0 [pid 5545] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./15/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5555] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5547] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5545] <... futex resumed>) = 0 [pid 5555] <... openat resumed>) = 4 [pid 5547] <... openat resumed>) = 5 [pid 5545] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5555] ioctl(4, LOOP_SET_FD, 3 [pid 5547] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5545] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5547] <... futex resumed>) = 0 [pid 5545] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] openat(AT_FDCWD, "./15/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5556 attached [pid 5547] open("./bus", O_RDWR [pid 5545] <... futex resumed>) = 0 [pid 5081] <... openat resumed>) = 4 [ 74.309652][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5556] set_robust_list(0x7fa2d46d29e0, 24 [pid 5547] <... open resumed>) = 6 [pid 5545] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] fstat(4, [pid 5556] <... set_robust_list resumed>) = 0 [pid 5554] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5547] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5545] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5547] <... futex resumed>) = 0 [pid 5545] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(4, [pid 5547] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5545] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5555] <... ioctl resumed>) = 0 [pid 5547] <... mmap resumed>) = 0x20000000 [pid 5545] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5547] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(4, [pid 5547] <... futex resumed>) = 0 [pid 5545] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5547] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5545] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] close(4 [pid 5547] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5545] <... futex resumed>) = 0 [pid 5555] close(3) = 0 [pid 5555] mkdir("./bus", 0777) = 0 [pid 5555] mount("/dev/loop4", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5547] sendfile(4, 5, NULL, 2147483713 [pid 5545] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5541] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... close resumed>) = 0 [pid 5081] rmdir("./15/bus") = 0 [pid 5081] getdents64(3, 0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5081] close(3 [pid 5554] <... write resumed>) = 1048576 [pid 5081] <... close resumed>) = 0 [ 74.340541][ T5555] loop4: detected capacity change from 0 to 2048 [ 74.358872][ T9] EXT4-fs (loop3): This should not happen!! Data will be lost [ 74.358872][ T9] [ 74.365969][ T5544] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5554] munmap(0x7fa2d45d3000, 1048576 [pid 5081] rmdir("./15") = 0 [pid 5081] mkdir("./16", 0777 [pid 5554] <... munmap resumed>) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5554] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5081] close(3 [pid 5554] <... openat resumed>) = 4 [pid 5081] <... close resumed>) = 0 [pid 5079] <... umount2 resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5554] ioctl(4, LOOP_SET_FD, 3 [pid 5079] umount2("./15/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5558 [pid 5545] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5545] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5545] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2d46b2000 [pid 5545] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5545] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5560], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5560 [pid 5545] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5545] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5554] <... ioctl resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 74.390316][ T5547] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 74.416925][ T5544] EXT4-fs (loop1): This should not happen!! Data will be lost [ 74.416925][ T5544] [ 74.428565][ T5544] EXT4-fs (loop1): Total free blocks count 0 ./strace-static-x86_64: Process 5560 attached ./strace-static-x86_64: Process 5558 attached [pid 5555] <... mount resumed>) = 0 [pid 5554] close(3 [pid 5079] lstat("./15/bus", [pid 5560] set_robust_list(0x7fa2d46d29e0, 24) = 0 [pid 5555] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5554] <... close resumed>) = 0 [pid 5558] set_robust_list(0x555555adb5e0, 24 [pid 5554] mkdir("./bus", 0777 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5555] <... openat resumed>) = 3 [pid 5558] <... set_robust_list resumed>) = 0 [pid 5555] chdir("./bus" [pid 5554] <... mkdir resumed>) = 0 [pid 5079] umount2("./15/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5558] chdir("./16" [pid 5555] <... chdir resumed>) = 0 [pid 5554] mount("/dev/loop0", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5558] <... chdir resumed>) = 0 [pid 5556] creat(0x200001c0, 0420 [pid 5555] ioctl(4, LOOP_CLR_FD [pid 5544] <... sendfile resumed>) = 117 [pid 5079] openat(AT_FDCWD, "./15/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5558] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5556] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5555] <... ioctl resumed>) = 0 [pid 5079] <... openat resumed>) = 4 [pid 5558] <... prctl resumed>) = 0 [pid 5556] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5555] close(4 [pid 5079] fstat(4, [pid 5558] setpgid(0, 0 [pid 5556] <... futex resumed>) = 0 [pid 5555] <... close resumed>) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5558] <... setpgid resumed>) = 0 [pid 5558] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5556] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5555] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] getdents64(4, [pid 5558] <... openat resumed>) = 3 [pid 5555] <... futex resumed>) = 1 [pid 5549] <... futex resumed>) = 0 [pid 5079] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5558] write(3, "1000", 4 [pid 5555] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5549] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5545] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 74.435328][ T5554] loop0: detected capacity change from 0 to 2048 [ 74.445870][ T5544] EXT4-fs (loop1): Free/Dirty block details [ 74.455549][ T5544] EXT4-fs (loop1): free_blocks=2415919104 [ 74.457975][ T5547] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 74.473590][ T5544] EXT4-fs (loop1): dirty_blocks=16 [ 74.473757][ T5544] EXT4-fs (loop1): Block reservation details [ 74.473775][ T5544] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 5079] getdents64(4, [pid 5558] <... write resumed>) = 4 [pid 5555] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5549] <... futex resumed>) = 0 [pid 5079] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5558] close(3 [pid 5555] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5549] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5544] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] close(4 [pid 5558] <... close resumed>) = 0 [pid 5555] <... open resumed>) = 4 [pid 5544] <... futex resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5558] symlink("/dev/binderfs", "./binderfs" [pid 5555] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5544] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5541] exit_group(0 [pid 5079] rmdir("./15/bus" [pid 5558] <... symlink resumed>) = 0 [pid 5556] <... futex resumed>) = ? [pid 5555] <... futex resumed>) = 1 [pid 5549] <... futex resumed>) = 0 [pid 5544] <... futex resumed>) = ? [pid 5541] <... exit_group resumed>) = ? [pid 5079] <... rmdir resumed>) = 0 [pid 5558] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5556] +++ exited with 0 +++ [pid 5555] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5549] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5544] +++ exited with 0 +++ [pid 5541] +++ exited with 0 +++ [pid 5079] getdents64(3, [pid 5558] <... futex resumed>) = 0 [pid 5555] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5549] <... futex resumed>) = 0 [pid 5079] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5560] creat(0x200001c0, 0420 [pid 5558] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5555] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5549] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5547] <... sendfile resumed>) = 117 [pid 5079] close(3 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5541, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5560] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5558] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5547] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5560] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5547] <... futex resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5560] <... futex resumed>) = 0 [pid 5547] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5545] exit_group(0 [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5558] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5555] <... write resumed>) = 9 [pid 5547] <... futex resumed>) = ? [pid 5545] <... exit_group resumed>) = ? [pid 5079] rmdir("./15" [pid 5077] <... restart_syscall resumed>) = 0 [pid 5560] +++ exited with 0 +++ [pid 5547] +++ exited with 0 +++ [pid 5558] <... mprotect resumed>) = 0 [pid 5555] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5554] <... mount resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5558] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5563 attached [pid 5554] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5545] +++ exited with 0 +++ [pid 5555] <... futex resumed>) = 1 [pid 5549] <... futex resumed>) = 0 [pid 5079] mkdir("./16", 0777 [pid 5558] <... clone resumed>, parent_tid=[5563], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5563 [pid 5555] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5549] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5558] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5554] <... openat resumed>) = 3 [pid 5077] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5558] <... futex resumed>) = 0 [pid 5555] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5554] chdir("./bus" [pid 5549] <... futex resumed>) = 0 [pid 5079] <... mkdir resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5545, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5563] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5563] <... set_robust_list resumed>) = 0 [pid 5558] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5555] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5554] <... chdir resumed>) = 0 [pid 5549] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5555] <... openat resumed>) = 5 [pid 5554] ioctl(4, LOOP_CLR_FD) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... openat resumed>) = 3 [pid 5554] close(4 [pid 5079] <... openat resumed>) = 3 [pid 5563] memfd_create("syzkaller", 0 [pid 5555] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5554] <... close resumed>) = 0 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5078] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] fstat(3, [pid 5563] <... memfd_create resumed>) = 3 [pid 5555] <... futex resumed>) = 1 [pid 5554] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5549] <... futex resumed>) = 0 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] <... openat resumed>) = 3 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5563] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5555] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5554] <... futex resumed>) = 1 [pid 5551] <... futex resumed>) = 0 [pid 5549] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] close(3 [pid 5078] fstat(3, [pid 5077] getdents64(3, [pid 5563] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5555] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5554] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5551] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5549] <... futex resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [ 74.491675][ T5547] EXT4-fs (loop2): This should not happen!! Data will be lost [ 74.491675][ T5547] [ 74.501671][ T5547] EXT4-fs (loop2): Total free blocks count 0 [ 74.507760][ T5547] EXT4-fs (loop2): Free/Dirty block details [ 74.513721][ T5547] EXT4-fs (loop2): free_blocks=2415919104 [ 74.519829][ T5547] EXT4-fs (loop2): dirty_blocks=16 [ 74.525094][ T5547] EXT4-fs (loop2): Block reservation details [ 74.531113][ T5547] EXT4-fs (loop2): i_reserved_data_blocks=1 [pid 5563] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5555] open("./bus", O_RDWR [pid 5554] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5551] <... futex resumed>) = 0 [pid 5549] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] getdents64(3, [pid 5077] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5555] <... open resumed>) = 6 [pid 5554] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5551] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5555] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5554] <... open resumed>) = 4 [pid 5078] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5555] <... futex resumed>) = 1 [pid 5554] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5549] <... futex resumed>) = 0 [pid 5079] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5564 [pid 5078] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] lstat("./14/binderfs", [pid 5555] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5554] <... futex resumed>) = 1 [pid 5551] <... futex resumed>) = 0 [pid 5549] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5555] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5554] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5551] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5549] <... futex resumed>) = 0 [pid 5078] lstat("./14/binderfs", [pid 5555] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5554] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5551] <... futex resumed>) = 0 [pid 5549] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] unlink("./14/binderfs" [pid 5555] <... mmap resumed>) = 0x20000000 [pid 5554] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5551] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5555] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5554] <... write resumed>) = 9 [pid 5078] unlink("./14/binderfs" [pid 5077] <... unlink resumed>) = 0 [pid 5555] <... futex resumed>) = 1 [pid 5554] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5549] <... futex resumed>) = 0 [pid 5554] <... futex resumed>) = 1 [pid 5551] <... futex resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5077] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5555] sendfile(4, 5, NULL, 2147483713 [pid 5554] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5551] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5549] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5554] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5551] <... futex resumed>) = 0 [pid 5563] <... write resumed>) = 1048576 [pid 5554] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5551] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5549] <... futex resumed>) = 0 [pid 5554] <... openat resumed>) = 5 [pid 5554] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5551] <... futex resumed>) = 0 [pid 5554] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5551] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5554] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5551] <... futex resumed>) = 0 [pid 5554] open("./bus", O_RDWR [pid 5551] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5554] <... open resumed>) = 6 [pid 5554] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5551] <... futex resumed>) = 0 [pid 5554] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5551] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5554] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5551] <... futex resumed>) = 0 [pid 5554] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5551] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5554] <... mmap resumed>) = 0x20000000 [pid 5554] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5551] <... futex resumed>) = 0 [pid 5554] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5551] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5554] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5551] <... futex resumed>) = 0 [pid 5554] sendfile(4, 5, NULL, 2147483713 [pid 5551] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5563] munmap(0x7fa2d45d3000, 1048576) = 0 [pid 5563] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 74.595206][ T5555] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 74.604472][ T5563] loop5: detected capacity change from 0 to 2048 [ 74.612423][ T5118] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 74.619422][ T5555] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5563] ioctl(4, LOOP_SET_FD, 3 [pid 5549] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5563] <... ioctl resumed>) = 0 [pid 5563] close(3) = 0 [pid 5563] mkdir("./bus", 0777) = 0 [pid 5563] mount("/dev/loop5", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5551] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 5564 attached [ 74.629707][ T56] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 74.640992][ T5555] EXT4-fs (loop4): This should not happen!! Data will be lost [ 74.640992][ T5555] [ 74.665761][ T5555] EXT4-fs (loop4): Total free blocks count 0 [ 74.670088][ T5554] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 74.671998][ T5555] EXT4-fs (loop4): Free/Dirty block details [pid 5564] set_robust_list(0x555555adb5e0, 24) = 0 [pid 5549] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5564] chdir("./16") = 0 [pid 5564] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5564] setpgid(0, 0) = 0 [pid 5564] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5564] write(3, "1000", 4) = 4 [pid 5564] close(3) = 0 [pid 5564] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5564] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5564] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2dc9d3000 [pid 5564] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5564] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5565], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5565 [pid 5564] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5564] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5551] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5551] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2d46b2000 [pid 5551] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5551] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5549] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5551] <... clone resumed>, parent_tid=[5566], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5566 [pid 5551] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5549] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5551] <... futex resumed>) = 0 [pid 5551] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5566 attached [pid 5566] set_robust_list(0x7fa2d46d29e0, 24) = 0 [pid 5549] <... mmap resumed>) = 0x7fa2d46b2000 ./strace-static-x86_64: Process 5565 attached [pid 5549] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5563] <... mount resumed>) = 0 [pid 5563] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5563] chdir("./bus") = 0 [pid 5563] ioctl(4, LOOP_CLR_FD) = 0 [pid 5563] close(4 [pid 5565] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5563] <... close resumed>) = 0 [pid 5549] <... mprotect resumed>) = 0 [pid 5563] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5558] <... futex resumed>) = 0 [pid 5563] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5558] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5565] <... set_robust_list resumed>) = 0 [pid 5558] <... futex resumed>) = 0 [pid 5558] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5549] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5563] <... open resumed>) = 4 [pid 5565] memfd_create("syzkaller", 0 [pid 5549] <... clone resumed>, parent_tid=[5569], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5569 [pid 5565] <... memfd_create resumed>) = 3 [pid 5563] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5549] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5563] <... futex resumed>) = 1 [pid 5558] <... futex resumed>) = 0 [pid 5563] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5558] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5563] <... write resumed>) = 9 [pid 5558] <... futex resumed>) = 0 [pid 5563] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5558] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5549] <... futex resumed>) = 0 [pid 5565] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5563] <... futex resumed>) = 0 [pid 5558] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5549] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5565] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5563] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5558] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5563] <... openat resumed>) = 5 [pid 5558] <... futex resumed>) = 0 [pid 5563] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5558] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5563] <... futex resumed>) = 0 [pid 5558] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5563] open("./bus", O_RDWR [pid 5558] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5563] <... open resumed>) = 6 [pid 5558] <... futex resumed>) = 0 [pid 5563] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5558] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5563] <... futex resumed>) = 0 [pid 5558] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5563] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5558] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5563] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5558] <... futex resumed>) = 0 [pid 5563] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5558] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5563] <... mmap resumed>) = 0x20000000 [pid 5563] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5558] <... futex resumed>) = 0 [pid 5563] sendfile(4, 5, NULL, 2147483713 [pid 5558] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5565] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5558] <... futex resumed>) = 0 [ 74.688686][ T5554] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 74.709229][ T5554] EXT4-fs (loop0): This should not happen!! Data will be lost [ 74.709229][ T5554] [ 74.718894][ T5118] EXT4-fs (loop1): This should not happen!! Data will be lost [ 74.718894][ T5118] [pid 5558] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5551] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 5569 attached [pid 5569] set_robust_list(0x7fa2d46d29e0, 24) = 0 [pid 5549] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5558] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 74.749499][ T5563] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 74.765068][ T5563] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 74.777368][ T5563] EXT4-fs (loop5): This should not happen!! Data will be lost [ 74.777368][ T5563] [ 74.787700][ T5563] EXT4-fs (loop5): Total free blocks count 0 [ 74.793933][ T5563] EXT4-fs (loop5): Free/Dirty block details [pid 5558] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5565] <... write resumed>) = 1048576 [pid 5558] <... futex resumed>) = 0 [pid 5565] munmap(0x7fa2d45d3000, 1048576) = 0 [pid 5565] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5563] <... sendfile resumed>) = 117 [pid 5558] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5565] <... openat resumed>) = 4 [pid 5563] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5558] <... mmap resumed>) = 0x7fa2d46b2000 [ 74.796096][ T5555] EXT4-fs (loop4): free_blocks=2415919104 [ 74.799911][ T5563] EXT4-fs (loop5): free_blocks=2415919104 [ 74.808421][ T56] EXT4-fs (loop2): This should not happen!! Data will be lost [ 74.808421][ T56] [ 74.811510][ T5563] EXT4-fs (loop5): dirty_blocks=16 [ 74.811530][ T5563] EXT4-fs (loop5): Block reservation details [ 74.832595][ T5563] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 74.839212][ T5554] EXT4-fs (loop0): Total free blocks count 0 [pid 5565] ioctl(4, LOOP_SET_FD, 3 [pid 5563] <... futex resumed>) = 0 [pid 5558] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5077] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5563] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5558] <... mprotect resumed>) = 0 [pid 5565] <... ioctl resumed>) = 0 [pid 5077] lstat("./14/bus", [pid 5565] close(3 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5565] <... close resumed>) = 0 [pid 5558] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5565] mkdir("./bus", 0777 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5570 attached [pid 5566] creat(0x200001c0, 0420 [pid 5565] <... mkdir resumed>) = 0 [pid 5554] <... sendfile resumed>) = 117 [pid 5077] openat(AT_FDCWD, "./14/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5566] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5565] mount("/dev/loop3", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5558] <... clone resumed>, parent_tid=[5570], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5570 [pid 5554] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 74.845298][ T5554] EXT4-fs (loop0): Free/Dirty block details [ 74.857487][ T5554] EXT4-fs (loop0): free_blocks=2415919104 [ 74.861043][ T5565] loop3: detected capacity change from 0 to 2048 [ 74.863468][ T5554] EXT4-fs (loop0): dirty_blocks=16 [ 74.873597][ T5555] EXT4-fs (loop4): dirty_blocks=16 [ 74.875251][ T5554] EXT4-fs (loop0): Block reservation details [ 74.884891][ T5555] EXT4-fs (loop4): Block reservation details [ 74.886169][ T5554] EXT4-fs (loop0): i_reserved_data_blocks=1 [pid 5570] set_robust_list(0x7fa2d46d29e0, 24 [pid 5077] <... openat resumed>) = 4 [pid 5570] <... set_robust_list resumed>) = 0 [pid 5569] creat(0x200001c0, 0420 [pid 5566] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5558] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5555] <... sendfile resumed>) = 117 [pid 5554] <... futex resumed>) = 0 [pid 5570] creat(0x200001c0, 0420 [pid 5569] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5566] <... futex resumed>) = 0 [pid 5558] <... futex resumed>) = 0 [pid 5555] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5554] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] fstat(4, [pid 5570] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5569] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5566] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5558] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5555] <... futex resumed>) = 0 [pid 5570] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5569] <... futex resumed>) = 0 [pid 5558] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5555] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5551] exit_group(0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5549] exit_group(0 [pid 5570] <... futex resumed>) = 0 [pid 5569] read(0, [pid 5566] <... futex resumed>) = ? [pid 5558] exit_group(0 [pid 5555] <... futex resumed>) = ? [pid 5554] <... futex resumed>) = ? [pid 5569] <... read resumed> ) = ? [pid 5569] +++ exited with 0 +++ [pid 5566] +++ exited with 0 +++ [pid 5563] <... futex resumed>) = ? [pid 5558] <... exit_group resumed>) = ? [pid 5555] +++ exited with 0 +++ [pid 5554] +++ exited with 0 +++ [pid 5551] <... exit_group resumed>) = ? [pid 5549] <... exit_group resumed>) = ? [pid 5077] getdents64(4, [pid 5570] +++ exited with 0 +++ [pid 5563] +++ exited with 0 +++ [pid 5558] +++ exited with 0 +++ [pid 5551] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5558, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5078] <... umount2 resumed>) = 0 [pid 5078] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./14/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5549] +++ exited with 0 +++ [pid 5078] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5549, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5077] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(4, [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5551, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5081] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5080] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... restart_syscall resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] close(4 [pid 5081] <... openat resumed>) = 3 [pid 5080] <... openat resumed>) = 3 [pid 5078] openat(AT_FDCWD, "./14/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] fstat(3, [pid 5080] fstat(3, [pid 5077] <... close resumed>) = 0 [pid 5076] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] rmdir("./14/bus" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] getdents64(3, [pid 5080] getdents64(3, [pid 5078] <... openat resumed>) = 4 [pid 5078] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5081] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] getdents64(3, [pid 5076] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] lstat("./16/binderfs", [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] getdents64(4, [pid 5077] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] lstat("./15/binderfs", [pid 5078] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5077] close(3 [pid 5076] <... openat resumed>) = 3 [pid 5081] unlink("./16/binderfs" [pid 5078] getdents64(4, [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5076] fstat(3, [pid 5081] <... unlink resumed>) = 0 [pid 5080] unlink("./15/binderfs" [pid 5078] close(4) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./16/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... unlink resumed>) = 0 [pid 5078] rmdir("./14/bus" [pid 5077] rmdir("./14" [pid 5076] getdents64(3, [pid 5080] umount2("./15/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... rmdir resumed>) = 0 [pid 5078] getdents64(3, [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5078] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5078] close(3) = 0 [pid 5078] rmdir("./14") = 0 [ 74.906380][ T5555] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 74.937196][ T56] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5078] mkdir("./15", 0777) = 0 [pid 5077] mkdir("./15", 0777 [pid 5076] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5078] close(3) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555adb5d0) = 5572 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] unlink("./15/binderfs" [pid 5077] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5076] <... unlink resumed>) = 0 [pid 5565] <... mount resumed>) = 0 [pid 5076] umount2("./15/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5565] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5572 attached [pid 5572] set_robust_list(0x555555adb5e0, 24) = 0 [pid 5572] chdir("./15") = 0 [pid 5572] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5572] setpgid(0, 0) = 0 [pid 5572] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5572] write(3, "1000", 4) = 4 [pid 5572] close(3) = 0 [pid 5572] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5572] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5572] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2dc9d3000 [pid 5572] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5572] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5574], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5574 [pid 5572] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5572] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5574 attached [pid 5574] set_robust_list(0x7fa2dc9f39e0, 24) = 0 [pid 5574] memfd_create("syzkaller", 0) = 3 [pid 5574] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2d45d3000 [pid 5077] close(3) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5574] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5565] <... openat resumed>) = 3 [pid 5077] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5575 [pid 5565] chdir("./bus") = 0 [pid 5565] ioctl(4, LOOP_CLR_FD) = 0 [pid 5565] close(4) = 0 [pid 5565] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5564] <... futex resumed>) = 0 [pid 5564] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5564] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5565] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000) = 4 [pid 5574] <... write resumed>) = 1048576 [pid 5574] munmap(0x7fa2d45d3000, 1048576 [pid 5565] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5564] <... futex resumed>) = 0 [pid 5565] <... futex resumed>) = 1 [pid 5564] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5564] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5574] <... munmap resumed>) = 0 [pid 5574] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5565] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5574] ioctl(4, LOOP_SET_FD, 3 [pid 5565] <... write resumed>) = 9 [ 74.952951][ T9] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 74.955874][ T56] EXT4-fs (loop5): This should not happen!! Data will be lost [ 74.955874][ T56] [ 74.983256][ T9] EXT4-fs (loop4): This should not happen!! Data will be lost [ 74.983256][ T9] [ 74.984787][ T33] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5565] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5574] <... ioctl resumed>) = 0 [pid 5574] close(3) = 0 [pid 5574] mkdir("./bus", 0777 [pid 5565] <... futex resumed>) = 1 [pid 5564] <... futex resumed>) = 0 [pid 5564] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5564] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5574] <... mkdir resumed>) = 0 [pid 5574] mount("/dev/loop2", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5565] openat(AT_FDCWD, "./bus", O_RDONLY) = 5 [pid 5565] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5564] <... futex resumed>) = 0 [pid 5565] <... futex resumed>) = 1 [pid 5564] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5565] open("./bus", O_RDWR [pid 5564] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5565] <... open resumed>) = 6 [pid 5565] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5575 attached ) = 1 [pid 5564] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 5565] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5564] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5575] set_robust_list(0x555555adb5e0, 24 [pid 5565] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5564] <... futex resumed>) = 0 [pid 5081] umount2("./16/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./15/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5575] <... set_robust_list resumed>) = 0 [pid 5565] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5564] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5565] <... mmap resumed>) = 0x20000000 [pid 5565] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5564] <... futex resumed>) = 0 [pid 5564] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5565] sendfile(4, 5, NULL, 2147483713 [pid 5564] <... futex resumed>) = 0 [pid 5575] chdir("./15" [pid 5564] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5575] <... chdir resumed>) = 0 [pid 5575] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5575] setpgid(0, 0) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5575] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] lstat("./16/bus", [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5575] <... openat resumed>) = 3 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] lstat("./15/bus", [pid 5575] write(3, "1000", 4 [pid 5081] umount2("./16/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5575] <... write resumed>) = 4 [pid 5575] close(3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5575] <... close resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./16/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5575] symlink("/dev/binderfs", "./binderfs" [pid 5081] <... openat resumed>) = 4 [pid 5575] <... symlink resumed>) = 0 [pid 5081] fstat(4, [pid 5575] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5575] <... futex resumed>) = 0 [pid 5081] getdents64(4, [pid 5575] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [ 75.038196][ T5574] loop2: detected capacity change from 0 to 2048 [ 75.044279][ T5098] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 75.061819][ T33] EXT4-fs (loop0): This should not happen!! Data will be lost [ 75.061819][ T33] [pid 5575] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5081] getdents64(4, [pid 5076] <... umount2 resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5575] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5081] close(4 [pid 5575] <... mprotect resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5081] rmdir("./16/bus" [pid 5575] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... rmdir resumed>) = 0 [pid 5081] getdents64(3, [pid 5564] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5575] <... clone resumed>, parent_tid=[5578], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5578 [pid 5564] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5575] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5564] <... futex resumed>) = 0 [pid 5081] close(3 [pid 5575] <... futex resumed>) = 0 [pid 5564] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... close resumed>) = 0 [pid 5564] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5575] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5564] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5081] rmdir("./16" [pid 5564] <... mprotect resumed>) = 0 [pid 5564] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5579], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5579 [pid 5081] <... rmdir resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5574] <... mount resumed>) = 0 [pid 5564] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] mkdir("./17", 0777 [pid 5080] umount2("./15/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./15/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5574] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5574] chdir("./bus") = 0 [pid 5574] ioctl(4, LOOP_CLR_FD) = 0 [pid 5574] close(4./strace-static-x86_64: Process 5578 attached ) = 0 ./strace-static-x86_64: Process 5579 attached [pid 5578] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5574] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5564] <... futex resumed>) = 0 [pid 5579] set_robust_list(0x7fa2d46d29e0, 24 [pid 5578] <... set_robust_list resumed>) = 0 [pid 5574] <... futex resumed>) = 1 [pid 5572] <... futex resumed>) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5579] <... set_robust_list resumed>) = 0 [pid 5578] memfd_create("syzkaller", 0 [pid 5574] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5572] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5578] <... memfd_create resumed>) = 3 [pid 5574] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5572] <... futex resumed>) = 0 [pid 5578] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5574] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5572] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5578] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5076] lstat("./15/bus", [pid 5564] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] openat(AT_FDCWD, "./15/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... openat resumed>) = 4 [pid 5076] umount2("./15/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5080] fstat(4, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5574] <... open resumed>) = 4 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, [pid 5076] openat(AT_FDCWD, "./15/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 4 [pid 5080] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5076] fstat(4, [pid 5574] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] getdents64(4, [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5081] close(3 [pid 5574] <... futex resumed>) = 1 [pid 5076] getdents64(4, [pid 5572] <... futex resumed>) = 0 [pid 5572] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5572] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] close(4 [pid 5076] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5574] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5081] <... close resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5080] rmdir("./15/bus" [pid 5076] getdents64(4, [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... rmdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./15/bus" [pid 5574] <... write resumed>) = 9 [pid 5081] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5580 [pid 5080] getdents64(3, [pid 5076] <... rmdir resumed>) = 0 [pid 5574] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(3, [pid 5574] <... futex resumed>) = 1 [pid 5572] <... futex resumed>) = 0 [pid 5080] close(3 [pid 5076] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5574] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5572] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... close resumed>) = 0 [pid 5076] close(3 [pid 5572] <... futex resumed>) = 0 [pid 5574] <... openat resumed>) = 5 [pid 5572] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] rmdir("./15" [pid 5076] <... close resumed>) = 0 [pid 5574] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5572] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) ./strace-static-x86_64: Process 5580 attached [pid 5580] set_robust_list(0x555555adb5e0, 24 [pid 5572] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... rmdir resumed>) = 0 [pid 5574] <... futex resumed>) = 0 [pid 5572] <... futex resumed>) = 0 [pid 5080] mkdir("./16", 0777 [pid 5076] rmdir("./15" [pid 5574] open("./bus", O_RDWR [pid 5572] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5580] <... set_robust_list resumed>) = 0 [pid 5580] chdir("./17" [pid 5080] <... mkdir resumed>) = 0 [pid 5580] <... chdir resumed>) = 0 [pid 5580] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5580] setpgid(0, 0) = 0 [pid 5574] <... open resumed>) = 6 [pid 5574] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] mkdir("./16", 0777 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [ 75.110035][ T5565] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 75.143678][ T5565] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5580] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5574] <... futex resumed>) = 1 [pid 5572] <... futex resumed>) = 0 [pid 5572] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5580] <... openat resumed>) = 3 [pid 5572] <... futex resumed>) = 0 [pid 5574] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5572] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... mkdir resumed>) = 0 [pid 5580] write(3, "1000", 4 [pid 5080] <... openat resumed>) = 3 [pid 5580] <... write resumed>) = 4 [pid 5580] close(3) = 0 [pid 5580] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5580] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5580] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5574] <... mmap resumed>) = 0x20000000 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5076] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5574] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5574] <... futex resumed>) = 1 [pid 5572] <... futex resumed>) = 0 [pid 5080] close(3 [pid 5076] <... openat resumed>) = 3 [pid 5572] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... close resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5574] sendfile(4, 5, NULL, 2147483713 [pid 5572] <... futex resumed>) = 0 [pid 5580] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5572] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5564] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] close(3 [pid 5080] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5581 [pid 5076] <... close resumed>) = 0 [pid 5580] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555adb5d0) = 5582 ./strace-static-x86_64: Process 5581 attached [pid 5580] <... mprotect resumed>) = 0 [ 75.193368][ T5565] EXT4-fs (loop3): This should not happen!! Data will be lost [ 75.193368][ T5565] [ 75.203961][ T5565] EXT4-fs (loop3): Total free blocks count 0 [ 75.210157][ T5565] EXT4-fs (loop3): Free/Dirty block details [ 75.215677][ T5574] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 75.217415][ T5565] EXT4-fs (loop3): free_blocks=2415919104 [ 75.237024][ T5565] EXT4-fs (loop3): dirty_blocks=16 ./strace-static-x86_64: Process 5582 attached [pid 5581] set_robust_list(0x555555adb5e0, 24 [pid 5580] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5579] creat(0x200001c0, 0420 [pid 5578] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5565] <... sendfile resumed>) = 117 [pid 5582] set_robust_list(0x555555adb5e0, 24 [pid 5581] <... set_robust_list resumed>) = 0 [pid 5579] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5582] <... set_robust_list resumed>) = 0 [pid 5581] chdir("./16" [pid 5579] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5565] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5582] chdir("./16" [pid 5581] <... chdir resumed>) = 0 [pid 5579] <... futex resumed>) = 0 [pid 5582] <... chdir resumed>) = 0 [pid 5581] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5579] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5564] exit_group(0 [pid 5582] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5581] <... prctl resumed>) = 0 [pid 5580] <... clone resumed>, parent_tid=[5583], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5583 [pid 5579] <... futex resumed>) = ? [pid 5565] <... futex resumed>) = ? [pid 5564] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 5583 attached [pid 5582] <... prctl resumed>) = 0 [pid 5581] setpgid(0, 0 [pid 5579] +++ exited with 0 +++ [pid 5583] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5582] setpgid(0, 0 [pid 5581] <... setpgid resumed>) = 0 [pid 5572] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5583] <... set_robust_list resumed>) = 0 [pid 5582] <... setpgid resumed>) = 0 [pid 5581] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5572] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5583] memfd_create("syzkaller", 0 [pid 5582] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5581] <... openat resumed>) = 3 [pid 5580] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5572] <... futex resumed>) = 0 [pid 5565] +++ exited with 0 +++ [pid 5564] +++ exited with 0 +++ [pid 5583] <... memfd_create resumed>) = 3 [pid 5582] <... openat resumed>) = 3 [ 75.242856][ T5565] EXT4-fs (loop3): Block reservation details [ 75.249220][ T5565] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 75.255737][ T5574] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 75.268732][ T5574] EXT4-fs (loop2): This should not happen!! Data will be lost [ 75.268732][ T5574] [ 75.279017][ T5574] EXT4-fs (loop2): Total free blocks count 0 [ 75.287439][ T5574] EXT4-fs (loop2): Free/Dirty block details [pid 5581] write(3, "1000", 4 [pid 5572] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5564, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5583] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5582] write(3, "1000", 4 [pid 5581] <... write resumed>) = 4 [pid 5580] <... futex resumed>) = 0 [pid 5578] <... write resumed>) = 1048576 [pid 5572] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5079] restart_syscall(<... resuming interrupted clone ...> [pid 5583] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5582] <... write resumed>) = 4 [pid 5581] close(3 [pid 5572] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5079] <... restart_syscall resumed>) = 0 [pid 5583] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5582] close(3 [pid 5581] <... close resumed>) = 0 [pid 5580] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5572] <... mprotect resumed>) = 0 [pid 5582] <... close resumed>) = 0 [pid 5581] symlink("/dev/binderfs", "./binderfs" [pid 5578] munmap(0x7fa2d45d3000, 1048576 [pid 5574] <... sendfile resumed>) = 117 [pid 5572] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5582] symlink("/dev/binderfs", "./binderfs" [pid 5581] <... symlink resumed>) = 0 [pid 5578] <... munmap resumed>) = 0 [pid 5574] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5584 attached [pid 5582] <... symlink resumed>) = 0 [pid 5581] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5578] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5574] <... futex resumed>) = 0 [pid 5572] <... clone resumed>, parent_tid=[5584], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5584 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5584] set_robust_list(0x7fa2d46d29e0, 24 [pid 5574] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5572] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5584] <... set_robust_list resumed>) = 0 [pid 5584] creat(0x200001c0, 0420) = -1 EISDIR (Is a directory) [pid 5584] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5582] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5581] <... futex resumed>) = 0 [pid 5572] <... futex resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5584] <... futex resumed>) = 0 [pid 5582] <... futex resumed>) = 0 [pid 5581] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5572] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... openat resumed>) = 3 [pid 5584] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5582] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5581] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5572] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5079] fstat(3, [pid 5582] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5572] exit_group(0 [pid 5581] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5582] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5584] <... futex resumed>) = ? [pid 5574] <... futex resumed>) = ? [pid 5572] <... exit_group resumed>) = ? [pid 5584] +++ exited with 0 +++ [pid 5582] <... mprotect resumed>) = 0 [pid 5581] <... mprotect resumed>) = 0 [pid 5574] +++ exited with 0 +++ [pid 5079] getdents64(3, [pid 5572] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5572, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5079] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5581] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5582] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5079] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./16/binderfs", [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5582] <... clone resumed>, parent_tid=[5585], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5585 [pid 5581] <... clone resumed>, parent_tid=[5586], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5586 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5582] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5586 attached ./strace-static-x86_64: Process 5585 attached ) = 0 [pid 5581] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5578] <... openat resumed>) = 4 [pid 5079] unlink("./16/binderfs" [pid 5078] <... openat resumed>) = 3 [pid 5586] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5585] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5582] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5581] <... futex resumed>) = 0 [pid 5578] ioctl(4, LOOP_SET_FD, 3 [pid 5079] <... unlink resumed>) = 0 [pid 5078] fstat(3, [pid 5586] <... set_robust_list resumed>) = 0 [pid 5585] <... set_robust_list resumed>) = 0 [pid 5583] <... write resumed>) = 1048576 [pid 5581] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5583] munmap(0x7fa2d45d3000, 1048576 [pid 5585] memfd_create("syzkaller", 0 [pid 5583] <... munmap resumed>) = 0 [pid 5079] umount2("./16/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 75.293810][ T5574] EXT4-fs (loop2): free_blocks=2415919104 [ 75.299572][ T5574] EXT4-fs (loop2): dirty_blocks=16 [ 75.305258][ T5574] EXT4-fs (loop2): Block reservation details [ 75.311880][ T5574] EXT4-fs (loop2): i_reserved_data_blocks=1 [pid 5586] memfd_create("syzkaller", 0 [pid 5585] <... memfd_create resumed>) = 3 [pid 5583] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5578] <... ioctl resumed>) = 0 [pid 5583] <... openat resumed>) = 4 [pid 5583] ioctl(4, LOOP_SET_FD, 3 [pid 5586] <... memfd_create resumed>) = 3 [pid 5585] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5578] close(3 [pid 5078] getdents64(3, [pid 5583] <... ioctl resumed>) = 0 [pid 5583] close(3) = 0 [pid 5583] mkdir("./bus", 0777) = 0 [pid 5583] mount("/dev/loop5", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5586] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2d45d3000 [pid 5585] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5578] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5578] mkdir("./bus", 0777 [pid 5078] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5578] <... mkdir resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5578] mount("/dev/loop1", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5078] lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] unlink("./15/binderfs") = 0 [ 75.351004][ T5578] loop1: detected capacity change from 0 to 2048 [ 75.359864][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 75.364137][ T5583] loop5: detected capacity change from 0 to 2048 [ 75.372979][ T11] EXT4-fs (loop3): This should not happen!! Data will be lost [ 75.372979][ T11] [pid 5078] umount2("./15/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5585] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5586] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5585] <... write resumed>) = 1048576 [pid 5585] munmap(0x7fa2d45d3000, 1048576) = 0 [pid 5578] <... mount resumed>) = 0 [pid 5585] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5585] ioctl(4, LOOP_SET_FD, 3 [pid 5586] <... write resumed>) = 1048576 [pid 5578] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5586] munmap(0x7fa2d45d3000, 1048576 [pid 5578] <... openat resumed>) = 3 [pid 5578] chdir("./bus") = 0 [pid 5578] ioctl(4, LOOP_CLR_FD) = 0 [pid 5586] <... munmap resumed>) = 0 [pid 5578] close(4) = 0 [ 75.398915][ T33] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 75.427854][ T33] EXT4-fs (loop2): This should not happen!! Data will be lost [ 75.427854][ T33] [pid 5586] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5578] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5586] <... openat resumed>) = 4 [pid 5578] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5575] <... futex resumed>) = 0 [pid 5586] ioctl(4, LOOP_SET_FD, 3 [pid 5575] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5578] <... futex resumed>) = 0 [pid 5575] <... futex resumed>) = 1 [pid 5578] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5575] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5585] <... ioctl resumed>) = 0 [pid 5578] <... open resumed>) = 4 [pid 5585] close(3 [pid 5583] <... mount resumed>) = 0 [pid 5578] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5585] <... close resumed>) = 0 [pid 5583] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5578] <... futex resumed>) = 1 [pid 5575] <... futex resumed>) = 0 [pid 5585] mkdir("./bus", 0777 [pid 5583] <... openat resumed>) = 3 [pid 5578] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5575] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5585] <... mkdir resumed>) = 0 [pid 5583] chdir("./bus" [pid 5578] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5575] <... futex resumed>) = 0 [pid 5585] mount("/dev/loop0", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5583] <... chdir resumed>) = 0 [pid 5578] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5575] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5583] ioctl(4, LOOP_CLR_FD [pid 5578] <... write resumed>) = 9 [pid 5583] <... ioctl resumed>) = 0 [pid 5578] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5583] close(4 [pid 5578] <... futex resumed>) = 1 [pid 5079] <... umount2 resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5578] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5079] umount2("./16/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./16/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5575] <... futex resumed>) = 0 [pid 5583] <... close resumed>) = 0 [pid 5079] umount2("./16/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5583] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5575] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5583] <... futex resumed>) = 1 [pid 5580] <... futex resumed>) = 0 [pid 5578] <... futex resumed>) = 0 [pid 5575] <... futex resumed>) = 1 [ 75.448604][ T5585] loop0: detected capacity change from 0 to 2048 [pid 5079] openat(AT_FDCWD, "./16/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] umount2("./15/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5583] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5580] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5578] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5575] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... openat resumed>) = 4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5586] <... ioctl resumed>) = 0 [pid 5583] <... open resumed>) = 4 [pid 5580] <... futex resumed>) = 0 [pid 5578] <... openat resumed>) = 5 [pid 5079] fstat(4, [pid 5078] lstat("./15/bus", [pid 5586] close(3 [pid 5583] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5580] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5578] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5586] <... close resumed>) = 0 [pid 5583] <... futex resumed>) = 0 [pid 5580] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5578] <... futex resumed>) = 1 [pid 5575] <... futex resumed>) = 0 [pid 5079] getdents64(4, [pid 5078] umount2("./15/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5586] mkdir("./bus", 0777 [pid 5583] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5580] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5578] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5575] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5583] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5580] <... futex resumed>) = 0 [pid 5586] <... mkdir resumed>) = 0 [pid 5578] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5575] <... futex resumed>) = 0 [pid 5079] getdents64(4, [pid 5078] openat(AT_FDCWD, "./15/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5586] mount("/dev/loop4", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5583] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5580] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5578] open("./bus", O_RDWR [pid 5575] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5078] <... openat resumed>) = 4 [pid 5583] <... write resumed>) = 9 [pid 5578] <... open resumed>) = 6 [pid 5079] close(4 [pid 5078] fstat(4, [pid 5583] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5578] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... close resumed>) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5583] <... futex resumed>) = 1 [pid 5580] <... futex resumed>) = 0 [pid 5578] <... futex resumed>) = 1 [pid 5575] <... futex resumed>) = 0 [pid 5079] rmdir("./16/bus" [pid 5078] getdents64(4, [pid 5583] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5580] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5578] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5575] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... rmdir resumed>) = 0 [pid 5078] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5585] <... mount resumed>) = 0 [pid 5583] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5580] <... futex resumed>) = 0 [pid 5586] <... mount resumed>) = 0 [pid 5578] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5575] <... futex resumed>) = 0 [pid 5079] getdents64(3, [pid 5078] getdents64(4, [pid 5585] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5583] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5580] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5578] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5575] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5078] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5583] <... openat resumed>) = 5 [pid 5578] <... mmap resumed>) = 0x20000000 [pid 5078] close(4 [pid 5583] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] close(3 [pid 5585] <... openat resumed>) = 3 [pid 5583] <... futex resumed>) = 1 [pid 5580] <... futex resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5578] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5585] chdir("./bus" [pid 5580] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] rmdir("./15/bus" [pid 5586] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5585] <... chdir resumed>) = 0 [pid 5583] open("./bus", O_RDWR [pid 5580] <... futex resumed>) = 0 [pid 5578] <... futex resumed>) = 1 [pid 5575] <... futex resumed>) = 0 [pid 5079] rmdir("./16" [pid 5585] ioctl(4, LOOP_CLR_FD [pid 5583] <... open resumed>) = 6 [pid 5580] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5578] sendfile(4, 5, NULL, 2147483713 [pid 5575] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... rmdir resumed>) = 0 [pid 5586] <... openat resumed>) = 3 [pid 5585] <... ioctl resumed>) = 0 [pid 5583] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5580] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 75.481989][ T5586] loop4: detected capacity change from 0 to 2048 [pid 5079] <... rmdir resumed>) = 0 [pid 5586] chdir("./bus" [pid 5585] close(4 [pid 5583] <... futex resumed>) = 0 [pid 5580] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5575] <... futex resumed>) = 0 [pid 5079] mkdir("./17", 0777 [pid 5078] getdents64(3, [pid 5586] <... chdir resumed>) = 0 [pid 5585] <... close resumed>) = 0 [pid 5583] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5580] <... futex resumed>) = 0 [pid 5575] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... mkdir resumed>) = 0 [pid 5078] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5586] ioctl(4, LOOP_CLR_FD [pid 5585] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5583] <... mmap resumed>) = 0x20000000 [pid 5580] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] close(3 [pid 5586] <... ioctl resumed>) = 0 [pid 5585] <... futex resumed>) = 1 [pid 5583] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5582] <... futex resumed>) = 0 [pid 5580] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5079] <... openat resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 5586] close(4 [pid 5585] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5583] <... futex resumed>) = 0 [pid 5582] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5580] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5078] rmdir("./15" [pid 5586] <... close resumed>) = 0 [pid 5585] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5583] sendfile(4, 5, NULL, 2147483713 [pid 5582] <... futex resumed>) = 0 [pid 5580] <... futex resumed>) = 0 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] <... rmdir resumed>) = 0 [pid 5586] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5585] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5582] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5580] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] close(3 [pid 5078] mkdir("./16", 0777 [pid 5586] <... futex resumed>) = 1 [pid 5585] <... open resumed>) = 4 [pid 5581] <... futex resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5586] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5585] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5581] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5586] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5585] <... futex resumed>) = 1 [pid 5582] <... futex resumed>) = 0 [pid 5581] <... futex resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5586] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5581] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... clone resumed>, child_tidptr=0x555555adb5d0) = 5595 [pid 5078] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5078] close(3) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555adb5d0) = 5596 ./strace-static-x86_64: Process 5596 attached ./strace-static-x86_64: Process 5595 attached [pid 5586] <... open resumed>) = 4 [pid 5585] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5582] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5596] set_robust_list(0x555555adb5e0, 24) = 0 [pid 5595] set_robust_list(0x555555adb5e0, 24 [pid 5586] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5585] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5582] <... futex resumed>) = 0 [pid 5596] chdir("./16" [pid 5595] <... set_robust_list resumed>) = 0 [pid 5586] <... futex resumed>) = 1 [pid 5585] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5582] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5581] <... futex resumed>) = 0 [pid 5596] <... chdir resumed>) = 0 [pid 5595] chdir("./17" [pid 5586] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5596] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5595] <... chdir resumed>) = 0 [pid 5586] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5581] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5575] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 75.551814][ T5578] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 75.579748][ T5583] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5585] <... write resumed>) = 9 [pid 5596] <... prctl resumed>) = 0 [pid 5595] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5586] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5585] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5581] <... futex resumed>) = 0 [pid 5575] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5596] setpgid(0, 0 [pid 5595] <... prctl resumed>) = 0 [pid 5586] <... write resumed>) = 9 [pid 5585] <... futex resumed>) = 1 [pid 5582] <... futex resumed>) = 0 [pid 5581] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5575] <... futex resumed>) = 0 [pid 5596] <... setpgid resumed>) = 0 [pid 5595] setpgid(0, 0 [pid 5586] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5585] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5582] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5581] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5575] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5596] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5595] <... setpgid resumed>) = 0 [pid 5586] <... futex resumed>) = 0 [pid 5585] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5582] <... futex resumed>) = 0 [pid 5581] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5575] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5575] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5575] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5597], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5597 [pid 5575] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5575] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5580] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5580] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5580] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2d46b2000 [pid 5580] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5596] <... openat resumed>) = 3 [pid 5595] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5586] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5585] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5582] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5581] <... futex resumed>) = 0 [pid 5580] <... mprotect resumed>) = 0 [pid 5596] write(3, "1000", 4 [pid 5595] <... openat resumed>) = 3 [pid 5586] <... openat resumed>) = 5 [pid 5585] <... openat resumed>) = 5 [pid 5581] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5580] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5596] <... write resumed>) = 4 [pid 5595] write(3, "1000", 4 [pid 5586] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5585] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5581] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5596] close(3 [pid 5595] <... write resumed>) = 4 [pid 5586] <... futex resumed>) = 0 [pid 5585] <... futex resumed>) = 1 [pid 5582] <... futex resumed>) = 0 [pid 5581] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5580] <... clone resumed>, parent_tid=[5598], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5598 [pid 5596] <... close resumed>) = 0 [pid 5595] close(3 [pid 5586] open("./bus", O_RDWR [pid 5585] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5582] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5581] <... futex resumed>) = 0 [pid 5580] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5598 attached ./strace-static-x86_64: Process 5597 attached [pid 5596] symlink("/dev/binderfs", "./binderfs" [pid 5595] <... close resumed>) = 0 [pid 5586] <... open resumed>) = 6 [pid 5585] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5582] <... futex resumed>) = 0 [pid 5581] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5598] set_robust_list(0x7fa2d46d29e0, 24 [pid 5597] set_robust_list(0x7fa2d46d29e0, 24 [pid 5596] <... symlink resumed>) = 0 [pid 5595] symlink("/dev/binderfs", "./binderfs" [pid 5586] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5585] open("./bus", O_RDWR [pid 5582] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5581] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5598] <... set_robust_list resumed>) = 0 [pid 5597] <... set_robust_list resumed>) = 0 [pid 5596] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5595] <... symlink resumed>) = 0 [pid 5586] <... futex resumed>) = 0 [pid 5585] <... open resumed>) = 6 [pid 5581] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5580] <... futex resumed>) = 0 [pid 5596] <... futex resumed>) = 0 [pid 5595] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5586] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5585] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5581] <... futex resumed>) = 0 [pid 5580] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5596] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5595] <... futex resumed>) = 0 [pid 5586] <... mmap resumed>) = 0x20000000 [pid 5585] <... futex resumed>) = 1 [pid 5582] <... futex resumed>) = 0 [pid 5581] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5596] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5595] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5586] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5585] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5582] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5581] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 75.589308][ T5578] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 75.617399][ T5583] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5596] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5595] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5586] <... futex resumed>) = 0 [pid 5585] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5582] <... futex resumed>) = 0 [pid 5581] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5596] <... mprotect resumed>) = 0 [pid 5595] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5586] sendfile(4, 5, NULL, 2147483713 [pid 5585] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5582] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5581] <... futex resumed>) = 0 [pid 5596] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5595] <... mprotect resumed>) = 0 [pid 5585] <... mmap resumed>) = 0x20000000 [pid 5581] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5575] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5595] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5585] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5596] <... clone resumed>, parent_tid=[5599], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5599 [pid 5585] <... futex resumed>) = 1 [pid 5582] <... futex resumed>) = 0 [pid 5596] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5595] <... clone resumed>, parent_tid=[5600], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5600 [pid 5585] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5582] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5596] <... futex resumed>) = 0 [pid 5595] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5585] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5582] <... futex resumed>) = 0 [pid 5596] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5595] <... futex resumed>) = 0 [pid 5585] sendfile(4, 5, NULL, 2147483713 [pid 5582] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5595] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5600 attached [pid 5600] set_robust_list(0x7fa2dc9f39e0, 24) = 0 [pid 5600] memfd_create("syzkaller", 0 [pid 5580] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5600] <... memfd_create resumed>) = 3 [pid 5600] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2d45d3000 [ 75.658671][ T5578] EXT4-fs (loop1): This should not happen!! Data will be lost [ 75.658671][ T5578] [ 75.677797][ T5586] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 75.682982][ T5583] EXT4-fs (loop5): This should not happen!! Data will be lost [ 75.682982][ T5583] [pid 5600] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 5599 attached [pid 5581] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5581] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5581] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2d46b2000 [pid 5581] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5581] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5601], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5601 [pid 5581] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5581] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5582] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5582] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5582] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2d46b2000 [pid 5599] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5582] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5599] <... set_robust_list resumed>) = 0 [pid 5599] memfd_create("syzkaller", 0 [pid 5582] <... mprotect resumed>) = 0 [pid 5582] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5602], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5602 [pid 5582] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 75.713955][ T5578] EXT4-fs (loop1): Total free blocks count 0 [ 75.715804][ T5585] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 75.725210][ T5586] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 75.739363][ T5583] EXT4-fs (loop5): Total free blocks count 0 [pid 5582] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5599] <... memfd_create resumed>) = 3 ./strace-static-x86_64: Process 5601 attached [pid 5601] set_robust_list(0x7fa2d46d29e0, 24) = 0 ./strace-static-x86_64: Process 5602 attached [pid 5602] set_robust_list(0x7fa2d46d29e0, 24) = 0 [pid 5599] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2d45d3000 [pid 5600] <... write resumed>) = 1048576 [pid 5600] munmap(0x7fa2d45d3000, 1048576) = 0 [pid 5600] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5600] ioctl(4, LOOP_SET_FD, 3 [pid 5599] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5600] <... ioctl resumed>) = 0 [pid 5600] close(3) = 0 [pid 5600] mkdir("./bus", 0777) = 0 [pid 5600] mount("/dev/loop3", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5581] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5582] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 75.756253][ T5585] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 75.759410][ T5578] EXT4-fs (loop1): Free/Dirty block details [ 75.769736][ T5583] EXT4-fs (loop5): Free/Dirty block details [ 75.786346][ T5600] loop3: detected capacity change from 0 to 2048 [ 75.789780][ T5585] EXT4-fs (loop0): This should not happen!! Data will be lost [ 75.789780][ T5585] [ 75.796739][ T5578] EXT4-fs (loop1): free_blocks=2415919104 [ 75.803598][ T5583] EXT4-fs (loop5): free_blocks=2415919104 [pid 5599] <... write resumed>) = 1048576 [pid 5599] munmap(0x7fa2d45d3000, 1048576) = 0 [ 75.815338][ T5586] EXT4-fs (loop4): This should not happen!! Data will be lost [ 75.815338][ T5586] [ 75.823655][ T5583] EXT4-fs (loop5): dirty_blocks=16 [ 75.826447][ T5578] EXT4-fs (loop1): dirty_blocks=16 [ 75.831436][ T5585] EXT4-fs (loop0): Total free blocks count 0 [ 75.836937][ T5586] EXT4-fs (loop4): Total free blocks count 0 [ 75.843214][ T5585] EXT4-fs (loop0): Free/Dirty block details [ 75.848540][ T5583] EXT4-fs (loop5): Block reservation details [ 75.854207][ T5585] EXT4-fs (loop0): free_blocks=2415919104 [pid 5599] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5599] ioctl(4, LOOP_SET_FD, 3 [pid 5598] creat(0x200001c0, 0420) = -1 EISDIR (Is a directory) [pid 5598] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5598] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5583] <... sendfile resumed>) = 117 [pid 5583] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5583] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5599] <... ioctl resumed>) = 0 [pid 5578] <... sendfile resumed>) = 117 [pid 5597] creat(0x200001c0, 0420) = -1 EISDIR (Is a directory) [pid 5597] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5597] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5599] close(3 [pid 5585] <... sendfile resumed>) = 117 [pid 5578] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5599] <... close resumed>) = 0 [pid 5580] exit_group(0 [pid 5578] <... futex resumed>) = 0 [ 75.860728][ T5578] EXT4-fs (loop1): Block reservation details [ 75.871476][ T5585] EXT4-fs (loop0): dirty_blocks=16 [ 75.873132][ T5583] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 75.877690][ T5585] EXT4-fs (loop0): Block reservation details [ 75.888734][ T5586] EXT4-fs (loop4): Free/Dirty block details [ 75.888771][ T5586] EXT4-fs (loop4): free_blocks=2415919104 [ 75.889056][ T5578] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 75.895283][ T5599] loop2: detected capacity change from 0 to 2048 [pid 5575] exit_group(0 [pid 5599] mkdir("./bus", 0777 [pid 5580] <... exit_group resumed>) = ? [pid 5575] <... exit_group resumed>) = ? [pid 5599] <... mkdir resumed>) = 0 [pid 5578] +++ exited with 0 +++ [pid 5602] creat(0x200001c0, 0420 [pid 5599] mount("/dev/loop2", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5597] <... futex resumed>) = ? [pid 5583] <... futex resumed>) = ? [pid 5602] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5598] <... futex resumed>) = ? [pid 5600] <... mount resumed>) = 0 [pid 5598] +++ exited with 0 +++ [pid 5602] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5600] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5597] +++ exited with 0 +++ [pid 5585] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5583] +++ exited with 0 +++ [pid 5580] +++ exited with 0 +++ [pid 5575] +++ exited with 0 +++ [pid 5602] <... futex resumed>) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5580, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5602] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5575, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5582] exit_group(0 [pid 5602] <... futex resumed>) = ? [pid 5600] <... openat resumed>) = 3 [pid 5582] <... exit_group resumed>) = ? [pid 5081] fstat(3, [pid 5602] +++ exited with 0 +++ [pid 5600] chdir("./bus" [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5600] <... chdir resumed>) = 0 [pid 5081] getdents64(3, [pid 5600] ioctl(4, LOOP_CLR_FD [pid 5081] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5600] <... ioctl resumed>) = 0 [pid 5081] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5600] close(4 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5586] <... sendfile resumed>) = 117 [pid 5585] <... futex resumed>) = ? [pid 5081] lstat("./17/binderfs", [pid 5077] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5601] creat(0x200001c0, 0420 [pid 5077] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5601] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5600] <... close resumed>) = 0 [pid 5586] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5585] +++ exited with 0 +++ [pid 5582] +++ exited with 0 +++ [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5601] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5586] <... futex resumed>) = 0 [pid 5077] fstat(3, [pid 5601] <... futex resumed>) = 0 [pid 5600] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5586] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5581] exit_group(0 [pid 5081] unlink("./17/binderfs" [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5582, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5600] <... futex resumed>) = 1 [pid 5595] <... futex resumed>) = 0 [pid 5586] <... futex resumed>) = ? [pid 5581] <... exit_group resumed>) = ? [pid 5081] <... unlink resumed>) = 0 [pid 5077] getdents64(3, [pid 5076] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5601] +++ exited with 0 +++ [pid 5600] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5595] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5586] +++ exited with 0 +++ [pid 5077] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5595] <... futex resumed>) = 0 [pid 5081] umount2("./17/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5595] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 3 [pid 5600] <... open resumed>) = 4 [pid 5077] lstat("./15/binderfs", [pid 5076] fstat(3, [pid 5600] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5581] +++ exited with 0 +++ [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5581, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5077] unlink("./15/binderfs" [pid 5076] getdents64(3, [pid 5077] <... unlink resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./15/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./16/binderfs", [pid 5080] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5076] unlink("./16/binderfs" [pid 5080] fstat(3, [pid 5076] <... unlink resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./16/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] getdents64(3, 0x555555adc620 /* 4 entries */, 32768) = 104 [pid 5080] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 75.907569][ T5585] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 75.915183][ T5586] EXT4-fs (loop4): dirty_blocks=16 [ 75.928262][ T5586] EXT4-fs (loop4): Block reservation details [ 75.935901][ T5586] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 75.953317][ T9] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5080] unlink("./16/binderfs") = 0 [pid 5080] umount2("./16/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5600] <... futex resumed>) = 1 [pid 5599] <... mount resumed>) = 0 [pid 5595] <... futex resumed>) = 0 [pid 5600] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5599] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [ 75.968545][ T33] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 75.979668][ T9] EXT4-fs (loop5): This should not happen!! Data will be lost [ 75.979668][ T9] [ 75.982626][ T33] EXT4-fs (loop1): This should not happen!! Data will be lost [ 75.982626][ T33] [ 76.001002][ T56] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5595] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5599] <... openat resumed>) = 3 [pid 5595] <... futex resumed>) = 0 [pid 5600] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5599] chdir("./bus" [pid 5595] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5599] <... chdir resumed>) = 0 [pid 5599] ioctl(4, LOOP_CLR_FD) = 0 [pid 5600] <... write resumed>) = 9 [pid 5599] close(4 [pid 5600] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5599] <... close resumed>) = 0 [pid 5600] <... futex resumed>) = 1 [pid 5595] <... futex resumed>) = 0 [pid 5600] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5599] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5595] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5599] <... futex resumed>) = 1 [pid 5596] <... futex resumed>) = 0 [pid 5595] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5596] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5596] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5600] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5599] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5600] <... openat resumed>) = 5 [pid 5600] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5595] <... futex resumed>) = 0 [pid 5600] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5595] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5595] <... futex resumed>) = 0 [pid 5600] open("./bus", O_RDWR [pid 5599] <... open resumed>) = 4 [pid 5595] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5600] <... open resumed>) = 6 [pid 5600] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5595] <... futex resumed>) = 0 [pid 5600] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5599] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5595] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5599] <... futex resumed>) = 1 [pid 5596] <... futex resumed>) = 0 [pid 5600] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5599] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5596] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5595] <... futex resumed>) = 0 [pid 5596] <... futex resumed>) = 0 [pid 5595] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5596] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5600] <... mmap resumed>) = 0x20000000 [pid 5599] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5599] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 5599] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5600] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5596] <... futex resumed>) = 0 [pid 5599] <... futex resumed>) = 1 [pid 5596] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5600] <... futex resumed>) = 1 [pid 5599] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5596] <... futex resumed>) = 0 [pid 5595] <... futex resumed>) = 0 [pid 5596] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5595] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5600] sendfile(4, 5, NULL, 2147483713 [pid 5599] <... openat resumed>) = 5 [pid 5595] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5599] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5596] <... futex resumed>) = 0 [pid 5596] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5599] open("./bus", O_RDWR [pid 5596] <... futex resumed>) = 0 [pid 5596] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5599] <... open resumed>) = 6 [pid 5599] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5596] <... futex resumed>) = 0 [pid 5599] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5596] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5596] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5599] <... mmap resumed>) = 0x20000000 [pid 5599] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5596] <... futex resumed>) = 0 [pid 5599] <... futex resumed>) = 1 [pid 5599] sendfile(4, 5, NULL, 2147483713 [pid 5596] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5596] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... umount2 resumed>) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5081] umount2("./17/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./17/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./17/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./17/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x555555ae4660 /* 0 entries */, 32768) = 0 [ 76.001007][ T11] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 76.001041][ T56] EXT4-fs (loop0): This should not happen!! Data will be lost [ 76.001041][ T56] [ 76.026246][ T11] EXT4-fs (loop4): This should not happen!! Data will be lost [ 76.026246][ T11] [pid 5081] close(4) = 0 [pid 5081] rmdir("./17/bus") = 0 [pid 5081] getdents64(3, 0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./17") = 0 [pid 5081] mkdir("./18", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555adb5d0) = 5607 ./strace-static-x86_64: Process 5607 attached [pid 5607] set_robust_list(0x555555adb5e0, 24) = 0 [pid 5607] chdir("./18") = 0 [pid 5607] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5607] setpgid(0, 0) = 0 [pid 5595] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5595] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5595] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2d46b2000 [pid 5595] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5595] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5608], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5608 [pid 5595] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5595] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5596] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5596] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5596] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5596] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5607] <... openat resumed>) = 3 [pid 5596] <... mmap resumed>) = 0x7fa2d46b2000 [pid 5596] mprotect(0x7fa2d46b3000, 131072, PROT_READ|PROT_WRITE [pid 5607] write(3, "1000", 4 [pid 5596] <... mprotect resumed>) = 0 [pid 5080] umount2("./16/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5596] clone(child_stack=0x7fa2d46d23f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5607] <... write resumed>) = 4 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5607] close(3 [pid 5596] <... clone resumed>, parent_tid=[5609], tls=0x7fa2d46d2700, child_tidptr=0x7fa2d46d29d0) = 5609 [pid 5080] lstat("./16/bus", [pid 5607] <... close resumed>) = 0 [pid 5596] futex(0x7fa2dcacc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5609 attached [pid 5607] symlink("/dev/binderfs", "./binderfs" [pid 5596] <... futex resumed>) = 0 [pid 5080] umount2("./16/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5609] set_robust_list(0x7fa2d46d29e0, 24 [pid 5607] <... symlink resumed>) = 0 [pid 5596] futex(0x7fa2dcacc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... set_robust_list resumed>) = 0 [pid 5607] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] openat(AT_FDCWD, "./16/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5607] <... futex resumed>) = 0 [ 76.093197][ T5600] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5080] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5608 attached [pid 5607] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5596] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5595] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] fstat(4, [pid 5077] umount2("./15/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = 0 [pid 5608] set_robust_list(0x7fa2d46d29e0, 24 [pid 5607] <... mmap resumed>) = 0x7fa2dc9d3000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./16/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5608] <... set_robust_list resumed>) = 0 [pid 5607] mprotect(0x7fa2dc9d4000, 131072, PROT_READ|PROT_WRITE [pid 5080] getdents64(4, [pid 5077] lstat("./15/bus", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5607] <... mprotect resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] lstat("./16/bus", [pid 5607] clone(child_stack=0x7fa2dc9f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] getdents64(4, [pid 5077] umount2("./15/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./16/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5607] <... clone resumed>, parent_tid=[5610], tls=0x7fa2dc9f3700, child_tidptr=0x7fa2dc9f39d0) = 5610 [pid 5080] close(4 [pid 5077] openat(AT_FDCWD, "./15/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5607] futex(0x7fa2dcacc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... close resumed>) = 0 [pid 5077] <... openat resumed>) = 4 [pid 5076] openat(AT_FDCWD, "./16/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5610 attached [pid 5607] <... futex resumed>) = 0 [pid 5080] rmdir("./16/bus" [pid 5077] fstat(4, [pid 5076] <... openat resumed>) = 4 [pid 5610] set_robust_list(0x7fa2dc9f39e0, 24 [pid 5607] futex(0x7fa2dcacc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] <... rmdir resumed>) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] fstat(4, [pid 5610] <... set_robust_list resumed>) = 0 [pid 5080] getdents64(3, [pid 5077] getdents64(4, [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] memfd_create("syzkaller", 0 [pid 5080] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5077] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [ 76.147029][ T5609] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 76.163270][ T5600] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5076] getdents64(4, [pid 5610] <... memfd_create resumed>) = 3 [pid 5080] close(3 [pid 5077] getdents64(4, [pid 5076] <... getdents64 resumed>0x555555ae4660 /* 2 entries */, 32768) = 48 [pid 5610] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(4, [pid 5610] <... mmap resumed>) = 0x7fa2d45d3000 [pid 5080] rmdir("./16" [pid 5077] close(4 [pid 5076] <... getdents64 resumed>0x555555ae4660 /* 0 entries */, 32768) = 0 [pid 5610] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5077] <... close resumed>) = 0 [pid 5076] close(4 [pid 5077] rmdir("./15/bus" [pid 5076] <... close resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] rmdir("./16/bus" [pid 5077] getdents64(3, [pid 5076] <... rmdir resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(3, [pid 5077] close(3 [pid 5076] <... getdents64 resumed>0x555555adc620 /* 0 entries */, 32768) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] close(3 [pid 5077] rmdir("./15" [pid 5076] <... close resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] rmdir("./16" [pid 5080] <... rmdir resumed>) = 0 [pid 5077] mkdir("./16", 0777 [pid 5076] <... rmdir resumed>) = 0 [pid 5080] mkdir("./17", 0777 [pid 5077] <... mkdir resumed>) = 0 [ 76.225423][ T7] cfg80211: failed to load regulatory.db [ 76.243796][ T5600] EXT4-fs (loop3): This should not happen!! Data will be lost [ 76.243796][ T5600] [ 76.264629][ T5599] ------------[ cut here ]------------ [ 76.270289][ T5599] kernel BUG at fs/ext4/inline.c:226! [ 76.273156][ T5600] EXT4-fs (loop3): Total free blocks count 0 [ 76.275814][ T5599] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 76.281632][ T5600] EXT4-fs (loop3): Free/Dirty block details [ 76.287678][ T5599] CPU: 0 PID: 5599 Comm: syz-executor211 Not tainted 6.2.0-rc3-next-20230112-syzkaller #0 [ 76.287702][ T5599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 76.287714][ T5599] RIP: 0010:ext4_write_inline_data+0x344/0x3e0 [ 76.313042][ T5600] EXT4-fs (loop3): free_blocks=2415919104 [ 76.313534][ T5599] Code: 5f e9 e0 a2 5f ff e8 db a2 5f ff 45 8d 64 2c c4 41 bd 3c 00 00 00 41 29 ed e9 e8 fe ff ff e8 c3 a2 5f ff 0f 0b e8 bc a2 5f ff <0f> 0b e8 f5 71 ad ff e9 fe fd ff ff 4c 89 ff e8 e8 71 ad ff e9 99 [ 76.319668][ T5600] EXT4-fs (loop3): dirty_blocks=16 [ 76.325360][ T5599] RSP: 0018:ffffc90004f1f3e0 EFLAGS: 00010293 [ 76.325381][ T5599] RAX: 0000000000000000 RBX: ffff888076a00cb8 RCX: 0000000000000000 [ 76.325396][ T5599] RDX: ffff8880776b9d40 RSI: ffffffff82221a24 RDI: 0000000000000006 [ 76.325412][ T5599] RBP: 0000000000000075 R08: 0000000000000006 R09: 000000000000007e [ 76.380163][ T5599] R10: 0000000000000075 R11: 0000000000000000 R12: 0000000000000009 [ 76.383044][ T5600] EXT4-fs (loop3): Block reservation details [ 76.388142][ T5599] R13: 000000000000007e R14: ffffc90004f1f480 R15: ffff888076a0127a [ 76.402108][ T5599] FS: 00007fa2dc9f3700(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 76.403730][ T5600] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 76.411045][ T5599] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.423526][ T5599] CR2: 00007fa2d46d2000 CR3: 0000000078024000 CR4: 00000000003506f0 [ 76.431514][ T5599] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.439508][ T5599] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.447495][ T5599] Call Trace: [ 76.450787][ T5599] [ 76.453727][ T5599] ext4_write_inline_data_end+0x2a3/0x12f0 [ 76.459566][ T5599] ? ext4_try_to_write_inline_data+0x1770/0x1770 [ 76.465917][ T5599] ext4_da_write_end+0x52a/0xa50 [ 76.470851][ T5599] ? do_raw_spin_unlock+0x175/0x230 [pid 5076] mkdir("./17", 0777 [pid 5610] <... write resumed>) = 1048576 [pid 5609] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200001c0} --- [pid 5608] creat(0x200001c0, 0420 [pid 5600] <... sendfile resumed>) = 117 [pid 5596] ???( [pid 5080] <... mkdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... mkdir resumed>) = 0 [pid 5610] munmap(0x7fa2d45d3000, 1048576 [pid 5608] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5600] futex(0x7fa2dcacc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5610] <... munmap resumed>) = 0 [pid 5608] futex(0x7fa2dcacc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5600] <... futex resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5610] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5608] <... futex resumed>) = 0 [pid 5600] futex(0x7fa2dcacc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5610] <... openat resumed>) = 4 [ 76.476039][ T5599] generic_perform_write+0x316/0x570 [ 76.481327][ T5599] ? folio_add_wait_queue+0x1c0/0x1c0 [ 76.486692][ T5599] ? iunique+0x370/0x370 [ 76.490927][ T5599] ? down_write_killable_nested+0x250/0x250 [ 76.496845][ T5599] ext4_buffered_write_iter+0x15b/0x460 [ 76.500151][ T5610] loop5: detected capacity change from 0 to 2048 [ 76.502410][ T5599] ext4_file_write_iter+0x8bf/0x1710 [ 76.502442][ T5599] ? aa_file_perm+0x592/0x1280 [ 76.518829][ T5599] ? iter_file_splice_write+0x16c/0xc90 [pid 5608] futex(0x7fa2dcacc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5610] ioctl(4, LOOP_SET_FD, 3 [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555adb5d0) = 5611 [pid 5610] <... ioctl resumed>) = 0 [pid 5610] close(3) = 0 [pid 5610] mkdir("./bus", 0777) = 0 [ 76.524405][ T5599] ? kasan_save_stack+0x35/0x40 [ 76.529280][ T5599] ? __kasan_kmalloc+0xa2/0xb0 [ 76.534066][ T5599] ? ext4_file_mmap+0x440/0x440 [ 76.538931][ T5599] ? do_sendfile+0xb19/0x12c0 [ 76.543633][ T5599] ? __x64_sys_sendfile64+0x1d0/0x210 [ 76.549042][ T5599] ? do_syscall_64+0x39/0xb0 [ 76.553656][ T5599] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.559754][ T5599] do_iter_readv_writev+0x20b/0x3b0 [ 76.564969][ T5599] ? generic_copy_file_range+0x1d0/0x1d0 [ 76.570622][ T5599] ? bpf_lsm_file_permission+0x9/0x10 [ 76.576017][ T5599] ? security_file_permission+0xaf/0xd0 [ 76.581580][ T5599] do_iter_write+0x182/0x700 [ 76.586187][ T5599] vfs_iter_write+0x74/0xa0 [ 76.590701][ T5599] iter_file_splice_write+0x745/0xc90 [ 76.596128][ T5599] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 76.602119][ T5599] ? add_to_pipe+0x3b0/0x3b0 [ 76.606722][ T5599] ? security_file_permission+0xaf/0xd0 [ 76.612283][ T5599] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 76.618275][ T5599] direct_splice_actor+0x114/0x180 [ 76.623401][ T5599] splice_direct_to_actor+0x335/0x8a0 [ 76.628783][ T5599] ? do_splice_direct+0x280/0x280 [ 76.633836][ T5599] ? folio_flags.constprop.0+0x150/0x150 [ 76.639554][ T5599] ? bpf_lsm_file_permission+0x9/0x10 [ 76.644998][ T5599] ? security_file_permission+0xaf/0xd0 [ 76.650580][ T5599] do_splice_direct+0x1ab/0x280 [ 76.655456][ T5599] ? splice_direct_to_actor+0x8a0/0x8a0 [ 76.661026][ T5599] do_sendfile+0xb19/0x12c0 [ 76.665554][ T5599] ? vfs_iocb_iter_write+0x480/0x480 [ 76.670859][ T5599] ? ptrace_notify+0xfe/0x140 [ 76.675561][ T5599] ? lock_downgrade+0x6e0/0x6e0 [ 76.680436][ T5599] __x64_sys_sendfile64+0x1d0/0x210 [ 76.685655][ T5599] ? _raw_spin_unlock_irq+0x23/0x50 [ 76.690882][ T5599] ? __ia32_sys_sendfile+0x220/0x220 [ 76.696193][ T5599] ? lockdep_hardirqs_on+0x7d/0x100 [ 76.701437][ T5599] ? _raw_spin_unlock_irq+0x2e/0x50 [ 76.706659][ T5599] ? ptrace_notify+0xfe/0x140 [ 76.711352][ T5599] do_syscall_64+0x39/0xb0 [ 76.715788][ T5599] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.721715][ T5599] RIP: 0033:0x7fa2dca476e9 [ 76.726140][ T5599] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 76.745764][ T5599] RSP: 002b:00007fa2dc9f32f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 76.754184][ T5599] RAX: ffffffffffffffda RBX: 00007fa2dcacc7a0 RCX: 00007fa2dca476e9 [ 76.762170][ T5599] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 76.770155][ T5599] RBP: 00007fa2dca9982c R08: 0000000000000000 R09: 0000000000000000 [ 76.778135][ T5599] R10: 0000000080000041 R11: 0000000000000246 R12: 00007fa2dca990c0 [ 76.786118][ T5599] R13: 0000000020000fc0 R14: 0030656c69662f2e R15: 00007fa2dcacc7a8 [ 76.794196][ T5599] [ 76.797219][ T5599] Modules linked in: [ 76.801346][ T5599] ---[ end trace 0000000000000000 ]--- [ 76.806855][ T5599] RIP: 0010:ext4_write_inline_data+0x344/0x3e0 [ 76.813085][ T5599] Code: 5f e9 e0 a2 5f ff e8 db a2 5f ff 45 8d 64 2c c4 41 bd 3c 00 00 00 41 29 ed e9 e8 fe ff ff e8 c3 a2 5f ff 0f 0b e8 bc a2 5f ff <0f> 0b e8 f5 71 ad ff e9 fe fd ff ff 4c 89 ff e8 e8 71 ad ff e9 99 [ 76.832758][ T5599] RSP: 0018:ffffc90004f1f3e0 EFLAGS: 00010293 [ 76.838887][ T5599] RAX: 0000000000000000 RBX: ffff888076a00cb8 RCX: 0000000000000000 [ 76.846898][ T5599] RDX: ffff8880776b9d40 RSI: ffffffff82221a24 RDI: 0000000000000006 [ 76.854932][ T5599] RBP: 0000000000000075 R08: 0000000000000006 R09: 000000000000007e [ 76.862931][ T5599] R10: 0000000000000075 R11: 0000000000000000 R12: 0000000000000009 [ 76.871137][ T5599] R13: 000000000000007e R14: ffffc90004f1f480 R15: ffff888076a0127a [ 76.879152][ T5599] FS: 00007fa2dc9f3700(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 76.888148][ T5599] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.894785][ T5599] CR2: 00007fa2d46d2000 CR3: 0000000078024000 CR4: 00000000003506f0 [ 76.902869][ T5599] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.907959][ T5615] loop4: detected capacity change from 0 to 2048 [ 76.910877][ T5599] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.920375][ T5614] loop1: detected capacity change from 0 to 2048 [ 76.925170][ T5599] Kernel panic - not syncing: Fatal exception [ 76.931617][ T5599] Kernel Offset: disabled [ 76.941993][ T5599] Rebooting in 86400 seconds.. [pid 5610] mount("/dev/loop5", "./bus", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue"