./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2226291819 <...> EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7128] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 94.598030][ T7135] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 94.611147][ T7131] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 94.620966][ T7134] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 94.634332][ T7132] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 7128] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7128] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7128] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7128] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7150], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7150 [pid 7128] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7128] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7132] <... fsconfig resumed>) = 0 [pid 7132] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7132] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7150 attached [pid 7150] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7150] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7150] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7128] <... futex resumed>) = 0 [pid 7128] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7128] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7132] <... futex resumed>) = 0 [pid 7132] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7150] <... futex resumed>) = 1 [ 94.643263][ T7139] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 94.670508][ T7134] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 94.670663][ T7139] EXT4-fs (loop3): 1 truncate cleaned up [ 94.688726][ T7133] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 94.696606][ T7132] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [pid 7150] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7139] <... mount resumed>) = 0 [pid 7139] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7139] chdir("./file0") = 0 [pid 7139] ioctl(4, LOOP_CLR_FD) = 0 [pid 7139] close(4) = 0 [pid 7139] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 94.716732][ T7139] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.730094][ T7134] EXT4-fs (loop0): 1 truncate cleaned up [ 94.731474][ T7131] EXT4-fs (loop4): 1 truncate cleaned up [ 94.735872][ T7134] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.745440][ T7131] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7139] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7136] <... futex resumed>) = 0 [pid 7128] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7136] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7128] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7150] <... futex resumed>) = 0 [pid 7128] <... futex resumed>) = 1 [pid 7150] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7128] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7131] <... mount resumed>) = 0 [pid 7131] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7131] chdir("./file0") = 0 [pid 7131] ioctl(4, LOOP_CLR_FD) = 0 [pid 7131] close(4) = 0 [pid 7131] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7126] <... futex resumed>) = 0 [pid 7126] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7126] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7131] <... futex resumed>) = 1 [pid 7131] fspick(AT_FDCWD, ".", 0) = 4 [pid 7131] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7126] <... futex resumed>) = 0 [pid 7126] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7126] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7131] <... futex resumed>) = 1 [pid 7131] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 7131] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7126] <... futex resumed>) = 0 [pid 7126] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7126] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7131] <... futex resumed>) = 1 [pid 7131] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7134] <... mount resumed>) = 0 [pid 7134] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7134] chdir("./file0") = 0 [pid 7134] ioctl(4, LOOP_CLR_FD) = 0 [pid 7134] close(4) = 0 [pid 7134] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7134] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7139] <... futex resumed>) = 0 [pid 7136] <... futex resumed>) = 1 [pid 7139] fspick(AT_FDCWD, ".", 0 [pid 7136] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7139] <... fspick resumed>) = 4 [pid 7139] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7136] <... futex resumed>) = 0 [pid 7129] <... futex resumed>) = 0 [pid 7150] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 7139] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7136] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7129] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7150] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7139] <... fsconfig resumed>) = 0 [pid 7136] <... futex resumed>) = 0 [pid 7150] <... futex resumed>) = 1 [pid 7139] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7136] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7128] <... futex resumed>) = 0 [pid 7150] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7139] <... futex resumed>) = 0 [pid 7136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7139] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7136] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7139] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7136] <... futex resumed>) = 0 [pid 7129] <... futex resumed>) = 1 [pid 7139] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7136] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7129] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7134] <... futex resumed>) = 0 [pid 7134] fspick(AT_FDCWD, ".", 0) = 4 [pid 7134] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 94.763552][ T7135] EXT4-fs (loop2): 1 truncate cleaned up [ 94.766972][ T7132] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 94.777650][ T7135] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.794032][ T7133] EXT4-fs (loop5): 1 truncate cleaned up [ 94.801420][ T7131] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 7134] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7129] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7135] <... mount resumed>) = 0 [pid 7135] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7135] chdir("./file0") = 0 [pid 7135] ioctl(4, LOOP_CLR_FD) = 0 [pid 7135] close(4) = 0 [pid 7135] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7133] <... mount resumed>) = 0 [pid 7132] <... fsconfig resumed>) = 0 [pid 7131] <... fsconfig resumed>) = 0 [pid 7129] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7127] <... futex resumed>) = 0 [pid 7126] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7135] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7131] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7126] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7131] <... futex resumed>) = 0 [pid 7126] <... futex resumed>) = 0 [pid 7131] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7126] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7131] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7131] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7126] <... futex resumed>) = 0 [pid 7131] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7126] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7139] <... fsconfig resumed>) = 0 [pid 7134] <... futex resumed>) = 0 [pid 7133] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7132] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7129] <... futex resumed>) = 1 [pid 7127] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7126] <... futex resumed>) = 0 [pid 7139] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7134] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7126] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7135] <... futex resumed>) = 0 [pid 7134] <... fsconfig resumed>) = 0 [pid 7133] <... openat resumed>) = 3 [pid 7132] <... futex resumed>) = 0 [pid 7129] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7127] <... futex resumed>) = 1 [pid 7139] <... futex resumed>) = 1 [pid 7136] <... futex resumed>) = 0 [pid 7135] fspick(AT_FDCWD, ".", 0 [pid 7134] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7133] chdir("./file0" [pid 7132] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7129] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7128] exit_group(0 [pid 7127] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7150] <... futex resumed>) = ? [pid 7139] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7136] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7135] <... fspick resumed>) = 4 [pid 7134] <... futex resumed>) = 0 [pid 7133] <... chdir resumed>) = 0 [pid 7132] <... futex resumed>) = ? [pid 7129] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7128] <... exit_group resumed>) = ? [pid 7150] +++ exited with 0 +++ [pid 7139] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7136] <... futex resumed>) = 0 [pid 7135] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7134] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7133] ioctl(4, LOOP_CLR_FD [pid 7132] +++ exited with 0 +++ [pid 7129] <... futex resumed>) = 0 [pid 7128] +++ exited with 0 +++ [ 94.806936][ T7133] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.824762][ T7132] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 94.836648][ T7139] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 94.848446][ T7131] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [pid 7136] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7135] <... futex resumed>) = 1 [pid 7133] <... ioctl resumed>) = 0 [pid 7129] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7127] <... futex resumed>) = 0 [pid 7139] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7135] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7139] <... futex resumed>) = 0 [pid 7136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7133] close(4 [pid 7127] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7128, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 7139] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7136] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7133] <... close resumed>) = 0 [pid 7127] <... futex resumed>) = 1 [pid 7135] <... futex resumed>) = 0 [pid 7135] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 7135] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7135] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7134] <... fsconfig resumed>) = 0 [pid 7134] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7129] <... futex resumed>) = 0 [pid 7127] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7139] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7136] <... futex resumed>) = 0 [pid 7133] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7129] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7139] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7136] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7133] <... futex resumed>) = 1 [pid 7130] <... futex resumed>) = 0 [pid 7129] <... futex resumed>) = 0 [pid 7127] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7134] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7134] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7134] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7133] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7130] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7135] <... futex resumed>) = 0 [pid 7133] <... futex resumed>) = 0 [pid 7130] <... futex resumed>) = 1 [pid 7129] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7127] <... futex resumed>) = 1 [pid 5000] <... openat resumed>) = 3 [pid 7135] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7133] fspick(AT_FDCWD, ".", 0 [pid 7130] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7129] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7127] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7126] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5000] fstat(3, [pid 7133] <... fspick resumed>) = 4 [pid 7129] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7126] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7134] <... futex resumed>) = 0 [pid 7133] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7129] <... futex resumed>) = 1 [pid 7126] <... futex resumed>) = 0 [ 94.870767][ T7134] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 94.878603][ T7131] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 94.896368][ T7139] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 94.909371][ T7131] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 5000] getdents64(3, [pid 7134] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7133] <... futex resumed>) = 1 [pid 7130] <... futex resumed>) = 0 [pid 7129] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7126] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5000] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7133] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7130] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7126] <... mmap resumed>) = 0x7f5047d10000 [pid 5000] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7130] <... futex resumed>) = 0 [pid 7126] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7133] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7130] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7126] <... mprotect resumed>) = 0 [pid 5000] lstat("./59/binderfs", [pid 7133] <... fsconfig resumed>) = 0 [pid 7126] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7133] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] unlink("./59/binderfs" [pid 7133] <... futex resumed>) = 1 [pid 7130] <... futex resumed>) = 0 [pid 7126] <... clone resumed>, parent_tid=[7153], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7153 [pid 5000] <... unlink resumed>) = 0 [pid 7133] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7130] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7126] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7130] <... futex resumed>) = 0 [pid 7126] <... futex resumed>) = 0 [pid 7133] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7130] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7126] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7153 attached [pid 7153] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7153] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 ENOSPC (No space left on device) [pid 7153] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7126] <... futex resumed>) = 0 [pid 7153] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7136] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7131] <... fsconfig resumed>) = 0 [pid 7136] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7136] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7136] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7127] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7136] <... mprotect resumed>) = 0 [pid 7127] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7136] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7127] <... futex resumed>) = 0 [pid 7127] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7136] <... clone resumed>, parent_tid=[7154], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7154 [pid 7127] <... mmap resumed>) = 0x7f5047d10000 [pid 7136] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7127] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7136] <... futex resumed>) = 0 [pid 7127] <... mprotect resumed>) = 0 [pid 7136] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7131] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7127] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7131] <... futex resumed>) = 0 [pid 7127] <... clone resumed>, parent_tid=[7155], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7155 [pid 7126] exit_group(0 [pid 7153] <... futex resumed>) = ? [pid 7127] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7126] <... exit_group resumed>) = ? [pid 7153] +++ exited with 0 +++ [pid 7127] <... futex resumed>) = 0 [pid 7127] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7154 attached [pid 7154] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7154] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EROFS (Read-only file system) ./strace-static-x86_64: Process 7155 attached [pid 7154] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7155] set_robust_list(0x7f5047d309e0, 24 [pid 7154] <... futex resumed>) = 1 [pid 7136] <... futex resumed>) = 0 [pid 7155] <... set_robust_list resumed>) = 0 [pid 7154] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7131] +++ exited with 0 +++ [pid 7126] +++ exited with 0 +++ [pid 7155] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7129] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7155] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7129] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7126, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5000] <... umount2 resumed>) = 0 [pid 7155] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7129] <... futex resumed>) = 0 [pid 5004] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7155] <... futex resumed>) = 1 [pid 7129] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7127] <... futex resumed>) = 0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7155] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7129] <... mmap resumed>) = 0x7f5047d10000 [pid 7127] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7155] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7129] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7127] <... futex resumed>) = 0 [pid 5004] <... openat resumed>) = 3 [pid 7155] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7129] <... mprotect resumed>) = 0 [pid 7127] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] fstat(3, [ 94.920367][ T7134] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 94.926868][ T7139] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 94.938624][ T7135] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 94.950611][ T7133] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 94.961434][ T7134] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 5000] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7129] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7135] <... fsconfig resumed>) = 0 [pid 7133] <... fsconfig resumed>) = 0 [pid 5000] lstat("./59/file0", [pid 7135] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7133] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7135] <... futex resumed>) = 0 [pid 7133] <... futex resumed>) = 1 [pid 5000] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7135] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7133] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5004] getdents64(3, [pid 5000] rmdir("./59/file0"./strace-static-x86_64: Process 7156 attached [pid 7130] <... futex resumed>) = 0 [pid 7129] <... clone resumed>, parent_tid=[7156], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7156 [pid 5004] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5000] <... rmdir resumed>) = 0 [pid 5000] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./59" [pid 7130] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7129] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... rmdir resumed>) = 0 [pid 7133] <... futex resumed>) = 0 [pid 7130] <... futex resumed>) = 1 [pid 7129] <... futex resumed>) = 0 [pid 5000] mkdir("./60", 0777 [pid 7133] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7130] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7129] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... mkdir resumed>) = 0 [pid 7133] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7133] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... openat resumed>) = 3 [pid 7133] <... futex resumed>) = 1 [pid 7130] <... futex resumed>) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 7133] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7130] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7130] <... futex resumed>) = 0 [pid 5000] close(3 [pid 7156] set_robust_list(0x7f5047d309e0, 24 [pid 7133] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7130] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] lstat("./59/binderfs", [pid 5000] <... close resumed>) = 0 [pid 7156] <... set_robust_list resumed>) = 0 [pid 5004] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7156] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5004] unlink("./59/binderfs") = 0 [pid 5004] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7139] <... fsconfig resumed>) = 0 [pid 7139] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7139] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7136] exit_group(0 [pid 7154] <... futex resumed>) = ? [pid 7136] <... exit_group resumed>) = ? [pid 7154] +++ exited with 0 +++ [pid 7139] <... futex resumed>) = ? [pid 7139] +++ exited with 0 +++ [pid 7136] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7136, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7156] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 5002] <... restart_syscall resumed>) = 0 [pid 7156] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7129] <... futex resumed>) = 0 [pid 7127] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7156] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7127] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7127] <... futex resumed>) = 1 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 94.989787][ T7155] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 95.005021][ T7155] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 95.014251][ T7139] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 95.024803][ T7133] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [pid 7127] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./57/binderfs") = 0 [pid 5002] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7159 attached [pid 7135] <... futex resumed>) = 0 [pid 7134] <... fsconfig resumed>) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x5555562025d0) = 7159 [pid 7135] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7159] set_robust_list(0x5555562025e0, 24 [pid 7135] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7134] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7155] <... fsconfig resumed>) = 0 [pid 7155] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7129] exit_group(0 [pid 7156] <... futex resumed>) = ? [pid 7129] <... exit_group resumed>) = ? [pid 7156] +++ exited with 0 +++ [pid 7155] <... futex resumed>) = 0 [pid 7155] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7159] <... set_robust_list resumed>) = 0 [pid 7135] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7134] <... futex resumed>) = ? [pid 7159] chdir("./60" [pid 7135] <... futex resumed>) = 1 [pid 7134] +++ exited with 0 +++ [pid 7129] +++ exited with 0 +++ [pid 7159] <... chdir resumed>) = 0 [pid 7135] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7159] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7159] setpgid(0, 0) = 0 [pid 7159] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7159] write(3, "1000", 4) = 4 [pid 7159] close(3) = 0 [pid 7159] symlink("/dev/binderfs", "./binderfs" [pid 7127] <... futex resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7129, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 7159] <... symlink resumed>) = 0 [pid 7130] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7127] exit_group(0 [pid 7159] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7130] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7159] <... futex resumed>) = 0 [pid 7130] <... futex resumed>) = 0 [pid 7159] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7130] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7159] <... mmap resumed>) = 0x7f50500f1000 [pid 7130] <... mmap resumed>) = 0x7f5047d10000 [pid 7159] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7130] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7159] <... mprotect resumed>) = 0 [pid 7155] <... futex resumed>) = ? [pid 7135] <... futex resumed>) = ? [pid 7127] <... exit_group resumed>) = ? [pid 4999] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7159] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7135] +++ exited with 0 +++ [pid 7130] <... mprotect resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7161 attached [pid 7155] +++ exited with 0 +++ [pid 7130] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7127] +++ exited with 0 +++ [pid 4999] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 7162 attached [pid 7161] set_robust_list(0x7f50501119e0, 24 [pid 7159] <... clone resumed>, parent_tid=[7161], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7161 [pid 4999] <... openat resumed>) = 3 [pid 7162] set_robust_list(0x7f5047d309e0, 24 [pid 7161] <... set_robust_list resumed>) = 0 [pid 7159] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7130] <... clone resumed>, parent_tid=[7162], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7162 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7127, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 4999] fstat(3, [pid 7162] <... set_robust_list resumed>) = 0 [pid 5001] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7161] memfd_create("syzkaller", 0 [pid 7159] <... futex resumed>) = 0 [pid 7130] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 95.038250][ T7134] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 95.050182][ T7155] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 95.057429][ T7133] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 4999] getdents64(3, [pid 7162] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7161] <... memfd_create resumed>) = 3 [pid 7159] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7130] <... futex resumed>) = 0 [pid 5004] <... umount2 resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5004] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... openat resumed>) = 3 [pid 4999] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] fstat(3, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./59/file0", [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] lstat("./58/binderfs", [pid 7162] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7161] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7133] <... fsconfig resumed>) = 0 [pid 7130] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5001] getdents64(3, [pid 7162] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7161] <... mmap resumed>) = 0x7f5047cf1000 [pid 7133] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7130] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5004] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7162] <... futex resumed>) = 0 [pid 7161] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7133] <... futex resumed>) = 0 [pid 7130] exit_group(0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] unlink("./58/binderfs" [pid 7161] <... write resumed>) = 262144 [pid 7130] <... exit_group resumed>) = ? [pid 5004] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] lstat("./57/file0", [pid 5001] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7162] +++ exited with 0 +++ [pid 7133] +++ exited with 0 +++ [pid 5004] <... openat resumed>) = 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... unlink resumed>) = 0 [pid 5004] fstat(4, [pid 5001] lstat("./58/binderfs", [pid 4999] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7161] munmap(0x7f5047cf1000, 262144 [pid 7130] +++ exited with 0 +++ [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7161] <... munmap resumed>) = 0 [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7130, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5004] getdents64(4, [pid 5002] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] unlink("./58/binderfs" [pid 7161] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5004] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7161] <... openat resumed>) = 4 [pid 5002] openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7161] ioctl(4, LOOP_SET_FD, 3 [pid 5002] <... openat resumed>) = 4 [pid 5004] getdents64(4, [pid 5002] fstat(4, [pid 5001] <... unlink resumed>) = 0 [pid 5005] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, [pid 5001] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] close(4 [pid 5002] rmdir("./57/file0" [pid 5005] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5004] <... close resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 4999] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] <... openat resumed>) = 3 [pid 5004] rmdir("./59/file0" [pid 5002] getdents64(3, [pid 5005] fstat(3, [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7161] <... ioctl resumed>) = 0 [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] <... rmdir resumed>) = 0 [pid 5002] close(3 [pid 7161] close(3 [pid 5002] <... close resumed>) = 0 [pid 7161] <... close resumed>) = 0 [pid 5002] rmdir("./57" [pid 7161] mkdir("./file0", 0777 [pid 5005] getdents64(3, [pid 5004] getdents64(3, [pid 5002] <... rmdir resumed>) = 0 [pid 4999] lstat("./58/file0", [pid 7161] <... mkdir resumed>) = 0 [pid 5005] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5004] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5002] mkdir("./58", 0777 [pid 7161] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5005] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] close(3 [pid 5002] <... mkdir resumed>) = 0 [ 95.091178][ T7133] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 95.126728][ T7161] loop1: detected capacity change from 0 to 512 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] <... close resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5005] lstat("./58/binderfs", [pid 5004] rmdir("./59" [pid 5002] <... openat resumed>) = 3 [pid 4999] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5005] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 5005] unlink("./58/binderfs" [pid 5004] <... rmdir resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7164 ./strace-static-x86_64: Process 7164 attached [pid 7164] set_robust_list(0x5555562025e0, 24) = 0 [pid 7164] chdir("./58") = 0 [pid 7164] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7164] <... prctl resumed>) = 0 [pid 5005] <... unlink resumed>) = 0 [pid 5005] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] mkdir("./60", 0777 [pid 4999] <... openat resumed>) = 4 [pid 4999] fstat(4, [pid 5004] <... mkdir resumed>) = 0 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] <... openat resumed>) = 3 [pid 4999] getdents64(4, [pid 7164] setpgid(0, 0 [pid 5004] ioctl(3, LOOP_CLR_FD [pid 4999] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5004] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5004] close(3 [pid 4999] getdents64(4, [pid 5004] <... close resumed>) = 0 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7164] <... setpgid resumed>) = 0 [pid 7164] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7164] write(3, "1000", 4) = 4 [pid 7164] close(3) = 0 [pid 7164] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7164] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7164] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7164] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7164] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7165], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7165 [pid 7164] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] close(4 [pid 7164] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4999] <... close resumed>) = 0 [pid 5004] <... clone resumed>, child_tidptr=0x5555562025d0) = 7166 [pid 4999] rmdir("./58/file0") = 0 [pid 4999] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./58"./strace-static-x86_64: Process 7165 attached ) = 0 [pid 4999] mkdir("./59", 0777 [pid 7165] set_robust_list(0x7f50501119e0, 24 [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 7165] <... set_robust_list resumed>) = 0 [pid 7165] memfd_create("syzkaller", 0) = 3 [pid 4999] <... close resumed>) = 0 [pid 7165] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7165] <... mmap resumed>) = 0x7f5047cf1000 [pid 7165] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 4999] <... clone resumed>, child_tidptr=0x5555562025d0) = 7168 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7168 attached [pid 7168] set_robust_list(0x5555562025e0, 24 [pid 5005] <... umount2 resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] lstat("./58/file0", [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] lstat("./58/file0", [pid 7168] <... set_robust_list resumed>) = 0 [pid 7168] chdir("./59") = 0 [pid 7168] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7168] setpgid(0, 0) = 0 [ 95.143673][ T7161] EXT4-fs: Ignoring removed oldalloc option [pid 7168] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 7166 attached ) = 3 [pid 7165] <... write resumed>) = 262144 [pid 5005] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7168] write(3, "1000", 4 [pid 7166] set_robust_list(0x5555562025e0, 24 [pid 7165] munmap(0x7f5047cf1000, 262144 [pid 5005] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7168] <... write resumed>) = 4 [pid 7166] <... set_robust_list resumed>) = 0 [pid 7165] <... munmap resumed>) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7168] close(3 [pid 7166] chdir("./60" [pid 7165] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5005] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... openat resumed>) = 4 [pid 7168] <... close resumed>) = 0 [pid 7166] <... chdir resumed>) = 0 [pid 7165] <... openat resumed>) = 4 [pid 5005] <... openat resumed>) = 4 [pid 7168] symlink("/dev/binderfs", "./binderfs" [pid 7166] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7165] ioctl(4, LOOP_SET_FD, 3 [pid 5005] fstat(4, [pid 5001] fstat(4, [pid 7168] <... symlink resumed>) = 0 [pid 7166] <... prctl resumed>) = 0 [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7168] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7168] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7166] setpgid(0, 0 [pid 5005] getdents64(4, [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7168] <... mmap resumed>) = 0x7f50500f1000 [pid 7166] <... setpgid resumed>) = 0 [pid 5005] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, [pid 7168] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7166] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5005] getdents64(4, [pid 5001] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7168] <... mprotect resumed>) = 0 [pid 7166] <... openat resumed>) = 3 [pid 7168] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7166] write(3, "1000", 4 [pid 5005] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] getdents64(4, [pid 7166] <... write resumed>) = 4 [pid 5005] close(4 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7168] <... clone resumed>, parent_tid=[7170], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7170 [pid 7166] close(3 [pid 7168] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7168] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7165] <... ioctl resumed>) = 0 [pid 5005] <... close resumed>) = 0 [pid 5001] close(4 [pid 5005] rmdir("./58/file0" [pid 5001] <... close resumed>) = 0 [pid 7166] <... close resumed>) = 0 [pid 7165] close(3 [pid 7166] symlink("/dev/binderfs", "./binderfs" [pid 5005] <... rmdir resumed>) = 0 [pid 5001] rmdir("./58/file0" [pid 7166] <... symlink resumed>) = 0 [pid 5005] getdents64(3, [pid 5001] <... rmdir resumed>) = 0 [pid 5005] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] getdents64(3, [pid 7166] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] close(3 [pid 5001] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5005] <... close resumed>) = 0 [pid 5005] rmdir("./58" [pid 7166] <... futex resumed>) = 0 [pid 5001] close(3./strace-static-x86_64: Process 7170 attached [pid 7166] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7165] <... close resumed>) = 0 [pid 5005] <... rmdir resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 7166] <... mmap resumed>) = 0x7f50500f1000 [pid 5005] mkdir("./59", 0777 [pid 5001] rmdir("./58" [pid 7170] set_robust_list(0x7f50501119e0, 24 [pid 7166] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 5005] <... mkdir resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 7170] <... set_robust_list resumed>) = 0 [pid 7166] <... mprotect resumed>) = 0 [pid 7165] mkdir("./file0", 0777 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] mkdir("./59", 0777 [pid 7170] memfd_create("syzkaller", 0 [pid 7166] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7165] <... mkdir resumed>) = 0 [pid 5005] <... openat resumed>) = 3 [pid 5001] <... mkdir resumed>) = 0 [pid 7170] <... memfd_create resumed>) = 3 [pid 7165] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [ 95.196071][ T7161] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 95.210040][ T7165] loop3: detected capacity change from 0 to 512 [ 95.229275][ T7161] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 5005] ioctl(3, LOOP_CLR_FD [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 7171 attached [pid 7170] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7166] <... clone resumed>, parent_tid=[7171], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7171 [pid 5005] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... openat resumed>) = 3 [pid 7170] <... mmap resumed>) = 0x7f5047cf1000 [pid 7166] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] close(3 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 7171] set_robust_list(0x7f50501119e0, 24 [pid 7170] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7166] <... futex resumed>) = 0 [pid 5005] <... close resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7171] <... set_robust_list resumed>) = 0 [pid 7170] <... write resumed>) = 262144 [pid 7166] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] close(3) = 0 [pid 5005] <... clone resumed>, child_tidptr=0x5555562025d0) = 7172 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7171] memfd_create("syzkaller", 0) = 3 [pid 5001] <... clone resumed>, child_tidptr=0x5555562025d0) = 7173 ./strace-static-x86_64: Process 7173 attached [pid 7171] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7170] munmap(0x7f5047cf1000, 262144 [pid 7161] <... mount resumed>) = 0 ./strace-static-x86_64: Process 7172 attached [pid 7173] set_robust_list(0x5555562025e0, 24 [pid 7171] <... mmap resumed>) = 0x7f5047cf1000 [pid 7170] <... munmap resumed>) = 0 [pid 7161] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7173] <... set_robust_list resumed>) = 0 [pid 7172] set_robust_list(0x5555562025e0, 24 [pid 7161] <... openat resumed>) = 3 [pid 7173] chdir("./59" [pid 7172] <... set_robust_list resumed>) = 0 [pid 7161] chdir("./file0" [pid 7173] <... chdir resumed>) = 0 [pid 7172] chdir("./59" [pid 7161] <... chdir resumed>) = 0 [pid 7173] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7172] <... chdir resumed>) = 0 [pid 7161] ioctl(4, LOOP_CLR_FD [pid 7173] <... prctl resumed>) = 0 [pid 7172] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7161] <... ioctl resumed>) = 0 [pid 7173] setpgid(0, 0 [pid 7172] <... prctl resumed>) = 0 [pid 7161] close(4 [pid 7173] <... setpgid resumed>) = 0 [pid 7172] setpgid(0, 0 [pid 7171] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7170] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7161] <... close resumed>) = 0 [pid 7173] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7172] <... setpgid resumed>) = 0 [pid 7161] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7173] <... openat resumed>) = 3 [pid 7172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7161] <... futex resumed>) = 1 [pid 7159] <... futex resumed>) = 0 [pid 7173] write(3, "1000", 4 [pid 7172] <... openat resumed>) = 3 [pid 7161] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7159] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7173] <... write resumed>) = 4 [pid 7172] write(3, "1000", 4 [pid 7161] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7159] <... futex resumed>) = 0 [pid 7173] close(3 [pid 7172] <... write resumed>) = 4 [pid 7161] fspick(AT_FDCWD, ".", 0 [pid 7159] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7173] <... close resumed>) = 0 [pid 7172] close(3 [pid 7161] <... fspick resumed>) = 4 [pid 7173] symlink("/dev/binderfs", "./binderfs" [pid 7172] <... close resumed>) = 0 [pid 7161] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7173] <... symlink resumed>) = 0 [pid 7172] symlink("/dev/binderfs", "./binderfs" [pid 7161] <... futex resumed>) = 1 [pid 7159] <... futex resumed>) = 0 [pid 7173] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7172] <... symlink resumed>) = 0 [pid 7161] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7159] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7173] <... futex resumed>) = 0 [pid 7172] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7161] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7159] <... futex resumed>) = 0 [pid 7173] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7172] <... futex resumed>) = 0 [pid 7161] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7159] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7173] <... mmap resumed>) = 0x7f50500f1000 [pid 7172] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7161] <... fsconfig resumed>) = 0 [pid 7173] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7172] <... mmap resumed>) = 0x7f50500f1000 [pid 7161] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7173] <... mprotect resumed>) = 0 [pid 7172] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7161] <... futex resumed>) = 1 [pid 7159] <... futex resumed>) = 0 [pid 7173] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7172] <... mprotect resumed>) = 0 [pid 7161] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7159] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7172] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7161] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7159] <... futex resumed>) = 0 [pid 7173] <... clone resumed>, parent_tid=[7176], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7176 [pid 7161] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7159] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7173] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7172] <... clone resumed>, parent_tid=[7177], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7177 [pid 7173] <... futex resumed>) = 0 [pid 7172] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7173] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7172] <... futex resumed>) = 0 [pid 7172] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7177 attached ./strace-static-x86_64: Process 7176 attached [pid 7171] <... write resumed>) = 262144 [pid 7170] <... openat resumed>) = 4 [pid 7176] set_robust_list(0x7f50501119e0, 24) = 0 [ 95.245246][ T7165] EXT4-fs: Ignoring removed oldalloc option [ 95.245377][ T7161] EXT4-fs (loop1): 1 truncate cleaned up [ 95.257850][ T7161] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.285834][ T7165] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7176] memfd_create("syzkaller", 0 [pid 7170] ioctl(4, LOOP_SET_FD, 3 [pid 7176] <... memfd_create resumed>) = 3 [pid 7176] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7176] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7176] munmap(0x7f5047cf1000, 262144) = 0 [pid 7176] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7177] set_robust_list(0x7f50501119e0, 24 [pid 7176] ioctl(4, LOOP_SET_FD, 3 [pid 7177] <... set_robust_list resumed>) = 0 [pid 7177] memfd_create("syzkaller", 0) = 3 [pid 7177] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7177] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7177] munmap(0x7f5047cf1000, 262144) = 0 [pid 7177] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 7177] ioctl(4, LOOP_SET_FD, 3 [pid 7171] munmap(0x7f5047cf1000, 262144 [pid 7170] <... ioctl resumed>) = 0 [pid 7176] <... ioctl resumed>) = 0 [pid 7176] close(3) = 0 [pid 7176] mkdir("./file0", 0777) = 0 [pid 7171] <... munmap resumed>) = 0 [pid 7170] close(3 [ 95.300016][ T7170] loop0: detected capacity change from 0 to 512 [ 95.304661][ T7176] loop2: detected capacity change from 0 to 512 [ 95.306549][ T7165] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 95.317568][ T7177] loop5: detected capacity change from 0 to 512 [ 95.334850][ T7161] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 7176] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7171] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7170] <... close resumed>) = 0 [pid 7159] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7159] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7159] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7159] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7159] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7178], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7178 [pid 7159] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7159] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7177] <... ioctl resumed>) = 0 [pid 7177] close(3) = 0 [pid 7177] mkdir("./file0", 0777) = 0 [pid 7177] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7171] <... openat resumed>) = 4 [pid 7170] mkdir("./file0", 0777 [pid 7171] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7178 attached [pid 7178] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7178] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7178] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7170] <... mkdir resumed>) = 0 [pid 7159] <... futex resumed>) = 0 [pid 7159] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7159] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7178] <... futex resumed>) = 1 [pid 7178] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7170] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7171] <... ioctl resumed>) = 0 [pid 7171] close(3 [pid 7165] <... mount resumed>) = 0 [pid 7165] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7171] <... close resumed>) = 0 [pid 7165] <... openat resumed>) = 3 [pid 7161] <... fsconfig resumed>) = 0 [pid 7171] mkdir("./file0", 0777 [pid 7161] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7171] <... mkdir resumed>) = 0 [pid 7161] <... futex resumed>) = 0 [pid 7171] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [ 95.335510][ T7176] EXT4-fs: Ignoring removed oldalloc option [ 95.347337][ T7165] EXT4-fs (loop3): 1 truncate cleaned up [ 95.354419][ T7177] EXT4-fs: Ignoring removed oldalloc option [ 95.363860][ T7171] loop4: detected capacity change from 0 to 512 [ 95.371532][ T7170] EXT4-fs: Ignoring removed oldalloc option [ 95.372762][ T7165] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.391162][ T7178] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [pid 7161] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7165] chdir("./file0") = 0 [pid 7165] ioctl(4, LOOP_CLR_FD) = 0 [pid 7165] close(4) = 0 [pid 7159] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7159] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7159] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7161] <... futex resumed>) = 0 [pid 7165] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7164] <... futex resumed>) = 0 [pid 7164] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7161] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7164] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7165] <... futex resumed>) = 1 [pid 7165] fspick(AT_FDCWD, ".", 0) = 4 [pid 7165] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7164] <... futex resumed>) = 0 [pid 7164] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7164] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7161] <... openat resumed>) = 5 [pid 7165] <... futex resumed>) = 1 [pid 7165] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 7165] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7164] <... futex resumed>) = 0 [pid 7164] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7165] <... futex resumed>) = 1 [pid 7164] <... futex resumed>) = 0 [pid 7165] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7164] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7161] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7159] <... futex resumed>) = 0 [ 95.395452][ T7171] EXT4-fs: Ignoring removed oldalloc option [ 95.400934][ T7178] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 95.432166][ T7176] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 95.434172][ T7170] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7161] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7164] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7164] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7164] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7164] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7164] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7186], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7186 [pid 7164] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7164] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7186 attached [pid 7178] <... fsconfig resumed>) = 0 [ 95.441130][ T7177] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 95.450247][ T7170] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 95.457201][ T7178] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 95.481141][ T7176] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 7186] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7186] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7186] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7164] <... futex resumed>) = 0 [pid 7186] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7164] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7164] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7178] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7178] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7159] exit_group(0) = ? [pid 7178] <... futex resumed>) = ? [pid 7178] +++ exited with 0 +++ [pid 7165] <... fsconfig resumed>) = 0 [pid 7161] <... futex resumed>) = ? [pid 7161] +++ exited with 0 +++ [pid 7159] +++ exited with 0 +++ [pid 7165] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7159, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 7165] <... futex resumed>) = 0 [pid 7165] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5000] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7170] <... mount resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 95.498020][ T7165] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 95.498821][ T7177] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 95.523466][ T7170] EXT4-fs (loop0): 1 truncate cleaned up [ 95.524481][ T7186] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 95.530039][ T7170] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7170] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7170] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 3 [pid 7170] chdir("./file0" [pid 5000] fstat(3, [pid 7170] <... chdir resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7170] ioctl(4, LOOP_CLR_FD [pid 5000] getdents64(3, [pid 7170] <... ioctl resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7170] close(4 [pid 5000] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7176] <... mount resumed>) = 0 [pid 7170] <... close resumed>) = 0 [pid 7164] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7170] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7170] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7176] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7176] chdir("./file0") = 0 [pid 7176] ioctl(4, LOOP_CLR_FD) = 0 [pid 7176] close(4) = 0 [pid 7176] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7176] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./60/binderfs") = 0 [pid 5000] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7173] <... futex resumed>) = 0 [pid 7168] <... futex resumed>) = 0 [pid 7164] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7173] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7165] <... futex resumed>) = 0 [pid 7164] <... futex resumed>) = 1 [pid 7173] <... futex resumed>) = 1 [pid 7164] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7173] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7165] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7168] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7165] <... openat resumed>) = 5 [pid 7176] <... futex resumed>) = 0 [pid 7170] <... futex resumed>) = 0 [pid 7168] <... futex resumed>) = 1 [pid 7165] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7170] fspick(AT_FDCWD, ".", 0) = 4 [pid 7170] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 95.553244][ T7176] EXT4-fs (loop2): 1 truncate cleaned up [ 95.559557][ T7186] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 95.567919][ T7176] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.568834][ T7177] EXT4-fs (loop5): 1 truncate cleaned up [ 95.586076][ T7171] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7170] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7176] fspick(AT_FDCWD, ".", 0 [pid 7168] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7165] <... futex resumed>) = 1 [pid 7164] <... futex resumed>) = 0 [pid 7176] <... fspick resumed>) = 4 [pid 7168] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7165] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7176] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7168] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7176] <... futex resumed>) = 1 [pid 7173] <... futex resumed>) = 0 [pid 7168] <... futex resumed>) = 1 [pid 7176] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7173] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7168] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7173] <... futex resumed>) = 0 [pid 7176] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7173] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7176] <... fsconfig resumed>) = 0 [pid 7176] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7170] <... futex resumed>) = 0 [pid 7176] <... futex resumed>) = 1 [pid 7173] <... futex resumed>) = 0 [pid 7170] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 7170] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7177] <... mount resumed>) = 0 [pid 7176] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7173] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7170] <... futex resumed>) = 1 [pid 7168] <... futex resumed>) = 0 [pid 7173] <... futex resumed>) = 0 [pid 7170] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7168] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7173] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7170] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7168] <... futex resumed>) = 0 [pid 7170] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7168] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7177] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7177] chdir("./file0") = 0 [pid 7177] ioctl(4, LOOP_CLR_FD) = 0 [ 95.600946][ T7177] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.624239][ T7171] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 95.641603][ T7176] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 7177] close(4) = 0 [pid 7177] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7177] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7172] <... futex resumed>) = 0 [pid 7176] <... fsconfig resumed>) = 0 [pid 7176] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7176] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7173] <... futex resumed>) = 0 [pid 7172] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7177] <... futex resumed>) = 0 [pid 7173] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7172] <... futex resumed>) = 1 [pid 7186] <... fsconfig resumed>) = 0 [pid 7177] fspick(AT_FDCWD, ".", 0 [pid 7173] <... futex resumed>) = 1 [pid 7172] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... umount2 resumed>) = 0 [pid 7176] <... futex resumed>) = 0 [pid 7176] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7176] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7176] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7186] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7186] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7168] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7177] <... fspick resumed>) = 4 [pid 7173] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7168] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7170] <... fsconfig resumed>) = 0 [pid 7170] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7170] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7177] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7173] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7168] <... futex resumed>) = 0 [pid 7164] exit_group(0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 95.653675][ T7186] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 95.666638][ T7170] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 95.679466][ T7171] EXT4-fs (loop4): 1 truncate cleaned up [ 95.691844][ T7171] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7186] <... futex resumed>) = ? [pid 7177] <... futex resumed>) = 1 [pid 7173] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7172] <... futex resumed>) = 0 [pid 7171] <... mount resumed>) = 0 [pid 7168] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7165] <... futex resumed>) = ? [pid 7164] <... exit_group resumed>) = ? [pid 5000] lstat("./60/file0", [pid 7186] +++ exited with 0 +++ [pid 7177] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7173] <... futex resumed>) = 1 [pid 7172] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7168] <... mmap resumed>) = 0x7f5047d10000 [pid 7165] +++ exited with 0 +++ [pid 7176] <... futex resumed>) = 0 [pid 7176] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7177] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7173] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7172] <... futex resumed>) = 0 [pid 7171] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7168] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7164] +++ exited with 0 +++ [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7177] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7172] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7168] <... mprotect resumed>) = 0 [pid 5000] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7177] <... fsconfig resumed>) = 0 [pid 7168] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7177] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7177] <... futex resumed>) = 1 [pid 7172] <... futex resumed>) = 0 [pid 7168] <... clone resumed>, parent_tid=[7190], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7190 [pid 5000] <... openat resumed>) = 4 [pid 7177] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7172] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7168] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] fstat(4, [pid 7177] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7172] <... futex resumed>) = 0 [pid 7168] <... futex resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7177] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7172] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7168] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 ./strace-static-x86_64: Process 7190 attached [pid 7171] <... openat resumed>) = 3 [pid 5000] rmdir("./60/file0" [pid 7171] chdir("./file0" [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7164, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 7171] <... chdir resumed>) = 0 [pid 7171] ioctl(4, LOOP_CLR_FD) = 0 [pid 5002] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7171] close(4 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7171] <... close resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7171] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... openat resumed>) = 3 [pid 7171] <... futex resumed>) = 1 [pid 7166] <... futex resumed>) = 0 [pid 5002] fstat(3, [pid 7171] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7166] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7171] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7166] <... futex resumed>) = 0 [pid 5002] getdents64(3, [pid 7171] fspick(AT_FDCWD, ".", 0 [pid 7166] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7171] <... fspick resumed>) = 4 [pid 5002] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7171] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7171] <... futex resumed>) = 1 [pid 7166] <... futex resumed>) = 0 [pid 5002] lstat("./58/binderfs", [pid 7171] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7166] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7190] set_robust_list(0x7f5047d309e0, 24 [pid 7171] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7166] <... futex resumed>) = 0 [pid 5002] unlink("./58/binderfs" [pid 7190] <... set_robust_list resumed>) = 0 [pid 7171] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7166] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... unlink resumed>) = 0 [pid 7190] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7171] <... fsconfig resumed>) = 0 [pid 5002] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7190] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7171] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7190] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7171] <... futex resumed>) = 1 [pid 7166] <... futex resumed>) = 0 [pid 7190] <... futex resumed>) = 1 [pid 7171] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7166] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7190] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7171] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7166] <... futex resumed>) = 0 [pid 7171] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7166] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7168] <... futex resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 7168] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7170] <... futex resumed>) = 0 [pid 7168] <... futex resumed>) = 1 [pid 7170] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7168] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] close(3 [pid 7177] <... fsconfig resumed>) = 0 [pid 7177] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 95.706423][ T7176] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 95.717384][ T7177] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 95.725077][ T7176] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 95.739225][ T7170] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 7177] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7173] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7172] <... futex resumed>) = 0 [pid 7173] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7172] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7173] <... futex resumed>) = 0 [pid 7172] <... futex resumed>) = 1 [pid 7173] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7172] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7177] <... futex resumed>) = 0 [pid 7173] <... mmap resumed>) = 0x7f5047d10000 [pid 7177] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7173] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7177] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7173] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5000] <... close resumed>) = 0 [pid 5000] rmdir("./60" [pid 7173] <... clone resumed>, parent_tid=[7192], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7192 [pid 5000] <... rmdir resumed>) = 0 [pid 7173] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7173] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] mkdir("./61", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7193 ./strace-static-x86_64: Process 7192 attached ./strace-static-x86_64: Process 7193 attached [pid 7192] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7192] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7193] set_robust_list(0x5555562025e0, 24 [pid 7177] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7166] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7193] <... set_robust_list resumed>) = 0 [pid 7177] <... futex resumed>) = 1 [pid 7166] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7172] <... futex resumed>) = 0 [pid 7166] <... futex resumed>) = 0 [pid 7177] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7172] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7166] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7177] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7172] <... futex resumed>) = 0 [pid 7166] <... mmap resumed>) = 0x7f5047d10000 [pid 7172] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7177] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7193] chdir("./61" [pid 7192] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7193] <... chdir resumed>) = 0 [pid 7193] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7193] setpgid(0, 0 [pid 7192] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7168] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7168] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7168] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7193] <... setpgid resumed>) = 0 [pid 7173] <... futex resumed>) = 0 [pid 7192] <... futex resumed>) = 1 [pid 7193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7192] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7193] <... openat resumed>) = 3 [pid 7193] write(3, "1000", 4) = 4 [pid 7193] close(3) = 0 [pid 7193] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7193] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7193] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7193] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7195], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7195 [pid 7193] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7193] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7190] <... futex resumed>) = 0 [pid 7190] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7166] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7190] <... openat resumed>) = 5 [ 95.749902][ T7171] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 95.762560][ T7170] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 95.787926][ T7177] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [pid 7166] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7190] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7171] <... fsconfig resumed>) = 0 [pid 7190] <... futex resumed>) = 1 [pid 7171] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7168] <... futex resumed>) = 0 [pid 7166] <... clone resumed>, parent_tid=[7197], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7197 [pid 7190] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7171] <... futex resumed>) = 0 [pid 7166] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7197 attached [pid 7197] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7171] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7166] <... futex resumed>) = 0 [pid 7166] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7170] <... fsconfig resumed>) = 0 [pid 7170] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7197] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7197] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7166] <... futex resumed>) = 0 [pid 7166] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7166] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7197] <... futex resumed>) = 1 [pid 7197] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7195 attached [pid 7195] set_robust_list(0x7f50501119e0, 24 [pid 7171] <... futex resumed>) = 0 [pid 7195] <... set_robust_list resumed>) = 0 [pid 7195] memfd_create("syzkaller", 0 [pid 7176] <... fsconfig resumed>) = 0 [pid 7171] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7170] <... futex resumed>) = 0 [pid 7168] exit_group(0 [pid 7195] <... memfd_create resumed>) = 3 [pid 7190] <... futex resumed>) = ? [pid 7176] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7172] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7168] <... exit_group resumed>) = ? [pid 5002] <... umount2 resumed>) = 0 [pid 7195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7190] +++ exited with 0 +++ [pid 7176] <... futex resumed>) = 0 [pid 7172] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7170] +++ exited with 0 +++ [pid 7168] +++ exited with 0 +++ [ 95.800793][ T7176] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 95.801130][ T7177] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 95.820676][ T7170] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 95.838859][ T7171] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [pid 7176] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7172] <... futex resumed>) = 0 [pid 7172] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7172] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7172] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7199], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7199 [pid 7172] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7172] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7195] <... mmap resumed>) = 0x7f5047cf1000 [pid 7177] <... fsconfig resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7199 attached [pid 7199] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7199] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 ENOSPC (No space left on device) [pid 7199] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7172] <... futex resumed>) = 0 [pid 7199] <... futex resumed>) = 1 [pid 7199] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7195] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7177] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7173] exit_group(0 [pid 5002] lstat("./58/file0", [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7168, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 7192] <... futex resumed>) = ? [pid 7177] <... futex resumed>) = 0 [pid 7176] <... futex resumed>) = ? [pid 7173] <... exit_group resumed>) = ? [pid 7172] exit_group(0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7199] <... futex resumed>) = ? [pid 7195] <... write resumed>) = 262144 [pid 7192] +++ exited with 0 +++ [pid 7176] +++ exited with 0 +++ [pid 7173] +++ exited with 0 +++ [pid 7172] <... exit_group resumed>) = ? [pid 5002] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7195] munmap(0x7f5047cf1000, 262144 [pid 7177] +++ exited with 0 +++ [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7173, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 4999] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... openat resumed>) = 3 [pid 5002] <... openat resumed>) = 4 [pid 4999] fstat(3, [pid 5002] fstat(4, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, [pid 5002] getdents64(4, [pid 4999] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] getdents64(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 4999] lstat("./59/binderfs", [pid 5002] close(4 [pid 5001] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7195] <... munmap resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] unlink("./59/binderfs" [pid 7195] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] rmdir("./58/file0" [pid 5001] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... unlink resumed>) = 0 [pid 7195] <... openat resumed>) = 4 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 4999] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7195] ioctl(4, LOOP_SET_FD, 3 [pid 5002] getdents64(3, [pid 5001] fstat(3, [pid 7166] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7166] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] close(3 [pid 5001] getdents64(3, [pid 7197] <... futex resumed>) = 0 [pid 7166] <... futex resumed>) = 1 [pid 5002] <... close resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7197] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7166] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] rmdir("./58" [pid 5001] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7197] <... openat resumed>) = 5 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7197] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] mkdir("./59", 0777 [pid 5001] lstat("./59/binderfs", [pid 7197] <... futex resumed>) = 1 [pid 7166] <... futex resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7197] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5001] unlink("./59/binderfs" [pid 7199] +++ exited with 0 +++ [pid 7172] +++ exited with 0 +++ [pid 5002] <... openat resumed>) = 3 [pid 5001] <... unlink resumed>) = 0 [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7172, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5001] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 7195] <... ioctl resumed>) = 0 [pid 7171] <... fsconfig resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 7195] close(3 [pid 7171] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7195] <... close resumed>) = 0 [pid 7166] exit_group(0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... umount2 resumed>) = 0 [pid 7197] <... futex resumed>) = ? [pid 7195] mkdir("./file0", 0777 [pid 7171] <... futex resumed>) = ? [pid 7166] <... exit_group resumed>) = ? [pid 7197] +++ exited with 0 +++ [pid 7195] <... mkdir resumed>) = 0 [pid 7171] +++ exited with 0 +++ [pid 4999] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 95.853324][ T7177] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 95.864799][ T7171] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 95.884833][ T7195] loop1: detected capacity change from 0 to 512 [ 95.893507][ T7171] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 7195] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"..../strace-static-x86_64: Process 7201 attached [pid 7166] +++ exited with 0 +++ [pid 5005] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... clone resumed>, child_tidptr=0x5555562025d0) = 7201 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7201] set_robust_list(0x5555562025e0, 24 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./59/file0", [pid 7201] <... set_robust_list resumed>) = 0 [pid 5005] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7166, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7201] chdir("./59" [pid 5005] <... openat resumed>) = 3 [pid 5004] restart_syscall(<... resuming interrupted clone ...> [pid 4999] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7201] <... chdir resumed>) = 0 [pid 5005] fstat(3, [pid 5004] <... restart_syscall resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7201] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7201] <... prctl resumed>) = 0 [pid 5005] getdents64(3, [pid 4999] <... openat resumed>) = 4 [pid 7201] setpgid(0, 0 [pid 5005] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5004] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] fstat(4, [pid 7201] <... setpgid resumed>) = 0 [pid 5005] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7201] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] getdents64(4, [pid 7201] <... openat resumed>) = 3 [pid 5005] lstat("./59/binderfs", [pid 5004] <... openat resumed>) = 3 [pid 4999] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7201] write(3, "1000", 4 [pid 5005] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5004] fstat(3, [pid 4999] getdents64(4, [pid 7201] <... write resumed>) = 4 [pid 5005] unlink("./59/binderfs" [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7201] close(3 [pid 5005] <... unlink resumed>) = 0 [pid 5004] getdents64(3, [pid 4999] close(4 [pid 7201] <... close resumed>) = 0 [pid 5005] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] <... close resumed>) = 0 [pid 7201] symlink("/dev/binderfs", "./binderfs" [pid 5004] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] rmdir("./59/file0" [pid 7201] <... symlink resumed>) = 0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... rmdir resumed>) = 0 [pid 7201] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] lstat("./60/binderfs", [pid 4999] getdents64(3, [pid 7201] <... futex resumed>) = 0 [pid 5004] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7201] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5004] unlink("./60/binderfs" [pid 4999] close(3 [pid 7201] <... mmap resumed>) = 0x7f50500f1000 [pid 5004] <... unlink resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 7201] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 5004] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] rmdir("./59" [pid 7201] <... mprotect resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 7201] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] mkdir("./60", 0777) = 0 [pid 7201] <... clone resumed>, parent_tid=[7202], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7202 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7201] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... openat resumed>) = 3 [pid 7201] <... futex resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 7201] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7203 ./strace-static-x86_64: Process 7202 attached [pid 7202] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7202] memfd_create("syzkaller", 0./strace-static-x86_64: Process 7203 attached [pid 7203] set_robust_list(0x5555562025e0, 24) = 0 [pid 7203] chdir("./60" [pid 7202] <... memfd_create resumed>) = 3 [pid 7202] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7203] <... chdir resumed>) = 0 [pid 7203] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7203] setpgid(0, 0) = 0 [pid 7202] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./59/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7203] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5005] <... umount2 resumed>) = 0 [pid 5001] getdents64(4, [pid 7203] <... openat resumed>) = 3 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5005] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] close(4 [pid 7203] write(3, "1000", 4 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] <... umount2 resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 7203] <... write resumed>) = 4 [pid 5005] lstat("./59/file0", [pid 5004] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 95.913883][ T7195] EXT4-fs: Ignoring removed oldalloc option [pid 5001] rmdir("./59/file0" [pid 7203] close(3 [pid 5005] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... rmdir resumed>) = 0 [pid 7203] <... close resumed>) = 0 [pid 5005] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] lstat("./60/file0", [pid 5001] getdents64(3, [pid 7203] symlink("/dev/binderfs", "./binderfs" [pid 7202] <... write resumed>) = 262144 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7202] munmap(0x7f5047cf1000, 262144 [pid 5005] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5004] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7202] <... munmap resumed>) = 0 [pid 5005] <... openat resumed>) = 4 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7202] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5005] fstat(4, [pid 5004] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7202] <... openat resumed>) = 4 [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] <... openat resumed>) = 4 [pid 7202] ioctl(4, LOOP_SET_FD, 3 [pid 5005] getdents64(4, [pid 5004] fstat(4, [pid 7203] <... symlink resumed>) = 0 [pid 5005] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] close(3 [pid 5005] getdents64(4, [pid 5004] getdents64(4, [pid 5005] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5004] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5005] close(4 [pid 5004] getdents64(4, [pid 5005] <... close resumed>) = 0 [pid 5004] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5005] rmdir("./59/file0" [pid 5004] close(4 [pid 5005] <... rmdir resumed>) = 0 [pid 5004] <... close resumed>) = 0 [pid 5005] getdents64(3, [pid 5004] rmdir("./60/file0" [pid 5005] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5004] <... rmdir resumed>) = 0 [pid 5005] close(3 [pid 5004] getdents64(3, [pid 5005] <... close resumed>) = 0 [pid 5004] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5005] rmdir("./59" [pid 5004] close(3 [pid 5005] <... rmdir resumed>) = 0 [pid 5004] <... close resumed>) = 0 [pid 5005] mkdir("./60", 0777 [pid 5004] rmdir("./60" [pid 5005] <... mkdir resumed>) = 0 [pid 5004] <... rmdir resumed>) = 0 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5004] mkdir("./61", 0777 [pid 5005] <... openat resumed>) = 3 [pid 5004] <... mkdir resumed>) = 0 [pid 5005] ioctl(3, LOOP_CLR_FD [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5005] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5004] <... openat resumed>) = 3 [pid 5005] close(3 [pid 5004] ioctl(3, LOOP_CLR_FD [pid 7203] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... close resumed>) = 0 [pid 5004] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... close resumed>) = 0 [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5004] close(3 [pid 7203] <... futex resumed>) = 0 [pid 5004] <... close resumed>) = 0 [pid 5001] rmdir("./59" [pid 5005] <... clone resumed>, child_tidptr=0x5555562025d0) = 7206 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7207 ./strace-static-x86_64: Process 7206 attached [pid 7206] set_robust_list(0x5555562025e0, 24) = 0 [pid 7206] chdir("./60") = 0 [pid 7206] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7206] setpgid(0, 0 [pid 7202] <... ioctl resumed>) = 0 [pid 7202] close(3) = 0 [pid 7206] <... setpgid resumed>) = 0 [pid 7202] mkdir("./file0", 0777 [pid 7206] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7202] <... mkdir resumed>) = 0 [pid 7206] <... openat resumed>) = 3 [pid 7206] write(3, "1000", 4) = 4 [pid 7206] close(3 [pid 7203] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7202] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7206] <... close resumed>) = 0 [pid 7206] symlink("/dev/binderfs", "./binderfs" [pid 5001] <... rmdir resumed>) = 0 [pid 7203] <... mmap resumed>) = 0x7f50500f1000 [ 95.978239][ T7195] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 95.985369][ T7202] loop3: detected capacity change from 0 to 512 [ 95.988924][ T7195] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 96.009180][ T7195] EXT4-fs (loop1): 1 truncate cleaned up [ 96.015190][ T7195] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/61/file0 supports timestamps until 2038-01-19 (0x7fffffff) ./strace-static-x86_64: Process 7207 attached [pid 7206] <... symlink resumed>) = 0 [pid 7203] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7195] <... mount resumed>) = 0 [pid 5001] mkdir("./60", 0777 [pid 7207] set_robust_list(0x5555562025e0, 24 [pid 7206] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7203] <... mprotect resumed>) = 0 [pid 7195] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] <... mkdir resumed>) = 0 [pid 7207] <... set_robust_list resumed>) = 0 [pid 7206] <... futex resumed>) = 0 [pid 7203] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7195] <... openat resumed>) = 3 [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7207] chdir("./61") = 0 [pid 5001] <... openat resumed>) = 3 [pid 7207] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7206] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7203] <... clone resumed>, parent_tid=[7208], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7208 [pid 7195] chdir("./file0" [pid 5001] ioctl(3, LOOP_CLR_FD [pid 7207] <... prctl resumed>) = 0 [pid 7203] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7208 attached ) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7207] setpgid(0, 0 [pid 7203] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5001] close(3 [pid 7207] <... setpgid resumed>) = 0 [pid 7208] set_robust_list(0x7f50501119e0, 24 [pid 5001] <... close resumed>) = 0 [pid 7208] <... set_robust_list resumed>) = 0 [pid 7207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7207] <... openat resumed>) = 3 [pid 7207] write(3, "1000", 4 [pid 7208] memfd_create("syzkaller", 0 [pid 7207] <... write resumed>) = 4 [pid 5001] <... clone resumed>, child_tidptr=0x5555562025d0) = 7209 [pid 7207] close(3 [pid 7208] <... memfd_create resumed>) = 3 [pid 7207] <... close resumed>) = 0 [pid 7207] symlink("/dev/binderfs", "./binderfs" [pid 7208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7207] <... symlink resumed>) = 0 [pid 7208] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7207] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7195] <... chdir resumed>) = 0 [pid 7207] <... futex resumed>) = 0 [pid 7206] <... mmap resumed>) = 0x7f50500f1000 [pid 7195] ioctl(4, LOOP_CLR_FD [pid 7207] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7195] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 7209 attached [pid 7209] set_robust_list(0x5555562025e0, 24 [pid 7207] <... mmap resumed>) = 0x7f50500f1000 [pid 7195] close(4 [pid 7207] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7195] <... close resumed>) = 0 [pid 7207] <... mprotect resumed>) = 0 [pid 7195] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7209] <... set_robust_list resumed>) = 0 [pid 7207] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7206] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7195] <... futex resumed>) = 1 [pid 7193] <... futex resumed>) = 0 [pid 7209] chdir("./60" [pid 7195] fspick(AT_FDCWD, ".", 0 [pid 7193] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7209] <... chdir resumed>) = 0 [pid 7207] <... clone resumed>, parent_tid=[7211], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7211 [pid 7193] <... futex resumed>) = 0 [pid 7209] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7208] <... write resumed>) = 262144 [pid 7207] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7206] <... mprotect resumed>) = 0 [pid 7195] <... fspick resumed>) = 4 [pid 7193] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7209] <... prctl resumed>) = 0 [pid 7208] munmap(0x7f5047cf1000, 262144 [pid 7207] <... futex resumed>) = 0 [pid 7195] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7209] setpgid(0, 0 [pid 7207] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7206] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7195] <... futex resumed>) = 1 [pid 7193] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7211 attached [pid 7209] <... setpgid resumed>) = 0 [pid 7208] <... munmap resumed>) = 0 [pid 7195] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7193] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7211] set_robust_list(0x7f50501119e0, 24 [pid 7209] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7208] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7195] <... fsconfig resumed>) = 0 [pid 7193] <... futex resumed>) = 0 [pid 7211] <... set_robust_list resumed>) = 0 [pid 7209] <... openat resumed>) = 3 [pid 7208] <... openat resumed>) = 4 [pid 7206] <... clone resumed>, parent_tid=[7212], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7212 [pid 7195] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7193] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7211] memfd_create("syzkaller", 0 [pid 7209] write(3, "1000", 4 [pid 7208] ioctl(4, LOOP_SET_FD, 3 [pid 7206] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7195] <... futex resumed>) = 0 [pid 7193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) ./strace-static-x86_64: Process 7212 attached [pid 7211] <... memfd_create resumed>) = 3 [pid 7209] <... write resumed>) = 4 [pid 7206] <... futex resumed>) = 0 [pid 7195] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7193] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7212] set_robust_list(0x7f50501119e0, 24 [pid 7206] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7193] <... futex resumed>) = 0 [pid 7212] <... set_robust_list resumed>) = 0 [pid 7195] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7193] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7212] memfd_create("syzkaller", 0 [pid 7211] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7209] close(3 [pid 7212] <... memfd_create resumed>) = 3 [pid 7212] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7212] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7212] munmap(0x7f5047cf1000, 262144) = 0 [ 96.029678][ T7202] EXT4-fs: Ignoring removed oldalloc option [ 96.055545][ T7208] loop0: detected capacity change from 0 to 512 [pid 7209] <... close resumed>) = 0 [pid 7212] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7211] <... mmap resumed>) = 0x7f5047cf1000 [pid 7208] <... ioctl resumed>) = 0 [pid 7212] <... openat resumed>) = 4 [pid 7212] ioctl(4, LOOP_SET_FD, 3 [pid 7211] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7209] symlink("/dev/binderfs", "./binderfs" [pid 7208] close(3 [pid 7195] <... fsconfig resumed>) = 0 [pid 7211] <... write resumed>) = 262144 [pid 7209] <... symlink resumed>) = 0 [pid 7208] <... close resumed>) = 0 [pid 7195] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7211] munmap(0x7f5047cf1000, 262144 [pid 7209] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7208] mkdir("./file0", 0777 [pid 7195] <... futex resumed>) = 1 [pid 7193] <... futex resumed>) = 0 [pid 7211] <... munmap resumed>) = 0 [pid 7209] <... futex resumed>) = 0 [pid 7208] <... mkdir resumed>) = 0 [pid 7195] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7193] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7211] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7209] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7208] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7195] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7193] <... futex resumed>) = 0 [pid 7211] <... openat resumed>) = 4 [pid 7209] <... mmap resumed>) = 0x7f50500f1000 [ 96.072804][ T7202] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 96.081574][ T7195] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 96.083615][ T7202] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 96.095111][ T7212] loop5: detected capacity change from 0 to 512 [ 96.114115][ T7202] EXT4-fs (loop3): 1 truncate cleaned up [ 96.119208][ T7208] EXT4-fs: Ignoring removed oldalloc option [pid 7212] <... ioctl resumed>) = 0 [pid 7211] ioctl(4, LOOP_SET_FD, 3 [pid 7209] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7195] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7193] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7212] close(3 [pid 7209] <... mprotect resumed>) = 0 [pid 7195] <... futex resumed>) = 0 [pid 7193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7212] <... close resumed>) = 0 [pid 7209] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7195] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7193] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7212] mkdir("./file0", 0777 [pid 7195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7193] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7214 attached [pid 7209] <... clone resumed>, parent_tid=[7214], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7214 [pid 7202] <... mount resumed>) = 0 [pid 7195] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7193] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7209] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7211] <... ioctl resumed>) = 0 [pid 7211] close(3) = 0 [pid 7211] mkdir("./file0", 0777) = 0 [pid 7211] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7214] set_robust_list(0x7f50501119e0, 24 [pid 7212] <... mkdir resumed>) = 0 [pid 7209] <... futex resumed>) = 0 [pid 7202] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7214] <... set_robust_list resumed>) = 0 [pid 7212] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7209] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7202] <... openat resumed>) = 3 [ 96.121186][ T7202] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.126557][ T7211] loop4: detected capacity change from 0 to 512 [ 96.148128][ T7195] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 96.150327][ T7211] EXT4-fs: Ignoring removed oldalloc option [ 96.158939][ T7195] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 96.172966][ T7212] EXT4-fs: Ignoring removed oldalloc option [pid 7214] memfd_create("syzkaller", 0) = 3 [pid 7202] chdir("./file0" [pid 7214] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7202] <... chdir resumed>) = 0 [pid 7214] <... mmap resumed>) = 0x7f5047cf1000 [pid 7202] ioctl(4, LOOP_CLR_FD [pid 7214] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7202] <... ioctl resumed>) = 0 [pid 7202] close(4) = 0 [pid 7214] <... write resumed>) = 262144 [pid 7202] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7201] <... futex resumed>) = 0 [pid 7202] fspick(AT_FDCWD, ".", 0 [pid 7201] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7202] <... fspick resumed>) = 4 [pid 7201] <... futex resumed>) = 0 [pid 7202] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7201] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7202] <... futex resumed>) = 0 [pid 7201] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7214] munmap(0x7f5047cf1000, 262144 [pid 7202] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7201] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7214] <... munmap resumed>) = 0 [pid 7202] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7201] <... futex resumed>) = 0 [pid 7214] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7202] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7201] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7214] <... openat resumed>) = 4 [pid 7202] <... fsconfig resumed>) = 0 [pid 7214] ioctl(4, LOOP_SET_FD, 3 [pid 7202] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7201] <... futex resumed>) = 0 [pid 7193] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7202] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7201] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7193] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7202] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7201] <... futex resumed>) = 0 [ 96.173959][ T7208] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 96.190282][ T7208] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 96.207223][ T7214] loop2: detected capacity change from 0 to 512 [ 96.214659][ T7208] EXT4-fs (loop0): 1 truncate cleaned up [pid 7193] <... futex resumed>) = 0 [pid 7214] <... ioctl resumed>) = 0 [pid 7208] <... mount resumed>) = 0 [pid 7202] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7201] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7214] close(3 [pid 7208] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7214] <... close resumed>) = 0 [pid 7208] <... openat resumed>) = 3 [pid 7214] mkdir("./file0", 0777 [pid 7208] chdir("./file0" [pid 7214] <... mkdir resumed>) = 0 [pid 7208] <... chdir resumed>) = 0 [pid 7214] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7208] ioctl(4, LOOP_CLR_FD) = 0 [pid 7193] <... mmap resumed>) = 0x7f5047d10000 [ 96.221609][ T7208] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.222153][ T7211] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 96.239274][ T7214] EXT4-fs: Ignoring removed oldalloc option [ 96.243299][ T7212] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 96.260877][ T7212] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 7208] close(4) = 0 [pid 7193] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7208] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7203] <... futex resumed>) = 0 [pid 7208] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7203] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7203] <... futex resumed>) = 0 [pid 7208] fspick(AT_FDCWD, ".", 0 [pid 7203] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7208] <... fspick resumed>) = 4 [pid 7208] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7203] <... futex resumed>) = 0 [pid 7208] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7203] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7203] <... futex resumed>) = 0 [pid 7208] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7203] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7208] <... fsconfig resumed>) = 0 [pid 7208] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7203] <... futex resumed>) = 0 [pid 7208] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7203] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7203] <... futex resumed>) = 0 [pid 7208] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7203] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7193] <... mprotect resumed>) = 0 [pid 7201] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7201] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7193] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7203] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7201] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7223 attached [pid 7201] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7195] <... fsconfig resumed>) = 0 [pid 7193] <... clone resumed>, parent_tid=[7223], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7223 [pid 7203] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7203] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [ 96.266787][ T7211] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 96.279113][ T7202] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 96.301246][ T7208] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 96.301934][ T7195] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 96.323349][ T7211] EXT4-fs (loop4): 1 truncate cleaned up [pid 7203] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7203] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7225], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7225 [pid 7203] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7203] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7225 attached [pid 7223] set_robust_list(0x7f5047d309e0, 24 [pid 7201] <... mmap resumed>) = 0x7f5047d10000 [pid 7195] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7193] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7211] <... mount resumed>) = 0 [pid 7211] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7211] chdir("./file0") = 0 [pid 7211] ioctl(4, LOOP_CLR_FD) = 0 [pid 7211] close(4 [pid 7225] set_robust_list(0x7f5047d309e0, 24 [pid 7223] <... set_robust_list resumed>) = 0 [pid 7208] <... fsconfig resumed>) = 0 [pid 7202] <... fsconfig resumed>) = 0 [pid 7201] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7195] <... futex resumed>) = 0 [pid 7193] <... futex resumed>) = 0 [pid 7208] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7208] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7223] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7211] <... close resumed>) = 0 [pid 7195] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7193] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7201] <... mprotect resumed>) = 0 [pid 7225] <... set_robust_list resumed>) = 0 [pid 7225] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7202] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7201] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7225] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7223] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7212] <... mount resumed>) = 0 [pid 7211] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7202] <... futex resumed>) = 0 [pid 7225] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7223] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7202] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7201] <... clone resumed>, parent_tid=[7226], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7226 [pid 7225] <... futex resumed>) = 1 [pid 7223] <... futex resumed>) = 1 [pid 7201] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7193] <... futex resumed>) = 0 [pid 7225] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7223] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7201] <... futex resumed>) = 0 [pid 7193] exit_group(0 [pid 7223] <... futex resumed>) = ? [pid 7201] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7195] <... futex resumed>) = ? [pid 7193] <... exit_group resumed>) = ? [pid 7223] +++ exited with 0 +++ [pid 7195] +++ exited with 0 +++ [pid 7193] +++ exited with 0 +++ [ 96.329778][ T7212] EXT4-fs (loop5): 1 truncate cleaned up [ 96.335170][ T7211] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.336043][ T7212] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.363995][ T7214] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] ./strace-static-x86_64: Process 7226 attached [pid 7212] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7211] <... futex resumed>) = 1 [pid 7207] <... futex resumed>) = 0 [pid 7203] <... futex resumed>) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7193, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7212] <... openat resumed>) = 3 [pid 7207] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7203] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7212] chdir("./file0" [pid 7211] fspick(AT_FDCWD, ".", 0 [pid 7208] <... futex resumed>) = 0 [pid 7207] <... futex resumed>) = 0 [pid 7203] <... futex resumed>) = 1 [pid 7212] <... chdir resumed>) = 0 [pid 7211] <... fspick resumed>) = 4 [pid 7208] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7207] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7203] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7226] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7226] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 5000] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7226] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7226] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7226] <... futex resumed>) = 1 [pid 7201] <... futex resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 7226] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7201] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] fstat(3, [pid 7202] <... futex resumed>) = 0 [pid 7201] <... futex resumed>) = 1 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7202] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7201] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] getdents64(3, [pid 7212] ioctl(4, LOOP_CLR_FD [pid 7211] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7207] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5000] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7212] <... ioctl resumed>) = 0 [pid 7211] <... futex resumed>) = 0 [pid 7207] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7212] close(4 [pid 7211] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7207] <... futex resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7212] <... close resumed>) = 0 [pid 7211] <... fsconfig resumed>) = 0 [pid 7207] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] lstat("./61/binderfs", [pid 7212] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7211] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7207] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 96.374094][ T7214] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 96.381179][ T7208] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 96.397449][ T7202] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 96.409012][ T7202] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 96.417469][ T7208] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7212] <... futex resumed>) = 1 [pid 7211] <... futex resumed>) = 0 [pid 7207] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] unlink("./61/binderfs" [pid 7212] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7211] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7207] <... futex resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 7207] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7206] <... futex resumed>) = 0 [pid 7206] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7212] <... futex resumed>) = 0 [pid 7206] <... futex resumed>) = 1 [pid 7212] fspick(AT_FDCWD, ".", 0 [pid 7206] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7214] <... mount resumed>) = 0 [pid 7214] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7214] chdir("./file0") = 0 [pid 7214] ioctl(4, LOOP_CLR_FD) = 0 [pid 7214] close(4) = 0 [pid 7214] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7209] <... futex resumed>) = 0 [pid 7209] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7209] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7214] <... futex resumed>) = 1 [pid 7214] fspick(AT_FDCWD, ".", 0) = 4 [pid 7214] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7209] <... futex resumed>) = 0 [pid 7209] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7209] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7214] <... futex resumed>) = 1 [pid 7214] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 7214] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7209] <... futex resumed>) = 0 [pid 7209] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7209] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7214] <... futex resumed>) = 1 [pid 7214] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7212] <... fspick resumed>) = 4 [pid 7212] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7206] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7212] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7206] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7212] <... futex resumed>) = 0 [pid 7206] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7212] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 7212] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7206] <... futex resumed>) = 0 [pid 7212] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7206] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7212] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7206] <... futex resumed>) = 0 [pid 7203] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7206] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7203] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7225] <... futex resumed>) = 0 [pid 7203] <... futex resumed>) = 1 [pid 7225] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7203] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7225] <... openat resumed>) = 5 [pid 7225] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7203] <... futex resumed>) = 0 [ 96.426479][ T7214] EXT4-fs (loop2): 1 truncate cleaned up [ 96.436310][ T7214] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.463858][ T7211] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 7225] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7201] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7201] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7226] <... futex resumed>) = 0 [pid 7201] <... futex resumed>) = 1 [pid 7226] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7201] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7207] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7207] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7207] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7226] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7207] <... mmap resumed>) = 0x7f5047d10000 [pid 7226] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7207] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7226] <... futex resumed>) = 1 [pid 7207] <... mprotect resumed>) = 0 [pid 7201] <... futex resumed>) = 0 [pid 7226] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7207] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7229], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7229 [pid 7207] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7207] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7211] <... fsconfig resumed>) = 0 [pid 7211] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7211] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7209] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5000] <... umount2 resumed>) = 0 [pid 7209] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7209] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7209] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7209] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7230], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7230 [pid 7209] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7209] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7206] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7206] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7206] <... futex resumed>) = 0 [pid 7206] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 7230 attached ./strace-static-x86_64: Process 7229 attached [pid 7214] <... fsconfig resumed>) = 0 [pid 7212] <... fsconfig resumed>) = 0 [pid 7206] <... mmap resumed>) = 0x7f5047d10000 [pid 7202] <... fsconfig resumed>) = 0 [pid 5000] lstat("./61/file0", [pid 7206] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7206] <... mprotect resumed>) = 0 [pid 5000] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7206] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7206] <... clone resumed>, parent_tid=[7231], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7231 [pid 5000] <... openat resumed>) = 4 [pid 7206] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] fstat(4, [pid 7229] set_robust_list(0x7f5047d309e0, 24 [pid 7206] <... futex resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7229] <... set_robust_list resumed>) = 0 [pid 7206] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7202] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] getdents64(4, [pid 7230] set_robust_list(0x7f5047d309e0, 24 [pid 7229] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7214] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7212] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7202] <... futex resumed>) = 0 [pid 7201] exit_group(0 [pid 5000] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 7231 attached [pid 7230] <... set_robust_list resumed>) = 0 [pid 7229] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7226] <... futex resumed>) = ? [pid 7214] <... futex resumed>) = 0 [pid 7212] <... futex resumed>) = 0 [pid 7201] <... exit_group resumed>) = ? [pid 5000] getdents64(4, [pid 7231] set_robust_list(0x7f5047d309e0, 24 [pid 7230] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7229] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7226] +++ exited with 0 +++ [pid 7214] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7212] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7202] +++ exited with 0 +++ [pid 5000] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7231] <... set_robust_list resumed>) = 0 [pid 7230] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7229] <... futex resumed>) = 1 [pid 7207] <... futex resumed>) = 0 [pid 7201] +++ exited with 0 +++ [pid 5000] close(4 [pid 7231] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7230] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7229] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7208] <... fsconfig resumed>) = 0 [pid 7207] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7231] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7230] <... futex resumed>) = 1 [pid 7211] <... futex resumed>) = 0 [pid 7209] <... futex resumed>) = 0 [pid 7208] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7207] <... futex resumed>) = 1 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7201, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5000] <... close resumed>) = 0 [pid 7231] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7230] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [ 96.474530][ T7212] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 96.486376][ T7202] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 96.498993][ T7214] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 96.511770][ T7208] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 7211] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7209] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7231] <... futex resumed>) = 1 [pid 7208] <... futex resumed>) = 0 [pid 7207] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7206] <... futex resumed>) = 0 [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5000] rmdir("./61/file0" [pid 7206] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7203] exit_group(0 [pid 5002] <... restart_syscall resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 7206] <... futex resumed>) = 1 [pid 7231] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7225] <... futex resumed>) = ? [pid 7214] <... futex resumed>) = 0 [pid 7212] <... futex resumed>) = 0 [pid 7209] <... futex resumed>) = 1 [pid 7203] <... exit_group resumed>) = ? [pid 5000] getdents64(3, [pid 7206] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5002] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] close(3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... close resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] rmdir("./61" [pid 5002] <... openat resumed>) = 3 [pid 5000] <... rmdir resumed>) = 0 [pid 5002] fstat(3, [pid 5000] mkdir("./62", 0777 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 7225] +++ exited with 0 +++ [pid 7214] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7212] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7209] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] getdents64(3, [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5000] <... openat resumed>) = 3 [pid 7208] +++ exited with 0 +++ [pid 7203] +++ exited with 0 +++ [pid 5002] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7203, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5002] lstat("./59/binderfs", [pid 5000] close(3 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] <... restart_syscall resumed>) = 0 [pid 5002] unlink("./59/binderfs" [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... unlink resumed>) = 0 [pid 5002] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... clone resumed>, child_tidptr=0x5555562025d0) = 7232 [pid 4999] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./60/binderfs") = 0 [pid 4999] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7232 attached [pid 7232] set_robust_list(0x5555562025e0, 24) = 0 [pid 7232] chdir("./62") = 0 [pid 7232] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7232] setpgid(0, 0) = 0 [pid 7232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7232] write(3, "1000", 4) = 4 [pid 7232] close(3) = 0 [pid 7232] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7232] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7232] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7232] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7232] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7233], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7233 [pid 7232] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7232] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7233 attached [pid 7233] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7233] memfd_create("syzkaller", 0 [pid 7207] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7207] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7229] <... futex resumed>) = 0 [pid 7207] <... futex resumed>) = 1 [pid 7229] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 96.531025][ T7211] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 96.540844][ T7211] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 96.550646][ T7212] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 96.570022][ T7214] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [pid 7207] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7229] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 7229] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7206] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] <... umount2 resumed>) = 0 [pid 7229] <... futex resumed>) = 1 [pid 7207] <... futex resumed>) = 0 [pid 7206] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7233] <... memfd_create resumed>) = 3 [pid 7229] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7206] <... futex resumed>) = 1 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7206] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] lstat("./60/file0", [pid 7233] <... mmap resumed>) = 0x7f5047cf1000 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7233] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7231] <... futex resumed>) = 0 [pid 4999] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7231] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5002] <... umount2 resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7233] <... write resumed>) = 262144 [pid 5002] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7231] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... openat resumed>) = 4 [pid 5002] lstat("./59/file0", [pid 4999] fstat(4, [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7233] munmap(0x7f5047cf1000, 262144 [pid 5002] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(4, [pid 7233] <... munmap resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7233] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] getdents64(4, [pid 7233] <... openat resumed>) = 4 [pid 5002] <... openat resumed>) = 4 [pid 4999] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7233] ioctl(4, LOOP_SET_FD, 3 [pid 5002] fstat(4, [pid 4999] close(4 [pid 7231] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7209] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... close resumed>) = 0 [pid 7209] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] getdents64(4, [pid 4999] rmdir("./60/file0" [pid 7230] <... futex resumed>) = 0 [pid 7209] <... futex resumed>) = 1 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] <... rmdir resumed>) = 0 [pid 7230] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7209] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] getdents64(4, [pid 4999] getdents64(3, [pid 7231] <... futex resumed>) = 1 [pid 7230] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 7206] <... futex resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 4999] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7231] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7230] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] close(4 [pid 4999] close(3 [pid 7230] <... futex resumed>) = 1 [pid 7209] <... futex resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 7230] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5002] rmdir("./59/file0" [pid 4999] rmdir("./60" [pid 5002] <... rmdir resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5002] getdents64(3, [pid 4999] mkdir("./61", 0777 [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 4999] <... mkdir resumed>) = 0 [ 96.591059][ T7214] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 96.607358][ T7212] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 96.615285][ T7233] loop1: detected capacity change from 0 to 512 [pid 5002] close(3 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5002] <... close resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5002] rmdir("./59" [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5002] <... rmdir resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] mkdir("./60", 0777 [pid 4999] close(3 [pid 5002] <... mkdir resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... openat resumed>) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 4999] <... clone resumed>, child_tidptr=0x5555562025d0) = 7236 [pid 7233] <... ioctl resumed>) = 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7233] close(3 [pid 5002] close(3 [pid 7233] <... close resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 7233] mkdir("./file0", 0777 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7233] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 7236 attached [pid 7233] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5002] <... clone resumed>, child_tidptr=0x5555562025d0) = 7237 [pid 7236] set_robust_list(0x5555562025e0, 24) = 0 [pid 7236] chdir("./61") = 0 [pid 7236] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 7237 attached ) = 0 [pid 7212] <... fsconfig resumed>) = 0 [pid 7211] <... fsconfig resumed>) = 0 [pid 7237] set_robust_list(0x5555562025e0, 24 [pid 7236] setpgid(0, 0 [pid 7212] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7211] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7237] <... set_robust_list resumed>) = 0 [pid 7236] <... setpgid resumed>) = 0 [pid 7212] <... futex resumed>) = 0 [pid 7207] exit_group(0 [pid 7237] chdir("./60" [pid 7236] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7229] <... futex resumed>) = ? [pid 7207] <... exit_group resumed>) = ? [pid 7237] <... chdir resumed>) = 0 [pid 7236] <... openat resumed>) = 3 [pid 7229] +++ exited with 0 +++ [pid 7237] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7236] write(3, "1000", 4 [pid 7237] <... prctl resumed>) = 0 [pid 7236] <... write resumed>) = 4 [pid 7237] setpgid(0, 0 [pid 7236] close(3 [pid 7237] <... setpgid resumed>) = 0 [pid 7236] <... close resumed>) = 0 [pid 7237] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7236] symlink("/dev/binderfs", "./binderfs" [pid 7237] <... openat resumed>) = 3 [pid 7236] <... symlink resumed>) = 0 [pid 7237] write(3, "1000", 4 [pid 7236] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7237] <... write resumed>) = 4 [pid 7236] <... futex resumed>) = 0 [pid 7214] <... fsconfig resumed>) = 0 [pid 7212] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7211] <... futex resumed>) = ? [pid 7206] exit_group(0 [pid 7236] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7237] close(3 [pid 7236] <... mmap resumed>) = 0x7f50500f1000 [pid 7231] <... futex resumed>) = ? [pid 7214] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7212] <... futex resumed>) = ? [pid 7211] +++ exited with 0 +++ [pid 7237] <... close resumed>) = 0 [pid 7207] +++ exited with 0 +++ [pid 7206] <... exit_group resumed>) = ? [pid 7237] symlink("/dev/binderfs", "./binderfs" [pid 7236] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7231] +++ exited with 0 +++ [pid 7214] <... futex resumed>) = 0 [pid 7212] +++ exited with 0 +++ [pid 7209] exit_group(0 [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7207, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 7237] <... symlink resumed>) = 0 [pid 7236] <... mprotect resumed>) = 0 [pid 7214] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7206] +++ exited with 0 +++ [pid 7237] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7236] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7206, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 7237] <... futex resumed>) = 0 [ 96.631888][ T7211] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 96.643157][ T7212] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 96.656579][ T7233] EXT4-fs: Ignoring removed oldalloc option [ 96.669789][ T7214] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 7237] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7236] <... clone resumed>, parent_tid=[7241], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7241 [pid 7237] <... mmap resumed>) = 0x7f50500f1000 [pid 7236] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7230] <... futex resumed>) = ? [pid 7214] <... futex resumed>) = ? [pid 7209] <... exit_group resumed>) = ? [pid 7237] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7236] <... futex resumed>) = 0 [pid 7230] +++ exited with 0 +++ [pid 7214] +++ exited with 0 +++ [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7237] <... mprotect resumed>) = 0 [pid 7236] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7209] +++ exited with 0 +++ [pid 5005] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7237] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5005] <... openat resumed>) = 3 [pid 5004] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7209, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5005] fstat(3, [pid 5004] <... openat resumed>) = 3 [pid 7237] <... clone resumed>, parent_tid=[7242], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7242 [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] fstat(3, [pid 7237] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] getdents64(3, [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7237] <... futex resumed>) = 0 [pid 5005] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5004] getdents64(3, ./strace-static-x86_64: Process 7241 attached [pid 7237] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5005] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7241] set_robust_list(0x7f50501119e0, 24 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7241] <... set_robust_list resumed>) = 0 [pid 5005] lstat("./60/binderfs", [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7241] memfd_create("syzkaller", 0 [pid 5005] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5004] lstat("./61/binderfs", [pid 5001] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7241] <... memfd_create resumed>) = 3 [pid 5005] unlink("./60/binderfs" [pid 5004] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... openat resumed>) = 3 [pid 7241] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5005] <... unlink resumed>) = 0 [pid 5004] unlink("./61/binderfs" [pid 5001] fstat(3, ./strace-static-x86_64: Process 7242 attached [pid 7241] <... mmap resumed>) = 0x7f5047cf1000 [pid 5005] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] <... unlink resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7242] set_robust_list(0x7f50501119e0, 24 [pid 7241] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5004] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(3, [pid 7242] <... set_robust_list resumed>) = 0 [pid 7241] <... write resumed>) = 262144 [pid 7233] <... mount resumed>) = 0 [pid 7242] memfd_create("syzkaller", 0 [pid 5001] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7242] <... memfd_create resumed>) = 3 [pid 7233] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7242] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7233] <... openat resumed>) = 3 [pid 5001] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7242] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7233] chdir("./file0" [pid 7242] munmap(0x7f5047cf1000, 262144 [pid 7233] <... chdir resumed>) = 0 [pid 7242] <... munmap resumed>) = 0 [pid 7233] ioctl(4, LOOP_CLR_FD [pid 7242] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7233] <... ioctl resumed>) = 0 [pid 7242] <... openat resumed>) = 4 [ 96.685597][ T7233] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 96.697265][ T7233] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 96.714187][ T7233] EXT4-fs (loop1): 1 truncate cleaned up [ 96.719980][ T7233] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7242] ioctl(4, LOOP_SET_FD, 3 [pid 7233] close(4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7242] <... ioctl resumed>) = 0 [pid 7241] munmap(0x7f5047cf1000, 262144 [pid 7233] <... close resumed>) = 0 [pid 5004] <... umount2 resumed>) = 0 [pid 5001] lstat("./60/binderfs", [pid 7242] close(3 [pid 7241] <... munmap resumed>) = 0 [pid 7233] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7242] <... close resumed>) = 0 [pid 7241] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] unlink("./60/binderfs" [pid 7242] mkdir("./file0", 0777 [pid 7241] <... openat resumed>) = 4 [pid 5004] lstat("./61/file0", [pid 5001] <... unlink resumed>) = 0 [pid 7242] <... mkdir resumed>) = 0 [ 96.738510][ T7242] loop3: detected capacity change from 0 to 512 [pid 7241] ioctl(4, LOOP_SET_FD, 3 [pid 7233] <... futex resumed>) = 1 [pid 7232] <... futex resumed>) = 0 [pid 5004] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7242] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7233] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7232] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7232] <... futex resumed>) = 0 [pid 7233] fspick(AT_FDCWD, ".", 0 [pid 7232] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7233] <... fspick resumed>) = 4 [pid 7233] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7232] <... futex resumed>) = 0 [pid 7233] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7232] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7232] <... futex resumed>) = 0 [pid 7233] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7232] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7233] <... fsconfig resumed>) = 0 [pid 7233] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7232] <... futex resumed>) = 0 [pid 7233] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7232] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7232] <... futex resumed>) = 0 [pid 7233] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7232] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7241] <... ioctl resumed>) = 0 [pid 5005] <... umount2 resumed>) = 0 [pid 5004] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7241] close(3 [pid 5005] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7241] <... close resumed>) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7241] mkdir("./file0", 0777 [pid 5005] lstat("./60/file0", [pid 5004] <... openat resumed>) = 4 [pid 7241] <... mkdir resumed>) = 0 [pid 5005] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] fstat(4, [pid 7241] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5005] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] getdents64(4, [pid 5005] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5004] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5005] <... openat resumed>) = 4 [pid 5004] getdents64(4, [pid 5005] fstat(4, [pid 5004] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] close(4 [pid 5005] getdents64(4, [pid 5004] <... close resumed>) = 0 [pid 5001] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5004] rmdir("./61/file0" [pid 5005] getdents64(4, [pid 5004] <... rmdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5004] getdents64(3, [pid 5001] lstat("./60/file0", [pid 5005] close(4 [pid 5004] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] <... close resumed>) = 0 [pid 5004] close(3 [pid 5001] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] rmdir("./60/file0" [pid 5004] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] <... rmdir resumed>) = 0 [pid 5004] rmdir("./61" [pid 5001] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5005] getdents64(3, [pid 5004] <... rmdir resumed>) = 0 [pid 5001] <... openat resumed>) = 4 [pid 5005] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5004] mkdir("./62", 0777 [pid 5001] fstat(4, [pid 5005] close(3 [pid 5004] <... mkdir resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] <... close resumed>) = 0 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] getdents64(4, [pid 5005] rmdir("./60" [pid 5004] <... openat resumed>) = 3 [pid 5005] <... rmdir resumed>) = 0 [pid 5004] ioctl(3, LOOP_CLR_FD [pid 5001] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [ 96.765942][ T7241] loop0: detected capacity change from 0 to 512 [ 96.774668][ T7242] EXT4-fs: Ignoring removed oldalloc option [ 96.781425][ T7233] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 96.791111][ T7241] EXT4-fs: Ignoring removed oldalloc option [pid 7233] <... fsconfig resumed>) = 0 [pid 5005] mkdir("./61", 0777 [pid 5004] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] getdents64(4, [pid 7233] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... mkdir resumed>) = 0 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7233] <... futex resumed>) = 1 [pid 7232] <... futex resumed>) = 0 [pid 5004] close(3 [pid 5001] close(4 [pid 7233] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7232] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... close resumed>) = 0 [pid 7233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7232] <... futex resumed>) = 0 [pid 5001] rmdir("./60/file0" [pid 7233] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7232] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] <... rmdir resumed>) = 0 [pid 7233] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 5001] getdents64(3, [pid 7233] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7233] <... futex resumed>) = 1 [pid 7232] <... futex resumed>) = 0 [pid 5001] close(3 [pid 7233] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7232] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... close resumed>) = 0 [pid 7233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7232] <... futex resumed>) = 0 [pid 5001] rmdir("./60" [pid 7233] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7232] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] <... rmdir resumed>) = 0 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5004] <... close resumed>) = 0 [pid 5001] mkdir("./61", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 5005] <... openat resumed>) = 3 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... close resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7247 [pid 5005] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 96.824934][ T7242] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 96.828032][ T7233] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 96.835703][ T7242] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 96.858726][ T7241] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 96.869571][ T7242] EXT4-fs (loop3): 1 truncate cleaned up [pid 5005] close(3) = 0 [pid 5004] <... clone resumed>, child_tidptr=0x5555562025d0) = 7248 ./strace-static-x86_64: Process 7247 attached [pid 7247] set_robust_list(0x5555562025e0, 24) = 0 [pid 7247] chdir("./61") = 0 [pid 7247] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7247] setpgid(0, 0) = 0 [pid 7247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5005] <... clone resumed>, child_tidptr=0x5555562025d0) = 7249 [pid 7247] write(3, "1000", 4) = 4 [pid 7247] close(3) = 0 [pid 7247] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7247] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7247] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7247] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7247] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7250], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7250 [pid 7247] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7247] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7249 attached [pid 7249] set_robust_list(0x5555562025e0, 24) = 0 [pid 7249] chdir("./61") = 0 [pid 7249] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7249] setpgid(0, 0) = 0 [pid 7249] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7249] write(3, "1000", 4) = 4 [pid 7249] close(3) = 0 [pid 7249] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7249] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7249] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7249] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7249] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7251], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7251 [pid 7249] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7249] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7250 attached [pid 7250] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7250] memfd_create("syzkaller", 0) = 3 [pid 7250] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7250] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7232] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7232] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7232] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7232] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7232] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7252], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7252 [pid 7232] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7232] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7251 attached [pid 7251] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7251] memfd_create("syzkaller", 0) = 3 [pid 7251] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7250] <... write resumed>) = 262144 [pid 7250] munmap(0x7f5047cf1000, 262144) = 0 [pid 7251] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7250] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 ./strace-static-x86_64: Process 7252 attached ./strace-static-x86_64: Process 7248 attached [pid 7251] <... write resumed>) = 262144 [pid 7242] <... mount resumed>) = 0 [ 96.875785][ T7233] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 96.889054][ T7241] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 96.906459][ T7242] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.919802][ T7241] EXT4-fs (loop0): 1 truncate cleaned up [pid 7250] ioctl(4, LOOP_SET_FD, 3 [pid 7252] set_robust_list(0x7f5047d309e0, 24 [pid 7251] munmap(0x7f5047cf1000, 262144 [pid 7248] set_robust_list(0x5555562025e0, 24 [pid 7242] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7242] chdir("./file0") = 0 [pid 7242] ioctl(4, LOOP_CLR_FD [pid 7251] <... munmap resumed>) = 0 [pid 7242] <... ioctl resumed>) = 0 [pid 7242] close(4) = 0 [pid 7242] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7237] <... futex resumed>) = 0 [pid 7237] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7237] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7242] <... futex resumed>) = 1 [pid 7242] fspick(AT_FDCWD, ".", 0) = 4 [pid 7242] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7237] <... futex resumed>) = 0 [pid 7237] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7237] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7242] <... futex resumed>) = 1 [pid 7242] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 7242] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7237] <... futex resumed>) = 0 [pid 7237] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7237] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7242] <... futex resumed>) = 1 [pid 7242] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7250] <... ioctl resumed>) = 0 [pid 7252] <... set_robust_list resumed>) = 0 [pid 7248] <... set_robust_list resumed>) = 0 [pid 7252] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7248] chdir("./62" [pid 7252] <... openat resumed>) = 5 [pid 7251] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7248] <... chdir resumed>) = 0 [pid 7252] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7251] <... openat resumed>) = 4 [pid 7248] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7232] <... futex resumed>) = 0 [pid 7252] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7251] ioctl(4, LOOP_SET_FD, 3 [pid 7248] <... prctl resumed>) = 0 [pid 7251] <... ioctl resumed>) = 0 [pid 7248] setpgid(0, 0 [pid 7233] <... fsconfig resumed>) = 0 [pid 7233] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7233] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7250] close(3) = 0 [pid 7250] mkdir("./file0", 0777 [pid 7232] exit_group(0 [pid 7252] <... futex resumed>) = ? [pid 7232] <... exit_group resumed>) = ? [pid 7252] +++ exited with 0 +++ [pid 7233] <... futex resumed>) = ? [pid 7250] <... mkdir resumed>) = 0 [pid 7250] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7251] close(3 [pid 7248] <... setpgid resumed>) = 0 [pid 7241] <... mount resumed>) = 0 [pid 7233] +++ exited with 0 +++ [pid 7232] +++ exited with 0 +++ [pid 7251] <... close resumed>) = 0 [pid 7248] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7232, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 7251] mkdir("./file0", 0777 [pid 7248] <... openat resumed>) = 3 [ 96.927923][ T7250] loop2: detected capacity change from 0 to 512 [ 96.940399][ T7251] loop5: detected capacity change from 0 to 512 [ 96.944146][ T7233] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 96.952205][ T7241] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.966748][ T7250] EXT4-fs: Ignoring removed oldalloc option [pid 7248] write(3, "1000", 4) = 4 [pid 7241] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7248] close(3 [pid 7241] <... openat resumed>) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7248] <... close resumed>) = 0 [pid 7241] chdir("./file0" [pid 5000] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7248] symlink("/dev/binderfs", "./binderfs" [pid 7241] <... chdir resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 7241] ioctl(4, LOOP_CLR_FD [pid 5000] fstat(3, [pid 7241] <... ioctl resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7241] close(4 [pid 5000] getdents64(3, [pid 7241] <... close resumed>) = 0 [pid 7237] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7251] <... mkdir resumed>) = 0 [pid 7248] <... symlink resumed>) = 0 [pid 7241] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7237] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7251] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7248] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7241] <... futex resumed>) = 1 [pid 7237] <... futex resumed>) = 0 [pid 7236] <... futex resumed>) = 0 [pid 5000] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7248] <... futex resumed>) = 0 [pid 7241] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7237] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7236] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7248] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7241] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7237] <... mmap resumed>) = 0x7f5047d10000 [pid 7236] <... futex resumed>) = 0 [pid 5000] lstat("./62/binderfs", [pid 7248] <... mmap resumed>) = 0x7f50500f1000 [pid 7242] <... fsconfig resumed>) = 0 [pid 7241] fspick(AT_FDCWD, ".", 0 [pid 7237] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7236] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7248] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7242] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7241] <... fspick resumed>) = 4 [pid 7237] <... mprotect resumed>) = 0 [pid 5000] unlink("./62/binderfs" [pid 7248] <... mprotect resumed>) = 0 [pid 7242] <... futex resumed>) = 0 [pid 7241] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7237] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5000] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 7256 attached [pid 7248] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7242] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7241] <... futex resumed>) = 1 [pid 7236] <... futex resumed>) = 0 [pid 5000] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7256] set_robust_list(0x7f5047d309e0, 24 [pid 7241] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7236] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7256] <... set_robust_list resumed>) = 0 [pid 7248] <... clone resumed>, parent_tid=[7257], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7257 [pid 7241] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7236] <... futex resumed>) = 0 [pid 7256] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7248] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7241] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7236] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7248] <... futex resumed>) = 0 [pid 7241] <... fsconfig resumed>) = 0 [pid 7248] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7241] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7236] <... futex resumed>) = 0 [pid 7241] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7236] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7241] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7236] <... futex resumed>) = 0 [pid 7241] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7236] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7257 attached [pid 7257] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7257] memfd_create("syzkaller", 0 [pid 7237] <... clone resumed>, parent_tid=[7256], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7256 [pid 7257] <... memfd_create resumed>) = 3 [pid 7237] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7257] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7256] <... futex resumed>) = 0 [pid 7237] <... futex resumed>) = 1 [pid 7256] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7237] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7256] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7256] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7256] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7257] <... mmap resumed>) = 0x7f5047cf1000 [pid 7257] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7257] munmap(0x7f5047cf1000, 262144) = 0 [pid 7257] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7237] <... futex resumed>) = 0 [ 96.975497][ T7242] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 96.990805][ T7251] EXT4-fs: Ignoring removed oldalloc option [ 97.004327][ T7250] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 97.016914][ T7241] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 7257] ioctl(4, LOOP_SET_FD, 3 [pid 7237] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7242] <... futex resumed>) = 0 [pid 7237] <... futex resumed>) = 1 [pid 7237] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7242] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7257] <... ioctl resumed>) = 0 [pid 7257] close(3) = 0 [pid 7257] mkdir("./file0", 0777) = 0 [pid 7257] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7236] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7236] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 97.028828][ T7257] loop4: detected capacity change from 0 to 512 [ 97.036700][ T7242] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 97.037781][ T7250] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 97.049843][ T7257] EXT4-fs: Ignoring removed oldalloc option [ 97.067498][ T7242] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7236] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7241] <... fsconfig resumed>) = 0 [pid 7237] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7236] <... mmap resumed>) = 0x7f5047d10000 [pid 5000] <... umount2 resumed>) = 0 [pid 7241] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7237] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7236] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7256] <... futex resumed>) = 0 [pid 7241] <... futex resumed>) = 0 [pid 7237] <... futex resumed>) = 1 [pid 7256] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7241] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7237] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7236] <... mprotect resumed>) = 0 [pid 7256] <... openat resumed>) = 5 [pid 7256] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7236] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7256] <... futex resumed>) = 1 [pid 7237] <... futex resumed>) = 0 [pid 7256] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5000] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./62/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./62/file0") = 0 [pid 5000] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./62") = 0 [pid 7236] <... clone resumed>, parent_tid=[7260], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7260 [pid 5000] mkdir("./63", 0777 [pid 7236] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... mkdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 7250] <... mount resumed>) = 0 [pid 7236] <... futex resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7261 ./strace-static-x86_64: Process 7260 attached [pid 7260] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7260] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7260] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7260] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7261 attached [pid 7236] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 7236] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7236] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7261] set_robust_list(0x5555562025e0, 24) = 0 [pid 7250] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7241] <... futex resumed>) = 0 [ 97.077906][ T7251] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 97.091798][ T7250] EXT4-fs (loop2): 1 truncate cleaned up [ 97.099577][ T7250] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.113086][ T7251] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 7261] chdir("./63") = 0 [pid 7261] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7261] setpgid(0, 0) = 0 [pid 7261] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7261] write(3, "1000", 4) = 4 [pid 7250] <... openat resumed>) = 3 [pid 7241] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7261] close(3) = 0 [pid 7261] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7261] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7261] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7261] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7261] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7263], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7263 [pid 7261] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7261] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7263 attached [pid 7263] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7263] memfd_create("syzkaller", 0) = 3 [pid 7263] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7263] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7250] chdir("./file0" [pid 7263] <... write resumed>) = 262144 [pid 7263] munmap(0x7f5047cf1000, 262144) = 0 [pid 7263] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 97.129292][ T7251] EXT4-fs (loop5): 1 truncate cleaned up [ 97.135196][ T7251] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.147623][ T7241] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 97.158148][ T7242] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 97.169062][ T7241] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7263] ioctl(4, LOOP_SET_FD, 3 [pid 7251] <... mount resumed>) = 0 [pid 7250] <... chdir resumed>) = 0 [pid 7242] <... fsconfig resumed>) = 0 [pid 7251] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7250] ioctl(4, LOOP_CLR_FD [pid 7242] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7251] <... openat resumed>) = 3 [pid 7250] <... ioctl resumed>) = 0 [pid 7242] <... futex resumed>) = 0 [pid 7251] chdir("./file0" [pid 7250] close(4 [pid 7242] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7251] <... chdir resumed>) = 0 [pid 7250] <... close resumed>) = 0 [pid 7251] ioctl(4, LOOP_CLR_FD [pid 7250] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7251] <... ioctl resumed>) = 0 [pid 7250] <... futex resumed>) = 1 [pid 7247] <... futex resumed>) = 0 [pid 7251] close(4 [pid 7250] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7247] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7251] <... close resumed>) = 0 [pid 7250] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7247] <... futex resumed>) = 0 [pid 7251] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7250] fspick(AT_FDCWD, ".", 0 [pid 7247] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7251] <... futex resumed>) = 1 [pid 7250] <... fspick resumed>) = 4 [pid 7249] <... futex resumed>) = 0 [pid 7251] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7250] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7249] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7251] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7250] <... futex resumed>) = 1 [pid 7249] <... futex resumed>) = 0 [pid 7247] <... futex resumed>) = 0 [pid 7251] fspick(AT_FDCWD, ".", 0 [pid 7250] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7249] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7247] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7251] <... fspick resumed>) = 4 [pid 7250] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7247] <... futex resumed>) = 0 [pid 7251] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7250] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7247] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7251] <... futex resumed>) = 1 [pid 7250] <... fsconfig resumed>) = 0 [pid 7249] <... futex resumed>) = 0 [pid 7251] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7250] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7249] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7251] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7250] <... futex resumed>) = 1 [pid 7249] <... futex resumed>) = 0 [pid 7247] <... futex resumed>) = 0 [pid 7251] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7250] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7249] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7247] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7251] <... fsconfig resumed>) = 0 [pid 7250] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7247] <... futex resumed>) = 0 [pid 7251] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7250] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7247] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7251] <... futex resumed>) = 1 [pid 7249] <... futex resumed>) = 0 [pid 7251] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7249] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7251] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7249] <... futex resumed>) = 0 [pid 7236] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7251] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7249] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7237] exit_group(0 [pid 7263] <... ioctl resumed>) = 0 [pid 7263] close(3) = 0 [pid 7263] mkdir("./file0", 0777) = 0 [pid 7263] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7256] <... futex resumed>) = ? [pid 7237] <... exit_group resumed>) = ? [pid 7242] <... futex resumed>) = ? [pid 7242] +++ exited with 0 +++ [pid 7236] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7236] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7260] <... futex resumed>) = 0 [pid 7256] +++ exited with 0 +++ [pid 7260] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7237] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7237, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5002] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./60/binderfs") = 0 [ 97.169448][ T7263] loop1: detected capacity change from 0 to 512 [ 97.186082][ T7263] EXT4-fs: Ignoring removed oldalloc option [ 97.187985][ T7250] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 97.208035][ T7251] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 5002] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7250] <... fsconfig resumed>) = 0 [pid 7250] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7247] <... futex resumed>) = 0 [pid 7247] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7247] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7250] <... futex resumed>) = 1 [pid 7250] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7250] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7247] <... futex resumed>) = 0 [pid 7247] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7247] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7250] <... futex resumed>) = 1 [pid 7250] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7249] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7249] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7249] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7249] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7249] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7267], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7267 [pid 7249] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7249] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7260] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7260] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7236] <... futex resumed>) = 0 [pid 7260] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7267 attached [pid 7251] <... fsconfig resumed>) = 0 [pid 7241] <... fsconfig resumed>) = 0 [pid 7241] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7241] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7251] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7251] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7267] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7267] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7267] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7249] <... futex resumed>) = 0 [pid 7249] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7249] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7251] <... futex resumed>) = 0 [pid 7251] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7236] exit_group(0 [pid 7260] <... futex resumed>) = ? [pid 7241] <... futex resumed>) = ? [pid 7236] <... exit_group resumed>) = ? [ 97.220885][ T7241] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 97.231787][ T7257] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 97.236665][ T7250] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 97.255163][ T7251] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 97.264584][ T7250] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7260] +++ exited with 0 +++ [pid 7241] +++ exited with 0 +++ [pid 7236] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7236, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 7267] <... futex resumed>) = 1 [pid 7247] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] <... restart_syscall resumed>) = 0 [pid 7267] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7247] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7247] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7247] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7247] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7270], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7270 [pid 7247] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7247] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7270 attached [pid 7249] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7270] set_robust_list(0x7f5047d309e0, 24 [pid 7249] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7270] <... set_robust_list resumed>) = 0 [pid 7267] <... futex resumed>) = 0 [pid 7249] <... futex resumed>) = 1 [pid 5002] <... umount2 resumed>) = 0 [pid 7270] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7267] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7249] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7270] <... openat resumed>) = 5 [pid 7267] <... openat resumed>) = 5 [pid 7270] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7267] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7270] <... futex resumed>) = 1 [pid 7267] <... futex resumed>) = 1 [pid 7249] <... futex resumed>) = 0 [pid 7247] <... futex resumed>) = 0 [pid 5002] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7270] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7267] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] lstat("./60/file0", [pid 4999] <... openat resumed>) = 3 [pid 4999] fstat(3, [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(3, [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5002] <... openat resumed>) = 4 [pid 5002] fstat(4, [pid 4999] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 97.278579][ T7257] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 97.289067][ T7251] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 97.294588][ T7263] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 97.322759][ T7257] EXT4-fs (loop4): 1 truncate cleaned up [pid 7250] <... fsconfig resumed>) = 0 [pid 5002] getdents64(4, [pid 4999] lstat("./61/binderfs", [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7250] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7250] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 97.329807][ T7250] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 97.330198][ T7257] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.341770][ T7263] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 97.355117][ T7251] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 7247] exit_group(0 [pid 7270] <... futex resumed>) = ? [pid 7250] <... futex resumed>) = ? [pid 7247] <... exit_group resumed>) = ? [pid 7270] +++ exited with 0 +++ [pid 7250] +++ exited with 0 +++ [pid 7247] +++ exited with 0 +++ [pid 7257] <... mount resumed>) = 0 [pid 7251] <... fsconfig resumed>) = 0 [pid 5002] getdents64(4, [pid 4999] unlink("./61/binderfs" [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7247, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 4999] <... unlink resumed>) = 0 [pid 5002] close(4 [pid 4999] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./60/file0" [pid 5001] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7257] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] <... rmdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7257] <... openat resumed>) = 3 [pid 5002] getdents64(3, [pid 5001] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7257] chdir("./file0" [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] <... openat resumed>) = 3 [pid 7257] <... chdir resumed>) = 0 [pid 5002] close(3 [pid 5001] fstat(3, [pid 7257] ioctl(4, LOOP_CLR_FD [pid 5002] <... close resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7257] <... ioctl resumed>) = 0 [pid 5002] rmdir("./60" [pid 5001] getdents64(3, [pid 7257] close(4) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7257] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] mkdir("./61", 0777 [pid 5001] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7257] <... futex resumed>) = 1 [pid 7248] <... futex resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7257] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7248] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5001] lstat("./61/binderfs", [pid 7257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7248] <... futex resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7257] fspick(AT_FDCWD, ".", 0 [pid 7248] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5001] unlink("./61/binderfs" [pid 7257] <... fspick resumed>) = 4 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... unlink resumed>) = 0 [pid 7257] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] close(3 [pid 5001] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7257] <... futex resumed>) = 1 [pid 7248] <... futex resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 7257] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7248] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7248] <... futex resumed>) = 0 [pid 7257] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7248] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... clone resumed>, child_tidptr=0x5555562025d0) = 7273 [pid 7257] <... fsconfig resumed>) = 0 [pid 7257] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7251] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7248] <... futex resumed>) = 0 [pid 7257] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7251] <... futex resumed>) = 0 [pid 7249] exit_group(0 [pid 7248] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7267] <... futex resumed>) = ? [pid 7257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7249] <... exit_group resumed>) = ? [pid 7248] <... futex resumed>) = 0 [ 97.368206][ T7263] __quota_error: 174 callbacks suppressed [ 97.368217][ T7263] Quota error (device loop1): write_blk: dquota write failed [ 97.391708][ T7263] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 97.414209][ T7263] EXT4-fs (loop1): 1 truncate cleaned up [pid 7267] +++ exited with 0 +++ [pid 7257] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7251] +++ exited with 0 +++ [pid 7249] +++ exited with 0 +++ [pid 7248] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7249, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5005] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5005] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5005] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5005] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7273 attached ) = -1 EINVAL (Invalid argument) [pid 5005] lstat("./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5005] unlink("./61/binderfs") = 0 [pid 5005] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7263] <... mount resumed>) = 0 [pid 7263] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7263] chdir("./file0") = 0 [pid 7263] ioctl(4, LOOP_CLR_FD) = 0 [pid 7263] close(4 [pid 7273] set_robust_list(0x5555562025e0, 24 [pid 7263] <... close resumed>) = 0 [pid 7273] <... set_robust_list resumed>) = 0 [pid 7273] chdir("./61" [pid 7263] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7257] <... fsconfig resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 7273] <... chdir resumed>) = 0 [pid 5001] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7273] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7261] <... futex resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7273] <... prctl resumed>) = 0 [pid 7263] <... futex resumed>) = 1 [pid 7261] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7257] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] lstat("./61/file0", [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7273] setpgid(0, 0 [pid 7263] fspick(AT_FDCWD, ".", 0 [pid 7261] <... futex resumed>) = 0 [pid 7257] <... futex resumed>) = 1 [pid 7248] <... futex resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] lstat("./61/file0", [pid 7273] <... setpgid resumed>) = 0 [pid 7263] <... fspick resumed>) = 4 [pid 7261] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7257] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7248] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7273] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7263] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7261] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7257] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7273] <... openat resumed>) = 3 [pid 7263] <... futex resumed>) = 0 [pid 7261] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7257] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7248] <... futex resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7273] write(3, "1000", 4 [pid 7263] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7261] <... futex resumed>) = 0 [pid 7257] <... futex resumed>) = 0 [pid 7248] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... umount2 resumed>) = 0 [pid 5001] <... openat resumed>) = 4 [pid 4999] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7273] <... write resumed>) = 4 [pid 7263] <... fsconfig resumed>) = 0 [pid 7261] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7257] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7248] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5005] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] fstat(4, [pid 4999] <... openat resumed>) = 4 [pid 7273] close(3 [pid 7263] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7261] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7248] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] fstat(4, [pid 7273] <... close resumed>) = 0 [pid 7263] <... futex resumed>) = 0 [pid 7261] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7257] <... futex resumed>) = 0 [pid 7248] <... futex resumed>) = 1 [pid 5005] lstat("./61/file0", [pid 5001] getdents64(4, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7273] symlink("/dev/binderfs", "./binderfs" [pid 7263] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7261] <... futex resumed>) = 0 [ 97.420517][ T7263] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.445895][ T7257] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 7257] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7248] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, [pid 7273] <... symlink resumed>) = 0 [pid 7261] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] getdents64(4, [pid 4999] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7273] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 4999] getdents64(4, [pid 7273] <... futex resumed>) = 0 [pid 5001] close(4 [pid 4999] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7273] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5005] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... close resumed>) = 0 [pid 4999] close(4 [pid 7273] <... mmap resumed>) = 0x7f50500f1000 [pid 5001] rmdir("./61/file0" [pid 4999] <... close resumed>) = 0 [pid 7273] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 5001] <... rmdir resumed>) = 0 [pid 4999] rmdir("./61/file0" [pid 7273] <... mprotect resumed>) = 0 [pid 5001] getdents64(3, [pid 4999] <... rmdir resumed>) = 0 [pid 7273] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5001] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 4999] getdents64(3, [pid 5001] close(3 [pid 4999] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7273] <... clone resumed>, parent_tid=[7274], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7274 [pid 5001] <... close resumed>) = 0 [pid 4999] close(3 [pid 7273] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] rmdir("./61" [pid 4999] <... close resumed>) = 0 [pid 7273] <... futex resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] rmdir("./61" [pid 7273] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5001] mkdir("./62", 0777 [pid 4999] <... rmdir resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 4999] mkdir("./62", 0777 [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] <... mkdir resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4999] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7274 attached [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7274] set_robust_list(0x7f50501119e0, 24 [pid 7263] <... fsconfig resumed>) = 0 [pid 5005] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] close(3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5001] <... close resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5005] <... openat resumed>) = 4 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] close(3) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x5555562025d0) = 7275 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7276 ./strace-static-x86_64: Process 7275 attached [pid 7275] set_robust_list(0x5555562025e0, 24) = 0 [pid 7275] chdir("./62") = 0 [pid 7275] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7275] setpgid(0, 0) = 0 [pid 7275] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7275] write(3, "1000", 4) = 4 [pid 7275] close(3 [pid 5005] fstat(4, [pid 7263] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7274] <... set_robust_list resumed>) = 0 [pid 7275] <... close resumed>) = 0 [pid 7275] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7275] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7274] memfd_create("syzkaller", 0 [pid 7263] <... futex resumed>) = 1 [ 97.506775][ T7257] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 97.519168][ T7263] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 97.526145][ T7257] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7261] <... futex resumed>) = 0 [pid 5005] getdents64(4, ./strace-static-x86_64: Process 7276 attached [pid 7275] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7274] <... memfd_create resumed>) = 3 [pid 7263] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5005] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7276] set_robust_list(0x5555562025e0, 24 [pid 7274] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5005] getdents64(4, [pid 7276] <... set_robust_list resumed>) = 0 [pid 7274] <... mmap resumed>) = 0x7f5047cf1000 [pid 5005] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7276] chdir("./62" [pid 7274] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7261] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7257] <... fsconfig resumed>) = 0 [pid 5005] close(4 [pid 7276] <... chdir resumed>) = 0 [pid 7275] <... mmap resumed>) = 0x7f50500f1000 [pid 7263] <... futex resumed>) = 0 [pid 7261] <... futex resumed>) = 1 [pid 7257] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... close resumed>) = 0 [pid 7274] <... write resumed>) = 262144 [pid 7276] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7275] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7274] munmap(0x7f5047cf1000, 262144 [pid 7263] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7261] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7257] <... futex resumed>) = 1 [pid 7248] <... futex resumed>) = 0 [pid 5005] rmdir("./61/file0" [pid 7275] <... mprotect resumed>) = 0 [pid 7263] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7257] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7248] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7276] <... prctl resumed>) = 0 [pid 7275] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7274] <... munmap resumed>) = 0 [pid 7263] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7248] <... futex resumed>) = 0 [pid 5005] <... rmdir resumed>) = 0 [pid 7276] setpgid(0, 0 [pid 7274] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7263] <... futex resumed>) = 1 [pid 7248] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] getdents64(3, [pid 7276] <... setpgid resumed>) = 0 [pid 7274] <... openat resumed>) = 4 [pid 7263] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5005] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7276] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7274] ioctl(4, LOOP_SET_FD, 3 [pid 5005] close(3 [pid 7276] <... openat resumed>) = 3 [pid 7261] <... futex resumed>) = 0 [pid 7275] <... clone resumed>, parent_tid=[7278], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7278 [pid 7261] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7275] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7261] <... futex resumed>) = 1 [pid 7275] <... futex resumed>) = 0 [pid 7261] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7275] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7278 attached [pid 7278] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7278] memfd_create("syzkaller", 0) = 3 [pid 7278] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7278] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5005] <... close resumed>) = 0 [pid 7276] write(3, "1000", 4 [pid 7263] <... futex resumed>) = 0 [pid 5005] rmdir("./61" [pid 7276] <... write resumed>) = 4 [pid 7263] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5005] <... rmdir resumed>) = 0 [pid 7278] <... write resumed>) = 262144 [pid 7278] munmap(0x7f5047cf1000, 262144) = 0 [pid 7276] close(3 [pid 7274] <... ioctl resumed>) = 0 [pid 5005] mkdir("./62", 0777 [pid 7276] <... close resumed>) = 0 [pid 7274] close(3 [pid 5005] <... mkdir resumed>) = 0 [pid 7276] symlink("/dev/binderfs", "./binderfs" [pid 7274] <... close resumed>) = 0 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7276] <... symlink resumed>) = 0 [pid 7274] mkdir("./file0", 0777 [pid 5005] <... openat resumed>) = 3 [pid 7276] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7274] <... mkdir resumed>) = 0 [pid 5005] ioctl(3, LOOP_CLR_FD [pid 7276] <... futex resumed>) = 0 [pid 7274] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5005] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7278] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7276] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7257] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 5005] close(3 [pid 7257] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7278] <... openat resumed>) = 4 [pid 7257] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7278] ioctl(4, LOOP_SET_FD, 3 [pid 7248] <... futex resumed>) = 0 [pid 7248] exit_group(0) = ? [pid 7257] <... futex resumed>) = ? [ 97.554138][ T7257] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 97.570950][ T7257] Quota error (device loop4): write_blk: dquota write failed [ 97.576040][ T7274] loop3: detected capacity change from 0 to 512 [ 97.585985][ T7263] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 97.588931][ T7257] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [pid 7257] +++ exited with 0 +++ [pid 7248] +++ exited with 0 +++ [pid 7276] <... mmap resumed>) = 0x7f50500f1000 [pid 5005] <... close resumed>) = 0 [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7248, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 7278] <... ioctl resumed>) = 0 [pid 7278] close(3) = 0 [pid 7278] mkdir("./file0", 0777) = 0 [pid 7278] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7276] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7279 attached [pid 7261] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5004] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5005] <... clone resumed>, child_tidptr=0x5555562025d0) = 7279 [pid 5004] <... openat resumed>) = 3 [pid 7261] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7261] <... futex resumed>) = 0 [pid 5004] getdents64(3, [pid 7279] set_robust_list(0x5555562025e0, 24 [pid 7261] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5004] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5004] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7279] <... set_robust_list resumed>) = 0 [pid 7261] <... mmap resumed>) = 0x7f5047d10000 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./62/binderfs", [pid 7261] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5004] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5004] unlink("./62/binderfs") = 0 [pid 7261] <... mprotect resumed>) = 0 [pid 7261] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5004] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7279] chdir("./62" [pid 7276] <... mprotect resumed>) = 0 [pid 7261] <... clone resumed>, parent_tid=[7280], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7280 [pid 7261] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7279] <... chdir resumed>) = 0 [pid 7279] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7261] <... futex resumed>) = 0 [pid 7261] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7279] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 7280 attached [pid 7279] setpgid(0, 0 [pid 7276] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7279] <... setpgid resumed>) = 0 [pid 7279] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7279] write(3, "1000", 4) = 4 [pid 7279] close(3) = 0 [pid 7279] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7279] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7276] <... clone resumed>, parent_tid=[7282], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7282 [pid 7279] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7276] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7279] <... mmap resumed>) = 0x7f50500f1000 [pid 7276] <... futex resumed>) = 0 [pid 7279] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7276] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7282 attached [pid 7280] set_robust_list(0x7f5047d309e0, 24 [pid 7279] <... mprotect resumed>) = 0 [pid 7263] <... fsconfig resumed>) = 0 [pid 7279] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7285], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7285 [pid 7279] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7279] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7285 attached [ 97.603983][ T7274] EXT4-fs: Ignoring removed oldalloc option [ 97.610295][ T7278] loop2: detected capacity change from 0 to 512 [ 97.616893][ T7263] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 97.620776][ T7278] EXT4-fs: Ignoring removed oldalloc option [ 97.641106][ T7263] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 7282] set_robust_list(0x7f50501119e0, 24 [pid 7280] <... set_robust_list resumed>) = 0 [pid 7263] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7282] <... set_robust_list resumed>) = 0 [pid 7280] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7263] <... futex resumed>) = 0 [pid 7282] memfd_create("syzkaller", 0 [pid 7263] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7285] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7285] memfd_create("syzkaller", 0) = 3 [pid 7285] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7285] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7285] munmap(0x7f5047cf1000, 262144 [pid 7282] <... memfd_create resumed>) = 3 [pid 7261] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7285] <... munmap resumed>) = 0 [pid 7285] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 7285] ioctl(4, LOOP_SET_FD, 3 [ 97.654487][ T7274] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 97.664966][ T7274] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 97.681046][ T7280] Quota error (device loop1): write_blk: dquota write failed [ 97.689522][ T7280] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 97.693687][ T7285] loop5: detected capacity change from 0 to 512 [pid 7282] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7285] <... ioctl resumed>) = 0 [pid 7282] <... mmap resumed>) = 0x7f5047cf1000 [pid 5004] <... umount2 resumed>) = 0 [pid 7282] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5004] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./62/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5004] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5004] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5004] close(4) = 0 [pid 5004] rmdir("./62/file0") = 0 [pid 5004] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5004] close(3) = 0 [pid 5004] rmdir("./62") = 0 [pid 5004] mkdir("./63", 0777) = 0 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5004] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5004] close(3) = 0 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7288 [pid 7285] close(3) = 0 [pid 7285] mkdir("./file0", 0777) = 0 [pid 7285] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7282] <... write resumed>) = 262144 [pid 7282] munmap(0x7f5047cf1000, 262144) = 0 [pid 7282] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7282] ioctl(4, LOOP_SET_FD, 3 [pid 7280] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7280] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7261] exit_group(0) = ? [pid 7280] +++ exited with 0 +++ [ 97.699739][ T7274] Quota error (device loop3): write_blk: dquota write failed [ 97.723182][ T7278] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 97.735175][ T7285] EXT4-fs: Ignoring removed oldalloc option [ 97.743743][ T7282] loop0: detected capacity change from 0 to 512 [pid 7263] <... futex resumed>) = ? ./strace-static-x86_64: Process 7288 attached [pid 7288] set_robust_list(0x5555562025e0, 24) = 0 [pid 7263] +++ exited with 0 +++ [pid 7261] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7261, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 7282] <... ioctl resumed>) = 0 [pid 5000] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7282] close(3) = 0 [pid 7282] mkdir("./file0", 0777) = 0 [pid 7282] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7288] chdir("./63" [pid 5000] fstat(3, [pid 7288] <... chdir resumed>) = 0 [pid 7288] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7288] setpgid(0, 0) = 0 [pid 7288] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7288] write(3, "1000", 4) = 4 [pid 7288] close(3) = 0 [pid 7288] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7288] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7288] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7288] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7288] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7290], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7290 [pid 7288] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7288] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7290 attached [pid 7290] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7290] memfd_create("syzkaller", 0) = 3 [pid 7290] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7290] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 7290] <... write resumed>) = 262144 [pid 7290] munmap(0x7f5047cf1000, 262144) = 0 [pid 7290] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 97.748803][ T7274] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 97.754399][ T7278] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 97.778291][ T7274] EXT4-fs (loop3): 1 truncate cleaned up [ 97.780640][ T7282] EXT4-fs: Ignoring removed oldalloc option [ 97.787595][ T7274] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7290] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7290] <... ioctl resumed>) = 0 [pid 5000] unlink("./63/binderfs" [pid 7290] close(3 [pid 5000] <... unlink resumed>) = 0 [pid 5000] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7290] <... close resumed>) = 0 [pid 7290] mkdir("./file0", 0777) = 0 [ 97.804023][ T7278] Quota error (device loop2): write_blk: dquota write failed [ 97.807329][ T7290] loop4: detected capacity change from 0 to 512 [ 97.812387][ T7285] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 97.827644][ T7278] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 97.829609][ T7285] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 7290] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7274] <... mount resumed>) = 0 [pid 7274] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7274] chdir("./file0" [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./63/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, [pid 7274] <... chdir resumed>) = 0 [pid 5000] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, [pid 7274] ioctl(4, LOOP_CLR_FD) = 0 [pid 7274] close(4 [pid 5000] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7274] <... close resumed>) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./63/file0") = 0 [pid 5000] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 7274] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7273] <... futex resumed>) = 0 [pid 7274] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7273] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7274] fspick(AT_FDCWD, ".", 0 [pid 7273] <... futex resumed>) = 0 [pid 7274] <... fspick resumed>) = 4 [pid 7273] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7274] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7273] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7274] <... futex resumed>) = 0 [pid 5000] close(3 [pid 7273] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7274] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7273] <... futex resumed>) = 0 [pid 7274] <... fsconfig resumed>) = 0 [pid 7273] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... close resumed>) = 0 [pid 7274] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7273] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7274] <... futex resumed>) = 0 [pid 7273] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7274] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5000] rmdir("./63" [pid 7273] <... futex resumed>) = 0 [ 97.854501][ T7282] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 97.857499][ T7290] EXT4-fs: Ignoring removed oldalloc option [ 97.864695][ T7282] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 97.892748][ T7285] EXT4-fs (loop5): 1 truncate cleaned up [pid 7273] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... rmdir resumed>) = 0 [pid 7285] <... mount resumed>) = 0 [pid 7285] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7285] chdir("./file0") = 0 [pid 7285] ioctl(4, LOOP_CLR_FD) = 0 [pid 7285] close(4) = 0 [pid 7285] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7285] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7279] <... futex resumed>) = 0 [pid 7279] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7279] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] mkdir("./64", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7294 [pid 7285] <... futex resumed>) = 0 [pid 7285] fspick(AT_FDCWD, ".", 0) = 4 [pid 7273] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7273] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7273] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7273] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7285] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7273] <... mprotect resumed>) = 0 [ 97.914730][ T7285] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.915851][ T7278] EXT4-fs (loop2): 1 truncate cleaned up [ 97.933621][ T7274] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. ./strace-static-x86_64: Process 7294 attached [pid 7285] <... futex resumed>) = 1 [pid 7279] <... futex resumed>) = 0 [pid 7273] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7278] <... mount resumed>) = 0 [pid 7278] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7278] chdir("./file0") = 0 [pid 7278] ioctl(4, LOOP_CLR_FD) = 0 [pid 7278] close(4) = 0 [pid 7278] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7278] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7294] set_robust_list(0x5555562025e0, 24) = 0 [pid 7294] chdir("./64") = 0 [pid 7294] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7294] setpgid(0, 0) = 0 [pid 7294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7294] write(3, "1000", 4) = 4 [pid 7294] close(3) = 0 [pid 7294] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7294] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7294] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7294] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7294] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7297], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7297 [pid 7294] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7294] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7297 attached [pid 7297] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7297] memfd_create("syzkaller", 0) = 3 [pid 7297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7285] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7279] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7297] <... mmap resumed>) = 0x7f5047cf1000 [pid 7297] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7275] <... futex resumed>) = 0 [pid 7297] munmap(0x7f5047cf1000, 262144) = 0 [pid 7297] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7274] <... fsconfig resumed>) = 0 [pid 7279] <... futex resumed>) = 0 [pid 7275] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7285] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7279] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7278] <... futex resumed>) = 0 [pid 7275] <... futex resumed>) = 1 [pid 7285] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7275] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7273] <... clone resumed>, parent_tid=[7298], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7298 [pid 7285] <... fsconfig resumed>) = 0 [pid 7273] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7285] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7274] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7273] <... futex resumed>) = 0 [pid 7285] <... futex resumed>) = 1 [pid 7279] <... futex resumed>) = 0 [pid 7273] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7285] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7279] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7274] <... futex resumed>) = 0 [pid 7278] fspick(AT_FDCWD, ".", 0) = 4 [pid 7278] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7278] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7297] <... openat resumed>) = 4 [pid 7297] ioctl(4, LOOP_SET_FD, 3 [pid 7285] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7279] <... futex resumed>) = 0 [pid 7275] <... futex resumed>) = 0 [pid 7274] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7285] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7279] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7275] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7278] <... futex resumed>) = 0 [pid 7275] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7278] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 7278] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7275] <... futex resumed>) = 0 [pid 7278] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7275] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7278] <... futex resumed>) = 0 [pid 7275] <... futex resumed>) = 1 [pid 7278] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7297] <... ioctl resumed>) = 0 [ 97.962029][ T7282] EXT4-fs (loop0): 1 truncate cleaned up [ 97.965831][ T7278] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.980253][ T7282] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.999713][ T7290] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 98.001477][ T7297] loop1: detected capacity change from 0 to 512 [pid 7297] close(3) = 0 [pid 7297] mkdir("./file0", 0777) = 0 [pid 7297] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"..../strace-static-x86_64: Process 7298 attached [pid 7275] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7298] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7298] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7282] <... mount resumed>) = 0 [pid 7282] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7282] chdir("./file0") = 0 [pid 7282] ioctl(4, LOOP_CLR_FD) = 0 [pid 7282] close(4) = 0 [pid 7282] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7282] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7298] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7298] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7298] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7285] <... fsconfig resumed>) = 0 [pid 7278] <... fsconfig resumed>) = 0 [pid 7276] <... futex resumed>) = 0 [pid 7273] <... futex resumed>) = 0 [pid 7278] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7278] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7285] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7276] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7273] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7275] <... futex resumed>) = 0 [pid 7279] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7285] <... futex resumed>) = 0 [pid 7279] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7276] <... futex resumed>) = 1 [pid 7275] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7274] <... futex resumed>) = 0 [pid 7273] <... futex resumed>) = 1 [pid 7285] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7279] <... futex resumed>) = 0 [pid 7276] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7275] <... futex resumed>) = 1 [pid 7274] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7273] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7285] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7279] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 98.017460][ T7285] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 98.020150][ T7297] EXT4-fs: Ignoring removed oldalloc option [ 98.037006][ T7278] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 98.041295][ T7290] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 7275] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7282] <... futex resumed>) = 0 [pid 7282] fspick(AT_FDCWD, ".", 0) = 4 [pid 7282] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7282] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7278] <... futex resumed>) = 0 [pid 7285] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7276] <... futex resumed>) = 0 [pid 7285] <... futex resumed>) = 1 [pid 7279] <... futex resumed>) = 0 [pid 7276] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7285] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7279] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7282] <... futex resumed>) = 0 [pid 7276] <... futex resumed>) = 1 [pid 7282] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 7282] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7282] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7278] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7278] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7278] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7279] <... futex resumed>) = 0 [pid 7276] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7275] <... futex resumed>) = 0 [pid 7279] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7275] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7276] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7275] <... futex resumed>) = 1 [pid 7276] <... futex resumed>) = 1 [pid 7275] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7276] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7282] <... futex resumed>) = 0 [pid 7278] <... futex resumed>) = 0 [ 98.066106][ T7274] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 98.076774][ T7285] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 98.081284][ T7290] EXT4-fs (loop4): 1 truncate cleaned up [ 98.092220][ T7290] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.099461][ T7274] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7290] <... mount resumed>) = 0 [pid 7282] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7278] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7273] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7273] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7273] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7290] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7298] <... futex resumed>) = 0 [pid 7290] <... openat resumed>) = 3 [pid 7279] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7276] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7275] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7298] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7290] chdir("./file0" [pid 7279] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7276] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7275] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7279] <... futex resumed>) = 0 [pid 7276] <... futex resumed>) = 0 [pid 7275] <... futex resumed>) = 0 [pid 7279] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7276] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7275] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7290] <... chdir resumed>) = 0 [pid 7290] ioctl(4, LOOP_CLR_FD [pid 7279] <... mmap resumed>) = 0x7f5047d10000 [pid 7276] <... mmap resumed>) = 0x7f5047d10000 [pid 7275] <... mmap resumed>) = 0x7f5047d10000 [pid 7279] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7276] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7275] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7298] <... openat resumed>) = 5 [pid 7290] <... ioctl resumed>) = 0 [pid 7282] <... fsconfig resumed>) = 0 [pid 7279] <... mprotect resumed>) = 0 [pid 7276] <... mprotect resumed>) = 0 [pid 7275] <... mprotect resumed>) = 0 [pid 7298] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7290] close(4 [pid 7298] <... futex resumed>) = 1 [pid 7290] <... close resumed>) = 0 [pid 7298] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7290] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7290] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7282] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 98.108753][ T7297] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 98.120650][ T7285] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 98.129576][ T7278] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 98.131233][ T7282] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 98.154399][ T7278] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7282] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7288] <... futex resumed>) = 0 [pid 7279] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7276] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7275] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7273] <... futex resumed>) = 0 [pid 7274] <... fsconfig resumed>) = 0 [pid 7274] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7274] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7288] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7273] exit_group(0 [pid 7288] <... futex resumed>) = 1 ./strace-static-x86_64: Process 7305 attached ./strace-static-x86_64: Process 7303 attached [pid 7298] <... futex resumed>) = ? [pid 7290] <... futex resumed>) = 0 [pid 7288] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7279] <... clone resumed>, parent_tid=[7303], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7303 [pid 7276] <... clone resumed>, parent_tid=[7304], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7304 [pid 7275] <... clone resumed>, parent_tid=[7305], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7305 [pid 7273] <... exit_group resumed>) = ? [pid 7298] +++ exited with 0 +++ [pid 7290] fspick(AT_FDCWD, ".", 0) = 4 [pid 7290] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7290] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7274] <... futex resumed>) = ? [pid 7274] +++ exited with 0 +++ ./strace-static-x86_64: Process 7304 attached [pid 7304] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7304] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7285] <... fsconfig resumed>) = 0 [pid 7285] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7285] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7305] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7305] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7303] set_robust_list(0x7f5047d309e0, 24 [pid 7288] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7279] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7276] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7275] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7305] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 ENOSPC (No space left on device) [pid 7303] <... set_robust_list resumed>) = 0 [pid 7297] <... mount resumed>) = 0 [pid 7288] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [ 98.154531][ T7297] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 98.170918][ T7274] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 98.188200][ T7297] EXT4-fs (loop1): 1 truncate cleaned up [ 98.195317][ T7285] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 98.201429][ T7297] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7279] <... futex resumed>) = 0 [pid 7276] <... futex resumed>) = 1 [pid 7275] <... futex resumed>) = 0 [pid 7273] +++ exited with 0 +++ [pid 7303] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7288] <... futex resumed>) = 1 [pid 7279] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7276] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7275] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7288] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7273, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5002] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./61/binderfs") = 0 [pid 5002] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7297] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7297] chdir("./file0") = 0 [pid 7290] <... futex resumed>) = 0 [pid 7305] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7304] <... futex resumed>) = 0 [pid 7278] <... fsconfig resumed>) = 0 [pid 7303] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7305] <... futex resumed>) = 1 [pid 7304] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7303] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7290] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7275] <... futex resumed>) = 0 [pid 7305] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7304] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7290] <... fsconfig resumed>) = 0 [pid 7304] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7303] <... futex resumed>) = 1 [pid 7290] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7279] <... futex resumed>) = 0 [pid 7304] <... futex resumed>) = 1 [pid 7303] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7290] <... futex resumed>) = 1 [pid 7288] <... futex resumed>) = 0 [pid 7276] <... futex resumed>) = 0 [pid 7304] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7290] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7279] exit_group(0 [pid 7278] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7278] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7297] ioctl(4, LOOP_CLR_FD) = 0 [pid 7297] close(4 [pid 7303] <... futex resumed>) = ? [pid 7297] <... close resumed>) = 0 [pid 7288] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7279] <... exit_group resumed>) = ? [pid 7285] <... futex resumed>) = ? [pid 7276] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7303] +++ exited with 0 +++ [pid 7297] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7290] <... futex resumed>) = 0 [pid 7288] <... futex resumed>) = 1 [pid 7276] <... futex resumed>) = 1 [pid 7275] exit_group(0 [pid 5002] <... umount2 resumed>) = 0 [pid 7305] <... futex resumed>) = ? [pid 7297] <... futex resumed>) = 1 [pid 7294] <... futex resumed>) = 0 [pid 7290] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7288] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7285] +++ exited with 0 +++ [pid 7282] <... futex resumed>) = 0 [pid 7279] +++ exited with 0 +++ [pid 7278] <... futex resumed>) = ? [pid 7276] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7275] <... exit_group resumed>) = ? [pid 5002] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7305] +++ exited with 0 +++ [pid 7294] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7282] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7278] +++ exited with 0 +++ [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7279, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5005] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5005] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7275] +++ exited with 0 +++ [pid 5005] getdents64(3, [pid 7294] <... futex resumed>) = 0 [pid 5005] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7275, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5005] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... restart_syscall resumed>) = 0 [pid 5005] lstat("./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5005] unlink("./62/binderfs" [pid 5001] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] <... unlink resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./62/binderfs") = 0 [pid 5001] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7297] fspick(AT_FDCWD, ".", 0 [ 98.220735][ T7278] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 98.250922][ T7282] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 7294] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7297] <... fspick resumed>) = 4 [pid 5002] lstat("./61/file0", [pid 7297] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7297] <... futex resumed>) = 1 [pid 7294] <... futex resumed>) = 0 [pid 5002] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7297] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7294] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7297] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7294] <... futex resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7297] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7294] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... openat resumed>) = 4 [pid 7297] <... fsconfig resumed>) = 0 [pid 5002] fstat(4, [pid 7297] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7297] <... futex resumed>) = 1 [pid 7294] <... futex resumed>) = 0 [pid 5002] getdents64(4, [pid 7297] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7294] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7297] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7294] <... futex resumed>) = 0 [pid 7290] <... fsconfig resumed>) = 0 [pid 7288] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7276] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 98.264008][ T7290] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 98.275660][ T7282] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 5005] <... umount2 resumed>) = 0 [pid 5002] getdents64(4, [pid 5001] <... umount2 resumed>) = 0 [pid 7297] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7294] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7290] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7288] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7276] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7290] <... futex resumed>) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7290] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 5005] lstat("./62/file0", [pid 5001] lstat("./62/file0", [pid 7290] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 5005] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7290] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7290] <... futex resumed>) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7290] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5005] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5005] <... openat resumed>) = 4 [pid 5001] <... openat resumed>) = 4 [pid 5005] fstat(4, [pid 5001] fstat(4, [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(4, [pid 5001] getdents64(4, [pid 5005] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5005] getdents64(4, [pid 5001] getdents64(4, [pid 5005] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5005] close(4 [pid 5001] close(4 [pid 5005] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5005] rmdir("./62/file0" [pid 5001] rmdir("./62/file0" [pid 5005] <... rmdir resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5005] getdents64(3, [pid 5001] getdents64(3, [pid 5005] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5005] close(3 [pid 5001] close(3 [pid 5005] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 7288] <... futex resumed>) = 1 [pid 7304] <... futex resumed>) = 0 [pid 7290] <... futex resumed>) = 0 [pid 7276] <... futex resumed>) = 1 [pid 5005] rmdir("./62" [pid 5002] close(4 [pid 5001] rmdir("./62" [pid 7304] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7290] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7288] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7276] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... rmdir resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 7288] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5005] mkdir("./63", 0777 [pid 5002] rmdir("./61/file0" [pid 5001] mkdir("./63", 0777 [pid 7304] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7288] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... mkdir resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5005] <... openat resumed>) = 3 [pid 5001] <... openat resumed>) = 3 [pid 5005] ioctl(3, LOOP_CLR_FD [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5005] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5005] close(3 [pid 5001] close(3 [pid 7304] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7290] <... futex resumed>) = 0 [pid 7288] <... futex resumed>) = 1 [pid 7282] <... fsconfig resumed>) = 0 [pid 5005] <... close resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 7304] <... futex resumed>) = 1 [pid 7297] <... fsconfig resumed>) = 0 [pid 7290] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7288] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7282] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7276] <... futex resumed>) = 0 [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] getdents64(3, [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7304] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5005] <... clone resumed>, child_tidptr=0x5555562025d0) = 7308 [pid 5001] <... clone resumed>, child_tidptr=0x5555562025d0) = 7309 ./strace-static-x86_64: Process 7309 attached [pid 7309] set_robust_list(0x5555562025e0, 24) = 0 [pid 7309] chdir("./63") = 0 [pid 7309] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7309] setpgid(0, 0) = 0 [pid 7309] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 7308 attached [pid 7308] set_robust_list(0x5555562025e0, 24 [pid 7309] write(3, "1000", 4) = 4 [pid 7309] close(3) = 0 [pid 7309] symlink("/dev/binderfs", "./binderfs" [pid 7308] <... set_robust_list resumed>) = 0 [pid 7308] chdir("./63" [pid 7309] <... symlink resumed>) = 0 [pid 7308] <... chdir resumed>) = 0 [pid 7308] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7308] setpgid(0, 0 [pid 7309] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7276] exit_group(0 [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7308] <... setpgid resumed>) = 0 [pid 7309] <... futex resumed>) = 0 [pid 7304] <... futex resumed>) = ? [pid 7297] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7282] <... futex resumed>) = ? [pid 7276] <... exit_group resumed>) = ? [pid 5002] close(3 [pid 7309] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7304] +++ exited with 0 +++ [pid 5002] <... close resumed>) = 0 [pid 7309] <... mmap resumed>) = 0x7f50500f1000 [pid 7308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7309] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7308] <... openat resumed>) = 3 [pid 5002] rmdir("./61" [pid 7309] <... mprotect resumed>) = 0 [pid 7308] write(3, "1000", 4 [pid 7309] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7308] <... write resumed>) = 4 [pid 7308] close(3 [pid 7309] <... clone resumed>, parent_tid=[7310], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7310 [pid 7308] <... close resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 7309] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7308] symlink("/dev/binderfs", "./binderfs" [pid 7309] <... futex resumed>) = 0 [pid 7308] <... symlink resumed>) = 0 [pid 7294] <... futex resumed>) = 0 [pid 5002] mkdir("./62", 0777 [pid 7309] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7308] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7294] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7308] <... futex resumed>) = 0 [pid 7308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7294] <... futex resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 7308] <... mmap resumed>) = 0x7f50500f1000 [pid 7294] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7308] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7297] <... futex resumed>) = 1 [pid 7308] <... mprotect resumed>) = 0 [pid 7308] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7297] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 5002] <... openat resumed>) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 7308] <... clone resumed>, parent_tid=[7311], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7311 [pid 7297] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7308] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] close(3 [pid 7308] <... futex resumed>) = 0 [pid 7308] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5002] <... close resumed>) = 0 [pid 7297] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7310 attached [pid 7310] set_robust_list(0x7f50501119e0, 24) = 0 [pid 5002] <... clone resumed>, child_tidptr=0x5555562025d0) = 7312 [pid 7297] <... futex resumed>) = 1 [pid 7294] <... futex resumed>) = 0 [pid 7294] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7310] memfd_create("syzkaller", 0 [pid 7294] <... futex resumed>) = 0 [pid 7310] <... memfd_create resumed>) = 3 [pid 7294] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7310] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [ 98.314150][ T7282] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 98.327536][ T7297] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 98.341400][ T7290] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [pid 7297] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7310] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7282] +++ exited with 0 +++ [pid 7276] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7276, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7310] <... write resumed>) = 262144 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./62/binderfs") = 0 [pid 4999] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7310] munmap(0x7f5047cf1000, 262144) = 0 [pid 7310] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7310] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7312 attached ./strace-static-x86_64: Process 7311 attached ) = 0 [pid 7310] close(3) = 0 [pid 7310] mkdir("./file0", 0777) = 0 [pid 7310] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7312] set_robust_list(0x5555562025e0, 24 [pid 7311] set_robust_list(0x7f50501119e0, 24 [pid 7312] <... set_robust_list resumed>) = 0 [pid 7311] <... set_robust_list resumed>) = 0 [pid 7311] memfd_create("syzkaller", 0 [pid 7288] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7312] chdir("./62" [pid 7311] <... memfd_create resumed>) = 3 [pid 7288] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7312] <... chdir resumed>) = 0 [pid 7311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7288] <... futex resumed>) = 0 [pid 7312] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7311] <... mmap resumed>) = 0x7f5047cf1000 [pid 7288] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7312] <... prctl resumed>) = 0 [pid 7311] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7288] <... mmap resumed>) = 0x7f5047d10000 [pid 7312] setpgid(0, 0 [pid 7288] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7312] <... setpgid resumed>) = 0 [pid 7288] <... mprotect resumed>) = 0 [pid 7312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7288] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7312] <... openat resumed>) = 3 [pid 7312] write(3, "1000", 4 [pid 7294] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7288] <... clone resumed>, parent_tid=[7313], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7313 [ 98.365574][ T7297] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 98.374223][ T7310] loop2: detected capacity change from 0 to 512 [ 98.381918][ T7290] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 98.385991][ T7310] EXT4-fs: Ignoring removed oldalloc option [ 98.397306][ T7297] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] ./strace-static-x86_64: Process 7313 attached [pid 7312] <... write resumed>) = 4 [pid 7294] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7288] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7313] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7294] <... futex resumed>) = 0 [pid 7313] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7294] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7311] <... write resumed>) = 262144 [pid 7311] munmap(0x7f5047cf1000, 262144) = 0 [pid 7311] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 7311] ioctl(4, LOOP_SET_FD, 3 [pid 7312] close(3 [pid 7294] <... mmap resumed>) = 0x7f5047d10000 [pid 7290] <... fsconfig resumed>) = 0 [pid 7288] <... futex resumed>) = 0 [pid 7312] <... close resumed>) = 0 [pid 7294] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7288] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7312] symlink("/dev/binderfs", "./binderfs" [pid 7294] <... mprotect resumed>) = 0 [pid 7312] <... symlink resumed>) = 0 [pid 7294] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7312] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7294] <... clone resumed>, parent_tid=[7315], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7315 [pid 7312] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7294] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7312] <... mmap resumed>) = 0x7f50500f1000 [pid 7294] <... futex resumed>) = 0 [pid 7312] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7294] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7312] <... mprotect resumed>) = 0 [pid 7312] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7318], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7318 [pid 7312] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 7312] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7318 attached [pid 7318] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7318] memfd_create("syzkaller", 0) = 3 [pid 7318] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 4999] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7313] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7290] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7313] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7290] <... futex resumed>) = 0 [pid 4999] lstat("./62/file0", ./strace-static-x86_64: Process 7315 attached [pid 7318] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7313] <... futex resumed>) = 1 [pid 7311] <... ioctl resumed>) = 0 [pid 7288] <... futex resumed>) = 0 [pid 7318] <... write resumed>) = 262144 [pid 7290] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7288] exit_group(0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7311] close(3 [pid 7290] <... futex resumed>) = ? [pid 7288] <... exit_group resumed>) = ? [pid 4999] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7311] <... close resumed>) = 0 [pid 7290] +++ exited with 0 +++ [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7315] set_robust_list(0x7f5047d309e0, 24 [pid 7311] mkdir("./file0", 0777 [pid 4999] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7318] munmap(0x7f5047cf1000, 262144 [pid 7315] <... set_robust_list resumed>) = 0 [pid 7311] <... mkdir resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 7318] <... munmap resumed>) = 0 [pid 7315] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7311] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [ 98.416035][ T7290] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 98.420965][ T7311] loop5: detected capacity change from 0 to 512 [ 98.445950][ T7297] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 98.449063][ T7310] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 4999] fstat(4, [pid 7318] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7315] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7313] +++ exited with 0 +++ [pid 7288] +++ exited with 0 +++ [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7318] <... openat resumed>) = 4 [pid 7315] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7288, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 4999] getdents64(4, [pid 7318] ioctl(4, LOOP_SET_FD, 3 [pid 7315] <... futex resumed>) = 1 [pid 7294] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7315] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7297] <... fsconfig resumed>) = 0 [pid 7297] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7297] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 4999] close(4 [pid 7294] exit_group(0 [pid 4999] <... close resumed>) = 0 [pid 7294] <... exit_group resumed>) = ? [pid 7318] <... ioctl resumed>) = 0 [pid 5004] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7297] <... futex resumed>) = ? [pid 4999] rmdir("./62/file0" [pid 7315] <... futex resumed>) = ? [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7297] +++ exited with 0 +++ [pid 5004] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7318] close(3) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5004] <... openat resumed>) = 3 [pid 4999] getdents64(3, [pid 7318] mkdir("./file0", 0777 [pid 5004] fstat(3, [pid 4999] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] close(3 [pid 5004] getdents64(3, [pid 4999] <... close resumed>) = 0 [pid 5004] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] rmdir("./62" [pid 5004] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] <... rmdir resumed>) = 0 [pid 5004] lstat("./63/binderfs", [pid 4999] mkdir("./63", 0777 [pid 5004] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7318] <... mkdir resumed>) = 0 [pid 7318] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7315] +++ exited with 0 +++ [pid 7294] +++ exited with 0 +++ [pid 5004] unlink("./63/binderfs" [pid 4999] <... mkdir resumed>) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7294, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5004] <... unlink resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5004] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 98.465277][ T7311] EXT4-fs: Ignoring removed oldalloc option [ 98.468032][ T7310] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 98.475357][ T7318] loop3: detected capacity change from 0 to 512 [ 98.493993][ T7310] EXT4-fs (loop2): 1 truncate cleaned up [ 98.500561][ T7318] EXT4-fs: Ignoring removed oldalloc option [pid 4999] close(3 [pid 7310] <... mount resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7310] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5004] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 7323 attached [pid 7310] <... openat resumed>) = 3 [pid 5004] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... clone resumed>, child_tidptr=0x5555562025d0) = 7323 [pid 7323] set_robust_list(0x5555562025e0, 24 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7323] <... set_robust_list resumed>) = 0 [pid 7323] chdir("./63") = 0 [pid 7323] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7323] setpgid(0, 0) = 0 [pid 7323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7323] write(3, "1000", 4) = 4 [pid 7323] close(3) = 0 [pid 7323] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7323] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7323] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7310] chdir("./file0" [pid 7323] <... mmap resumed>) = 0x7f50500f1000 [pid 7310] <... chdir resumed>) = 0 [pid 7323] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7310] ioctl(4, LOOP_CLR_FD [pid 7323] <... mprotect resumed>) = 0 [pid 7310] <... ioctl resumed>) = 0 [pid 7323] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7310] close(4) = 0 [pid 5004] lstat("./63/file0", [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7323] <... clone resumed>, parent_tid=[7325], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7325 [pid 7310] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5004] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7323] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7310] <... futex resumed>) = 1 [pid 7309] <... futex resumed>) = 0 [pid 5004] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... openat resumed>) = 3 [pid 7323] <... futex resumed>) = 0 [pid 7310] fspick(AT_FDCWD, ".", 0 [pid 7309] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] fstat(3, [pid 7323] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7310] <... fspick resumed>) = 4 [pid 7309] <... futex resumed>) = 0 [pid 5004] openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7310] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7309] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7310] <... futex resumed>) = 0 [pid 7309] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5004] <... openat resumed>) = 4 [pid 5000] getdents64(3, [pid 7310] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7309] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7310] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7309] <... futex resumed>) = 0 [pid 5004] fstat(4, [pid 5000] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7310] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7309] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 98.513101][ T7310] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.536772][ T7311] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 98.549303][ T7311] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 5000] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7310] <... fsconfig resumed>) = 0 [pid 5004] getdents64(4, [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7325 attached [pid 7310] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5000] lstat("./64/binderfs", [pid 7325] set_robust_list(0x7f50501119e0, 24 [pid 5004] getdents64(4, [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7325] <... set_robust_list resumed>) = 0 [pid 5004] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5000] unlink("./64/binderfs" [pid 7325] memfd_create("syzkaller", 0 [pid 7310] <... futex resumed>) = 1 [pid 7309] <... futex resumed>) = 0 [pid 5004] close(4 [pid 5000] <... unlink resumed>) = 0 [pid 7325] <... memfd_create resumed>) = 3 [pid 7310] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7309] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... close resumed>) = 0 [pid 5000] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7325] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7310] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5004] rmdir("./63/file0" [pid 7325] <... mmap resumed>) = 0x7f5047cf1000 [pid 7310] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5004] <... rmdir resumed>) = 0 [pid 7325] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5004] getdents64(3, [pid 7325] <... write resumed>) = 262144 [pid 5004] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7325] munmap(0x7f5047cf1000, 262144 [pid 5004] close(3 [pid 7325] <... munmap resumed>) = 0 [pid 5004] <... close resumed>) = 0 [pid 7325] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5004] rmdir("./63" [pid 7325] <... openat resumed>) = 4 [pid 5004] <... rmdir resumed>) = 0 [pid 7325] ioctl(4, LOOP_SET_FD, 3 [pid 5004] mkdir("./64", 0777 [pid 7309] <... futex resumed>) = 0 [pid 7309] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7325] <... ioctl resumed>) = 0 [pid 5004] <... mkdir resumed>) = 0 [pid 7325] close(3) = 0 [pid 7325] mkdir("./file0", 0777 [ 98.576073][ T7318] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 98.586258][ T7318] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 98.598914][ T7325] loop0: detected capacity change from 0 to 512 [ 98.610707][ T7318] EXT4-fs (loop3): 1 truncate cleaned up [ 98.612011][ T7311] EXT4-fs (loop5): 1 truncate cleaned up [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 7325] <... mkdir resumed>) = 0 [pid 7325] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5004] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5004] close(3) = 0 [pid 7318] <... mount resumed>) = 0 [pid 7318] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7318] chdir("./file0") = 0 [pid 7318] ioctl(4, LOOP_CLR_FD) = 0 [pid 7318] close(4) = 0 [pid 7318] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7312] <... futex resumed>) = 0 [pid 7312] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7312] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7318] fspick(AT_FDCWD, ".", 0 [pid 5004] <... clone resumed>, child_tidptr=0x5555562025d0) = 7326 [pid 7318] <... fspick resumed>) = 4 [pid 7309] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7309] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7309] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7309] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7309] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7309] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7327], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7327 [pid 7309] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7309] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7318] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7312] <... futex resumed>) = 0 [pid 7312] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7312] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7318] <... futex resumed>) = 1 [pid 7318] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 7318] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7312] <... futex resumed>) = 0 [pid 7312] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7312] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7318] <... futex resumed>) = 1 [ 98.617323][ T7318] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.634477][ T7310] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 98.637039][ T7325] EXT4-fs: Ignoring removed oldalloc option [pid 7318] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0./strace-static-x86_64: Process 7326 attached [pid 7310] <... fsconfig resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 7327 attached [pid 7327] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7327] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7327] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7309] <... futex resumed>) = 0 [pid 7309] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7309] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7327] <... futex resumed>) = 1 [pid 7327] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7326] set_robust_list(0x5555562025e0, 24 [pid 7311] <... mount resumed>) = 0 [pid 7310] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7326] <... set_robust_list resumed>) = 0 [pid 7311] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7310] <... futex resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7326] chdir("./64" [pid 7311] <... openat resumed>) = 3 [pid 7310] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5000] lstat("./64/file0", [pid 7326] <... chdir resumed>) = 0 [pid 7311] chdir("./file0" [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7326] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7311] <... chdir resumed>) = 0 [pid 5000] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7326] <... prctl resumed>) = 0 [pid 7311] ioctl(4, LOOP_CLR_FD [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7326] setpgid(0, 0 [pid 7311] <... ioctl resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7326] <... setpgid resumed>) = 0 [pid 7311] close(4 [pid 5000] <... openat resumed>) = 4 [pid 7326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7311] <... close resumed>) = 0 [pid 5000] fstat(4, [pid 7326] <... openat resumed>) = 3 [pid 7311] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7326] write(3, "1000", 4 [pid 7311] <... futex resumed>) = 1 [pid 5000] getdents64(4, [pid 7326] <... write resumed>) = 4 [pid 7311] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5000] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7326] close(3 [pid 5000] getdents64(4, [pid 7326] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7326] symlink("/dev/binderfs", "./binderfs" [pid 5000] close(4 [pid 7326] <... symlink resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 7326] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] rmdir("./64/file0" [pid 7326] <... futex resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 7326] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5000] getdents64(3, [pid 7326] <... mmap resumed>) = 0x7f50500f1000 [pid 5000] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7326] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 5000] close(3 [pid 7326] <... mprotect resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 7326] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5000] rmdir("./64" [pid 7312] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7308] <... futex resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 7326] <... clone resumed>, parent_tid=[7330], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7330 [pid 5000] mkdir("./65", 0777 [pid 7326] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... mkdir resumed>) = 0 [pid 7326] <... futex resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7326] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5000] <... openat resumed>) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 98.673480][ T7311] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.685208][ T7327] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 98.696299][ T7325] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 98.711553][ T7327] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 5000] close(3 [pid 7312] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7308] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7331 ./strace-static-x86_64: Process 7330 attached [pid 7330] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7330] memfd_create("syzkaller", 0) = 3 [pid 7330] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7312] <... futex resumed>) = 0 [pid 7308] <... futex resumed>) = 1 [pid 7309] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7312] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7311] <... futex resumed>) = 0 [pid 7308] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7311] fspick(AT_FDCWD, ".", 0 [pid 7309] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7330] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7312] <... mmap resumed>) = 0x7f5047d10000 [pid 7311] <... fspick resumed>) = 4 [pid 7309] <... futex resumed>) = 1 [pid 7310] <... futex resumed>) = 0 [pid 7309] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7311] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7312] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7310] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7312] <... mprotect resumed>) = 0 [pid 7311] <... futex resumed>) = 1 [pid 7308] <... futex resumed>) = 0 [pid 7311] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7308] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7310] <... openat resumed>) = 5 [pid 7308] <... futex resumed>) = 0 [pid 7312] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7311] <... fsconfig resumed>) = 0 [pid 7310] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7311] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7308] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7311] <... futex resumed>) = 0 [pid 7308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7311] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7308] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7311] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7310] <... futex resumed>) = 1 [pid 7309] <... futex resumed>) = 0 [pid 7308] <... futex resumed>) = 0 [pid 7308] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7312] <... clone resumed>, parent_tid=[7332], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7332 [pid 7310] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7312] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7312] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7330] <... write resumed>) = 262144 [pid 7330] munmap(0x7f5047cf1000, 262144) = 0 [pid 7330] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 98.726255][ T7318] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 98.748111][ T7311] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 98.750897][ T7330] loop4: detected capacity change from 0 to 512 [pid 7330] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7332 attached [pid 7332] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7332] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7332] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7332] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7330] <... ioctl resumed>) = 0 [pid 7330] close(3) = 0 [pid 7330] mkdir("./file0", 0777) = 0 [pid 7330] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7312] <... futex resumed>) = 0 [pid 7312] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7308] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7332] <... futex resumed>) = 0 [pid 7332] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7312] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7308] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7308] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 7331 attached ) = 0 [pid 7308] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7331] set_robust_list(0x5555562025e0, 24) = 0 [pid 7331] chdir("./65" [pid 7308] <... clone resumed>, parent_tid=[7334], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7334 [pid 7331] <... chdir resumed>) = 0 [pid 7308] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7331] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7331] setpgid(0, 0) = 0 [pid 7308] <... futex resumed>) = 0 [pid 7318] <... fsconfig resumed>) = 0 [pid 7308] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7318] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7318] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7331] write(3, "1000", 4) = 4 [pid 7331] close(3) = 0 [pid 7331] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7331] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7331] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 ./strace-static-x86_64: Process 7334 attached [pid 7334] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7334] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7331] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7334] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7331] <... mprotect resumed>) = 0 [pid 7334] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7334] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7331] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7335], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7335 [pid 7331] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7331] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7335 attached [pid 7335] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7335] memfd_create("syzkaller", 0) = 3 [pid 7335] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7335] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7335] munmap(0x7f5047cf1000, 262144) = 0 [pid 7335] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7335] ioctl(4, LOOP_SET_FD, 3 [pid 7308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7335] <... ioctl resumed>) = 0 [pid 7335] close(3) = 0 [pid 7335] mkdir("./file0", 0777) = 0 [ 98.762604][ T7325] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 98.769181][ T7330] EXT4-fs: Ignoring removed oldalloc option [ 98.781031][ T7327] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 98.801042][ T7332] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 98.810097][ T7335] loop1: detected capacity change from 0 to 512 [ 98.812832][ T7330] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7335] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7308] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7334] <... futex resumed>) = 0 [pid 7308] <... futex resumed>) = 1 [pid 7334] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7311] <... fsconfig resumed>) = 0 [pid 7308] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7327] <... fsconfig resumed>) = 0 [pid 7311] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7327] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7311] <... futex resumed>) = 0 [pid 7327] <... futex resumed>) = 0 [pid 7311] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7327] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7309] exit_group(0 [pid 7327] <... futex resumed>) = ? [pid 7310] <... futex resumed>) = ? [pid 7309] <... exit_group resumed>) = ? [pid 7327] +++ exited with 0 +++ [pid 7312] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7310] +++ exited with 0 +++ [pid 7309] +++ exited with 0 +++ [pid 7312] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7309, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 7312] <... futex resumed>) = 1 [pid 7312] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7318] <... futex resumed>) = 0 [pid 5001] fstat(3, [pid 7318] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7318] <... openat resumed>) = 5 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./63/binderfs") = 0 [pid 5001] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7318] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7312] <... futex resumed>) = 0 [ 98.818930][ T7335] EXT4-fs: Ignoring removed oldalloc option [ 98.826271][ T7332] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 98.841505][ T7334] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 98.854026][ T7330] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 7318] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7308] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7308] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7311] <... futex resumed>) = 0 [pid 7308] <... futex resumed>) = 1 [pid 7311] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7308] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7325] <... mount resumed>) = 0 [pid 7325] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7325] chdir("./file0") = 0 [pid 7325] ioctl(4, LOOP_CLR_FD) = 0 [pid 7325] close(4) = 0 [pid 7325] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7323] <... futex resumed>) = 0 [pid 7323] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7323] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7325] <... futex resumed>) = 1 [pid 7311] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 7311] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7308] <... futex resumed>) = 0 [pid 7311] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7325] fspick(AT_FDCWD, ".", 0) = 4 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7325] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7323] <... futex resumed>) = 0 [pid 7323] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7323] <... futex resumed>) = 0 [ 98.872514][ T7334] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 98.880900][ T7325] EXT4-fs (loop0): 1 truncate cleaned up [ 98.881511][ T7330] EXT4-fs (loop4): 1 truncate cleaned up [ 98.886595][ T7325] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.892527][ T7330] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 5001] lstat("./63/file0", [pid 7325] <... futex resumed>) = 1 [pid 7323] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7325] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 7325] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7323] <... futex resumed>) = 0 [pid 7325] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7323] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7323] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7330] <... mount resumed>) = 0 [pid 7330] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7330] chdir("./file0") = 0 [pid 7330] ioctl(4, LOOP_CLR_FD) = 0 [pid 7332] <... fsconfig resumed>) = 0 [pid 7332] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7312] exit_group(0 [pid 7318] <... futex resumed>) = ? [pid 7312] <... exit_group resumed>) = ? [pid 7318] +++ exited with 0 +++ [pid 7332] +++ exited with 0 +++ [pid 7312] +++ exited with 0 +++ [pid 5001] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./63/file0") = 0 [pid 5001] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./63") = 0 [pid 5001] mkdir("./64", 0777) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7312, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7330] close(4 [pid 5001] <... openat resumed>) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7342 [pid 7334] <... fsconfig resumed>) = 0 [pid 7334] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7308] exit_group(0 [pid 5002] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7311] <... futex resumed>) = ? [pid 7308] <... exit_group resumed>) = ? [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7311] +++ exited with 0 +++ [pid 7334] +++ exited with 0 +++ [pid 7308] +++ exited with 0 +++ [pid 5002] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7330] <... close resumed>) = 0 [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7308, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5002] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7342 attached [pid 7330] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] fstat(3, [pid 7330] <... futex resumed>) = 1 [pid 7326] <... futex resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7330] fspick(AT_FDCWD, ".", 0 [pid 7326] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] getdents64(3, [pid 7342] set_robust_list(0x5555562025e0, 24 [pid 7330] <... fspick resumed>) = 4 [pid 7326] <... futex resumed>) = 0 [pid 5005] restart_syscall(<... resuming interrupted clone ...> [pid 5002] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7342] <... set_robust_list resumed>) = 0 [pid 7330] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7326] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7330] <... futex resumed>) = 0 [pid 7326] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7342] chdir("./64" [pid 5005] <... restart_syscall resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5005] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] unlink("./62/binderfs" [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... unlink resumed>) = 0 [pid 5005] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] <... openat resumed>) = 3 [pid 5005] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5005] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7323] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7323] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [ 98.936468][ T7332] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 98.950055][ T7334] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 98.961987][ T7325] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 98.973883][ T7335] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 5005] lstat("./63/binderfs", [pid 7342] <... chdir resumed>) = 0 [pid 7330] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7326] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7323] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5005] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7323] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] unlink("./63/binderfs" [pid 7323] <... futex resumed>) = 0 [pid 5005] <... unlink resumed>) = 0 [pid 7323] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5005] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7323] <... mmap resumed>) = 0x7f5047d10000 [pid 7323] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7323] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7343], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7343 [pid 7323] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7323] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7325] <... fsconfig resumed>) = 0 [pid 7325] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7325] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7343 attached [pid 7343] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7343] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7343] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7323] <... futex resumed>) = 0 [pid 7343] <... futex resumed>) = 1 [pid 7342] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7330] <... fsconfig resumed>) = 0 [pid 7326] <... futex resumed>) = 0 [pid 7323] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7342] <... prctl resumed>) = 0 [pid 7330] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7326] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7342] setpgid(0, 0 [pid 7330] <... futex resumed>) = 0 [pid 7326] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7342] <... setpgid resumed>) = 0 [pid 7330] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7326] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7330] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7326] <... futex resumed>) = 0 [pid 7342] <... openat resumed>) = 3 [pid 7330] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7326] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7342] write(3, "1000", 4) = 4 [pid 7342] close(3) = 0 [pid 7342] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7342] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7342] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7342] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7342] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7344], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7344 [pid 7342] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7343] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7342] <... futex resumed>) = 0 [pid 7342] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7323] <... futex resumed>) = 1 [pid 7323] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7344 attached [pid 7344] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7344] memfd_create("syzkaller", 0) = 3 [pid 7344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7344] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7325] <... futex resumed>) = 0 [pid 7344] munmap(0x7f5047cf1000, 262144) = 0 [pid 7344] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7344] ioctl(4, LOOP_SET_FD, 3 [pid 7325] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7344] <... ioctl resumed>) = 0 [pid 7344] close(3) = 0 [pid 7344] mkdir("./file0", 0777) = 0 [ 98.996016][ T7335] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 99.015019][ T7335] EXT4-fs (loop1): 1 truncate cleaned up [ 99.032297][ T7344] loop2: detected capacity change from 0 to 512 [pid 7344] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7326] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7323] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7326] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7323] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... umount2 resumed>) = 0 [pid 5005] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] lstat("./63/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5005] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5005] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5005] close(4) = 0 [pid 5005] rmdir("./63/file0") = 0 [pid 5005] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5005] close(3) = 0 [pid 5005] rmdir("./63") = 0 [pid 5005] mkdir("./64", 0777 [pid 7343] <... futex resumed>) = 0 [pid 7326] <... futex resumed>) = 0 [pid 7323] <... futex resumed>) = 1 [pid 5005] <... mkdir resumed>) = 0 [pid 7343] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7326] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7323] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7335] <... mount resumed>) = 0 [pid 7330] <... fsconfig resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] <... openat resumed>) = 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] ioctl(3, LOOP_CLR_FD [pid 5002] lstat("./62/file0", [pid 5005] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] close(3 [ 99.040205][ T7330] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 99.042515][ T7344] EXT4-fs: Ignoring removed oldalloc option [ 99.050846][ T7325] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 99.058814][ T7335] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.088712][ T7325] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 5002] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7343] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 7330] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7326] <... mmap resumed>) = 0x7f5047d10000 [pid 5002] <... openat resumed>) = 4 [pid 5005] <... clone resumed>, child_tidptr=0x5555562025d0) = 7347 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./62/file0") = 0 [pid 5002] getdents64(3, [pid 7343] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7335] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7330] <... futex resumed>) = 0 [pid 7326] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7343] <... futex resumed>) = 1 [pid 7335] <... openat resumed>) = 3 [pid 7330] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5002] close(3 [pid 7323] <... futex resumed>) = 0 [pid 7343] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7335] chdir("./file0" [pid 7326] <... mprotect resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 7335] <... chdir resumed>) = 0 [pid 5002] rmdir("./62" [pid 7335] ioctl(4, LOOP_CLR_FD [pid 7326] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5002] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 7347 attached [pid 5002] mkdir("./63", 0777 [pid 7347] set_robust_list(0x5555562025e0, 24 [pid 7335] <... ioctl resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 7347] <... set_robust_list resumed>) = 0 [pid 7335] close(4 [pid 7326] <... clone resumed>, parent_tid=[7348], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7348 [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7347] chdir("./64" [pid 7335] <... close resumed>) = 0 [pid 7326] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... openat resumed>) = 3 [pid 7347] <... chdir resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 7347] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7347] <... prctl resumed>) = 0 [pid 5002] close(3 [pid 7347] setpgid(0, 0 [pid 5002] <... close resumed>) = 0 [pid 7347] <... setpgid resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7335] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7326] <... futex resumed>) = 0 [pid 7347] <... openat resumed>) = 3 [pid 5002] <... clone resumed>, child_tidptr=0x5555562025d0) = 7349 [pid 7347] write(3, "1000", 4) = 4 [pid 7347] close(3) = 0 [pid 7347] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7347] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7347] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7347] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7347] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7350], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7350 [pid 7347] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7347] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7348 attached [pid 7348] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7348] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7335] <... futex resumed>) = 1 [pid 7331] <... futex resumed>) = 0 [pid 7326] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7335] fspick(AT_FDCWD, ".", 0 [pid 7331] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7335] <... fspick resumed>) = 4 [pid 7331] <... futex resumed>) = 0 [pid 7335] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7331] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7348] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7348] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7348] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7331] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7335] <... futex resumed>) = 0 [pid 7326] <... futex resumed>) = 0 [pid 7335] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7331] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7326] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7335] <... fsconfig resumed>) = 0 [pid 7331] <... futex resumed>) = 0 [pid 7330] <... futex resumed>) = 0 [pid 7326] <... futex resumed>) = 1 ./strace-static-x86_64: Process 7349 attached [ 99.115182][ T7344] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 99.130318][ T7330] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 99.142227][ T7335] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 7335] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7331] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7330] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7326] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7335] <... futex resumed>) = 0 [pid 7331] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7349] set_robust_list(0x5555562025e0, 24) = 0 [pid 7349] chdir("./63") = 0 [pid 7349] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7349] setpgid(0, 0) = 0 [pid 7349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7349] write(3, "1000", 4) = 4 [pid 7349] close(3) = 0 [pid 7349] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7349] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7349] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7349] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7349] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7351], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7351 [pid 7349] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7349] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7331] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7335] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7331] <... futex resumed>) = 0 [pid 7331] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7350 attached [pid 7350] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7350] memfd_create("syzkaller", 0) = 3 [pid 7350] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7350] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7350] munmap(0x7f5047cf1000, 262144) = 0 [pid 7350] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 7350] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7350] close(3) = 0 [pid 7350] mkdir("./file0", 0777) = 0 [pid 7350] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7326] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7326] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7351 attached [pid 7351] set_robust_list(0x7f50501119e0, 24 [pid 7326] <... futex resumed>) = 1 [pid 7348] <... futex resumed>) = 0 [pid 7348] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7331] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7326] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7331] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7348] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 7331] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7351] <... set_robust_list resumed>) = 0 [pid 7331] <... mmap resumed>) = 0x7f5047d10000 [pid 7348] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7331] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7326] <... futex resumed>) = 0 [pid 7348] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7351] memfd_create("syzkaller", 0 [pid 7331] <... mprotect resumed>) = 0 [pid 7331] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7353], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7353 [pid 7331] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7351] <... memfd_create resumed>) = 3 [pid 7331] <... futex resumed>) = 0 [pid 7351] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7331] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7351] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7351] munmap(0x7f5047cf1000, 262144) = 0 [pid 7351] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7351] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7351] close(3) = 0 [pid 7351] mkdir("./file0", 0777) = 0 [ 99.153559][ T7344] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 99.153912][ T7350] loop5: detected capacity change from 0 to 512 [ 99.170813][ T7330] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 99.182029][ T7350] EXT4-fs: Ignoring removed oldalloc option [ 99.196447][ T7325] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 99.206324][ T7351] loop3: detected capacity change from 0 to 512 [pid 7351] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"..../strace-static-x86_64: Process 7353 attached [pid 7335] <... fsconfig resumed>) = 0 [pid 7325] <... fsconfig resumed>) = 0 [pid 7353] set_robust_list(0x7f5047d309e0, 24 [pid 7335] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7353] <... set_robust_list resumed>) = 0 [pid 7335] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7353] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7325] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7353] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7325] <... futex resumed>) = 0 [pid 7325] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7353] <... futex resumed>) = 1 [pid 7331] <... futex resumed>) = 0 [pid 7353] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7331] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7323] exit_group(0 [pid 7335] <... futex resumed>) = 0 [pid 7331] <... futex resumed>) = 1 [pid 7335] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7331] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7343] <... futex resumed>) = ? [pid 7323] <... exit_group resumed>) = ? [pid 7325] <... futex resumed>) = ? [pid 7325] +++ exited with 0 +++ [pid 7343] +++ exited with 0 +++ [pid 7323] +++ exited with 0 +++ [pid 7344] <... mount resumed>) = 0 [pid 7344] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7344] chdir("./file0") = 0 [pid 7344] ioctl(4, LOOP_CLR_FD) = 0 [pid 7344] close(4) = 0 [pid 7344] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7342] <... futex resumed>) = 0 [pid 7342] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7342] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7344] <... futex resumed>) = 1 [pid 7344] fspick(AT_FDCWD, ".", 0) = 4 [pid 7344] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7342] <... futex resumed>) = 0 [pid 7342] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7342] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7344] <... futex resumed>) = 1 [pid 7344] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 7344] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7342] <... futex resumed>) = 0 [pid 7342] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7342] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7344] <... futex resumed>) = 1 [ 99.215409][ T7351] EXT4-fs: Ignoring removed oldalloc option [ 99.223741][ T7350] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 99.224080][ T7344] EXT4-fs (loop2): 1 truncate cleaned up [ 99.239367][ T7335] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 99.241000][ T7344] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7344] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7323, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 4999] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./63/binderfs") = 0 [pid 4999] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7330] <... fsconfig resumed>) = 0 [pid 7330] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7326] exit_group(0) = ? [pid 7330] <... futex resumed>) = ? [pid 7330] +++ exited with 0 +++ [pid 7348] <... futex resumed>) = ? [pid 7348] +++ exited with 0 +++ [pid 7331] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7326] +++ exited with 0 +++ [ 99.252476][ T7330] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 99.277607][ T7350] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 99.291124][ T7335] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 99.303213][ T7350] EXT4-fs (loop5): 1 truncate cleaned up [pid 7342] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7331] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7353] <... futex resumed>) = 0 [pid 7331] <... futex resumed>) = 1 [pid 7353] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7331] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7326, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 7342] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7342] <... futex resumed>) = 0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7353] <... openat resumed>) = 5 [pid 5004] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7353] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7342] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7331] <... futex resumed>) = 0 [pid 5004] <... openat resumed>) = 3 [pid 5004] fstat(3, [pid 7353] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7342] <... mmap resumed>) = 0x7f5047d10000 [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7342] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5004] getdents64(3, [pid 7342] <... mprotect resumed>) = 0 [pid 5004] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7342] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5004] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7342] <... clone resumed>, parent_tid=[7360], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7360 [pid 5004] lstat("./64/binderfs", [pid 7342] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7342] <... futex resumed>) = 0 [pid 7342] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] unlink("./64/binderfs") = 0 [pid 5004] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7360 attached [pid 7335] <... fsconfig resumed>) = 0 [pid 7335] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7331] exit_group(0 [pid 7360] set_robust_list(0x7f5047d309e0, 24 [pid 7353] <... futex resumed>) = ? [pid 7331] <... exit_group resumed>) = ? [pid 7335] +++ exited with 0 +++ [pid 7350] <... mount resumed>) = 0 [pid 7350] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7350] chdir("./file0") = 0 [pid 7350] ioctl(4, LOOP_CLR_FD) = 0 [pid 7350] close(4 [pid 7353] +++ exited with 0 +++ [pid 7331] +++ exited with 0 +++ [pid 7360] <... set_robust_list resumed>) = 0 [pid 7360] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7331, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 7360] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7360] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7360] <... futex resumed>) = 1 [pid 7342] <... futex resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 7342] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] fstat(3, [pid 7342] <... futex resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7342] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./65/binderfs") = 0 [pid 5000] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7360] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5004] <... umount2 resumed>) = 0 [pid 5004] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./64/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7350] <... close resumed>) = 0 [pid 7350] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7347] <... futex resumed>) = 0 [pid 7347] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7347] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7350] <... futex resumed>) = 1 [pid 7350] fspick(AT_FDCWD, ".", 0) = 4 [pid 4999] <... umount2 resumed>) = 0 [pid 7350] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7347] <... futex resumed>) = 0 [pid 7347] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7347] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 99.308089][ T7344] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 99.310346][ T7350] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.341837][ T7351] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 99.342200][ T7335] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 7350] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 4999] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7350] <... fsconfig resumed>) = 0 [pid 5004] <... openat resumed>) = 4 [pid 7350] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7350] <... futex resumed>) = 1 [pid 7347] <... futex resumed>) = 0 [pid 4999] lstat("./63/file0", [pid 7350] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7347] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7347] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5004] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 4999] <... openat resumed>) = 4 [pid 5004] close(4 [pid 4999] fstat(4, [pid 5004] <... close resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7344] <... fsconfig resumed>) = 0 [pid 5004] rmdir("./64/file0" [pid 4999] getdents64(4, [pid 7344] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7344] <... futex resumed>) = 0 [pid 4999] getdents64(4, [pid 7344] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./63/file0") = 0 [pid 4999] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./63") = 0 [pid 4999] mkdir("./64", 0777 [pid 5004] <... rmdir resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 7342] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5004] getdents64(3, [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7342] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... umount2 resumed>) = 0 [pid 4999] close(3 [pid 7344] <... futex resumed>) = 0 [pid 7342] <... futex resumed>) = 1 [pid 5004] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [ 99.391593][ T7351] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 99.415123][ T7360] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [pid 5000] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... close resumed>) = 0 [pid 7344] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7342] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] close(3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] <... close resumed>) = 0 [pid 5000] lstat("./65/file0", [pid 5004] rmdir("./64" [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] <... rmdir resumed>) = 0 [pid 5000] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] mkdir("./65", 0777 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] <... mkdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] <... openat resumed>) = 4 [pid 5004] <... openat resumed>) = 3 [pid 5000] fstat(4, [pid 5004] ioctl(3, LOOP_CLR_FD [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] getdents64(4, [pid 5004] close(3 [pid 5000] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5004] <... close resumed>) = 0 [pid 5000] getdents64(4, [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7347] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7347] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 5000] close(4 [pid 5004] <... clone resumed>, child_tidptr=0x5555562025d0) = 7361 [pid 5000] <... close resumed>) = 0 [pid 7347] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5000] rmdir("./65/file0" [pid 4999] <... clone resumed>, child_tidptr=0x5555562025d0) = 7362 [pid 5000] <... rmdir resumed>) = 0 [pid 5000] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./65" [pid 7347] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7344] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 5000] <... rmdir resumed>) = 0 [pid 5000] mkdir("./66", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7363 [pid 7347] <... futex resumed>) = 0 [pid 7344] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7347] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7344] <... futex resumed>) = 1 [pid 7342] <... futex resumed>) = 0 [pid 7347] <... mmap resumed>) = 0x7f5047d10000 [pid 7344] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7347] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 7363 attached ) = 0 [pid 7363] set_robust_list(0x5555562025e0, 24 [pid 7347] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7362 attached ./strace-static-x86_64: Process 7361 attached , parent_tid=[7364], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7364 [pid 7347] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7364 attached [pid 7363] <... set_robust_list resumed>) = 0 [pid 7362] set_robust_list(0x5555562025e0, 24 [pid 7361] set_robust_list(0x5555562025e0, 24 [pid 7351] <... mount resumed>) = 0 [pid 7350] <... fsconfig resumed>) = 0 [pid 7347] <... futex resumed>) = 0 [pid 7364] set_robust_list(0x7f5047d309e0, 24 [pid 7362] <... set_robust_list resumed>) = 0 [pid 7361] <... set_robust_list resumed>) = 0 [pid 7351] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7350] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7347] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7364] <... set_robust_list resumed>) = 0 [pid 7363] chdir("./66" [pid 7362] chdir("./64" [pid 7361] chdir("./65" [pid 7351] <... openat resumed>) = 3 [pid 7350] <... futex resumed>) = 0 [pid 7364] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7363] <... chdir resumed>) = 0 [pid 7362] <... chdir resumed>) = 0 [pid 7361] <... chdir resumed>) = 0 [pid 7351] chdir("./file0" [pid 7350] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7364] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7362] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7361] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7351] <... chdir resumed>) = 0 [pid 7364] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7362] <... prctl resumed>) = 0 [pid 7361] <... prctl resumed>) = 0 [pid 7351] ioctl(4, LOOP_CLR_FD [pid 7364] <... futex resumed>) = 1 [pid 7362] setpgid(0, 0 [pid 7361] setpgid(0, 0 [pid 7351] <... ioctl resumed>) = 0 [pid 7347] <... futex resumed>) = 0 [pid 7364] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7363] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7362] <... setpgid resumed>) = 0 [pid 7361] <... setpgid resumed>) = 0 [ 99.440514][ T7350] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 99.453636][ T7351] EXT4-fs (loop3): 1 truncate cleaned up [ 99.459893][ T7360] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 99.460211][ T7351] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7351] close(4 [pid 7347] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7362] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7351] <... close resumed>) = 0 [pid 7350] <... futex resumed>) = 0 [pid 7347] <... futex resumed>) = 1 [pid 7362] <... openat resumed>) = 3 [pid 7361] <... openat resumed>) = 3 [pid 7351] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7350] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7347] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7363] <... prctl resumed>) = 0 [pid 7362] write(3, "1000", 4 [pid 7361] write(3, "1000", 4 [pid 7351] <... futex resumed>) = 1 [pid 7349] <... futex resumed>) = 0 [pid 7363] setpgid(0, 0 [pid 7362] <... write resumed>) = 4 [pid 7361] <... write resumed>) = 4 [pid 7351] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7349] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7363] <... setpgid resumed>) = 0 [pid 7362] close(3 [pid 7361] close(3 [pid 7351] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7349] <... futex resumed>) = 0 [pid 7363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7362] <... close resumed>) = 0 [pid 7361] <... close resumed>) = 0 [pid 7351] fspick(AT_FDCWD, ".", 0 [pid 7349] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7363] <... openat resumed>) = 3 [pid 7362] symlink("/dev/binderfs", "./binderfs" [pid 7361] symlink("/dev/binderfs", "./binderfs" [pid 7351] <... fspick resumed>) = 4 [pid 7363] write(3, "1000", 4 [pid 7362] <... symlink resumed>) = 0 [pid 7361] <... symlink resumed>) = 0 [pid 7351] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7363] <... write resumed>) = 4 [pid 7362] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7361] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7360] <... fsconfig resumed>) = 0 [pid 7351] <... futex resumed>) = 1 [pid 7349] <... futex resumed>) = 0 [pid 7363] close(3 [pid 7362] <... futex resumed>) = 0 [pid 7361] <... futex resumed>) = 0 [pid 7360] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7351] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7349] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7363] <... close resumed>) = 0 [pid 7362] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7361] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7360] <... futex resumed>) = 0 [pid 7351] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7349] <... futex resumed>) = 0 [pid 7362] <... mmap resumed>) = 0x7f50500f1000 [pid 7361] <... mmap resumed>) = 0x7f50500f1000 [pid 7351] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7349] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7342] exit_group(0 [pid 7363] symlink("/dev/binderfs", "./binderfs" [pid 7362] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7361] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7351] <... fsconfig resumed>) = 0 [pid 7344] <... futex resumed>) = ? [pid 7342] <... exit_group resumed>) = ? [pid 7363] <... symlink resumed>) = 0 [pid 7362] <... mprotect resumed>) = 0 [pid 7361] <... mprotect resumed>) = 0 [pid 7351] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7344] +++ exited with 0 +++ [pid 7363] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7362] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7361] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7351] <... futex resumed>) = 1 [pid 7349] <... futex resumed>) = 0 [pid 7363] <... futex resumed>) = 0 [pid 7351] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7349] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7363] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7362] <... clone resumed>, parent_tid=[7366], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7366 [pid 7361] <... clone resumed>, parent_tid=[7367], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7367 [pid 7360] +++ exited with 0 +++ [pid 7351] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7349] <... futex resumed>) = 0 [pid 7342] +++ exited with 0 +++ [pid 7363] <... mmap resumed>) = 0x7f50500f1000 [pid 7362] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7361] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7351] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7349] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7342, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 7363] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7362] <... futex resumed>) = 0 [pid 7361] <... futex resumed>) = 0 [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 7363] <... mprotect resumed>) = 0 [pid 7362] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7361] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5001] <... restart_syscall resumed>) = 0 [ 99.499033][ T7360] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 99.502563][ T7350] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [pid 7363] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5001] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7366 attached ) = -1 EINVAL (Invalid argument) [pid 7366] set_robust_list(0x7f50501119e0, 24 [pid 5001] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7366] <... set_robust_list resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 7366] memfd_create("syzkaller", 0 [pid 5001] fstat(3, [pid 7366] <... memfd_create resumed>) = 3 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7366] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] getdents64(3, [pid 7366] <... mmap resumed>) = 0x7f5047cf1000 [pid 5001] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7366] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5001] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./64/binderfs") = 0 [pid 5001] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7367 attached [pid 7363] <... clone resumed>, parent_tid=[7368], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7368 [pid 7367] set_robust_list(0x7f50501119e0, 24 [pid 7363] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7367] <... set_robust_list resumed>) = 0 [pid 7351] <... fsconfig resumed>) = 0 [pid 7363] <... futex resumed>) = 0 [pid 7367] memfd_create("syzkaller", 0 [pid 7363] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7351] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7366] <... write resumed>) = 262144 [pid 7366] munmap(0x7f5047cf1000, 262144) = 0 [pid 7366] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7366] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7368 attached [pid 7367] <... memfd_create resumed>) = 3 [pid 7351] <... futex resumed>) = 1 [pid 7367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7351] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7367] <... mmap resumed>) = 0x7f5047cf1000 [pid 7368] set_robust_list(0x7f50501119e0, 24 [pid 7366] <... ioctl resumed>) = 0 [pid 7349] <... futex resumed>) = 0 [pid 7347] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7368] <... set_robust_list resumed>) = 0 [pid 7367] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7366] close(3 [pid 7349] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7347] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7368] memfd_create("syzkaller", 0 [pid 7366] <... close resumed>) = 0 [pid 7364] <... futex resumed>) = 0 [pid 7349] <... futex resumed>) = 1 [pid 7347] <... futex resumed>) = 1 [pid 5001] <... umount2 resumed>) = 0 [pid 7368] <... memfd_create resumed>) = 3 [pid 7366] mkdir("./file0", 0777 [pid 7364] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7351] <... futex resumed>) = 0 [pid 7349] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7347] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7368] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7366] <... mkdir resumed>) = 0 [pid 7364] <... openat resumed>) = 5 [pid 7351] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7368] <... mmap resumed>) = 0x7f5047cf1000 [pid 7366] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [ 99.541638][ T7351] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 99.551801][ T7350] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 99.566559][ T7366] loop0: detected capacity change from 0 to 512 [pid 7364] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7351] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7368] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7367] <... write resumed>) = 262144 [pid 7351] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7367] munmap(0x7f5047cf1000, 262144 [pid 7351] <... futex resumed>) = 1 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7367] <... munmap resumed>) = 0 [pid 7364] <... futex resumed>) = 1 [pid 7351] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7349] <... futex resumed>) = 0 [pid 7347] <... futex resumed>) = 0 [pid 5001] lstat("./64/file0", [pid 7367] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7364] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7349] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7367] <... openat resumed>) = 4 [pid 7351] <... futex resumed>) = 0 [pid 7349] <... futex resumed>) = 1 [pid 5001] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7367] ioctl(4, LOOP_SET_FD, 3 [pid 7351] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7349] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7368] <... write resumed>) = 262144 [pid 7368] munmap(0x7f5047cf1000, 262144) = 0 [pid 7368] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7368] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7368] close(3) = 0 [pid 7368] mkdir("./file0", 0777) = 0 [pid 7368] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5001] openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7367] <... ioctl resumed>) = 0 [pid 7367] close(3) = 0 [pid 7367] mkdir("./file0", 0777) = 0 [pid 7367] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5001] <... openat resumed>) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 99.587735][ T7366] EXT4-fs: Ignoring removed oldalloc option [ 99.596705][ T7367] loop4: detected capacity change from 0 to 512 [ 99.602720][ T7368] loop1: detected capacity change from 0 to 512 [ 99.603412][ T7351] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 99.613666][ T7368] EXT4-fs: Ignoring removed oldalloc option [ 99.620502][ T7351] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 99.631712][ T7367] EXT4-fs: Ignoring removed oldalloc option [pid 5001] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./64/file0") = 0 [pid 5001] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./64") = 0 [pid 5001] mkdir("./65", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 7349] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5001] <... close resumed>) = 0 [pid 7349] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7349] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7349] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7349] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7371], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7371 [pid 7349] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7349] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7373 ./strace-static-x86_64: Process 7371 attached ./strace-static-x86_64: Process 7373 attached [pid 7350] <... fsconfig resumed>) = 0 [pid 7373] set_robust_list(0x5555562025e0, 24 [pid 7350] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7347] exit_group(0 [pid 7364] <... futex resumed>) = ? [pid 7347] <... exit_group resumed>) = ? [pid 7364] +++ exited with 0 +++ [pid 7371] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7371] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 ENOSPC (No space left on device) [pid 7371] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7349] <... futex resumed>) = 0 [pid 7371] <... futex resumed>) = 1 [pid 7371] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7373] <... set_robust_list resumed>) = 0 [pid 7373] chdir("./65") = 0 [pid 7373] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7373] setpgid(0, 0) = 0 [pid 7373] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7373] write(3, "1000", 4) = 4 [pid 7373] close(3) = 0 [pid 7373] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7373] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7373] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7351] <... fsconfig resumed>) = 0 [pid 7350] <... futex resumed>) = ? [pid 7373] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7351] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7350] +++ exited with 0 +++ [pid 7347] +++ exited with 0 +++ [pid 7351] <... futex resumed>) = 0 [pid 7351] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7373] <... mprotect resumed>) = 0 [pid 7349] exit_group(0 [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7347, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 7373] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7371] <... futex resumed>) = ? [pid 7349] <... exit_group resumed>) = ? [pid 7371] +++ exited with 0 +++ [pid 7373] <... clone resumed>, parent_tid=[7378], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7378 [pid 7373] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7373] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5005] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 99.640971][ T7350] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 99.660811][ T7351] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 99.673805][ T7366] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 99.675580][ T7368] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] ./strace-static-x86_64: Process 7378 attached [pid 5005] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7351] <... futex resumed>) = ? [pid 7378] set_robust_list(0x7f50501119e0, 24 [pid 7351] +++ exited with 0 +++ [pid 7349] +++ exited with 0 +++ [pid 7378] <... set_robust_list resumed>) = 0 [pid 7378] memfd_create("syzkaller", 0) = 3 [pid 7378] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7378] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7378] munmap(0x7f5047cf1000, 262144) = 0 [pid 7378] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7378] ioctl(4, LOOP_SET_FD, 3 [pid 5005] <... openat resumed>) = 3 [pid 7378] <... ioctl resumed>) = 0 [pid 7378] close(3) = 0 [pid 7378] mkdir("./file0", 0777) = 0 [pid 7378] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5005] fstat(3, [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7349, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5005] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] lstat("./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5005] unlink("./64/binderfs") = 0 [pid 5005] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./63/binderfs") = 0 [ 99.691261][ T7366] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 99.698245][ T7378] loop2: detected capacity change from 0 to 512 [ 99.708864][ T7367] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 99.714072][ T7378] EXT4-fs: Ignoring removed oldalloc option [ 99.722085][ T7368] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 99.741659][ T7366] EXT4-fs (loop0): 1 truncate cleaned up [ 99.755643][ T7366] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.768210][ T7367] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 99.769373][ T7368] EXT4-fs (loop1): 1 truncate cleaned up [pid 5002] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] <... umount2 resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] lstat("./64/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5005] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5005] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5005] close(4) = 0 [pid 5005] rmdir("./64/file0" [pid 7367] <... mount resumed>) = 0 [pid 5005] <... rmdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5005] close(3) = 0 [pid 5005] rmdir("./64") = 0 [pid 5005] mkdir("./65", 0777) = 0 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5005] ioctl(3, LOOP_CLR_FD [pid 7367] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] lstat("./63/file0", [pid 7368] <... mount resumed>) = 0 [pid 7367] <... openat resumed>) = 3 [pid 7366] <... mount resumed>) = 0 [pid 5005] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7366] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5005] close(3 [pid 7368] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7367] chdir("./file0" [pid 7366] <... openat resumed>) = 3 [pid 5005] <... close resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7368] <... openat resumed>) = 3 [pid 7367] <... chdir resumed>) = 0 [pid 7366] chdir("./file0" [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7368] chdir("./file0" [pid 7367] ioctl(4, LOOP_CLR_FD [pid 7366] <... chdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7368] <... chdir resumed>) = 0 [pid 7367] <... ioctl resumed>) = 0 [pid 7366] ioctl(4, LOOP_CLR_FD [pid 5005] <... clone resumed>, child_tidptr=0x5555562025d0) = 7383 [pid 7366] <... ioctl resumed>) = 0 [pid 7366] close(4) = 0 [pid 7366] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7366] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7383 attached [pid 7383] set_robust_list(0x5555562025e0, 24) = 0 [ 99.791991][ T7367] EXT4-fs (loop4): 1 truncate cleaned up [ 99.797993][ T7367] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.810822][ T7368] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.824127][ T7378] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7383] chdir("./65") = 0 [pid 7383] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7383] setpgid(0, 0) = 0 [pid 7383] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7383] write(3, "1000", 4) = 4 [pid 7383] close(3) = 0 [pid 7383] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7383] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7383] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7383] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7362] <... futex resumed>) = 0 [pid 7368] ioctl(4, LOOP_CLR_FD [pid 5002] openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7367] close(4 [pid 7383] <... mprotect resumed>) = 0 [pid 7368] <... ioctl resumed>) = 0 [pid 7362] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7383] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7368] close(4 [pid 7367] <... close resumed>) = 0 [pid 7366] <... futex resumed>) = 0 [pid 7362] <... futex resumed>) = 1 [pid 5002] <... openat resumed>) = 4 [pid 7368] <... close resumed>) = 0 [pid 7367] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7366] fspick(AT_FDCWD, ".", 0 [pid 7362] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] fstat(4, [pid 7383] <... clone resumed>, parent_tid=[7384], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7384 [pid 7368] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7367] <... futex resumed>) = 1 [pid 7366] <... fspick resumed>) = 4 [pid 7361] <... futex resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7383] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7368] <... futex resumed>) = 1 [pid 7367] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7366] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7363] <... futex resumed>) = 0 [pid 7361] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] getdents64(4, [pid 7383] <... futex resumed>) = 0 [pid 7368] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7366] <... futex resumed>) = 1 [pid 7363] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7362] <... futex resumed>) = 0 [pid 7361] <... futex resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7383] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7368] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7367] fspick(AT_FDCWD, ".", 0 [pid 7366] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7363] <... futex resumed>) = 0 [pid 7362] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7361] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] getdents64(4, [pid 7368] fspick(AT_FDCWD, ".", 0 [pid 7367] <... fspick resumed>) = 4 [pid 7366] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7363] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7362] <... futex resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7368] <... fspick resumed>) = 4 [pid 7367] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7366] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7362] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] close(4./strace-static-x86_64: Process 7384 attached [pid 7368] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7367] <... futex resumed>) = 1 [pid 7366] <... fsconfig resumed>) = 0 [pid 7361] <... futex resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 7384] set_robust_list(0x7f50501119e0, 24 [pid 7368] <... futex resumed>) = 1 [pid 7367] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7366] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7363] <... futex resumed>) = 0 [pid 7361] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] rmdir("./63/file0" [pid 7384] <... set_robust_list resumed>) = 0 [pid 7368] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7366] <... futex resumed>) = 1 [pid 7363] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7362] <... futex resumed>) = 0 [pid 7361] <... futex resumed>) = 0 [pid 7384] memfd_create("syzkaller", 0 [pid 7368] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7367] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7366] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7363] <... futex resumed>) = 0 [pid 7362] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7361] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... rmdir resumed>) = 0 [pid 7384] <... memfd_create resumed>) = 3 [pid 7368] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7367] <... fsconfig resumed>) = 0 [pid 7366] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7363] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7362] <... futex resumed>) = 0 [pid 5002] getdents64(3, [pid 7384] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7368] <... fsconfig resumed>) = 0 [pid 7367] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7366] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7362] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7384] <... mmap resumed>) = 0x7f5047cf1000 [pid 7368] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7367] <... futex resumed>) = 1 [pid 7361] <... futex resumed>) = 0 [pid 7384] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7368] <... futex resumed>) = 1 [pid 5002] close(3 [pid 7367] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7361] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7384] <... write resumed>) = 262144 [pid 7363] <... futex resumed>) = 0 [pid 7384] munmap(0x7f5047cf1000, 262144) = 0 [pid 7384] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 99.836800][ T7378] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 99.873442][ T7366] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 7384] ioctl(4, LOOP_SET_FD, 3 [pid 7363] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7361] <... futex resumed>) = 0 [pid 7363] <... futex resumed>) = 0 [pid 7361] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7363] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7368] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7367] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./63" [pid 7384] <... ioctl resumed>) = 0 [pid 7384] close(3 [pid 5002] <... rmdir resumed>) = 0 [pid 7366] <... fsconfig resumed>) = 0 [pid 7366] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7366] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7384] <... close resumed>) = 0 [pid 7384] mkdir("./file0", 0777) = 0 [pid 7384] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7362] <... futex resumed>) = 0 [pid 5002] mkdir("./64", 0777 [pid 7367] <... fsconfig resumed>) = 0 [pid 7362] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... mkdir resumed>) = 0 [pid 7366] <... futex resumed>) = 0 [pid 7362] <... futex resumed>) = 1 [pid 7366] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7362] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7366] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7366] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7362] <... futex resumed>) = 0 [pid 7366] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7362] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7366] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7362] <... futex resumed>) = 0 [ 99.889985][ T7378] EXT4-fs (loop2): 1 truncate cleaned up [ 99.894814][ T7384] loop5: detected capacity change from 0 to 512 [ 99.895744][ T7378] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.918644][ T7367] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 99.922497][ T7384] EXT4-fs: Ignoring removed oldalloc option [pid 7366] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7362] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7378] <... mount resumed>) = 0 [pid 7368] <... fsconfig resumed>) = 0 [pid 7367] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7368] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7367] <... futex resumed>) = 1 [pid 5002] <... openat resumed>) = 3 [pid 7368] <... futex resumed>) = 1 [pid 7367] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5002] ioctl(3, LOOP_CLR_FD [pid 7368] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 7363] <... futex resumed>) = 0 [pid 7361] <... futex resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7385 ./strace-static-x86_64: Process 7385 attached [pid 7385] set_robust_list(0x5555562025e0, 24) = 0 [pid 7385] chdir("./64") = 0 [pid 7363] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7361] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7378] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7368] <... futex resumed>) = 0 [pid 7367] <... futex resumed>) = 0 [pid 7363] <... futex resumed>) = 1 [pid 7361] <... futex resumed>) = 1 [pid 7378] <... openat resumed>) = 3 [pid 7368] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7367] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7363] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7361] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7378] chdir("./file0" [pid 7368] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7367] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7378] <... chdir resumed>) = 0 [pid 7368] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7367] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7378] ioctl(4, LOOP_CLR_FD [pid 7368] <... futex resumed>) = 1 [pid 7367] <... futex resumed>) = 1 [pid 7363] <... futex resumed>) = 0 [pid 7361] <... futex resumed>) = 0 [pid 7378] <... ioctl resumed>) = 0 [pid 7368] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7367] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7363] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7361] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7378] close(4 [pid 7368] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7363] <... futex resumed>) = 0 [pid 7361] <... futex resumed>) = 0 [pid 7378] <... close resumed>) = 0 [pid 7368] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7367] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7363] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7361] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7378] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7385] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7385] setpgid(0, 0) = 0 [ 99.937236][ T7368] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 99.939680][ T7366] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 99.971648][ T7368] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 99.981960][ T7367] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [pid 7385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7385] write(3, "1000", 4) = 4 [pid 7385] close(3) = 0 [pid 7385] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7385] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7385] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7385] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7385] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7387 attached , parent_tid=[7387], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7387 [pid 7378] <... futex resumed>) = 1 [pid 7373] <... futex resumed>) = 0 [pid 7362] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7387] set_robust_list(0x7f50501119e0, 24 [pid 7385] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7378] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7373] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7362] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7385] <... futex resumed>) = 0 [pid 7373] <... futex resumed>) = 0 [pid 7385] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7373] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7387] <... set_robust_list resumed>) = 0 [pid 7378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7362] <... futex resumed>) = 0 [pid 7387] memfd_create("syzkaller", 0 [pid 7378] fspick(AT_FDCWD, ".", 0 [pid 7362] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7387] <... memfd_create resumed>) = 3 [pid 7378] <... fspick resumed>) = 4 [pid 7362] <... mmap resumed>) = 0x7f5047d10000 [pid 7387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7378] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7362] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7387] <... mmap resumed>) = 0x7f5047cf1000 [pid 7378] <... futex resumed>) = 1 [pid 7362] <... mprotect resumed>) = 0 [pid 7387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7378] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7362] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7387] <... write resumed>) = 262144 [pid 7387] munmap(0x7f5047cf1000, 262144 [pid 7373] <... futex resumed>) = 0 [pid 7362] <... clone resumed>, parent_tid=[7389], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7389 [pid 7387] <... munmap resumed>) = 0 [pid 7362] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7387] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7362] <... futex resumed>) = 0 [pid 7387] <... openat resumed>) = 4 [pid 7362] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 99.987413][ T7366] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 100.000622][ T7368] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 100.002233][ T7367] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 100.017947][ T7384] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 100.019802][ T7387] loop3: detected capacity change from 0 to 512 [pid 7387] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7389 attached [pid 7373] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7387] <... ioctl resumed>) = 0 [pid 7387] close(3) = 0 [pid 7387] mkdir("./file0", 0777) = 0 [pid 7387] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7378] <... futex resumed>) = 0 [pid 7373] <... futex resumed>) = 1 [pid 7363] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7361] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7363] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7361] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7363] <... futex resumed>) = 0 [pid 7361] <... futex resumed>) = 0 [pid 7363] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7361] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7363] <... mmap resumed>) = 0x7f5047d10000 [pid 7361] <... mmap resumed>) = 0x7f5047d10000 [pid 7363] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7361] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7363] <... mprotect resumed>) = 0 [pid 7361] <... mprotect resumed>) = 0 [pid 7363] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7361] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7363] <... clone resumed>, parent_tid=[7393], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7393 [pid 7361] <... clone resumed>, parent_tid=[7392], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7392 [pid 7363] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7361] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7363] <... futex resumed>) = 0 [pid 7361] <... futex resumed>) = 0 [pid 7363] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7361] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7389] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7389] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7378] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7373] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7362] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7389] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7378] <... fsconfig resumed>) = 0 [pid 7389] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7389] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7368] <... fsconfig resumed>) = 0 [pid 7378] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7373] <... futex resumed>) = 0 [pid 7378] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7368] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7368] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7366] <... fsconfig resumed>) = 0 [pid 7366] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7373] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7373] <... futex resumed>) = 0 [pid 7378] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7373] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7392 attached [pid 7392] set_robust_list(0x7f5047d309e0, 24 [pid 7362] exit_group(0 [pid 7389] <... futex resumed>) = ? [pid 7362] <... exit_group resumed>) = ? [pid 7389] +++ exited with 0 +++ [pid 7366] <... futex resumed>) = ? [pid 7392] <... set_robust_list resumed>) = 0 [ 100.028242][ T7384] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 100.038351][ T7387] EXT4-fs: Ignoring removed oldalloc option [ 100.047987][ T7366] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 100.057861][ T7368] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 100.080586][ T7378] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 7392] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000./strace-static-x86_64: Process 7393 attached [pid 7393] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7393] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 ENOSPC (No space left on device) [pid 7393] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7363] <... futex resumed>) = 0 [pid 7393] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7363] exit_group(0 [pid 7393] <... futex resumed>) = ? [pid 7368] <... futex resumed>) = ? [pid 7363] <... exit_group resumed>) = ? [pid 7393] +++ exited with 0 +++ [pid 7368] +++ exited with 0 +++ [pid 7366] +++ exited with 0 +++ [pid 7363] +++ exited with 0 +++ [pid 7362] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7363, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7362, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 7392] <... openat resumed>) = 5 [pid 7361] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5000] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... openat resumed>) = 3 [pid 7378] <... fsconfig resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 4999] fstat(3, [pid 5000] fstat(3, [pid 7378] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7378] <... futex resumed>) = 1 [pid 7378] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5000] getdents64(3, [pid 7373] <... futex resumed>) = 0 [pid 4999] getdents64(3, [pid 7373] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7373] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7378] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7378] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./66/binderfs", [pid 4999] lstat("./64/binderfs", [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./66/binderfs" [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7378] <... futex resumed>) = 1 [pid 7378] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7373] <... futex resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 7373] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] unlink("./64/binderfs" [pid 7373] <... futex resumed>) = 0 [pid 7378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7378] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7373] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7392] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7384] <... mount resumed>) = 0 [pid 7367] <... fsconfig resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 7392] <... futex resumed>) = 0 [pid 7384] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4999] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7392] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7384] <... openat resumed>) = 3 [pid 7384] chdir("./file0") = 0 [pid 7384] ioctl(4, LOOP_CLR_FD) = 0 [pid 7384] close(4) = 0 [pid 7384] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7384] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7367] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7361] exit_group(0 [pid 7392] <... futex resumed>) = ? [pid 7361] <... exit_group resumed>) = ? [pid 7392] +++ exited with 0 +++ [pid 7367] <... futex resumed>) = ? [pid 7367] +++ exited with 0 +++ [pid 7361] +++ exited with 0 +++ [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7361, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5004] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5004] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5004] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5004] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5004] unlink("./65/binderfs" [pid 7383] <... futex resumed>) = 0 [ 100.081061][ T7384] EXT4-fs (loop5): 1 truncate cleaned up [ 100.100810][ T7384] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.102405][ T7367] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 100.129121][ T7378] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [pid 5004] <... unlink resumed>) = 0 [pid 5004] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7383] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7373] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7383] <... futex resumed>) = 1 [pid 7373] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7384] <... futex resumed>) = 0 [pid 7383] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7373] <... futex resumed>) = 0 [ 100.148347][ T7387] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 100.159107][ T7387] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 100.164673][ T7378] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 100.183145][ T7387] EXT4-fs (loop3): 1 truncate cleaned up [pid 7384] fspick(AT_FDCWD, ".", 0 [pid 7373] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7384] <... fspick resumed>) = 4 [pid 7373] <... mmap resumed>) = 0x7f5047d10000 [pid 7384] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7373] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7384] <... futex resumed>) = 1 [pid 7383] <... futex resumed>) = 0 [pid 7383] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7373] <... mprotect resumed>) = 0 [pid 7384] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7383] <... futex resumed>) = 0 [pid 7384] <... fsconfig resumed>) = 0 [pid 7383] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7384] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7373] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7384] <... futex resumed>) = 0 [pid 7383] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7384] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7383] <... futex resumed>) = 0 [pid 7383] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7387] <... mount resumed>) = 0 [pid 7387] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7373] <... clone resumed>, parent_tid=[7397], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7397 [pid 7373] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7387] <... openat resumed>) = 3 [pid 7387] chdir("./file0") = 0 [pid 7387] ioctl(4, LOOP_CLR_FD [pid 7373] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7387] <... ioctl resumed>) = 0 [pid 7387] close(4) = 0 [pid 7387] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7385] <... futex resumed>) = 0 [pid 7385] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... umount2 resumed>) = 0 [pid 7385] <... futex resumed>) = 0 [pid 7385] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7387] <... futex resumed>) = 1 [pid 7387] fspick(AT_FDCWD, ".", 0) = 4 [pid 7387] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7385] <... futex resumed>) = 0 [pid 7385] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7385] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7387] <... futex resumed>) = 1 [pid 7387] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 7387] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7385] <... futex resumed>) = 0 [pid 7385] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7385] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7387] <... futex resumed>) = 1 [pid 7387] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 4999] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7397 attached ) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./64/file0", [pid 7397] set_robust_list(0x7f5047d309e0, 24 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7397] <... set_robust_list resumed>) = 0 [pid 7397] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4999] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7397] <... openat resumed>) = 5 [pid 7397] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7397] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 4999] close(4 [pid 7373] <... futex resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./64/file0") = 0 [pid 4999] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 4999] close(3 [pid 5000] <... umount2 resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./64") = 0 [ 100.190273][ T7387] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 4999] mkdir("./65", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7399 ./strace-static-x86_64: Process 7399 attached [pid 7399] set_robust_list(0x5555562025e0, 24) = 0 [pid 7399] chdir("./65") = 0 [pid 7399] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7399] setpgid(0, 0) = 0 [pid 7399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7399] write(3, "1000", 4) = 4 [pid 7399] close(3) = 0 [pid 7399] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7399] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7399] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7399] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7399] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7400], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7400 [pid 7399] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7399] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7400 attached [pid 7383] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7385] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7383] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7385] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7383] <... futex resumed>) = 0 [pid 7385] <... futex resumed>) = 0 [pid 7383] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7385] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7383] <... mmap resumed>) = 0x7f5047d10000 [pid 7385] <... mmap resumed>) = 0x7f5047d10000 [pid 7383] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7385] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7383] <... mprotect resumed>) = 0 [pid 7400] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7385] <... mprotect resumed>) = 0 [pid 7383] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7378] <... fsconfig resumed>) = 0 [pid 5000] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7400] memfd_create("syzkaller", 0 [pid 7385] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7378] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7400] <... memfd_create resumed>) = 3 [pid 7383] <... clone resumed>, parent_tid=[7401], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7401 [pid 7378] <... futex resumed>) = 0 [pid 5000] lstat("./66/file0", [pid 7385] <... clone resumed>, parent_tid=[7402], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7402 [pid 7383] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7385] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7383] <... futex resumed>) = 0 [pid 7385] <... futex resumed>) = 0 [pid 7383] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7373] exit_group(0) = ? [pid 7385] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7397] <... futex resumed>) = ? [pid 7378] +++ exited with 0 +++ ./strace-static-x86_64: Process 7402 attached [pid 7397] +++ exited with 0 +++ [pid 7373] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7373, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 7400] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 7402] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 5001] <... restart_syscall resumed>) = 0 [pid 7400] <... mmap resumed>) = 0x7f5047cf1000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7400] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5001] unlink("./65/binderfs") = 0 [pid 5000] <... openat resumed>) = 4 [pid 5001] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7402] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7402] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7385] <... futex resumed>) = 0 [pid 7385] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7385] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7402] <... futex resumed>) = 1 [pid 5000] fstat(4, ./strace-static-x86_64: Process 7401 attached [pid 7400] <... write resumed>) = 262144 [pid 7387] <... fsconfig resumed>) = 0 [pid 7384] <... fsconfig resumed>) = 0 [pid 5004] <... umount2 resumed>) = 0 [pid 5004] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7401] set_robust_list(0x7f5047d309e0, 24 [pid 7400] munmap(0x7f5047cf1000, 262144 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7387] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7384] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] lstat("./65/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5004] fstat(4, [pid 7400] <... munmap resumed>) = 0 [pid 7387] <... futex resumed>) = 0 [pid 7401] <... set_robust_list resumed>) = 0 [pid 7384] <... futex resumed>) = 0 [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, [pid 7402] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7401] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7400] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7387] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7384] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 100.239198][ T7387] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 100.255758][ T7378] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 100.255772][ T7384] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 5004] getdents64(4, [pid 7401] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7400] <... openat resumed>) = 4 [pid 5004] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5000] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7401] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7400] ioctl(4, LOOP_SET_FD, 3 [pid 5000] getdents64(4, [pid 7401] <... futex resumed>) = 1 [pid 7383] <... futex resumed>) = 0 [pid 5004] getdents64(4, [pid 5000] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7401] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5000] close(4) = 0 [pid 7383] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5000] rmdir("./66/file0" [pid 7384] <... futex resumed>) = 0 [pid 7383] <... futex resumed>) = 1 [pid 5004] close(4 [pid 5000] <... rmdir resumed>) = 0 [pid 7384] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7383] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... close resumed>) = 0 [pid 5000] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./66") = 0 [pid 5000] mkdir("./67", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 7385] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5004] rmdir("./65/file0" [pid 5000] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7403 ./strace-static-x86_64: Process 7403 attached [pid 7403] set_robust_list(0x5555562025e0, 24) = 0 [pid 7403] chdir("./67" [ 100.308188][ T7402] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 100.311936][ T7400] loop0: detected capacity change from 0 to 512 [ 100.330521][ T7384] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 100.341308][ T7402] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 100.350650][ T7384] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7385] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7403] <... chdir resumed>) = 0 [pid 7400] <... ioctl resumed>) = 0 [pid 7387] <... futex resumed>) = 0 [pid 7385] <... futex resumed>) = 1 [pid 5004] <... rmdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 7403] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7400] close(3 [pid 7387] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7385] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7403] <... prctl resumed>) = 0 [pid 7400] <... close resumed>) = 0 [pid 7403] setpgid(0, 0 [pid 7400] mkdir("./file0", 0777 [pid 7403] <... setpgid resumed>) = 0 [pid 7400] <... mkdir resumed>) = 0 [pid 7403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7400] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7403] <... openat resumed>) = 3 [pid 7402] <... fsconfig resumed>) = 0 [pid 7387] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 5004] getdents64(3, [pid 5001] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7403] write(3, "1000", 4 [pid 7402] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7387] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7403] <... write resumed>) = 4 [pid 7402] <... futex resumed>) = 0 [pid 7387] <... futex resumed>) = 1 [pid 7385] <... futex resumed>) = 0 [pid 5004] close(3 [pid 5001] lstat("./65/file0", [pid 7403] close(3 [pid 7402] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7387] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7385] exit_group(0 [pid 5004] <... close resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] rmdir("./65" [pid 5001] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] <... rmdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] mkdir("./66", 0777 [pid 5001] openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5004] <... mkdir resumed>) = 0 [pid 5001] <... openat resumed>) = 4 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] fstat(4, [pid 5004] <... openat resumed>) = 3 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] ioctl(3, LOOP_CLR_FD [pid 5001] getdents64(4, [pid 5004] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5004] close(3 [pid 5001] getdents64(4, [pid 5004] <... close resumed>) = 0 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] close(4) = 0 [pid 5004] <... clone resumed>, child_tidptr=0x5555562025d0) = 7406 [pid 5001] rmdir("./65/file0") = 0 [pid 7383] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5001] getdents64(3, [pid 7383] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7383] <... futex resumed>) = 1 [pid 5001] close(3 [pid 7383] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./65") = 0 [pid 5001] mkdir("./66", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7403] <... close resumed>) = 0 [pid 7402] <... futex resumed>) = ? [pid 7401] <... futex resumed>) = 0 [pid 7387] <... futex resumed>) = ? [pid 7385] <... exit_group resumed>) = ? [pid 7403] symlink("/dev/binderfs", "./binderfs" [pid 7402] +++ exited with 0 +++ [pid 7401] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7387] +++ exited with 0 +++ [pid 5001] <... clone resumed>, child_tidptr=0x5555562025d0) = 7407 ./strace-static-x86_64: Process 7406 attached [pid 7385] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7385, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 7403] <... symlink resumed>) = 0 [pid 5002] <... restart_syscall resumed>) = 0 [pid 7403] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7401] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7403] <... futex resumed>) = 0 [pid 7401] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7401] <... futex resumed>) = 1 [pid 7383] <... futex resumed>) = 0 [pid 5002] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7384] <... fsconfig resumed>) = 0 [pid 7403] <... mmap resumed>) = 0x7f50500f1000 [pid 7401] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7384] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7407 attached [pid 7406] set_robust_list(0x5555562025e0, 24 [ 100.360537][ T7402] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 100.371146][ T7400] EXT4-fs: Ignoring removed oldalloc option [ 100.380180][ T7384] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 7403] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 5002] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7407] set_robust_list(0x5555562025e0, 24 [pid 7406] <... set_robust_list resumed>) = 0 [pid 7403] <... mprotect resumed>) = 0 [pid 7384] <... futex resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 7403] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7384] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7383] exit_group(0 [pid 7401] <... futex resumed>) = ? [pid 7384] <... futex resumed>) = ? [pid 7383] <... exit_group resumed>) = ? [pid 7403] <... clone resumed>, parent_tid=[7410], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7410 [pid 7401] +++ exited with 0 +++ [pid 7384] +++ exited with 0 +++ [pid 7383] +++ exited with 0 +++ [pid 7403] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7383, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5002] fstat(3, [pid 7403] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5005] restart_syscall(<... resuming interrupted clone ...> [pid 7407] <... set_robust_list resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 7410 attached [pid 5002] getdents64(3, [pid 7410] set_robust_list(0x7f50501119e0, 24) = 0 [pid 5005] <... restart_syscall resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7407] chdir("./66" [pid 7406] chdir("./66" [pid 5002] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7410] memfd_create("syzkaller", 0 [pid 7407] <... chdir resumed>) = 0 [pid 7406] <... chdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7410] <... memfd_create resumed>) = 3 [pid 7406] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7407] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] lstat("./64/binderfs", [pid 7410] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5005] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7406] <... prctl resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7407] <... prctl resumed>) = 0 [pid 5002] unlink("./64/binderfs" [pid 7410] <... mmap resumed>) = 0x7f5047cf1000 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7410] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7407] setpgid(0, 0 [pid 7406] setpgid(0, 0 [pid 5005] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... unlink resumed>) = 0 [pid 5005] <... openat resumed>) = 3 [pid 5005] fstat(3, [pid 7410] <... write resumed>) = 262144 [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5005] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] lstat("./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5005] unlink("./65/binderfs") = 0 [pid 5005] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7410] munmap(0x7f5047cf1000, 262144) = 0 [pid 7410] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7410] ioctl(4, LOOP_SET_FD, 3 [ 100.410880][ T7400] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 100.422776][ T7400] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 100.442026][ T7400] EXT4-fs (loop0): 1 truncate cleaned up [ 100.448258][ T7410] loop1: detected capacity change from 0 to 512 [pid 5002] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7407] <... setpgid resumed>) = 0 [pid 7406] <... setpgid resumed>) = 0 [pid 7410] <... ioctl resumed>) = 0 [pid 7410] close(3) = 0 [pid 7410] mkdir("./file0", 0777) = 0 [pid 7410] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7407] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7406] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7400] <... mount resumed>) = 0 [pid 7407] <... openat resumed>) = 3 [pid 7407] write(3, "1000", 4) = 4 [pid 7407] close(3) = 0 [pid 7407] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7407] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7407] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7406] <... openat resumed>) = 3 [pid 7406] write(3, "1000", 4 [pid 7400] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7407] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7406] <... write resumed>) = 4 [pid 7406] close(3 [pid 7407] <... mprotect resumed>) = 0 [pid 7406] <... close resumed>) = 0 [pid 7400] <... openat resumed>) = 3 [pid 7407] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7411], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7411 [pid 7407] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7407] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7406] symlink("/dev/binderfs", "./binderfs" [pid 7400] chdir("./file0" [pid 7406] <... symlink resumed>) = 0 [pid 7406] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7400] <... chdir resumed>) = 0 [pid 7406] <... futex resumed>) = 0 [pid 7400] ioctl(4, LOOP_CLR_FD) = 0 [pid 7400] close(4 [pid 7406] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 ./strace-static-x86_64: Process 7411 attached [pid 7406] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7400] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 7406] <... mprotect resumed>) = 0 [pid 5002] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7406] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./64/file0", [pid 7406] <... clone resumed>, parent_tid=[7412], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7412 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7406] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7406] <... futex resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7406] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5002] openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5005] <... umount2 resumed>) = 0 [pid 5002] getdents64(4, [pid 5005] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] close(4 [pid 5005] lstat("./65/file0", [pid 5002] <... close resumed>) = 0 [pid 7400] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] rmdir("./64/file0" [pid 7400] <... futex resumed>) = 1 [pid 7399] <... futex resumed>) = 0 [pid 5005] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... rmdir resumed>) = 0 [pid 7400] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7399] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] getdents64(3, [pid 7400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7399] <... futex resumed>) = 0 [pid 5005] openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7411] set_robust_list(0x7f50501119e0, 24 [pid 7400] fspick(AT_FDCWD, ".", 0 [pid 7399] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... openat resumed>) = 4 [pid 5002] close(3 [pid 7411] <... set_robust_list resumed>) = 0 [pid 7400] <... fspick resumed>) = 4 [pid 5005] fstat(4, [pid 5002] <... close resumed>) = 0 [pid 7411] memfd_create("syzkaller", 0 [pid 7400] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] rmdir("./64" [pid 7411] <... memfd_create resumed>) = 3 [pid 7400] <... futex resumed>) = 1 [pid 7399] <... futex resumed>) = 0 [pid 5005] getdents64(4, [pid 5002] <... rmdir resumed>) = 0 [pid 7411] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7400] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7399] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5002] mkdir("./65", 0777 [pid 7411] <... mmap resumed>) = 0x7f5047cf1000 [pid 7400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7399] <... futex resumed>) = 0 [pid 5005] getdents64(4, ./strace-static-x86_64: Process 7412 attached [pid 7400] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7399] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 7400] <... fsconfig resumed>) = 0 [pid 5005] close(4 [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7400] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... close resumed>) = 0 [pid 5005] rmdir("./65/file0" [pid 5002] <... openat resumed>) = 3 [pid 7412] set_robust_list(0x7f50501119e0, 24 [pid 7411] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7400] <... futex resumed>) = 1 [pid 7399] <... futex resumed>) = 0 [pid 5005] <... rmdir resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 7412] <... set_robust_list resumed>) = 0 [pid 7411] <... write resumed>) = 262144 [pid 7400] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7399] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] getdents64(3, [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 100.448929][ T7400] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.456791][ T7410] EXT4-fs: Ignoring removed oldalloc option [pid 7412] memfd_create("syzkaller", 0 [pid 7411] munmap(0x7f5047cf1000, 262144 [pid 7400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7399] <... futex resumed>) = 0 [pid 5005] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5002] close(3 [pid 7412] <... memfd_create resumed>) = 3 [pid 7411] <... munmap resumed>) = 0 [pid 7400] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5005] close(3 [pid 5002] <... close resumed>) = 0 [pid 7412] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7411] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5005] <... close resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7412] <... mmap resumed>) = 0x7f5047cf1000 [pid 7411] <... openat resumed>) = 4 [pid 7399] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] rmdir("./65" [pid 7412] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7411] ioctl(4, LOOP_SET_FD, 3 [pid 5005] <... rmdir resumed>) = 0 [pid 5002] <... clone resumed>, child_tidptr=0x5555562025d0) = 7415 ./strace-static-x86_64: Process 7415 attached [pid 7412] <... write resumed>) = 262144 [pid 7411] <... ioctl resumed>) = 0 [pid 7400] <... fsconfig resumed>) = 0 [pid 5005] mkdir("./66", 0777 [pid 7412] munmap(0x7f5047cf1000, 262144 [pid 7411] close(3 [pid 7400] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... mkdir resumed>) = 0 [pid 7412] <... munmap resumed>) = 0 [pid 7411] <... close resumed>) = 0 [pid 7400] <... futex resumed>) = 1 [pid 7399] <... futex resumed>) = 0 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7412] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7411] mkdir("./file0", 0777 [pid 7400] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7399] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... openat resumed>) = 3 [pid 7412] <... openat resumed>) = 4 [pid 7411] <... mkdir resumed>) = 0 [pid 7400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5005] ioctl(3, LOOP_CLR_FD [pid 7412] ioctl(4, LOOP_SET_FD, 3 [pid 7411] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7400] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [ 100.519575][ T7400] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 100.521771][ T7411] loop2: detected capacity change from 0 to 512 [ 100.536964][ T7410] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 100.554175][ T7410] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 5005] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7415] set_robust_list(0x5555562025e0, 24 [pid 7399] <... futex resumed>) = 0 [pid 7415] <... set_robust_list resumed>) = 0 [pid 7399] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7415] chdir("./65") = 0 [pid 7415] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7415] setpgid(0, 0) = 0 [pid 7415] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7415] write(3, "1000", 4) = 4 [pid 7415] close(3) = 0 [pid 7415] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7415] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7415] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7415] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7415] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7416], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7416 [pid 7415] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7415] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7416 attached [pid 7416] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7416] memfd_create("syzkaller", 0) = 3 [pid 7416] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7400] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 5005] close(3 [pid 7400] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7416] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7412] <... ioctl resumed>) = 0 [pid 7400] <... futex resumed>) = 1 [pid 5005] <... close resumed>) = 0 [pid 7412] close(3 [pid 7400] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7412] <... close resumed>) = 0 [pid 7412] mkdir("./file0", 0777 [pid 7399] <... futex resumed>) = 0 [pid 5005] <... clone resumed>, child_tidptr=0x5555562025d0) = 7417 [pid 7412] <... mkdir resumed>) = 0 [pid 7399] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7412] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7400] <... futex resumed>) = 0 [pid 7399] <... futex resumed>) = 1 ./strace-static-x86_64: Process 7417 attached [pid 7416] <... write resumed>) = 262144 [pid 7400] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7399] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7417] set_robust_list(0x5555562025e0, 24 [pid 7416] munmap(0x7f5047cf1000, 262144 [pid 7417] <... set_robust_list resumed>) = 0 [pid 7417] chdir("./66") = 0 [pid 7417] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7417] setpgid(0, 0) = 0 [pid 7417] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7417] write(3, "1000", 4) = 4 [pid 7417] close(3) = 0 [pid 7417] symlink("/dev/binderfs", "./binderfs" [pid 7416] <... munmap resumed>) = 0 [pid 7417] <... symlink resumed>) = 0 [pid 7416] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7417] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7416] <... openat resumed>) = 4 [pid 7417] <... futex resumed>) = 0 [ 100.555996][ T7412] loop4: detected capacity change from 0 to 512 [ 100.576018][ T7411] EXT4-fs: Ignoring removed oldalloc option [ 100.589664][ T7412] EXT4-fs: Ignoring removed oldalloc option [ 100.596221][ T7410] EXT4-fs (loop1): 1 truncate cleaned up [ 100.602073][ T7400] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 7416] ioctl(4, LOOP_SET_FD, 3 [pid 7417] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7416] <... ioctl resumed>) = 0 [pid 7417] <... mmap resumed>) = 0x7f50500f1000 [pid 7416] close(3 [pid 7417] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7416] <... close resumed>) = 0 [pid 7417] <... mprotect resumed>) = 0 [pid 7416] mkdir("./file0", 0777 [pid 7417] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7416] <... mkdir resumed>) = 0 [pid 7416] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7417] <... clone resumed>, parent_tid=[7422], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7422 [pid 7417] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7417] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7410] <... mount resumed>) = 0 [pid 7410] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7410] chdir("./file0" [pid 7399] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7399] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7399] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 7422 attached ) = 0x7f5047d10000 [pid 7399] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7399] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7424], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7424 [pid 7399] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7399] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7410] <... chdir resumed>) = 0 [pid 7410] ioctl(4, LOOP_CLR_FD) = 0 [ 100.613393][ T7400] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 100.617867][ T7416] loop3: detected capacity change from 0 to 512 [ 100.622513][ T7410] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.635228][ T7416] EXT4-fs: Ignoring removed oldalloc option [ 100.641076][ T7412] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 100.654814][ T7411] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7410] close(4 [pid 7422] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7410] <... close resumed>) = 0 [pid 7410] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7422] memfd_create("syzkaller", 0 [pid 7403] <... futex resumed>) = 0 [pid 7410] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7424 attached [pid 7424] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7424] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7422] <... memfd_create resumed>) = 3 [pid 7412] <... mount resumed>) = 0 [pid 7403] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7400] <... fsconfig resumed>) = 0 [pid 7424] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7422] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7412] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7403] <... futex resumed>) = 1 [pid 7400] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7424] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7422] <... mmap resumed>) = 0x7f5047cf1000 [pid 7412] <... openat resumed>) = 3 [pid 7403] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7400] <... futex resumed>) = 0 [pid 7424] <... futex resumed>) = 1 [pid 7422] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7412] chdir("./file0" [pid 7400] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7424] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7422] <... write resumed>) = 262144 [pid 7412] <... chdir resumed>) = 0 [pid 7422] munmap(0x7f5047cf1000, 262144 [pid 7412] ioctl(4, LOOP_CLR_FD [pid 7422] <... munmap resumed>) = 0 [pid 7412] <... ioctl resumed>) = 0 [pid 7422] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7412] close(4 [pid 7422] <... openat resumed>) = 4 [pid 7412] <... close resumed>) = 0 [ 100.656427][ T7412] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 100.678349][ T7400] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 100.689604][ T7412] EXT4-fs (loop4): 1 truncate cleaned up [ 100.696055][ T7412] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.710152][ T7416] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7422] ioctl(4, LOOP_SET_FD, 3 [pid 7412] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7422] <... ioctl resumed>) = 0 [pid 7412] <... futex resumed>) = 1 [pid 7410] <... futex resumed>) = 0 [pid 7399] <... futex resumed>) = 0 [pid 7422] close(3 [pid 7412] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7422] <... close resumed>) = 0 [pid 7422] mkdir("./file0", 0777) = 0 [pid 7422] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7410] fspick(AT_FDCWD, ".", 0 [pid 7406] <... futex resumed>) = 0 [pid 7399] exit_group(0 [pid 7410] <... fspick resumed>) = 4 [pid 7406] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7399] <... exit_group resumed>) = ? [pid 7424] <... futex resumed>) = ? [pid 7400] <... futex resumed>) = ? [pid 7424] +++ exited with 0 +++ [pid 7412] <... futex resumed>) = 0 [pid 7410] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7406] <... futex resumed>) = 1 [pid 7400] +++ exited with 0 +++ [pid 7399] +++ exited with 0 +++ [pid 7412] fspick(AT_FDCWD, ".", 0 [pid 7403] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7412] <... fspick resumed>) = 4 [pid 7403] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7412] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7403] <... futex resumed>) = 0 [pid 7412] <... futex resumed>) = 0 [pid 7403] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7412] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7410] <... futex resumed>) = 1 [pid 7406] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7403] <... futex resumed>) = 0 [pid 7403] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=44000000} [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7399, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 7406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7410] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7406] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7412] <... futex resumed>) = 0 [pid 7410] <... fsconfig resumed>) = 0 [pid 7406] <... futex resumed>) = 1 [pid 7412] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 7410] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7406] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7412] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7412] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7410] <... futex resumed>) = 1 [pid 7406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7403] <... futex resumed>) = 0 [pid 7403] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7403] <... futex resumed>) = 0 [pid 7403] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7406] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7410] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 4999] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7412] <... futex resumed>) = 0 [ 100.716294][ T7422] loop5: detected capacity change from 0 to 512 [ 100.724608][ T7411] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 100.734226][ T7416] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 100.741269][ T7422] EXT4-fs: Ignoring removed oldalloc option [ 100.762315][ T7416] EXT4-fs (loop3): 1 truncate cleaned up [pid 7406] <... futex resumed>) = 1 [pid 7412] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 4999] <... openat resumed>) = 3 [pid 7416] <... mount resumed>) = 0 [pid 7406] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./65/binderfs") = 0 [pid 4999] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7416] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7416] chdir("./file0") = 0 [pid 7416] ioctl(4, LOOP_CLR_FD) = 0 [pid 7416] close(4) = 0 [pid 7416] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 100.773525][ T7416] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.775595][ T7411] EXT4-fs (loop2): 1 truncate cleaned up [ 100.792836][ T7412] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 100.803487][ T7410] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 7416] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7415] <... futex resumed>) = 0 [pid 7411] <... mount resumed>) = 0 [pid 7411] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7411] chdir("./file0") = 0 [pid 7411] ioctl(4, LOOP_CLR_FD) = 0 [pid 7411] close(4 [pid 7403] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7415] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7416] <... futex resumed>) = 0 [pid 7415] <... futex resumed>) = 1 [pid 7406] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7403] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7415] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7403] <... futex resumed>) = 0 [pid 7403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7416] fspick(AT_FDCWD, ".", 0 [pid 7406] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7403] <... mmap resumed>) = 0x7f5047d10000 [pid 7416] <... fspick resumed>) = 4 [pid 7406] <... futex resumed>) = 0 [pid 7403] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7416] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7406] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7416] <... futex resumed>) = 1 [pid 7415] <... futex resumed>) = 0 [pid 7411] <... close resumed>) = 0 [pid 7410] <... fsconfig resumed>) = 0 [pid 7406] <... mmap resumed>) = 0x7f5047d10000 [pid 7403] <... mprotect resumed>) = 0 [pid 7416] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7415] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7410] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7406] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 4999] <... umount2 resumed>) = 0 [pid 7416] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7415] <... futex resumed>) = 0 [pid 7410] <... futex resumed>) = 0 [pid 7406] <... mprotect resumed>) = 0 [pid 7403] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7416] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7415] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7410] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7406] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7416] <... fsconfig resumed>) = 0 [pid 7411] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7403] <... clone resumed>, parent_tid=[7429], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7429 [pid 7416] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7406] <... clone resumed>, parent_tid=[7430], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7430 [pid 7416] <... futex resumed>) = 1 [pid 7415] <... futex resumed>) = 0 [pid 7406] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7416] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7415] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7406] <... futex resumed>) = 0 [pid 7416] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7415] <... futex resumed>) = 0 [pid 7406] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7416] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7415] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./65/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [ 100.811507][ T7411] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.820297][ T7422] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 4999] close(4./strace-static-x86_64: Process 7430 attached ./strace-static-x86_64: Process 7429 attached [pid 7412] <... fsconfig resumed>) = 0 [pid 7411] <... futex resumed>) = 1 [pid 7407] <... futex resumed>) = 0 [pid 7403] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... close resumed>) = 0 [pid 7430] set_robust_list(0x7f5047d309e0, 24 [pid 7429] set_robust_list(0x7f5047d309e0, 24 [pid 7412] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7411] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7407] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7403] <... futex resumed>) = 0 [pid 7430] <... set_robust_list resumed>) = 0 [pid 7429] <... set_robust_list resumed>) = 0 [pid 7412] <... futex resumed>) = 0 [pid 7411] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7407] <... futex resumed>) = 0 [pid 7403] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7430] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7429] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7412] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7411] fspick(AT_FDCWD, ".", 0 [pid 7407] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7430] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7429] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7411] <... fspick resumed>) = 4 [pid 4999] rmdir("./65/file0" [pid 7430] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7429] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7411] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7430] <... futex resumed>) = 1 [pid 7429] <... futex resumed>) = 1 [pid 7411] <... futex resumed>) = 1 [pid 7407] <... futex resumed>) = 0 [pid 7406] <... futex resumed>) = 0 [pid 7403] <... futex resumed>) = 0 [pid 7430] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7429] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7411] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7407] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7406] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7403] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... rmdir resumed>) = 0 [pid 7412] <... futex resumed>) = 0 [pid 7411] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7410] <... futex resumed>) = 0 [pid 7407] <... futex resumed>) = 0 [pid 7406] <... futex resumed>) = 1 [pid 7403] <... futex resumed>) = 1 [pid 7411] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7407] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7403] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7411] <... fsconfig resumed>) = 0 [pid 7411] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7407] <... futex resumed>) = 0 [pid 7411] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7407] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7411] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7407] <... futex resumed>) = 0 [pid 7411] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7407] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7412] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7406] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./65") = 0 [pid 4999] mkdir("./66", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 7416] <... fsconfig resumed>) = 0 [pid 7416] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7415] <... futex resumed>) = 0 [pid 7416] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7415] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7410] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 4999] <... close resumed>) = 0 [ 100.865362][ T7416] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 100.879556][ T7422] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 100.894806][ T7412] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7416] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7415] <... futex resumed>) = 0 [pid 7416] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7415] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... clone resumed>, child_tidptr=0x5555562025d0) = 7431 [pid 7415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7416] <... futex resumed>) = 0 [pid 7415] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7416] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7415] <... futex resumed>) = 0 [pid 7415] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7407] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7403] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7407] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7403] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7429] <... futex resumed>) = 0 [pid 7407] <... futex resumed>) = 0 [pid 7403] <... futex resumed>) = 1 [pid 7429] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7407] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7403] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7407] <... mmap resumed>) = 0x7f5047d10000 [pid 7407] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7407] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7432], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7432 [pid 7407] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7407] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7429] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 7429] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7403] <... futex resumed>) = 0 [pid 7429] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7411] <... fsconfig resumed>) = 0 [pid 7411] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7411] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7431 attached [pid 7431] set_robust_list(0x5555562025e0, 24) = 0 [pid 7431] chdir("./66") = 0 [ 100.906191][ T7411] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 100.917499][ T7410] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 100.928070][ T7416] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 100.928476][ T7412] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 100.938798][ T7422] EXT4-fs (loop5): 1 truncate cleaned up [ 100.952368][ T7416] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7406] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7422] <... mount resumed>) = 0 [pid 7422] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7422] chdir("./file0") = 0 [pid 7422] ioctl(4, LOOP_CLR_FD) = 0 [pid 7422] close(4 [pid 7406] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7406] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7430] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7432 attached [pid 7431] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7430] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7432] set_robust_list(0x7f5047d309e0, 24 [pid 7431] <... prctl resumed>) = 0 [pid 7432] <... set_robust_list resumed>) = 0 [pid 7431] setpgid(0, 0 [pid 7432] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7431] <... setpgid resumed>) = 0 [pid 7432] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7430] <... openat resumed>) = 5 [pid 7431] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7432] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7431] <... openat resumed>) = 3 [pid 7430] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7432] <... futex resumed>) = 1 [pid 7407] <... futex resumed>) = 0 [pid 7432] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7431] write(3, "1000", 4 [pid 7430] <... futex resumed>) = 1 [pid 7422] <... close resumed>) = 0 [pid 7406] <... futex resumed>) = 0 [pid 7431] <... write resumed>) = 4 [pid 7430] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7407] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7431] close(3 [pid 7411] <... futex resumed>) = 0 [pid 7407] <... futex resumed>) = 1 [pid 7431] <... close resumed>) = 0 [pid 7411] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7407] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7431] symlink("/dev/binderfs", "./binderfs" [pid 7422] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7431] <... symlink resumed>) = 0 [pid 7422] <... futex resumed>) = 1 [pid 7417] <... futex resumed>) = 0 [pid 7431] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7422] fspick(AT_FDCWD, ".", 0 [pid 7417] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7431] <... futex resumed>) = 0 [pid 7422] <... fspick resumed>) = 4 [pid 7417] <... futex resumed>) = 0 [pid 7431] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7422] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7417] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7431] <... mmap resumed>) = 0x7f50500f1000 [pid 7422] <... futex resumed>) = 0 [pid 7417] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7431] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7422] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7417] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7431] <... mprotect resumed>) = 0 [pid 7422] <... fsconfig resumed>) = 0 [pid 7417] <... futex resumed>) = 0 [pid 7431] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7422] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7417] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7422] <... futex resumed>) = 0 [pid 7417] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7431] <... clone resumed>, parent_tid=[7434], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7434 [pid 7422] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7417] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7431] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7422] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7417] <... futex resumed>) = 0 [pid 7431] <... futex resumed>) = 0 [pid 7422] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7417] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7431] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7434 attached [pid 7434] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7434] memfd_create("syzkaller", 0) = 3 [pid 7434] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7434] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7434] munmap(0x7f5047cf1000, 262144 [pid 7415] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7415] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7434] <... munmap resumed>) = 0 [ 100.960626][ T7422] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.961568][ T7410] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 100.987112][ T7411] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 100.996582][ T7412] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 7415] <... futex resumed>) = 0 [pid 7434] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7434] ioctl(4, LOOP_SET_FD, 3 [pid 7415] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7434] <... ioctl resumed>) = 0 [pid 7434] close(3) = 0 [pid 7434] mkdir("./file0", 0777) = 0 [pid 7434] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7417] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7415] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7407] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7417] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7415] <... mprotect resumed>) = 0 [pid 7407] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7432] <... futex resumed>) = 0 [pid 7417] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7415] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7407] <... futex resumed>) = 1 [pid 7432] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7417] <... mmap resumed>) = 0x7f5047d10000 [pid 7407] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7417] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 7437 attached [pid 7437] set_robust_list(0x7f5047d309e0, 24 [pid 7417] <... mprotect resumed>) = 0 [pid 7417] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7415] <... clone resumed>, parent_tid=[7437], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7437 [pid 7415] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7417] <... clone resumed>, parent_tid=[7438], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7438 [pid 7415] <... futex resumed>) = 0 [pid 7432] <... openat resumed>) = 5 [pid 7417] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7415] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7432] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7417] <... futex resumed>) = 0 [pid 7432] <... futex resumed>) = 1 [pid 7417] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7407] <... futex resumed>) = 0 [pid 7432] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7437] <... set_robust_list resumed>) = 0 [pid 7437] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7416] <... fsconfig resumed>) = 0 [pid 7412] <... fsconfig resumed>) = 0 [ 101.009693][ T7411] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 101.009835][ T7416] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 101.020130][ T7434] loop0: detected capacity change from 0 to 512 [ 101.035631][ T7422] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 101.039614][ T7434] EXT4-fs: Ignoring removed oldalloc option [pid 7422] <... fsconfig resumed>) = 0 [pid 7416] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7412] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7438 attached [pid 7437] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7422] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7416] <... futex resumed>) = 0 [pid 7412] <... futex resumed>) = 0 [pid 7410] <... fsconfig resumed>) = 0 [pid 7438] set_robust_list(0x7f5047d309e0, 24 [pid 7437] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7422] <... futex resumed>) = 0 [pid 7416] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7412] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7438] <... set_robust_list resumed>) = 0 [pid 7437] <... futex resumed>) = 1 [pid 7422] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7415] <... futex resumed>) = 0 [pid 7406] exit_group(0 [pid 7438] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7437] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7430] <... futex resumed>) = ? [pid 7415] exit_group(0 [pid 7412] <... futex resumed>) = ? [pid 7406] <... exit_group resumed>) = ? [pid 7438] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7437] <... futex resumed>) = ? [pid 7430] +++ exited with 0 +++ [pid 7416] <... futex resumed>) = ? [pid 7415] <... exit_group resumed>) = ? [pid 7412] +++ exited with 0 +++ [pid 7406] +++ exited with 0 +++ [pid 7438] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7437] +++ exited with 0 +++ [pid 7416] +++ exited with 0 +++ [pid 7415] +++ exited with 0 +++ [pid 7438] <... futex resumed>) = 1 [pid 7417] <... futex resumed>) = 0 [pid 7410] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7438] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7417] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7410] <... futex resumed>) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7415, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 7422] <... futex resumed>) = 0 [pid 7417] <... futex resumed>) = 1 [pid 7410] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5002] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7422] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7417] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7403] exit_group(0 [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7406, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 7429] <... futex resumed>) = ? [pid 7403] <... exit_group resumed>) = ? [pid 5004] restart_syscall(<... resuming interrupted clone ...> [pid 7429] +++ exited with 0 +++ [pid 5004] <... restart_syscall resumed>) = 0 [pid 5004] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5004] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5004] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5004] unlink("./66/binderfs") = 0 [pid 5002] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7410] <... futex resumed>) = ? [pid 5004] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... openat resumed>) = 3 [pid 7411] <... fsconfig resumed>) = 0 [pid 7411] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7411] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7407] exit_group(0 [pid 7432] <... futex resumed>) = ? [pid 7407] <... exit_group resumed>) = ? [pid 7432] +++ exited with 0 +++ [pid 7411] <... futex resumed>) = ? [pid 7411] +++ exited with 0 +++ [pid 7407] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7407, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5001] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, [pid 7410] +++ exited with 0 +++ [pid 7403] +++ exited with 0 +++ [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7403, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./65/binderfs") = 0 [pid 5002] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./66/binderfs") = 0 [pid 5001] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./67/binderfs") = 0 [ 101.060568][ T7410] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 101.073154][ T7411] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 101.082149][ T7422] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 101.094274][ T7422] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 101.105610][ T7434] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 5000] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7417] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7417] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7438] <... futex resumed>) = 0 [pid 7417] <... futex resumed>) = 1 [pid 7438] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7417] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7438] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7438] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7422] <... fsconfig resumed>) = 0 [pid 7438] <... futex resumed>) = 1 [pid 7422] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7417] <... futex resumed>) = 0 [pid 7422] <... futex resumed>) = 0 [pid 7422] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7438] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7417] exit_group(0 [pid 5002] <... umount2 resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 7438] <... futex resumed>) = ? [pid 7417] <... exit_group resumed>) = ? [pid 5001] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7438] +++ exited with 0 +++ [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./66/file0", [pid 5000] lstat("./67/file0", [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 101.139341][ T7434] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 101.139580][ T7422] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 5000] openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... openat resumed>) = 4 [pid 5000] <... openat resumed>) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./67/file0") = 0 [pid 5000] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./67") = 0 [pid 5000] mkdir("./68", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7443 [pid 7422] <... futex resumed>) = ? [pid 5004] <... umount2 resumed>) = 0 [pid 5002] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] fstat(4, [pid 5004] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./66/file0", [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] lstat("./65/file0", [pid 5004] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(4, [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5004] <... openat resumed>) = 4 [pid 5002] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(4, [pid 5004] fstat(4, [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] close(4 [pid 5004] getdents64(4, [pid 5002] <... openat resumed>) = 4 [pid 5001] <... close resumed>) = 0 [pid 5004] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5002] fstat(4, [pid 5001] rmdir("./66/file0" [pid 5004] getdents64(4, [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7422] +++ exited with 0 +++ [pid 7417] +++ exited with 0 +++ [pid 5004] close(4 [pid 5002] getdents64(4, [pid 5001] <... rmdir resumed>) = 0 [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7417, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5004] <... close resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(3, ./strace-static-x86_64: Process 7443 attached [pid 5005] restart_syscall(<... resuming interrupted clone ...> [pid 5004] rmdir("./66/file0" [pid 5002] getdents64(4, [pid 5001] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7443] set_robust_list(0x5555562025e0, 24 [pid 5005] <... restart_syscall resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] close(3 [pid 7443] <... set_robust_list resumed>) = 0 [pid 5002] close(4 [pid 5001] <... close resumed>) = 0 [pid 7443] chdir("./68" [pid 5002] <... close resumed>) = 0 [pid 5001] rmdir("./66" [pid 7443] <... chdir resumed>) = 0 [pid 5005] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] rmdir("./65/file0" [pid 5001] <... rmdir resumed>) = 0 [pid 7443] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... rmdir resumed>) = 0 [pid 5001] mkdir("./67", 0777 [pid 7443] <... prctl resumed>) = 0 [pid 5005] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] getdents64(3, [pid 5001] <... mkdir resumed>) = 0 [pid 7443] setpgid(0, 0 [pid 5005] <... openat resumed>) = 3 [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7443] <... setpgid resumed>) = 0 [pid 5005] fstat(3, [pid 5002] close(3 [pid 5001] <... openat resumed>) = 3 [pid 7443] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... close resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 7443] <... openat resumed>) = 3 [pid 5005] getdents64(3, [pid 5002] rmdir("./65" [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7443] write(3, "1000", 4 [pid 5005] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5004] <... rmdir resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] close(3 [pid 7443] <... write resumed>) = 4 [pid 7434] <... mount resumed>) = 0 [pid 5005] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] getdents64(3, [pid 5002] mkdir("./66", 0777 [pid 5001] <... close resumed>) = 0 [pid 7443] close(3 [pid 7434] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7434] <... openat resumed>) = 3 [pid 5004] close(3 [pid 7443] <... close resumed>) = 0 [pid 7434] chdir("./file0" [pid 5005] lstat("./66/binderfs", [pid 5004] <... close resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7443] symlink("/dev/binderfs", "./binderfs" [pid 7434] <... chdir resumed>) = 0 [pid 5005] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5004] rmdir("./66" [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7434] ioctl(4, LOOP_CLR_FD [pid 5005] unlink("./66/binderfs" [pid 5004] <... rmdir resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 7434] <... ioctl resumed>) = 0 [pid 5004] mkdir("./67", 0777 [pid 7443] <... symlink resumed>) = 0 [pid 7434] close(4 [pid 5005] <... unlink resumed>) = 0 [pid 5004] <... mkdir resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5001] <... clone resumed>, child_tidptr=0x5555562025d0) = 7444 [pid 7443] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7434] <... close resumed>) = 0 [pid 5005] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7443] <... futex resumed>) = 0 [pid 7434] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... openat resumed>) = 3 [pid 7443] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7434] <... futex resumed>) = 1 [pid 7431] <... futex resumed>) = 0 [pid 5004] ioctl(3, LOOP_CLR_FD [pid 5002] close(3 [pid 7434] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7431] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7434] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7431] <... futex resumed>) = 0 [pid 5004] close(3 [pid 7434] fspick(AT_FDCWD, ".", 0 [pid 7431] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... close resumed>) = 0 ./strace-static-x86_64: Process 7444 attached [pid 7434] <... fspick resumed>) = 4 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... close resumed>) = 0 [pid 7444] set_robust_list(0x5555562025e0, 24 [pid 7443] <... mmap resumed>) = 0x7f50500f1000 [pid 7434] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... umount2 resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7444] <... set_robust_list resumed>) = 0 [pid 7443] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7434] <... futex resumed>) = 1 [pid 7431] <... futex resumed>) = 0 [pid 5005] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] <... clone resumed>, child_tidptr=0x5555562025d0) = 7445 [pid 7444] chdir("./67" [pid 7443] <... mprotect resumed>) = 0 [pid 7434] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7431] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... clone resumed>, child_tidptr=0x5555562025d0) = 7446 [pid 7444] <... chdir resumed>) = 0 [pid 7443] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7434] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7431] <... futex resumed>) = 0 [pid 5005] lstat("./66/file0", [pid 7444] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7434] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7431] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7444] <... prctl resumed>) = 0 [pid 7443] <... clone resumed>, parent_tid=[7447], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7447 [pid 7434] <... fsconfig resumed>) = 0 [pid 5005] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7445 attached [pid 7444] setpgid(0, 0 [pid 7443] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7434] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7445] set_robust_list(0x5555562025e0, 24 [pid 7444] <... setpgid resumed>) = 0 [pid 7443] <... futex resumed>) = 0 [pid 7434] <... futex resumed>) = 1 [pid 7431] <... futex resumed>) = 0 [pid 5005] openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7445] <... set_robust_list resumed>) = 0 [pid 7444] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7443] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7434] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7431] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... openat resumed>) = 4 ./strace-static-x86_64: Process 7446 attached [pid 7445] chdir("./67" [pid 7444] <... openat resumed>) = 3 [pid 7434] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7431] <... futex resumed>) = 0 [pid 5005] fstat(4, ./strace-static-x86_64: Process 7447 attached [pid 7446] set_robust_list(0x5555562025e0, 24 [pid 7445] <... chdir resumed>) = 0 [pid 7444] write(3, "1000", 4 [pid 7434] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7431] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 101.182872][ T7434] EXT4-fs (loop0): 1 truncate cleaned up [ 101.211043][ T7434] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7447] set_robust_list(0x7f50501119e0, 24 [pid 7446] <... set_robust_list resumed>) = 0 [pid 7445] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7444] <... write resumed>) = 4 [pid 5005] getdents64(4, [pid 7447] <... set_robust_list resumed>) = 0 [pid 7445] <... prctl resumed>) = 0 [pid 7444] close(3 [pid 5005] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7447] memfd_create("syzkaller", 0 [pid 7445] setpgid(0, 0 [pid 7444] <... close resumed>) = 0 [pid 5005] getdents64(4, [pid 7447] <... memfd_create resumed>) = 3 [pid 7446] chdir("./66" [pid 7445] <... setpgid resumed>) = 0 [pid 7444] symlink("/dev/binderfs", "./binderfs" [pid 5005] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7447] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7446] <... chdir resumed>) = 0 [pid 7445] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7444] <... symlink resumed>) = 0 [pid 5005] close(4 [pid 7447] <... mmap resumed>) = 0x7f5047cf1000 [pid 7446] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7445] <... openat resumed>) = 3 [pid 7444] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... close resumed>) = 0 [pid 7447] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7446] <... prctl resumed>) = 0 [pid 7445] write(3, "1000", 4 [pid 7444] <... futex resumed>) = 0 [pid 5005] rmdir("./66/file0" [pid 7447] <... write resumed>) = 262144 [pid 7446] setpgid(0, 0 [pid 7445] <... write resumed>) = 4 [pid 7444] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5005] <... rmdir resumed>) = 0 [pid 7446] <... setpgid resumed>) = 0 [pid 7445] close(3 [pid 7444] <... mmap resumed>) = 0x7f50500f1000 [pid 5005] getdents64(3, [pid 7447] munmap(0x7f5047cf1000, 262144 [pid 7446] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7445] <... close resumed>) = 0 [pid 7444] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 5005] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7446] <... openat resumed>) = 3 [pid 7445] symlink("/dev/binderfs", "./binderfs" [pid 7444] <... mprotect resumed>) = 0 [pid 5005] close(3 [pid 7447] <... munmap resumed>) = 0 [pid 7446] write(3, "1000", 4 [pid 7445] <... symlink resumed>) = 0 [pid 7444] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5005] <... close resumed>) = 0 [pid 7447] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7446] <... write resumed>) = 4 [pid 7445] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] rmdir("./66" [pid 7447] <... openat resumed>) = 4 [pid 7446] close(3 [pid 7445] <... futex resumed>) = 0 [pid 7444] <... clone resumed>, parent_tid=[7448], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7448 [pid 5005] <... rmdir resumed>) = 0 [pid 7447] ioctl(4, LOOP_SET_FD, 3 [pid 7446] <... close resumed>) = 0 [pid 7445] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7444] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] mkdir("./67", 0777./strace-static-x86_64: Process 7448 attached [pid 7446] symlink("/dev/binderfs", "./binderfs" [pid 7445] <... mmap resumed>) = 0x7f50500f1000 [pid 7444] <... futex resumed>) = 0 [pid 7434] <... fsconfig resumed>) = 0 [pid 7448] set_robust_list(0x7f50501119e0, 24 [pid 7447] <... ioctl resumed>) = 0 [pid 7446] <... symlink resumed>) = 0 [pid 7445] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7444] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5005] <... mkdir resumed>) = 0 [pid 7448] <... set_robust_list resumed>) = 0 [pid 7447] close(3 [pid 7446] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7445] <... mprotect resumed>) = 0 [pid 7434] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7447] <... close resumed>) = 0 [pid 7446] <... futex resumed>) = 0 [pid 7445] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5005] <... openat resumed>) = 3 [pid 7447] mkdir("./file0", 0777 [pid 7446] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7434] <... futex resumed>) = 1 [pid 7431] <... futex resumed>) = 0 [pid 5005] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 7449 attached [pid 7448] memfd_create("syzkaller", 0 [pid 7447] <... mkdir resumed>) = 0 [pid 7446] <... mmap resumed>) = 0x7f50500f1000 [pid 7445] <... clone resumed>, parent_tid=[7449], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7449 [pid 7434] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7431] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7449] set_robust_list(0x7f50501119e0, 24 [pid 7448] <... memfd_create resumed>) = 3 [pid 7446] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7434] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7431] <... futex resumed>) = 0 [pid 7449] <... set_robust_list resumed>) = 0 [pid 7448] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7447] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7446] <... mprotect resumed>) = 0 [pid 7445] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [ 101.260390][ T7434] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 101.291902][ T7447] loop1: detected capacity change from 0 to 512 [pid 7434] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7431] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] close(3 [pid 7448] <... mmap resumed>) = 0x7f5047cf1000 [pid 7446] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7445] <... futex resumed>) = 0 [pid 7434] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 5005] <... close resumed>) = 0 [pid 7448] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7434] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7448] <... write resumed>) = 262144 [pid 7446] <... clone resumed>, parent_tid=[7450], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7450 [pid 7434] <... futex resumed>) = 1 [pid 7431] <... futex resumed>) = 0 [pid 7448] munmap(0x7f5047cf1000, 262144 [pid 7446] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7434] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7431] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7448] <... munmap resumed>) = 0 [pid 7446] <... futex resumed>) = 0 [pid 7434] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7431] <... futex resumed>) = 0 [pid 7448] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7446] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7434] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7431] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7448] <... openat resumed>) = 4 [pid 7445] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7448] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7450 attached [pid 7449] memfd_create("syzkaller", 0 [pid 7450] set_robust_list(0x7f50501119e0, 24 [pid 7449] <... memfd_create resumed>) = 3 [pid 5005] <... clone resumed>, child_tidptr=0x5555562025d0) = 7451 ./strace-static-x86_64: Process 7451 attached [pid 7450] <... set_robust_list resumed>) = 0 [pid 7449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7448] <... ioctl resumed>) = 0 [pid 7451] set_robust_list(0x5555562025e0, 24 [pid 7450] memfd_create("syzkaller", 0 [pid 7449] <... mmap resumed>) = 0x7f5047cf1000 [pid 7448] close(3 [pid 7451] <... set_robust_list resumed>) = 0 [pid 7450] <... memfd_create resumed>) = 3 [pid 7449] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7448] <... close resumed>) = 0 [pid 7451] chdir("./67" [pid 7450] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7449] <... write resumed>) = 262144 [pid 7448] mkdir("./file0", 0777 [pid 7451] <... chdir resumed>) = 0 [pid 7450] <... mmap resumed>) = 0x7f5047cf1000 [pid 7449] munmap(0x7f5047cf1000, 262144 [pid 7448] <... mkdir resumed>) = 0 [pid 7448] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7451] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7450] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7449] <... munmap resumed>) = 0 [pid 7451] <... prctl resumed>) = 0 [pid 7450] <... write resumed>) = 262144 [pid 7449] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7451] setpgid(0, 0 [pid 7450] munmap(0x7f5047cf1000, 262144 [pid 7449] <... openat resumed>) = 4 [pid 7451] <... setpgid resumed>) = 0 [pid 7450] <... munmap resumed>) = 0 [ 101.313861][ T7434] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 101.318699][ T7447] EXT4-fs: Ignoring removed oldalloc option [ 101.324379][ T7448] loop2: detected capacity change from 0 to 512 [ 101.337776][ T7434] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 101.348155][ T7448] EXT4-fs: Ignoring removed oldalloc option [pid 7449] ioctl(4, LOOP_SET_FD, 3 [pid 7451] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7450] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7449] <... ioctl resumed>) = 0 [pid 7434] <... fsconfig resumed>) = 0 [pid 7449] close(3 [pid 7434] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7431] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7449] <... close resumed>) = 0 [pid 7434] <... futex resumed>) = 0 [pid 7431] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7449] mkdir("./file0", 0777 [pid 7434] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7431] <... futex resumed>) = 0 [pid 7449] <... mkdir resumed>) = 0 [pid 7434] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7431] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7449] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7434] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7451] <... openat resumed>) = 3 [pid 7450] <... openat resumed>) = 4 [pid 7434] <... futex resumed>) = 0 [pid 7431] exit_group(0 [pid 7451] write(3, "1000", 4 [pid 7431] <... exit_group resumed>) = ? [pid 7451] <... write resumed>) = 4 [pid 7434] +++ exited with 0 +++ [pid 7431] +++ exited with 0 +++ [pid 7451] close(3 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7431, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 7451] <... close resumed>) = 0 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 7451] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7451] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] <... restart_syscall resumed>) = 0 [pid 7451] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7451] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 4999] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7451] <... mprotect resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7451] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7451] <... clone resumed>, parent_tid=[7455], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7455 [pid 4999] fstat(3, [pid 7451] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7451] <... futex resumed>) = 0 [pid 4999] getdents64(3, [pid 7451] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4999] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./66/binderfs") = 0 [pid 4999] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7455 attached [pid 7455] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7455] memfd_create("syzkaller", 0) = 3 [pid 7455] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7455] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7455] munmap(0x7f5047cf1000, 262144 [pid 7450] ioctl(4, LOOP_SET_FD, 3 [pid 7455] <... munmap resumed>) = 0 [pid 7455] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 7455] ioctl(4, LOOP_SET_FD, 3 [pid 7450] <... ioctl resumed>) = 0 [pid 7450] close(3) = 0 [pid 7450] mkdir("./file0", 0777) = 0 [ 101.355152][ T7434] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 101.356336][ T7449] loop4: detected capacity change from 0 to 512 [ 101.374254][ T7447] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 101.376728][ T7449] EXT4-fs: Ignoring removed oldalloc option [ 101.384617][ T7447] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 101.404078][ T7450] loop3: detected capacity change from 0 to 512 [pid 7450] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7447] <... mount resumed>) = 0 [pid 7455] <... ioctl resumed>) = 0 [pid 7447] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7455] close(3 [pid 7447] <... openat resumed>) = 3 [pid 4999] lstat("./66/file0", [pid 7455] <... close resumed>) = 0 [pid 7447] chdir("./file0" [pid 7455] mkdir("./file0", 0777 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7447] <... chdir resumed>) = 0 [pid 4999] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7447] ioctl(4, LOOP_CLR_FD [pid 4999] openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7455] <... mkdir resumed>) = 0 [pid 7447] <... ioctl resumed>) = 0 [pid 7447] close(4 [pid 4999] <... openat resumed>) = 4 [pid 7455] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7447] <... close resumed>) = 0 [ 101.405277][ T7455] loop5: detected capacity change from 0 to 512 [ 101.414710][ T7450] EXT4-fs: Ignoring removed oldalloc option [ 101.425845][ T7447] EXT4-fs (loop1): 1 truncate cleaned up [ 101.433137][ T7447] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.449796][ T7448] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 4999] fstat(4, [pid 7447] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7447] <... futex resumed>) = 1 [pid 7443] <... futex resumed>) = 0 [pid 4999] getdents64(4, [pid 7447] fspick(AT_FDCWD, ".", 0 [pid 7443] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7447] <... fspick resumed>) = 4 [pid 7443] <... futex resumed>) = 0 [ 101.465233][ T7455] EXT4-fs: Ignoring removed oldalloc option [ 101.466406][ T7449] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 101.480311][ T7448] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 101.490612][ T7449] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 4999] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7447] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7443] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7448] <... mount resumed>) = 0 [pid 7447] <... futex resumed>) = 0 [pid 4999] getdents64(4, [pid 7448] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7447] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7448] <... openat resumed>) = 3 [pid 7448] chdir("./file0") = 0 [pid 7448] ioctl(4, LOOP_CLR_FD) = 0 [pid 7448] close(4) = 0 [pid 7448] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7448] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7443] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7443] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7447] <... futex resumed>) = 0 [pid 7443] <... futex resumed>) = 1 [pid 7447] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7443] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7447] <... fsconfig resumed>) = 0 [pid 7447] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7443] <... futex resumed>) = 0 [pid 7447] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7443] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7447] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7443] <... futex resumed>) = 0 [pid 7447] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7443] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7449] <... mount resumed>) = 0 [pid 7447] <... fsconfig resumed>) = 0 [pid 7444] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7449] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7447] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7444] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7449] <... openat resumed>) = 3 [pid 7447] <... futex resumed>) = 1 [pid 7443] <... futex resumed>) = 0 [pid 4999] close(4 [pid 7449] chdir("./file0" [pid 7447] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7443] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7449] <... chdir resumed>) = 0 [pid 7447] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7443] <... futex resumed>) = 0 [pid 7449] ioctl(4, LOOP_CLR_FD [pid 7447] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7443] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7449] <... ioctl resumed>) = 0 [pid 7447] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7449] close(4 [pid 7447] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7449] <... close resumed>) = 0 [pid 7447] <... futex resumed>) = 1 [pid 7443] <... futex resumed>) = 0 [pid 7449] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7447] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7443] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7449] <... futex resumed>) = 1 [pid 7447] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 101.512671][ T7448] EXT4-fs (loop2): 1 truncate cleaned up [ 101.517134][ T7449] EXT4-fs (loop4): 1 truncate cleaned up [ 101.518999][ T7448] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.524079][ T7449] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.544943][ T7447] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 7443] <... futex resumed>) = 0 [pid 7449] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7447] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7443] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7448] <... futex resumed>) = 0 [pid 7445] <... futex resumed>) = 0 [pid 7444] <... futex resumed>) = 1 [pid 4999] <... close resumed>) = 0 [pid 7448] fspick(AT_FDCWD, ".", 0 [pid 7445] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7444] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] rmdir("./66/file0" [pid 7449] <... futex resumed>) = 0 [pid 7448] <... fspick resumed>) = 4 [pid 7445] <... futex resumed>) = 1 [pid 7448] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7449] fspick(AT_FDCWD, ".", 0 [pid 7448] <... futex resumed>) = 1 [pid 7445] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7444] <... futex resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 7449] <... fspick resumed>) = 4 [pid 7448] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7444] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] getdents64(3, [pid 7449] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7448] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7444] <... futex resumed>) = 0 [pid 7449] <... futex resumed>) = 1 [pid 7448] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7445] <... futex resumed>) = 0 [pid 7444] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7449] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7448] <... fsconfig resumed>) = 0 [pid 7445] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] close(3 [pid 7449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7448] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7445] <... futex resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 7449] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7448] <... futex resumed>) = 1 [pid 7445] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7444] <... futex resumed>) = 0 [pid 4999] rmdir("./66" [pid 7449] <... fsconfig resumed>) = 0 [pid 7448] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7444] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7448] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 101.562156][ T7450] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 101.566888][ T7447] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 101.587326][ T7450] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 101.587716][ T7455] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7448] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7449] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7444] <... futex resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 7449] <... futex resumed>) = 1 [pid 7445] <... futex resumed>) = 0 [pid 7444] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] mkdir("./67", 0777 [pid 7449] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7445] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... mkdir resumed>) = 0 [pid 7449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7445] <... futex resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7449] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7445] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7464 [pid 7443] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 7464 attached [pid 7464] set_robust_list(0x5555562025e0, 24) = 0 [pid 7464] chdir("./67") = 0 [pid 7464] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7464] setpgid(0, 0) = 0 [pid 7464] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7464] write(3, "1000", 4) = 4 [pid 7464] close(3) = 0 [pid 7464] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7464] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7443] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7443] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7464] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7464] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7443] <... mmap resumed>) = 0x7f5047d10000 [ 101.611343][ T7450] EXT4-fs (loop3): 1 truncate cleaned up [ 101.612972][ T7455] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 101.617256][ T7450] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.638306][ T7447] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 101.654275][ T7448] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 7450] <... mount resumed>) = 0 [pid 7443] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7448] <... fsconfig resumed>) = 0 [pid 7450] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7448] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7443] <... mprotect resumed>) = 0 [pid 7464] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7450] <... openat resumed>) = 3 [pid 7448] <... futex resumed>) = 1 [pid 7444] <... futex resumed>) = 0 [pid 7443] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7464] <... clone resumed>, parent_tid=[7465], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7465 [pid 7444] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7464] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7444] <... futex resumed>) = 0 [pid 7464] <... futex resumed>) = 0 [pid 7444] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7464] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7450] chdir("./file0" [pid 7448] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7450] <... chdir resumed>) = 0 [pid 7448] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7443] <... clone resumed>, parent_tid=[7466], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7466 [pid 7450] ioctl(4, LOOP_CLR_FD [pid 7448] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7443] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7450] <... ioctl resumed>) = 0 [pid 7448] <... futex resumed>) = 1 [pid 7444] <... futex resumed>) = 0 [pid 7443] <... futex resumed>) = 0 [pid 7450] close(4 [pid 7448] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7444] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7443] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7465 attached [pid 7450] <... close resumed>) = 0 [pid 7444] <... futex resumed>) = 0 [pid 7465] set_robust_list(0x7f50501119e0, 24 [pid 7444] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7465] <... set_robust_list resumed>) = 0 [pid 7465] memfd_create("syzkaller", 0) = 3 [pid 7465] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7445] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7445] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7448] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7465] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7450] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7449] <... fsconfig resumed>) = 0 [pid 7448] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7445] <... futex resumed>) = 0 [pid 7450] <... futex resumed>) = 1 [pid 7449] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7446] <... futex resumed>) = 0 [pid 7445] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7465] <... write resumed>) = 262144 [pid 7449] <... futex resumed>) = 0 [pid 7445] <... mmap resumed>) = 0x7f5047d10000 [pid 7449] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7445] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7445] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7467], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7467 [pid 7445] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7445] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7465] munmap(0x7f5047cf1000, 262144) = 0 [pid 7465] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7465] ioctl(4, LOOP_SET_FD, 3 [pid 7450] fspick(AT_FDCWD, ".", 0 [pid 7446] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7450] <... fspick resumed>) = 4 [pid 7446] <... futex resumed>) = 0 [pid 7450] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7446] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7450] <... futex resumed>) = 0 [pid 7446] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7450] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7446] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7467 attached [pid 7450] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7446] <... futex resumed>) = 0 [pid 7467] set_robust_list(0x7f5047d309e0, 24 [pid 7450] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7446] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7467] <... set_robust_list resumed>) = 0 [pid 7450] <... fsconfig resumed>) = 0 [pid 7467] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7450] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7467] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7450] <... futex resumed>) = 1 [pid 7446] <... futex resumed>) = 0 [pid 7467] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7450] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 101.666684][ T7449] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 101.688909][ T7448] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 101.695629][ T7465] loop0: detected capacity change from 0 to 512 [pid 7446] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7467] <... futex resumed>) = 1 [pid 7450] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7446] <... futex resumed>) = 0 [pid 7445] <... futex resumed>) = 0 [pid 7467] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7450] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7446] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7445] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7465] <... ioctl resumed>) = 0 [pid 7449] <... futex resumed>) = 0 [pid 7445] <... futex resumed>) = 1 [pid 7465] close(3 [pid 7449] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7445] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7465] <... close resumed>) = 0 [pid 7465] mkdir("./file0", 0777) = 0 [pid 7465] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7444] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7444] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7466 attached ) = 0 [pid 7443] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7444] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7466] set_robust_list(0x7f5047d309e0, 24 [pid 7444] <... mmap resumed>) = 0x7f5047d10000 [pid 7444] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7444] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7468], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7468 [pid 7444] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7444] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7466] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 7468 attached [pid 7468] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7468] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EROFS (Read-only file system) [pid 7468] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7444] <... futex resumed>) = 0 [pid 7468] <... futex resumed>) = 1 [pid 7468] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7466] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7446] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7446] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7446] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7446] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7446] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7466] <... openat resumed>) = 5 [pid 7446] <... clone resumed>, parent_tid=[7470], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7470 [pid 7446] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7466] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 101.709945][ T7449] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 101.710639][ T7450] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 101.722053][ T7465] EXT4-fs: Ignoring removed oldalloc option [ 101.738397][ T7455] EXT4-fs (loop5): 1 truncate cleaned up [ 101.740901][ T7449] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 101.744485][ T7448] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7446] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7466] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7470 attached [pid 7445] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7445] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7470] set_robust_list(0x7f5047d309e0, 24 [pid 7467] <... futex resumed>) = 0 [pid 7445] <... futex resumed>) = 1 [pid 7470] <... set_robust_list resumed>) = 0 [pid 7467] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7445] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7470] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7467] <... openat resumed>) = 5 [pid 7455] <... mount resumed>) = 0 [pid 7467] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7445] <... futex resumed>) = 0 [pid 7467] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7470] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7455] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7470] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7455] <... openat resumed>) = 3 [pid 7470] <... futex resumed>) = 1 [pid 7450] <... fsconfig resumed>) = 0 [pid 7470] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7455] chdir("./file0" [pid 7450] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7447] <... fsconfig resumed>) = 0 [pid 7446] <... futex resumed>) = 0 [pid 7455] <... chdir resumed>) = 0 [pid 7450] <... futex resumed>) = 0 [pid 7446] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7450] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7447] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7447] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7446] <... futex resumed>) = 0 [pid 7443] exit_group(0 [pid 7447] <... futex resumed>) = ? [pid 7443] <... exit_group resumed>) = ? [pid 7447] +++ exited with 0 +++ [pid 7455] ioctl(4, LOOP_CLR_FD) = 0 [pid 7455] close(4) = 0 [pid 7455] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7455] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7466] <... futex resumed>) = ? [pid 7451] <... futex resumed>) = 0 [pid 7446] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7449] <... fsconfig resumed>) = 0 [pid 7466] +++ exited with 0 +++ [pid 7451] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7443] +++ exited with 0 +++ [pid 7451] <... futex resumed>) = 1 [pid 7451] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7455] <... futex resumed>) = 0 [pid 7455] fspick(AT_FDCWD, ".", 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7443, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 7455] <... fspick resumed>) = 4 [pid 7455] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7451] <... futex resumed>) = 0 [pid 5000] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7455] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7451] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7455] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7451] <... futex resumed>) = 0 [ 101.765696][ T7455] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.768698][ T7447] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 101.796188][ T7450] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 101.803310][ T7449] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 5000] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7455] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7451] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7449] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7449] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7455] <... fsconfig resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 7455] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7445] exit_group(0 [pid 5000] fstat(3, [pid 7455] <... futex resumed>) = 1 [pid 7445] <... exit_group resumed>) = ? [pid 7449] <... futex resumed>) = ? [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7467] <... futex resumed>) = ? [pid 7451] <... futex resumed>) = 0 [pid 7451] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7449] +++ exited with 0 +++ [pid 7446] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7446] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7470] <... futex resumed>) = 0 [pid 7446] <... futex resumed>) = 1 [pid 7470] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7446] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7467] +++ exited with 0 +++ [pid 7455] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7445] +++ exited with 0 +++ [pid 7451] <... futex resumed>) = 0 [pid 7451] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] getdents64(3, [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7445, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 7470] <... openat resumed>) = 5 [pid 5000] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7470] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7446] <... futex resumed>) = 0 [pid 7470] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5000] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 101.825410][ T7465] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 101.827111][ T7448] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 101.836795][ T7465] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 101.844676][ T7450] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 5000] lstat("./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./68/binderfs" [pid 5004] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... unlink resumed>) = 0 [pid 5004] <... openat resumed>) = 3 [pid 5004] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5004] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5004] unlink("./67/binderfs") = 0 [pid 5004] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7448] <... fsconfig resumed>) = 0 [pid 7448] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7448] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7455] <... fsconfig resumed>) = 0 [pid 5000] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7444] exit_group(0 [pid 7468] <... futex resumed>) = ? [pid 7444] <... exit_group resumed>) = ? [pid 7468] +++ exited with 0 +++ [pid 7455] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7448] <... futex resumed>) = ? [pid 7455] <... futex resumed>) = 1 [pid 7451] <... futex resumed>) = 0 [pid 7455] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7451] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7455] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7451] <... futex resumed>) = 0 [pid 7455] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7451] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7455] <... futex resumed>) = 0 [pid 7451] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7455] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7451] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7465] <... mount resumed>) = 0 [pid 7451] <... futex resumed>) = 0 [pid 7448] +++ exited with 0 +++ [pid 7444] +++ exited with 0 +++ [pid 7465] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7465] chdir("./file0") = 0 [pid 7465] ioctl(4, LOOP_CLR_FD) = 0 [pid 7465] close(4 [pid 7451] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7444, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5001] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7465] <... close resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7465] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7465] <... futex resumed>) = 1 [pid 7465] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./67/binderfs") = 0 [pid 5001] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7464] <... futex resumed>) = 0 [pid 7464] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7465] <... futex resumed>) = 0 [pid 7464] <... futex resumed>) = 1 [pid 7465] fspick(AT_FDCWD, ".", 0 [ 101.873534][ T7455] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 101.876436][ T7465] EXT4-fs (loop0): 1 truncate cleaned up [ 101.891291][ T7465] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.895556][ T7455] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [pid 7464] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7465] <... fspick resumed>) = 4 [pid 7465] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7464] <... futex resumed>) = 0 [pid 7465] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7464] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7464] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7465] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 7465] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7465] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7464] <... futex resumed>) = 0 [pid 7464] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7465] <... futex resumed>) = 0 [pid 7464] <... futex resumed>) = 1 [pid 7465] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7464] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... umount2 resumed>) = 0 [pid 5004] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./67/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5004] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5004] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5004] close(4) = 0 [pid 5004] rmdir("./67/file0") = 0 [pid 5004] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5004] close(3) = 0 [pid 5004] rmdir("./67" [pid 7451] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5004] <... rmdir resumed>) = 0 [pid 5004] mkdir("./68", 0777 [pid 7451] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 7451] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5000] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7451] <... mmap resumed>) = 0x7f5047d10000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 101.927760][ T7455] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 101.934755][ T7450] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 101.955986][ T7465] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 7451] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5000] lstat("./68/file0", [pid 7465] <... fsconfig resumed>) = 0 [pid 7451] <... mprotect resumed>) = 0 [pid 7450] <... fsconfig resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7465] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7451] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7450] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7465] <... futex resumed>) = 1 [pid 7450] <... futex resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7465] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7451] <... clone resumed>, parent_tid=[7477], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7477 [pid 7450] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5001] lstat("./67/file0", [pid 5000] openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7451] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... openat resumed>) = 4 [pid 7451] <... futex resumed>) = 0 [pid 5001] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] fstat(4, [pid 7451] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] getdents64(4, [pid 5001] <... openat resumed>) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7464] <... futex resumed>) = 0 [pid 5000] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 7477 attached [pid 7464] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7455] <... fsconfig resumed>) = 0 [pid 5004] <... mkdir resumed>) = 0 [pid 5001] getdents64(4, [pid 5000] getdents64(4, [pid 7477] set_robust_list(0x7f5047d309e0, 24 [pid 7465] <... futex resumed>) = 0 [pid 7464] <... futex resumed>) = 1 [pid 7477] <... set_robust_list resumed>) = 0 [pid 7465] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7455] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7446] exit_group(0 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7464] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5000] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7465] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 5004] <... openat resumed>) = 3 [pid 7465] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] close(4 [pid 7465] <... futex resumed>) = 0 [pid 5001] close(4 [pid 7470] <... futex resumed>) = ? [pid 7465] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7450] <... futex resumed>) = ? [pid 7446] <... exit_group resumed>) = ? [pid 5000] <... close resumed>) = 0 [pid 7470] +++ exited with 0 +++ [pid 7464] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7450] +++ exited with 0 +++ [pid 5004] ioctl(3, LOOP_CLR_FD [pid 5001] <... close resumed>) = 0 [pid 7465] <... futex resumed>) = 0 [pid 7464] <... futex resumed>) = 1 [pid 7446] +++ exited with 0 +++ [pid 5004] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] rmdir("./67/file0" [pid 5000] rmdir("./68/file0" [pid 7477] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7465] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7464] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7455] <... futex resumed>) = 0 [pid 5004] close(3 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7446, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5004] <... close resumed>) = 0 [pid 5001] getdents64(3, [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] getdents64(3, ./strace-static-x86_64: Process 7478 attached [pid 7477] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7455] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5002] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7477] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... clone resumed>, child_tidptr=0x5555562025d0) = 7478 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] close(3 [pid 5000] close(3 [pid 7477] <... futex resumed>) = 1 [pid 7451] <... futex resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 7478] set_robust_list(0x5555562025e0, 24 [pid 7477] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7451] exit_group(0 [pid 5002] <... openat resumed>) = 3 [pid 5001] rmdir("./67" [pid 5000] rmdir("./68" [pid 7477] <... futex resumed>) = ? [pid 7455] <... futex resumed>) = ? [pid 7451] <... exit_group resumed>) = ? [pid 5002] fstat(3, [pid 7477] +++ exited with 0 +++ [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5000] mkdir("./69", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] mkdir("./68", 0777 [pid 5000] <... openat resumed>) = 3 [pid 5002] getdents64(3, [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 7478] <... set_robust_list resumed>) = 0 [pid 7455] +++ exited with 0 +++ [pid 7451] +++ exited with 0 +++ [pid 5002] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5001] <... mkdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5002] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7451, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... openat resumed>) = 3 [pid 7478] chdir("./68" [pid 5005] restart_syscall(<... resuming interrupted clone ...> [pid 5002] lstat("./66/binderfs", [pid 5001] ioctl(3, LOOP_CLR_FD [pid 7478] <... chdir resumed>) = 0 [pid 5005] <... restart_syscall resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7478] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] unlink("./66/binderfs" [pid 5001] close(3 [pid 7478] <... prctl resumed>) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 7478] setpgid(0, 0 [pid 5005] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW [ 101.990513][ T7455] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 102.014877][ T7465] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 102.025765][ T7465] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 5002] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... clone resumed>, child_tidptr=0x5555562025d0) = 7479 ./strace-static-x86_64: Process 7479 attached [pid 7478] <... setpgid resumed>) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7478] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5005] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... clone resumed>, child_tidptr=0x5555562025d0) = 7481 [pid 7479] set_robust_list(0x5555562025e0, 24 [pid 7478] <... openat resumed>) = 3 [pid 5005] <... openat resumed>) = 3 [pid 5002] <... umount2 resumed>) = 0 [pid 7479] <... set_robust_list resumed>) = 0 [pid 7478] write(3, "1000", 4 [pid 5005] fstat(3, [pid 5002] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7479] chdir("./69" [pid 7478] <... write resumed>) = 4 [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7479] <... chdir resumed>) = 0 [pid 7478] close(3 [pid 5005] getdents64(3, [pid 5002] lstat("./66/file0", [pid 7479] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7478] <... close resumed>) = 0 [pid 5005] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 7481 attached [pid 7478] symlink("/dev/binderfs", "./binderfs" [pid 5005] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7481] set_robust_list(0x5555562025e0, 24 [pid 7478] <... symlink resumed>) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7481] <... set_robust_list resumed>) = 0 [pid 7478] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7464] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5005] lstat("./67/binderfs", [pid 5002] openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7481] chdir("./68" [pid 7478] <... futex resumed>) = 0 [pid 7464] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... openat resumed>) = 4 [pid 7481] <... chdir resumed>) = 0 [pid 7479] <... prctl resumed>) = 0 [pid 7478] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7464] <... futex resumed>) = 0 [pid 5005] unlink("./67/binderfs" [pid 5002] fstat(4, [pid 7481] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7478] <... mmap resumed>) = 0x7f50500f1000 [pid 7464] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5005] <... unlink resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7479] setpgid(0, 0 [pid 7481] <... prctl resumed>) = 0 [pid 7479] <... setpgid resumed>) = 0 [pid 7478] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7464] <... mmap resumed>) = 0x7f5047d10000 [pid 5005] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] getdents64(4, [pid 7481] setpgid(0, 0 [pid 7479] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7478] <... mprotect resumed>) = 0 [pid 7464] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7481] <... setpgid resumed>) = 0 [pid 7479] <... openat resumed>) = 3 [pid 7478] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7464] <... mprotect resumed>) = 0 [pid 5002] getdents64(4, [pid 7481] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7479] write(3, "1000", 4 [pid 7464] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7481] <... openat resumed>) = 3 [pid 7478] <... clone resumed>, parent_tid=[7482], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7482 [pid 5002] close(4 [pid 7481] write(3, "1000", 4 [pid 7478] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7464] <... clone resumed>, parent_tid=[7483], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7483 [pid 5002] <... close resumed>) = 0 [pid 7481] <... write resumed>) = 4 [pid 7478] <... futex resumed>) = 0 [pid 7464] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] rmdir("./66/file0" [pid 7481] close(3 [pid 7478] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7464] <... futex resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 7481] <... close resumed>) = 0 [pid 7464] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] getdents64(3, [pid 7481] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7481] <... symlink resumed>) = 0 [pid 5002] close(3 [pid 7481] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... close resumed>) = 0 [pid 7481] <... futex resumed>) = 0 [pid 5002] rmdir("./66" [pid 7481] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7479] <... write resumed>) = 4 [pid 5002] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 7482 attached [pid 7481] <... mmap resumed>) = 0x7f50500f1000 [pid 7479] close(3 [pid 5002] mkdir("./67", 0777 [pid 7482] set_robust_list(0x7f50501119e0, 24 [pid 7481] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7479] <... close resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 7482] <... set_robust_list resumed>) = 0 [pid 7481] <... mprotect resumed>) = 0 [pid 7479] symlink("/dev/binderfs", "./binderfs" [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7482] memfd_create("syzkaller", 0 [pid 7481] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7479] <... symlink resumed>) = 0 [pid 7465] <... fsconfig resumed>) = 0 [pid 5002] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7484 attached ./strace-static-x86_64: Process 7483 attached [pid 7482] <... memfd_create resumed>) = 3 [pid 7479] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7465] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... umount2 resumed>) = 0 [pid 7484] set_robust_list(0x7f50501119e0, 24 [pid 7482] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7481] <... clone resumed>, parent_tid=[7484], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7484 [pid 7479] <... futex resumed>) = 0 [pid 7483] set_robust_list(0x7f5047d309e0, 24 [pid 7465] <... futex resumed>) = 0 [pid 5005] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] ioctl(3, LOOP_CLR_FD [pid 7484] <... set_robust_list resumed>) = 0 [pid 7483] <... set_robust_list resumed>) = 0 [pid 7479] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7465] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7482] <... mmap resumed>) = 0x7f5047cf1000 [pid 7481] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7481] <... futex resumed>) = 0 [pid 7479] <... mmap resumed>) = 0x7f50500f1000 [pid 5005] lstat("./67/file0", [pid 5002] close(3 [pid 7481] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5002] <... close resumed>) = 0 [ 102.053653][ T7465] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7482] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7479] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 5005] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7479] <... mprotect resumed>) = 0 [pid 5005] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... clone resumed>, child_tidptr=0x5555562025d0) = 7485 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7479] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5005] openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7479] <... clone resumed>, parent_tid=[7486], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7486 [pid 5005] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7479] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5005] getdents64(4, [pid 7479] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5005] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5005] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5005] close(4) = 0 [pid 5005] rmdir("./67/file0") = 0 [pid 7484] memfd_create("syzkaller", 0 [pid 5005] getdents64(3, [pid 7482] <... write resumed>) = 262144 [pid 7484] <... memfd_create resumed>) = 3 [pid 5005] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 7486 attached ./strace-static-x86_64: Process 7485 attached [pid 7484] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7483] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7482] munmap(0x7f5047cf1000, 262144 [pid 5005] close(3) = 0 [pid 7484] <... mmap resumed>) = 0x7f5047cf1000 [pid 5005] rmdir("./67" [pid 7482] <... munmap resumed>) = 0 [pid 5005] <... rmdir resumed>) = 0 [pid 7484] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5005] mkdir("./68", 0777 [pid 7483] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 5005] <... mkdir resumed>) = 0 [pid 7482] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7483] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7482] <... openat resumed>) = 4 [pid 7464] <... futex resumed>) = 0 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7464] exit_group(0 [pid 7486] set_robust_list(0x7f50501119e0, 24 [pid 7485] set_robust_list(0x5555562025e0, 24 [pid 7484] <... write resumed>) = 262144 [pid 7482] ioctl(4, LOOP_SET_FD, 3 [pid 7465] <... futex resumed>) = ? [pid 7464] <... exit_group resumed>) = ? [pid 5005] <... openat resumed>) = 3 [pid 7486] <... set_robust_list resumed>) = 0 [pid 7485] <... set_robust_list resumed>) = 0 [pid 7484] munmap(0x7f5047cf1000, 262144 [pid 7483] +++ exited with 0 +++ [pid 7482] <... ioctl resumed>) = 0 [pid 7465] +++ exited with 0 +++ [pid 7464] +++ exited with 0 +++ [pid 5005] ioctl(3, LOOP_CLR_FD [pid 7486] memfd_create("syzkaller", 0 [pid 7485] chdir("./67" [pid 7484] <... munmap resumed>) = 0 [pid 7482] close(3 [pid 5005] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7486] <... memfd_create resumed>) = 3 [pid 7485] <... chdir resumed>) = 0 [pid 7484] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7482] <... close resumed>) = 0 [pid 5005] close(3 [pid 7486] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7485] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7484] <... openat resumed>) = 4 [pid 7482] mkdir("./file0", 0777 [pid 5005] <... close resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7464, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 7486] <... mmap resumed>) = 0x7f5047cf1000 [pid 7485] <... prctl resumed>) = 0 [pid 7484] ioctl(4, LOOP_SET_FD, 3 [pid 7482] <... mkdir resumed>) = 0 [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7486] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7485] setpgid(0, 0 [pid 7482] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"..../strace-static-x86_64: Process 7487 attached [pid 7486] <... write resumed>) = 262144 [pid 7485] <... setpgid resumed>) = 0 [pid 7484] <... ioctl resumed>) = 0 [pid 5005] <... clone resumed>, child_tidptr=0x5555562025d0) = 7487 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7487] set_robust_list(0x5555562025e0, 24 [pid 7484] close(3 [pid 4999] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7487] <... set_robust_list resumed>) = 0 [pid 7484] <... close resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 7487] chdir("./68" [pid 7484] mkdir("./file0", 0777 [pid 4999] fstat(3, [pid 7487] <... chdir resumed>) = 0 [pid 7486] munmap(0x7f5047cf1000, 262144 [pid 7485] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7484] <... mkdir resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7487] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7486] <... munmap resumed>) = 0 [pid 7485] <... openat resumed>) = 3 [pid 7486] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7485] write(3, "1000", 4 [pid 4999] getdents64(3, [pid 7487] <... prctl resumed>) = 0 [pid 7486] <... openat resumed>) = 4 [pid 7485] <... write resumed>) = 4 [pid 7484] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7486] ioctl(4, LOOP_SET_FD, 3 [pid 7485] close(3 [pid 4999] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7487] setpgid(0, 0 [pid 7485] <... close resumed>) = 0 [pid 7485] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7486] <... ioctl resumed>) = 0 [pid 7485] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7486] close(3 [pid 7485] <... futex resumed>) = 0 [pid 7486] <... close resumed>) = 0 [pid 7485] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7486] mkdir("./file0", 0777 [pid 7485] <... mmap resumed>) = 0x7f50500f1000 [pid 7485] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7486] <... mkdir resumed>) = 0 [pid 7485] <... mprotect resumed>) = 0 [pid 7486] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [ 102.130551][ T7482] loop4: detected capacity change from 0 to 512 [ 102.144360][ T7484] loop2: detected capacity change from 0 to 512 [ 102.154358][ T7482] EXT4-fs: Ignoring removed oldalloc option [ 102.164623][ T7486] loop1: detected capacity change from 0 to 512 [ 102.165004][ T7484] EXT4-fs: Ignoring removed oldalloc option [pid 7485] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7487] <... setpgid resumed>) = 0 [pid 4999] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7485] <... clone resumed>, parent_tid=[7488], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7488 [pid 7485] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7485] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7487] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./67/binderfs", [pid 7487] <... openat resumed>) = 3 [pid 7487] write(3, "1000", 4 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./67/binderfs"./strace-static-x86_64: Process 7488 attached [pid 7488] set_robust_list(0x7f50501119e0, 24 [pid 7487] <... write resumed>) = 4 [pid 7488] <... set_robust_list resumed>) = 0 [pid 7488] memfd_create("syzkaller", 0 [pid 7487] close(3 [pid 4999] <... unlink resumed>) = 0 [pid 7488] <... memfd_create resumed>) = 3 [pid 4999] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7487] <... close resumed>) = 0 [pid 7488] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7487] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7487] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7487] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7488] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7487] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7487] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7491], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7491 [pid 7487] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7487] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7488] <... write resumed>) = 262144 [pid 7488] munmap(0x7f5047cf1000, 262144./strace-static-x86_64: Process 7491 attached [pid 7491] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7491] memfd_create("syzkaller", 0) = 3 [pid 7491] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7491] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7491] munmap(0x7f5047cf1000, 262144 [pid 7488] <... munmap resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [ 102.174832][ T7486] EXT4-fs: Ignoring removed oldalloc option [ 102.193911][ T7482] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 102.212014][ T7486] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7491] <... munmap resumed>) = 0 [pid 7491] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 7491] ioctl(4, LOOP_SET_FD, 3 [pid 7488] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7491] <... ioctl resumed>) = 0 [pid 7491] close(3) = 0 [pid 7491] mkdir("./file0", 0777) = 0 [pid 7491] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7488] <... openat resumed>) = 4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./67/file0", [pid 7488] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7488] <... ioctl resumed>) = 0 [pid 7488] close(3) = 0 [pid 7488] mkdir("./file0", 0777) = 0 [ 102.224944][ T7482] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 102.239438][ T7491] loop5: detected capacity change from 0 to 512 [ 102.246707][ T7484] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 102.251795][ T7491] EXT4-fs: Ignoring removed oldalloc option [ 102.261636][ T7488] loop3: detected capacity change from 0 to 512 [pid 7488] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./67/file0") = 0 [pid 7482] <... mount resumed>) = 0 [pid 7482] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 102.271252][ T7486] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 102.278011][ T7488] EXT4-fs: Ignoring removed oldalloc option [ 102.286514][ T7482] EXT4-fs (loop4): 1 truncate cleaned up [ 102.299634][ T7484] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 102.300786][ T7482] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7482] chdir("./file0") = 0 [pid 7482] ioctl(4, LOOP_CLR_FD) = 0 [pid 7482] close(4) = 0 [pid 4999] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./67" [pid 7482] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7478] <... futex resumed>) = 0 [pid 7478] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... rmdir resumed>) = 0 [pid 7478] <... futex resumed>) = 0 [pid 4999] mkdir("./68", 0777 [pid 7478] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7482] <... futex resumed>) = 1 [pid 7482] fspick(AT_FDCWD, ".", 0) = 4 [pid 7482] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7478] <... futex resumed>) = 0 [pid 7478] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7478] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7482] <... futex resumed>) = 1 [pid 7482] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 7482] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 7478] <... futex resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7482] <... futex resumed>) = 1 [pid 7478] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7482] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7478] <... futex resumed>) = 0 [pid 7478] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7486] <... mount resumed>) = 0 [pid 7486] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7486] chdir("./file0") = 0 [pid 7486] ioctl(4, LOOP_CLR_FD) = 0 [pid 7486] close(4) = 0 [ 102.330263][ T7491] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 102.338982][ T7486] EXT4-fs (loop1): 1 truncate cleaned up [ 102.350845][ T7484] EXT4-fs (loop2): 1 truncate cleaned up [ 102.362165][ T7486] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7486] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7486] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7479] <... futex resumed>) = 0 [pid 7479] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7479] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7500 attached [pid 7486] <... futex resumed>) = 0 [pid 7478] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7486] fspick(AT_FDCWD, ".", 0 [pid 7478] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7486] <... fspick resumed>) = 4 [pid 4999] <... clone resumed>, child_tidptr=0x5555562025d0) = 7500 [pid 7486] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7478] <... futex resumed>) = 0 [pid 7486] <... futex resumed>) = 1 [pid 7479] <... futex resumed>) = 0 [pid 7478] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7500] set_robust_list(0x5555562025e0, 24 [pid 7486] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7479] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7500] <... set_robust_list resumed>) = 0 [pid 7486] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7479] <... futex resumed>) = 0 [pid 7478] <... mmap resumed>) = 0x7f5047d10000 [pid 7486] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7479] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7486] <... fsconfig resumed>) = 0 [pid 7478] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7486] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7478] <... mprotect resumed>) = 0 [pid 7486] <... futex resumed>) = 1 [pid 7479] <... futex resumed>) = 0 [pid 7486] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7479] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7478] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7486] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7479] <... futex resumed>) = 0 [pid 7486] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7479] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7484] <... mount resumed>) = 0 [pid 7484] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7484] chdir("./file0") = 0 [pid 7484] ioctl(4, LOOP_CLR_FD) = 0 [pid 7484] close(4) = 0 [ 102.376603][ T7488] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 102.386285][ T7491] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 102.398226][ T7484] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.416756][ T7482] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 7500] chdir("./68" [pid 7484] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7478] <... clone resumed>, parent_tid=[7501], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7501 [pid 7500] <... chdir resumed>) = 0 [pid 7484] <... futex resumed>) = 1 [pid 7481] <... futex resumed>) = 0 [pid 7478] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7501 attached [pid 7501] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7501] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7501] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7501] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7500] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7484] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7481] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7478] <... futex resumed>) = 1 [pid 7501] <... futex resumed>) = 0 [pid 7481] <... futex resumed>) = 0 [pid 7484] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7481] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7478] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7500] <... prctl resumed>) = 0 [pid 7484] fspick(AT_FDCWD, ".", 0 [pid 7478] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7501] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7482] <... fsconfig resumed>) = 0 [pid 7482] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 102.428274][ T7491] __quota_error: 150 callbacks suppressed [ 102.428286][ T7491] Quota error (device loop5): write_blk: dquota write failed [ 102.437693][ T7488] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 102.442491][ T7491] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 102.458155][ T7488] Quota error (device loop3): write_blk: dquota write failed [pid 7482] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7500] setpgid(0, 0 [pid 7484] <... fspick resumed>) = 4 [pid 7479] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7500] <... setpgid resumed>) = 0 [pid 7500] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7484] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7479] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7478] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7486] <... fsconfig resumed>) = 0 [pid 7500] <... openat resumed>) = 3 [pid 7491] <... mount resumed>) = 0 [pid 7486] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7484] <... futex resumed>) = 1 [pid 7482] <... futex resumed>) = 0 [pid 7481] <... futex resumed>) = 0 [pid 7479] <... futex resumed>) = 0 [pid 7478] <... futex resumed>) = 1 [pid 7500] write(3, "1000", 4 [pid 7486] <... futex resumed>) = 0 [pid 7484] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7481] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7479] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7478] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7500] <... write resumed>) = 4 [pid 7486] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7484] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7481] <... futex resumed>) = 0 [pid 7479] <... mmap resumed>) = 0x7f5047d10000 [pid 7500] close(3 [pid 7484] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7481] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7479] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7500] <... close resumed>) = 0 [pid 7484] <... fsconfig resumed>) = 0 [pid 7479] <... mprotect resumed>) = 0 [pid 7500] symlink("/dev/binderfs", "./binderfs" [pid 7484] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7479] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7500] <... symlink resumed>) = 0 [pid 7484] <... futex resumed>) = 1 [pid 7481] <... futex resumed>) = 0 [pid 7500] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7484] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7481] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7479] <... clone resumed>, parent_tid=[7502], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7502 [pid 7500] <... futex resumed>) = 0 [pid 7484] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7481] <... futex resumed>) = 0 [pid 7479] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7500] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7484] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7481] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7479] <... futex resumed>) = 0 [pid 7500] <... mmap resumed>) = 0x7f50500f1000 [pid 7479] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 102.474707][ T7488] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 102.487019][ T7491] EXT4-fs (loop5): 1 truncate cleaned up [ 102.487065][ T7486] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 102.493012][ T7491] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.517262][ T7488] EXT4-fs (loop3): 1 truncate cleaned up [pid 7500] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7482] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7500] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7503], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7503 [pid 7500] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7500] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7491] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7491] chdir("./file0") = 0 [pid 7491] ioctl(4, LOOP_CLR_FD) = 0 [pid 7491] close(4) = 0 [pid 7491] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7491] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7502 attached [pid 7502] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7502] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7502] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7479] <... futex resumed>) = 0 [pid 7479] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7486] <... futex resumed>) = 0 [pid 7479] <... futex resumed>) = 1 [pid 7486] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7479] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7487] <... futex resumed>) = 0 [pid 7502] <... futex resumed>) = 1 [pid 7502] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7488] <... mount resumed>) = 0 [pid 7488] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7488] chdir("./file0") = 0 [pid 7488] ioctl(4, LOOP_CLR_FD) = 0 [pid 7488] close(4 [pid 7487] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7503 attached [pid 7491] <... futex resumed>) = 0 [pid 7488] <... close resumed>) = 0 [pid 7487] <... futex resumed>) = 1 [pid 7503] set_robust_list(0x7f50501119e0, 24 [pid 7487] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7503] <... set_robust_list resumed>) = 0 [pid 7503] memfd_create("syzkaller", 0) = 3 [pid 7503] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [ 102.523690][ T7488] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.536914][ T7482] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 102.538957][ T7486] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 102.553733][ T7482] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 102.564323][ T7484] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 7503] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7481] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7478] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7491] fspick(AT_FDCWD, ".", 0 [pid 7481] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7478] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7501] <... futex resumed>) = 0 [pid 7491] <... fspick resumed>) = 4 [pid 7481] <... futex resumed>) = 0 [pid 7478] <... futex resumed>) = 1 [pid 7503] <... write resumed>) = 262144 [pid 7501] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7491] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7488] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7484] <... fsconfig resumed>) = 0 [pid 7481] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7478] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7503] munmap(0x7f5047cf1000, 262144) = 0 [pid 7503] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7503] ioctl(4, LOOP_SET_FD, 3 [pid 7491] <... futex resumed>) = 1 [pid 7488] <... futex resumed>) = 1 [pid 7485] <... futex resumed>) = 0 [pid 7484] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7482] <... fsconfig resumed>) = 0 [pid 7481] <... mmap resumed>) = 0x7f5047d10000 [pid 7491] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7488] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7485] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7484] <... futex resumed>) = 0 [pid 7481] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7488] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7485] <... futex resumed>) = 0 [pid 7484] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7481] <... mprotect resumed>) = 0 [pid 7488] fspick(AT_FDCWD, ".", 0 [pid 7485] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7481] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7488] <... fspick resumed>) = 4 [pid 7488] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7481] <... clone resumed>, parent_tid=[7505], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7505 [pid 7488] <... futex resumed>) = 1 [pid 7485] <... futex resumed>) = 0 [pid 7481] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7488] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7485] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7481] <... futex resumed>) = 0 [pid 7488] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7485] <... futex resumed>) = 0 [pid 7481] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7488] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7485] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7482] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7488] <... fsconfig resumed>) = 0 [pid 7488] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7482] <... futex resumed>) = 0 [pid 7488] <... futex resumed>) = 1 [pid 7485] <... futex resumed>) = 0 [pid 7482] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7488] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7485] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7488] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7485] <... futex resumed>) = 0 [pid 7488] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7485] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7487] <... futex resumed>) = 0 [pid 7479] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7479] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7502] <... futex resumed>) = 0 [pid 7479] <... futex resumed>) = 1 [pid 7502] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7479] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7502] <... openat resumed>) = 5 [pid 7502] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7479] <... futex resumed>) = 0 [pid 7502] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7505 attached [pid 7503] <... ioctl resumed>) = 0 [pid 7501] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7488] <... fsconfig resumed>) = 0 [pid 7487] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7505] set_robust_list(0x7f5047d309e0, 24 [pid 7503] close(3 [pid 7488] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7487] <... futex resumed>) = 1 [ 102.575052][ T7486] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 102.585325][ T7482] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 102.590018][ T7503] loop0: detected capacity change from 0 to 512 [ 102.601573][ T7501] Quota error (device loop4): write_blk: dquota write failed [ 102.603772][ T7488] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 102.612833][ T7501] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [pid 7505] <... set_robust_list resumed>) = 0 [pid 7503] <... close resumed>) = 0 [pid 7488] <... futex resumed>) = 1 [pid 7487] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7505] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7503] mkdir("./file0", 0777 [pid 7501] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7488] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7505] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7503] <... mkdir resumed>) = 0 [pid 7501] <... futex resumed>) = 1 [pid 7485] <... futex resumed>) = 0 [pid 7491] <... futex resumed>) = 0 [pid 7478] <... futex resumed>) = 0 [pid 7505] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7503] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7501] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7505] <... futex resumed>) = 1 [pid 7491] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7485] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7481] <... futex resumed>) = 0 [pid 7478] exit_group(0 [pid 7505] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7491] <... fsconfig resumed>) = 0 [pid 7491] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7487] <... futex resumed>) = 0 [pid 7491] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7487] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7487] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7488] <... futex resumed>) = 0 [pid 7485] <... futex resumed>) = 1 [pid 7488] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7485] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7488] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7488] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7501] <... futex resumed>) = ? [pid 7488] <... futex resumed>) = 1 [pid 7485] <... futex resumed>) = 0 [pid 7482] <... futex resumed>) = ? [pid 7481] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7478] <... exit_group resumed>) = ? [pid 7501] +++ exited with 0 +++ [pid 7488] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7485] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7482] +++ exited with 0 +++ [pid 7488] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7485] <... futex resumed>) = 0 [pid 7488] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7485] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7484] <... futex resumed>) = 0 [pid 7481] <... futex resumed>) = 1 [pid 7478] +++ exited with 0 +++ [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7478, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5004] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5004] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5004] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [ 102.630771][ T7486] Quota error (device loop1): write_blk: dquota write failed [ 102.638428][ T7486] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 102.641320][ T7503] EXT4-fs: Ignoring removed oldalloc option [ 102.649363][ T7486] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 102.667035][ T7488] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [pid 5004] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./68/binderfs", [pid 7484] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7481] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5004] unlink("./68/binderfs") = 0 [pid 5004] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7486] <... fsconfig resumed>) = 0 [pid 7486] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7479] exit_group(0) = ? [pid 7486] <... futex resumed>) = ? [pid 7486] +++ exited with 0 +++ [pid 7487] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7487] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7487] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7487] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7487] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7507], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7507 [pid 7487] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 7507 attached [pid 7502] <... futex resumed>) = ? [pid 7491] <... fsconfig resumed>) = 0 [pid 7487] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7507] set_robust_list(0x7f5047d309e0, 24 [pid 7502] +++ exited with 0 +++ [pid 7491] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7485] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7479] +++ exited with 0 +++ [pid 7491] <... futex resumed>) = 0 [pid 7485] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7491] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7485] <... futex resumed>) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7479, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 7485] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5000] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7485] <... mmap resumed>) = 0x7f5047d10000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 102.667053][ T7486] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 102.686944][ T7484] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 102.690607][ T7486] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 102.696451][ T7491] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 102.718141][ T7488] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7485] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5000] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7507] <... set_robust_list resumed>) = 0 [pid 7485] <... mprotect resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 7507] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7507] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7487] <... futex resumed>) = 0 [pid 7487] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7487] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7507] <... futex resumed>) = 1 [pid 7507] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7485] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7481] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7481] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7485] <... clone resumed>, parent_tid=[7509], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7509 [pid 7481] <... futex resumed>) = 1 [pid 7485] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7481] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7485] <... futex resumed>) = 0 [pid 7485] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./69/binderfs" [pid 7505] <... futex resumed>) = 0 [pid 7491] <... futex resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 7505] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7491] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5000] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7509 attached [pid 7509] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7509] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7505] <... openat resumed>) = 5 [pid 7505] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7481] <... futex resumed>) = 0 [pid 7505] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7509] <... openat resumed>) = 5 [pid 7509] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7485] <... futex resumed>) = 0 [pid 7509] <... futex resumed>) = 1 [pid 7509] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7488] <... fsconfig resumed>) = 0 [pid 7488] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7485] exit_group(0 [pid 7509] <... futex resumed>) = ? [pid 7485] <... exit_group resumed>) = ? [pid 7509] +++ exited with 0 +++ [pid 7488] +++ exited with 0 +++ [pid 7485] +++ exited with 0 +++ [ 102.719357][ T7484] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 102.743775][ T7491] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 102.754656][ T7503] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 102.759290][ T7488] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 102.765461][ T7491] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7485, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 7487] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7487] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7507] <... futex resumed>) = 0 [pid 7487] <... futex resumed>) = 1 [pid 5004] <... umount2 resumed>) = 0 [pid 7507] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7487] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... restart_syscall resumed>) = 0 [pid 5002] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./67/binderfs") = 0 [pid 5002] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7507] <... openat resumed>) = 5 [pid 7484] <... fsconfig resumed>) = 0 [pid 5004] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7507] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7484] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7507] <... futex resumed>) = 1 [pid 7487] <... futex resumed>) = 0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 102.778587][ T7503] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 102.806261][ T7484] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 102.822237][ T7503] EXT4-fs (loop0): 1 truncate cleaned up [pid 7507] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7484] <... futex resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 7481] exit_group(0 [pid 5004] lstat("./68/file0", [pid 7505] <... futex resumed>) = ? [pid 7481] <... exit_group resumed>) = ? [pid 7505] +++ exited with 0 +++ [pid 5004] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7484] +++ exited with 0 +++ [pid 7481] +++ exited with 0 +++ [pid 5004] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7503] <... mount resumed>) = 0 [pid 7503] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7503] chdir("./file0") = 0 [pid 7503] ioctl(4, LOOP_CLR_FD) = 0 [pid 7503] close(4) = 0 [pid 7503] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7500] <... futex resumed>) = 0 [pid 7503] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7500] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7503] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7500] <... futex resumed>) = 0 [pid 7503] fspick(AT_FDCWD, ".", 0 [pid 7500] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7503] <... fspick resumed>) = 4 [pid 7503] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7500] <... futex resumed>) = 0 [pid 7503] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7500] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7503] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7500] <... futex resumed>) = 0 [pid 7503] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7500] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7503] <... fsconfig resumed>) = 0 [pid 7503] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7500] <... futex resumed>) = 0 [pid 7503] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7500] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7503] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7500] <... futex resumed>) = 0 [pid 7503] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7500] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7481, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5000] lstat("./69/file0", [pid 5004] openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7491] <... fsconfig resumed>) = 0 [pid 7491] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7491] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7487] exit_group(0 [pid 5004] <... openat resumed>) = 4 [pid 5004] fstat(4, [pid 5000] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7507] <... futex resumed>) = ? [pid 7487] <... exit_group resumed>) = ? [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... restart_syscall resumed>) = 0 [pid 7507] +++ exited with 0 +++ [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5004] getdents64(4, [pid 5000] openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... openat resumed>) = 4 [pid 5004] close(4 [pid 5000] fstat(4, [pid 5001] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] <... close resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5000] getdents64(4, [pid 5004] rmdir("./68/file0" [pid 7491] <... futex resumed>) = ? [pid 5004] <... rmdir resumed>) = 0 [pid 5001] fstat(3, [pid 5000] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7491] +++ exited with 0 +++ [pid 7487] +++ exited with 0 +++ [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7487, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5005] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5005] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5005] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] lstat("./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5005] unlink("./68/binderfs") = 0 [pid 5005] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5004] close(3) = 0 [pid 5004] rmdir("./68") = 0 [pid 5004] mkdir("./69", 0777) = 0 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5004] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5004] close(3) = 0 [pid 5001] getdents64(3, [pid 5000] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7514 [pid 5002] <... umount2 resumed>) = 0 [pid 5000] close(4 [pid 5001] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5000] <... close resumed>) = 0 [pid 5002] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] rmdir("./69/file0" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... rmdir resumed>) = 0 [pid 5001] lstat("./68/binderfs", [pid 5000] getdents64(3, [pid 5002] lstat("./67/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] unlink("./68/binderfs" [pid 5000] close(3 [pid 5002] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... unlink resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] rmdir("./69" [pid 5002] openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... rmdir resumed>) = 0 [pid 5002] <... openat resumed>) = 4 [pid 5001] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] mkdir("./70", 0777./strace-static-x86_64: Process 7514 attached [pid 5002] fstat(4, [pid 5000] <... mkdir resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] getdents64(4, [pid 5000] <... openat resumed>) = 3 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5000] close(3 [pid 5002] close(4 [pid 5000] <... close resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7500] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5002] rmdir("./67/file0" [pid 7500] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7500] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 7500] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 5002] getdents64(3, [pid 5000] <... clone resumed>, child_tidptr=0x5555562025d0) = 7515 [pid 7500] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7500] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5002] close(3 [pid 7500] <... clone resumed>, parent_tid=[7516], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7516 [pid 7500] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... close resumed>) = 0 [pid 7514] set_robust_list(0x5555562025e0, 24 [pid 7500] <... futex resumed>) = 0 [pid 7500] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7514] <... set_robust_list resumed>) = 0 [pid 5002] rmdir("./67"./strace-static-x86_64: Process 7516 attached [pid 7516] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7516] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 5002] <... rmdir resumed>) = 0 [pid 5002] mkdir("./68", 0777 [pid 7516] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7500] <... futex resumed>) = 0 [pid 7500] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7500] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7516] <... futex resumed>) = 1 [pid 7516] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5002] <... mkdir resumed>) = 0 [ 102.828267][ T7503] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.841775][ T7491] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 102.868280][ T7503] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 7514] chdir("./69" [pid 7503] <... fsconfig resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5005] <... umount2 resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5005] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 7515 attached [pid 7514] <... chdir resumed>) = 0 [pid 7503] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] lstat("./68/file0", [pid 5002] close(3 [pid 5001] <... umount2 resumed>) = 0 [pid 7515] set_robust_list(0x5555562025e0, 24 [pid 7514] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7503] <... futex resumed>) = 0 [pid 5005] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... close resumed>) = 0 [pid 5001] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7515] <... set_robust_list resumed>) = 0 [pid 7514] <... prctl resumed>) = 0 [pid 7503] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5005] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7515] chdir("./70" [pid 7514] setpgid(0, 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./68/file0", [pid 7515] <... chdir resumed>) = 0 [pid 7514] <... setpgid resumed>) = 0 [pid 5005] openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... clone resumed>, child_tidptr=0x5555562025d0) = 7517 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7515] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7514] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5005] <... openat resumed>) = 4 [pid 5001] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7515] <... prctl resumed>) = 0 [pid 7514] <... openat resumed>) = 3 [pid 5005] fstat(4, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7517 attached [pid 7515] setpgid(0, 0 [pid 7514] write(3, "1000", 4 [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7515] <... setpgid resumed>) = 0 [pid 7514] <... write resumed>) = 4 [pid 5005] getdents64(4, [pid 5001] <... openat resumed>) = 4 [pid 7515] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7514] close(3 [pid 5005] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5001] fstat(4, [pid 7515] <... openat resumed>) = 3 [pid 7514] <... close resumed>) = 0 [pid 5005] getdents64(4, [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7517] set_robust_list(0x5555562025e0, 24 [pid 7515] write(3, "1000", 4 [pid 7514] symlink("/dev/binderfs", "./binderfs" [pid 5005] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] getdents64(4, [pid 7517] <... set_robust_list resumed>) = 0 [pid 7515] <... write resumed>) = 4 [pid 7517] chdir("./68" [pid 7514] <... symlink resumed>) = 0 [pid 5005] close(4 [pid 7515] close(3 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7517] <... chdir resumed>) = 0 [pid 7515] <... close resumed>) = 0 [pid 7514] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... close resumed>) = 0 [pid 5001] getdents64(4, [pid 7517] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7515] symlink("/dev/binderfs", "./binderfs" [pid 7514] <... futex resumed>) = 0 [pid 5005] rmdir("./68/file0" [pid 5001] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7517] <... prctl resumed>) = 0 [pid 7517] setpgid(0, 0 [pid 7515] <... symlink resumed>) = 0 [pid 7517] <... setpgid resumed>) = 0 [pid 7517] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7514] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5005] <... rmdir resumed>) = 0 [pid 7515] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] close(4 [pid 7517] <... openat resumed>) = 3 [pid 7517] write(3, "1000", 4 [pid 7514] <... mmap resumed>) = 0x7f50500f1000 [pid 5005] getdents64(3, [pid 5001] <... close resumed>) = 0 [pid 7515] <... futex resumed>) = 0 [pid 7517] <... write resumed>) = 4 [pid 7515] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7514] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 5005] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] rmdir("./68/file0" [pid 7517] close(3 [pid 5005] close(3 [pid 7517] <... close resumed>) = 0 [pid 7514] <... mprotect resumed>) = 0 [pid 7517] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 7517] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... close resumed>) = 0 [pid 7517] <... futex resumed>) = 0 [pid 7514] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5005] rmdir("./68" [pid 5001] getdents64(3, [pid 7517] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7515] <... mmap resumed>) = 0x7f50500f1000 [pid 7517] <... mmap resumed>) = 0x7f50500f1000 [pid 7517] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 5005] <... rmdir resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7514] <... clone resumed>, parent_tid=[7518], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7518 [pid 7517] <... mprotect resumed>) = 0 [pid 7515] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7514] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] mkdir("./69", 0777 [pid 5001] close(3 [pid 7517] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5001] <... close resumed>) = 0 [pid 7517] <... clone resumed>, parent_tid=[7519], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7519 [pid 7517] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5005] <... mkdir resumed>) = 0 [pid 7517] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7514] <... futex resumed>) = 0 [pid 5001] rmdir("./68" [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7515] <... mprotect resumed>) = 0 [pid 7514] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7518 attached [pid 7518] set_robust_list(0x7f50501119e0, 24) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 7518] memfd_create("syzkaller", 0 [pid 7515] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5005] <... openat resumed>) = 3 [pid 5001] mkdir("./69", 0777 [pid 7518] <... memfd_create resumed>) = 3 [pid 5005] ioctl(3, LOOP_CLR_FD [pid 7518] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 5001] <... mkdir resumed>) = 0 [pid 5005] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7515] <... clone resumed>, parent_tid=[7520], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7520 [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5005] close(3 [pid 7515] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... openat resumed>) = 3 [pid 5005] <... close resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 7515] <... futex resumed>) = 0 [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7515] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7518] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5001] close(3 [pid 5005] <... clone resumed>, child_tidptr=0x5555562025d0) = 7521 [pid 5001] <... close resumed>) = 0 ./strace-static-x86_64: Process 7521 attached ./strace-static-x86_64: Process 7520 attached [pid 7500] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 7519 attached [pid 7500] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7519] set_robust_list(0x7f50501119e0, 24 [pid 7518] <... write resumed>) = 262144 [pid 7500] <... futex resumed>) = 1 [pid 7519] <... set_robust_list resumed>) = 0 [pid 7500] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7519] memfd_create("syzkaller", 0) = 3 [pid 7519] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7521] set_robust_list(0x5555562025e0, 24 [pid 7520] set_robust_list(0x7f50501119e0, 24 [pid 7518] munmap(0x7f5047cf1000, 262144 [pid 7503] <... futex resumed>) = 0 [ 102.916625][ T7516] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 102.939471][ T7516] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7519] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7521] <... set_robust_list resumed>) = 0 [pid 7520] <... set_robust_list resumed>) = 0 [pid 7519] <... write resumed>) = 262144 [pid 7518] <... munmap resumed>) = 0 [pid 7503] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7521] chdir("./69" [pid 7520] memfd_create("syzkaller", 0 [pid 7518] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] <... clone resumed>, child_tidptr=0x5555562025d0) = 7523 [pid 7521] <... chdir resumed>) = 0 [pid 7520] <... memfd_create resumed>) = 3 [pid 7519] munmap(0x7f5047cf1000, 262144 [pid 7518] <... openat resumed>) = 4 ./strace-static-x86_64: Process 7523 attached [pid 7521] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7520] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7519] <... munmap resumed>) = 0 [pid 7516] <... fsconfig resumed>) = 0 [pid 7503] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7523] set_robust_list(0x5555562025e0, 24 [pid 7521] <... prctl resumed>) = 0 [pid 7520] <... mmap resumed>) = 0x7f5047cf1000 [pid 7516] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7503] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7523] <... set_robust_list resumed>) = 0 [pid 7521] setpgid(0, 0 [pid 7518] ioctl(4, LOOP_SET_FD, 3 [pid 7516] <... futex resumed>) = 0 [pid 7503] <... futex resumed>) = 1 [pid 7500] <... futex resumed>) = 0 [pid 7523] chdir("./69" [pid 7516] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7503] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7500] exit_group(0 [pid 7523] <... chdir resumed>) = 0 [pid 7516] <... futex resumed>) = ? [pid 7503] <... futex resumed>) = ? [pid 7500] <... exit_group resumed>) = ? [pid 7523] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7521] <... setpgid resumed>) = 0 [pid 7520] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7519] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7516] +++ exited with 0 +++ [pid 7503] +++ exited with 0 +++ [pid 7500] +++ exited with 0 +++ [pid 7523] <... prctl resumed>) = 0 [pid 7519] <... openat resumed>) = 4 [pid 7523] setpgid(0, 0 [pid 7519] ioctl(4, LOOP_SET_FD, 3 [pid 7523] <... setpgid resumed>) = 0 [pid 7521] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7520] <... write resumed>) = 262144 [pid 7518] <... ioctl resumed>) = 0 [pid 7521] <... openat resumed>) = 3 [pid 7520] munmap(0x7f5047cf1000, 262144 [pid 7518] close(3 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7500, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 7521] write(3, "1000", 4 [pid 7520] <... munmap resumed>) = 0 [pid 7518] <... close resumed>) = 0 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 7523] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7521] <... write resumed>) = 4 [pid 7520] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7519] <... ioctl resumed>) = 0 [pid 7518] mkdir("./file0", 0777 [pid 4999] <... restart_syscall resumed>) = 0 [pid 7523] <... openat resumed>) = 3 [pid 7521] close(3 [pid 7520] <... openat resumed>) = 4 [pid 7519] close(3 [pid 7518] <... mkdir resumed>) = 0 [pid 7523] write(3, "1000", 4 [pid 7521] <... close resumed>) = 0 [pid 7520] ioctl(4, LOOP_SET_FD, 3 [pid 7518] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7523] <... write resumed>) = 4 [pid 7521] symlink("/dev/binderfs", "./binderfs" [pid 7519] <... close resumed>) = 0 [pid 7523] close(3 [pid 7519] mkdir("./file0", 0777 [pid 4999] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7523] <... close resumed>) = 0 [pid 7519] <... mkdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7523] symlink("/dev/binderfs", "./binderfs" [pid 7519] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 4999] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7523] <... symlink resumed>) = 0 [pid 7521] <... symlink resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 7523] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] fstat(3, [pid 7523] <... futex resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7523] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] getdents64(3, [pid 7523] <... mmap resumed>) = 0x7f50500f1000 [pid 4999] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7523] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 4999] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7523] <... mprotect resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 102.972609][ T7516] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 102.988366][ T7518] loop4: detected capacity change from 0 to 512 [ 102.990402][ T7519] loop3: detected capacity change from 0 to 512 [ 103.004907][ T7520] loop1: detected capacity change from 0 to 512 [ 103.012041][ T7519] EXT4-fs: Ignoring removed oldalloc option [pid 7523] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] lstat("./68/binderfs", [pid 7521] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7520] <... ioctl resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7523] <... clone resumed>, parent_tid=[7524], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7524 [pid 7521] <... futex resumed>) = 0 [pid 7520] close(3 [pid 4999] unlink("./68/binderfs" [pid 7523] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7521] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7520] <... close resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 7524 attached [pid 7523] <... futex resumed>) = 0 [pid 7521] <... mmap resumed>) = 0x7f50500f1000 [pid 7520] mkdir("./file0", 0777 [pid 4999] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7524] set_robust_list(0x7f50501119e0, 24 [pid 7523] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7521] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7524] <... set_robust_list resumed>) = 0 [pid 7521] <... mprotect resumed>) = 0 [pid 7520] <... mkdir resumed>) = 0 [pid 7524] memfd_create("syzkaller", 0 [pid 7521] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7520] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7524] <... memfd_create resumed>) = 3 [pid 7524] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7521] <... clone resumed>, parent_tid=[7527], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7527 [pid 7524] <... mmap resumed>) = 0x7f5047cf1000 [pid 7521] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7524] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7521] <... futex resumed>) = 0 [pid 7524] <... write resumed>) = 262144 [pid 7521] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7524] munmap(0x7f5047cf1000, 262144) = 0 [pid 7524] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 103.013260][ T7518] EXT4-fs: Ignoring removed oldalloc option [ 103.031158][ T7518] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 103.032657][ T7520] EXT4-fs: Ignoring removed oldalloc option [ 103.041776][ T7518] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 103.052420][ T7524] loop2: detected capacity change from 0 to 512 [pid 7524] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7527 attached [pid 7527] set_robust_list(0x7f50501119e0, 24 [pid 7524] <... ioctl resumed>) = 0 [pid 7524] close(3) = 0 [pid 7524] mkdir("./file0", 0777) = 0 [pid 7524] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7527] <... set_robust_list resumed>) = 0 [pid 7518] <... mount resumed>) = 0 [pid 7527] memfd_create("syzkaller", 0 [pid 7518] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7527] <... memfd_create resumed>) = 3 [pid 7518] <... openat resumed>) = 3 [pid 7527] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7518] chdir("./file0" [pid 7527] <... mmap resumed>) = 0x7f5047cf1000 [pid 7518] <... chdir resumed>) = 0 [pid 7527] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7518] ioctl(4, LOOP_CLR_FD [pid 7527] <... write resumed>) = 262144 [pid 7518] <... ioctl resumed>) = 0 [pid 7518] close(4) = 0 [pid 7518] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7518] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7527] munmap(0x7f5047cf1000, 262144) = 0 [pid 7527] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 7527] ioctl(4, LOOP_SET_FD, 3 [pid 7514] <... futex resumed>) = 0 [pid 7514] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7518] <... futex resumed>) = 0 [pid 7514] <... futex resumed>) = 1 [pid 7518] fspick(AT_FDCWD, ".", 0 [pid 7514] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7518] <... fspick resumed>) = 4 [pid 7518] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7514] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7518] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7514] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7518] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7514] <... futex resumed>) = 0 [pid 7518] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7514] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7527] <... ioctl resumed>) = 0 [pid 7518] <... fsconfig resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 7518] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7514] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7518] <... futex resumed>) = 0 [pid 7514] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7518] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 103.067897][ T7518] EXT4-fs (loop4): 1 truncate cleaned up [ 103.074697][ T7518] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.086396][ T7524] EXT4-fs: Ignoring removed oldalloc option [ 103.094954][ T7519] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 103.108990][ T7527] loop5: detected capacity change from 0 to 512 [pid 7514] <... futex resumed>) = 0 [pid 7514] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./68/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7527] close(3) = 0 [pid 7527] mkdir("./file0", 0777) = 0 [pid 7527] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 4999] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7518] <... fsconfig resumed>) = 0 [pid 7518] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7514] <... futex resumed>) = 0 [pid 7514] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7514] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] close(4) = 0 [pid 7518] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 4999] rmdir("./68/file0" [pid 7518] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7518] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7514] <... futex resumed>) = 0 [pid 7514] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7514] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 103.120262][ T7518] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 103.134459][ T7520] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 103.135743][ T7527] EXT4-fs: Ignoring removed oldalloc option [ 103.145486][ T7519] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 7518] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 7514] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7514] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7514] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 4999] rmdir("./68" [pid 7514] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7514] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] <... rmdir resumed>) = 0 [pid 7514] <... clone resumed>, parent_tid=[7534], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7534 [pid 7514] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] mkdir("./69", 0777 [pid 7514] <... futex resumed>) = 0 [pid 7514] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7534 attached [pid 7534] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7534] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 103.166525][ T7518] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 103.168820][ T7520] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 103.193173][ T7524] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 103.193180][ T7519] EXT4-fs (loop3): 1 truncate cleaned up [ 103.193256][ T7519] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 7534] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 7534] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7514] <... futex resumed>) = 0 [pid 7534] <... futex resumed>) = 1 [pid 7534] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7535 ./strace-static-x86_64: Process 7535 attached [pid 7519] <... mount resumed>) = 0 [pid 7519] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7519] chdir("./file0") = 0 [pid 7519] ioctl(4, LOOP_CLR_FD) = 0 [pid 7519] close(4 [pid 7535] set_robust_list(0x5555562025e0, 24 [pid 7520] <... mount resumed>) = 0 [pid 7519] <... close resumed>) = 0 [pid 7535] <... set_robust_list resumed>) = 0 [pid 7520] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7535] chdir("./69" [pid 7520] chdir("./file0") = 0 [pid 7520] ioctl(4, LOOP_CLR_FD [pid 7535] <... chdir resumed>) = 0 [pid 7520] <... ioctl resumed>) = 0 [pid 7535] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7520] close(4 [pid 7535] <... prctl resumed>) = 0 [pid 7535] setpgid(0, 0 [pid 7520] <... close resumed>) = 0 [pid 7535] <... setpgid resumed>) = 0 [pid 7520] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7515] <... futex resumed>) = 0 [pid 7535] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7515] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7520] fspick(AT_FDCWD, ".", 0 [pid 7535] <... openat resumed>) = 3 [pid 7515] <... futex resumed>) = 0 [pid 7520] <... fspick resumed>) = 4 [pid 7515] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7535] write(3, "1000", 4) = 4 [pid 7520] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7515] <... futex resumed>) = 0 [pid 7535] close(3 [pid 7515] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7535] <... close resumed>) = 0 [pid 7520] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7515] <... futex resumed>) = 0 [pid 7515] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7535] symlink("/dev/binderfs", "./binderfs" [pid 7520] <... fsconfig resumed>) = 0 [ 103.223954][ T7518] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 103.238004][ T7520] EXT4-fs (loop1): 1 truncate cleaned up [ 103.241207][ T7524] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 103.243767][ T7520] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7520] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7535] <... symlink resumed>) = 0 [pid 7524] <... mount resumed>) = 0 [pid 7520] <... futex resumed>) = 1 [pid 7519] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7515] <... futex resumed>) = 0 [pid 7535] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7520] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7519] <... futex resumed>) = 1 [pid 7515] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7535] <... futex resumed>) = 0 [pid 7520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7519] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7515] <... futex resumed>) = 0 [pid 7535] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7520] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7515] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7535] <... mmap resumed>) = 0x7f50500f1000 [pid 7524] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7535] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7524] <... openat resumed>) = 3 [pid 7535] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7524] chdir("./file0") = 0 [pid 7517] <... futex resumed>) = 0 [pid 7535] <... clone resumed>, parent_tid=[7539], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7539 [pid 7524] ioctl(4, LOOP_CLR_FD [pid 7535] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7524] <... ioctl resumed>) = 0 [pid 7535] <... futex resumed>) = 0 [pid 7535] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7524] close(4) = 0 [pid 7524] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7524] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7523] <... futex resumed>) = 0 [ 103.283171][ T7524] EXT4-fs (loop2): 1 truncate cleaned up [ 103.293781][ T7524] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.294515][ T7518] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 103.317837][ T7527] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7517] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7523] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7517] <... futex resumed>) = 1 [pid 7524] <... futex resumed>) = 0 [pid 7523] <... futex resumed>) = 1 [pid 7519] <... futex resumed>) = 0 [pid 7517] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7524] fspick(AT_FDCWD, ".", 0 [pid 7523] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7519] fspick(AT_FDCWD, ".", 0 [pid 7524] <... fspick resumed>) = 4 [pid 7519] <... fspick resumed>) = 4 [pid 7524] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7519] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7524] <... futex resumed>) = 1 [pid 7523] <... futex resumed>) = 0 [pid 7519] <... futex resumed>) = 1 [pid 7517] <... futex resumed>) = 0 [pid 7524] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7523] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7519] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7517] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7524] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7524] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 7524] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7524] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7518] <... fsconfig resumed>) = 0 [pid 7518] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7518] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7539 attached [pid 7539] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7539] memfd_create("syzkaller", 0) = 3 [pid 7539] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7539] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7524] <... futex resumed>) = 0 [pid 7523] <... futex resumed>) = 1 [pid 7519] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7517] <... futex resumed>) = 0 [pid 7514] exit_group(0 [pid 7524] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7523] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7519] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7517] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7534] <... futex resumed>) = ? [pid 7523] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7518] <... futex resumed>) = ? [pid 7519] <... fsconfig resumed>) = 0 [pid 7514] <... exit_group resumed>) = ? [pid 7534] +++ exited with 0 +++ [pid 7523] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7519] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7515] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7515] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7518] +++ exited with 0 +++ [pid 7514] +++ exited with 0 +++ [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7514, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 7523] <... futex resumed>) = 1 [pid 7519] <... futex resumed>) = 1 [pid 7517] <... futex resumed>) = 0 [pid 7523] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7519] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7517] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7519] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7517] <... futex resumed>) = 0 [pid 7519] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7517] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7524] <... futex resumed>) = 0 [pid 7515] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7524] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7515] <... mmap resumed>) = 0x7f5047d10000 [pid 7515] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7515] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7540], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7540 [pid 7515] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7515] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7539] <... write resumed>) = 262144 [pid 7539] munmap(0x7f5047cf1000, 262144) = 0 [pid 7539] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7539] ioctl(4, LOOP_SET_FD, 3 [pid 7520] <... fsconfig resumed>) = 0 [pid 5004] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7520] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7520] <... futex resumed>) = 0 [pid 5004] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 103.327162][ T7520] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 103.346443][ T7527] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 103.367986][ T7524] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 7520] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5004] <... openat resumed>) = 3 [pid 5004] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5004] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7524] <... fsconfig resumed>) = 0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7524] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7524] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7540 attached [pid 7540] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7540] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7540] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7515] <... futex resumed>) = 0 [pid 7515] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7520] <... futex resumed>) = 0 [pid 7515] <... futex resumed>) = 1 [pid 7520] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7515] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7540] <... futex resumed>) = 1 [pid 7540] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7517] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7523] <... futex resumed>) = 0 [pid 7517] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7523] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7517] <... futex resumed>) = 0 [pid 7519] <... fsconfig resumed>) = 0 [pid 7519] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7519] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7539] <... ioctl resumed>) = 0 [pid 7539] close(3) = 0 [pid 7539] mkdir("./file0", 0777) = 0 [ 103.380081][ T7519] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 103.392065][ T7539] loop0: detected capacity change from 0 to 512 [ 103.400034][ T7527] EXT4-fs (loop5): 1 truncate cleaned up [ 103.402903][ T7520] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 103.405780][ T7527] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7539] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7523] <... futex resumed>) = 1 [pid 7517] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5004] lstat("./69/binderfs", [pid 7523] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7524] <... futex resumed>) = 0 [pid 7517] <... mmap resumed>) = 0x7f5047d10000 [pid 5004] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7517] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5004] unlink("./69/binderfs" [pid 7524] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7517] <... mprotect resumed>) = 0 [pid 5004] <... unlink resumed>) = 0 [pid 7524] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7517] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5004] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7524] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7523] <... futex resumed>) = 0 [pid 7517] <... clone resumed>, parent_tid=[7541], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7541 [pid 7524] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7523] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7517] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7523] <... futex resumed>) = 0 [pid 7523] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7517] <... futex resumed>) = 0 [pid 7524] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7517] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7524] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0./strace-static-x86_64: Process 7541 attached [pid 7527] <... mount resumed>) = 0 [pid 7541] set_robust_list(0x7f5047d309e0, 24 [pid 7527] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7541] <... set_robust_list resumed>) = 0 [pid 7541] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7527] <... openat resumed>) = 3 [pid 7541] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7527] chdir("./file0" [pid 7541] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7527] <... chdir resumed>) = 0 [pid 7541] <... futex resumed>) = 1 [pid 7517] <... futex resumed>) = 0 [pid 7541] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7527] ioctl(4, LOOP_CLR_FD [pid 7517] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7527] <... ioctl resumed>) = 0 [pid 7519] <... futex resumed>) = 0 [pid 7517] <... futex resumed>) = 1 [pid 7527] close(4 [pid 7519] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7527] <... close resumed>) = 0 [pid 7517] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7515] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7515] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7540] <... futex resumed>) = 0 [pid 7515] <... futex resumed>) = 1 [pid 7540] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7515] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7540] <... openat resumed>) = 5 [pid 7540] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7515] <... futex resumed>) = 0 [ 103.428275][ T7520] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 103.435452][ T7539] EXT4-fs: Ignoring removed oldalloc option [ 103.447341][ T7524] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 103.460191][ T7519] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 103.467294][ T7524] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7540] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7527] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7521] <... futex resumed>) = 0 [pid 7527] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7521] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7527] fspick(AT_FDCWD, ".", 0 [pid 7521] <... futex resumed>) = 0 [pid 7527] <... fspick resumed>) = 4 [pid 7521] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7527] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7523] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7527] <... futex resumed>) = 1 [pid 7523] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7521] <... futex resumed>) = 0 [pid 7521] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7527] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7524] <... fsconfig resumed>) = 0 [pid 7523] <... futex resumed>) = 0 [pid 7521] <... futex resumed>) = 0 [pid 7520] <... fsconfig resumed>) = 0 [pid 7527] <... fsconfig resumed>) = 0 [pid 7523] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7527] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7523] <... mmap resumed>) = 0x7f5047d10000 [pid 7527] <... futex resumed>) = 0 [pid 7523] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7527] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7523] <... mprotect resumed>) = 0 [pid 7523] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7546], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7546 [pid 7523] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7523] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7520] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7520] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7524] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7524] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7515] exit_group(0) = ? [pid 7520] <... futex resumed>) = ? [pid 7520] +++ exited with 0 +++ [pid 7540] <... futex resumed>) = ? [pid 7521] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 7521] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7527] <... futex resumed>) = 0 [pid 7521] <... futex resumed>) = 1 [pid 7527] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 103.476063][ T7519] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 103.488924][ T7520] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 103.501100][ T7524] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 103.516880][ T7539] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7521] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7517] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 7546 attached [pid 7540] +++ exited with 0 +++ [pid 7517] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7515] +++ exited with 0 +++ [pid 7541] <... futex resumed>) = 0 [pid 7517] <... futex resumed>) = 1 [pid 7541] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7517] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7515, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 7541] <... openat resumed>) = 5 [pid 5000] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7541] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7541] <... futex resumed>) = 1 [pid 7517] <... futex resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7541] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5000] <... openat resumed>) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./70/binderfs") = 0 [pid 5000] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7546] set_robust_list(0x7f5047d309e0, 24 [pid 7523] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5004] <... umount2 resumed>) = 0 [pid 7519] <... fsconfig resumed>) = 0 [pid 7519] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7519] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7517] exit_group(0 [pid 7541] <... futex resumed>) = ? [pid 7517] <... exit_group resumed>) = ? [pid 7541] +++ exited with 0 +++ [pid 7519] <... futex resumed>) = ? [pid 7546] <... set_robust_list resumed>) = 0 [pid 5004] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7546] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7546] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 5004] lstat("./69/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7546] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7527] <... fsconfig resumed>) = 0 [pid 7527] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7527] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7521] <... futex resumed>) = 0 [pid 7521] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7546] <... futex resumed>) = 0 [pid 7521] <... futex resumed>) = 1 [pid 7546] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5004] openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7523] exit_group(0 [pid 7521] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7546] <... futex resumed>) = ? [pid 7524] <... futex resumed>) = ? [pid 7523] <... exit_group resumed>) = ? [pid 5004] <... openat resumed>) = 4 [pid 7524] +++ exited with 0 +++ [pid 7527] <... futex resumed>) = 0 [pid 7527] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 5004] fstat(4, [pid 7527] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7527] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7519] +++ exited with 0 +++ [pid 7517] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7517, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 7546] +++ exited with 0 +++ [pid 7523] +++ exited with 0 +++ [pid 7521] <... futex resumed>) = 0 [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7523, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 7521] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] getdents64(4, [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7521] <... futex resumed>) = 1 [pid 5002] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7521] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5002] <... openat resumed>) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5004] getdents64(4, [pid 5002] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 103.529602][ T7527] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 103.544778][ T7539] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 103.549508][ T7519] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 103.576202][ T7539] EXT4-fs (loop0): 1 truncate cleaned up [pid 5004] close(4 [pid 5002] lstat("./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7527] <... futex resumed>) = 0 [pid 5002] unlink("./68/binderfs" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7527] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5002] <... unlink resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5004] <... close resumed>) = 0 [pid 5002] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... openat resumed>) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./69/binderfs") = 0 [pid 5001] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7539] <... mount resumed>) = 0 [pid 5004] rmdir("./69/file0") = 0 [pid 5004] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5004] close(3) = 0 [pid 5004] rmdir("./69") = 0 [pid 5004] mkdir("./70", 0777) = 0 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 7539] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5004] ioctl(3, LOOP_CLR_FD [pid 5000] <... umount2 resumed>) = 0 [pid 5004] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5004] close(3) = 0 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7548 [pid 7539] <... openat resumed>) = 3 [pid 7539] chdir("./file0") = 0 [pid 7539] ioctl(4, LOOP_CLR_FD) = 0 [pid 7539] close(4) = 0 [pid 7539] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7535] <... futex resumed>) = 0 [pid 7539] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7535] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7535] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7539] <... futex resumed>) = 0 [pid 7539] fspick(AT_FDCWD, ".", 0) = 4 [pid 7539] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7539] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5000] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./70/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7535] <... futex resumed>) = 0 [pid 7521] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5000] close(4 [pid 7535] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7521] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... close resumed>) = 0 [pid 5000] rmdir("./70/file0") = 0 [pid 5000] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./70" [pid 7539] <... futex resumed>) = 0 [pid 7535] <... futex resumed>) = 1 [pid 7521] <... futex resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 7539] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7535] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7521] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5000] mkdir("./71", 0777 [pid 7539] <... fsconfig resumed>) = 0 [pid 7521] <... mmap resumed>) = 0x7f5047d10000 [pid 5000] <... mkdir resumed>) = 0 [pid 7539] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7521] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7539] <... futex resumed>) = 1 [pid 7535] <... futex resumed>) = 0 [pid 7521] <... mprotect resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 7539] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7535] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7521] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5000] ioctl(3, LOOP_CLR_FD [pid 7539] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7535] <... futex resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7539] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7535] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7521] <... clone resumed>, parent_tid=[7550], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7550 [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7551 ./strace-static-x86_64: Process 7551 attached [pid 7551] set_robust_list(0x5555562025e0, 24) = 0 [pid 7551] chdir("./71") = 0 [pid 7551] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7521] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7521] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7551] setpgid(0, 0) = 0 [ 103.593246][ T7527] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 103.600973][ T7539] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.607577][ T7527] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7551] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7551] write(3, "1000", 4) = 4 [pid 7551] close(3) = 0 [pid 7551] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 7550 attached ./strace-static-x86_64: Process 7548 attached [pid 7551] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7550] set_robust_list(0x7f5047d309e0, 24 [pid 7548] set_robust_list(0x5555562025e0, 24 [pid 7551] <... futex resumed>) = 0 [pid 7550] <... set_robust_list resumed>) = 0 [pid 7548] <... set_robust_list resumed>) = 0 [pid 7551] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7550] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7548] chdir("./70" [pid 7551] <... mmap resumed>) = 0x7f50500f1000 [pid 7550] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7548] <... chdir resumed>) = 0 [pid 7551] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7550] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7548] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7551] <... mprotect resumed>) = 0 [pid 7550] <... futex resumed>) = 1 [pid 7548] <... prctl resumed>) = 0 [pid 7551] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7550] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7548] setpgid(0, 0 [pid 7521] <... futex resumed>) = 0 [pid 7548] <... setpgid resumed>) = 0 [pid 7551] <... clone resumed>, parent_tid=[7552], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7552 [pid 7548] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7551] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7548] <... openat resumed>) = 3 [pid 7551] <... futex resumed>) = 0 [pid 7548] write(3, "1000", 4 [pid 7551] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7548] <... write resumed>) = 4 [pid 7548] close(3) = 0 [pid 7548] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7548] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7548] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7548] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7548] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7553], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7553 [pid 7548] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7548] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7553 attached [pid 7553] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7553] memfd_create("syzkaller", 0 [pid 5001] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 7552 attached [pid 7539] <... fsconfig resumed>) = 0 [pid 7527] <... fsconfig resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5001] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./69/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, [pid 7552] set_robust_list(0x7f50501119e0, 24 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7552] <... set_robust_list resumed>) = 0 [pid 5001] getdents64(4, [pid 7552] memfd_create("syzkaller", 0 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7552] <... memfd_create resumed>) = 3 [pid 5001] getdents64(4, [pid 7552] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7552] <... mmap resumed>) = 0x7f5047cf1000 [pid 5001] close(4) = 0 [pid 5001] rmdir("./69/file0" [pid 5002] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... rmdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5002] lstat("./68/file0", [pid 5001] close(3 [pid 7552] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5001] <... close resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] rmdir("./69" [pid 5002] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... rmdir resumed>) = 0 [pid 7535] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7527] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] mkdir("./70", 0777 [pid 7539] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7535] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7527] <... futex resumed>) = 0 [pid 7521] exit_group(0 [pid 5002] openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... mkdir resumed>) = 0 [pid 7552] <... write resumed>) = 262144 [pid 7550] <... futex resumed>) = ? [pid 7539] <... futex resumed>) = 0 [pid 7535] <... futex resumed>) = 0 [pid 7521] <... exit_group resumed>) = ? [pid 5002] <... openat resumed>) = 4 [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7553] <... memfd_create resumed>) = 3 [pid 7552] munmap(0x7f5047cf1000, 262144 [pid 7550] +++ exited with 0 +++ [pid 7539] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7535] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5002] fstat(4, [pid 5001] <... openat resumed>) = 3 [pid 7553] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7552] <... munmap resumed>) = 0 [pid 7535] <... mmap resumed>) = 0x7f5047d10000 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 7553] <... mmap resumed>) = 0x7f5047cf1000 [pid 7552] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7535] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5002] getdents64(4, [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7553] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7552] <... openat resumed>) = 4 [pid 7535] <... mprotect resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5001] close(3 [pid 7553] <... write resumed>) = 262144 [pid 7552] ioctl(4, LOOP_SET_FD, 3 [ 103.671753][ T7527] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 103.693822][ T7539] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 7535] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5002] getdents64(4, [pid 5001] <... close resumed>) = 0 ./strace-static-x86_64: Process 7554 attached [pid 7527] +++ exited with 0 +++ [pid 7521] +++ exited with 0 +++ [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7554] set_robust_list(0x7f5047d309e0, 24 [pid 7535] <... clone resumed>, parent_tid=[7554], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7554 [pid 7554] <... set_robust_list resumed>) = 0 [pid 7535] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... clone resumed>, child_tidptr=0x5555562025d0) = 7555 [pid 7554] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7535] <... futex resumed>) = 0 [pid 7554] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7535] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7554] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7535] <... futex resumed>) = 0 [pid 7554] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7535] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7539] <... futex resumed>) = 0 [pid 7535] <... futex resumed>) = 1 [pid 7539] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7535] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7555 attached [pid 7553] munmap(0x7f5047cf1000, 262144 [pid 7552] <... ioctl resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7555] set_robust_list(0x5555562025e0, 24 [pid 7553] <... munmap resumed>) = 0 [pid 7552] close(3 [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7521, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5002] close(4 [pid 7555] <... set_robust_list resumed>) = 0 [pid 7553] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7552] <... close resumed>) = 0 [pid 5005] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... close resumed>) = 0 [pid 7555] chdir("./70" [pid 7553] <... openat resumed>) = 4 [pid 7552] mkdir("./file0", 0777 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] rmdir("./68/file0" [pid 7555] <... chdir resumed>) = 0 [pid 7553] ioctl(4, LOOP_SET_FD, 3 [pid 7552] <... mkdir resumed>) = 0 [pid 5005] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... rmdir resumed>) = 0 [pid 7555] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7552] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5005] <... openat resumed>) = 3 [pid 5002] getdents64(3, [pid 7555] <... prctl resumed>) = 0 [pid 7553] <... ioctl resumed>) = 0 [pid 5005] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5005] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] lstat("./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5005] unlink("./69/binderfs") = 0 [pid 5005] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7555] setpgid(0, 0 [pid 7553] close(3 [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7555] <... setpgid resumed>) = 0 [pid 7553] <... close resumed>) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./68") = 0 [pid 5002] mkdir("./69", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 103.736364][ T7552] loop1: detected capacity change from 0 to 512 [ 103.740774][ T7539] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 103.752802][ T7553] loop4: detected capacity change from 0 to 512 [ 103.753834][ T7539] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 103.761839][ T7552] EXT4-fs: Ignoring removed oldalloc option [pid 5002] close(3 [pid 7555] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7553] mkdir("./file0", 0777 [pid 7539] <... fsconfig resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 7555] <... openat resumed>) = 3 [pid 7553] <... mkdir resumed>) = 0 [pid 7539] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7555] write(3, "1000", 4 [pid 7553] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7539] <... futex resumed>) = 1 [pid 7535] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7557 attached [pid 7555] <... write resumed>) = 4 [pid 7539] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7535] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7555] close(3 [pid 7535] <... futex resumed>) = 0 [pid 5002] <... clone resumed>, child_tidptr=0x5555562025d0) = 7557 [pid 7555] <... close resumed>) = 0 [pid 7539] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7535] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7555] symlink("/dev/binderfs", "./binderfs" [pid 7539] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7555] <... symlink resumed>) = 0 [pid 7539] <... futex resumed>) = 1 [pid 7535] <... futex resumed>) = 0 [pid 7555] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7539] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7535] exit_group(0 [pid 7555] <... futex resumed>) = 0 [pid 7554] <... futex resumed>) = ? [pid 7539] <... futex resumed>) = ? [pid 7535] <... exit_group resumed>) = ? [pid 7555] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7554] +++ exited with 0 +++ [pid 7539] +++ exited with 0 +++ [pid 7555] <... mmap resumed>) = 0x7f50500f1000 [pid 7555] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7555] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7535] +++ exited with 0 +++ [pid 7555] <... clone resumed>, parent_tid=[7559], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7559 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7535, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 7555] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 7555] <... futex resumed>) = 0 [pid 7555] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4999] <... restart_syscall resumed>) = 0 [pid 4999] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./69/binderfs") = 0 [ 103.784436][ T7539] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 103.798111][ T7553] EXT4-fs: Ignoring removed oldalloc option [pid 4999] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7559 attached [pid 7559] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7559] memfd_create("syzkaller", 0) = 3 [pid 7559] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7559] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7559] munmap(0x7f5047cf1000, 262144) = 0 [pid 7559] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7559] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7557] set_robust_list(0x5555562025e0, 24 [pid 5005] <... umount2 resumed>) = 0 [pid 7557] <... set_robust_list resumed>) = 0 [pid 5005] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7559] close(3) = 0 [pid 7559] mkdir("./file0", 0777) = 0 [pid 7559] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7557] chdir("./69" [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7557] <... chdir resumed>) = 0 [pid 7557] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7557] setpgid(0, 0) = 0 [pid 7557] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7557] write(3, "1000", 4) = 4 [pid 7557] close(3) = 0 [pid 7557] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7557] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7557] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7557] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7557] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7563], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7563 [pid 7557] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7557] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7563 attached [pid 7563] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7563] memfd_create("syzkaller", 0) = 3 [pid 7563] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7563] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7563] munmap(0x7f5047cf1000, 262144) = 0 [pid 7563] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 103.827493][ T7559] loop2: detected capacity change from 0 to 512 [ 103.835256][ T7553] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 103.844713][ T7552] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 103.846863][ T7559] EXT4-fs: Ignoring removed oldalloc option [ 103.854744][ T7553] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 7563] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5005] lstat("./69/file0", [pid 7563] close(3) = 0 [pid 7563] mkdir("./file0", 0777 [pid 4999] <... umount2 resumed>) = 0 [pid 5005] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7563] <... mkdir resumed>) = 0 [pid 7563] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5005] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./69/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./69/file0") = 0 [pid 4999] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./69") = 0 [pid 4999] mkdir("./70", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7564 ./strace-static-x86_64: Process 7564 attached [pid 7564] set_robust_list(0x5555562025e0, 24) = 0 [pid 7564] chdir("./70") = 0 [pid 7564] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7564] setpgid(0, 0) = 0 [pid 7564] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7564] write(3, "1000", 4) = 4 [pid 7564] close(3 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7564] <... close resumed>) = 0 [pid 7564] symlink("/dev/binderfs", "./binderfs" [pid 5005] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(4, [pid 7564] <... symlink resumed>) = 0 [pid 5005] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7553] <... mount resumed>) = 0 [pid 7553] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7553] chdir("./file0" [pid 7564] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] getdents64(4, [pid 7553] <... chdir resumed>) = 0 [pid 7564] <... futex resumed>) = 0 [pid 5005] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7553] ioctl(4, LOOP_CLR_FD [pid 7564] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5005] close(4 [pid 7553] <... ioctl resumed>) = 0 [pid 7564] <... mmap resumed>) = 0x7f50500f1000 [pid 7553] close(4 [pid 5005] <... close resumed>) = 0 [pid 7564] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7553] <... close resumed>) = 0 [pid 7553] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7548] <... futex resumed>) = 0 [pid 7548] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7548] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7553] <... futex resumed>) = 1 [pid 7553] fspick(AT_FDCWD, ".", 0) = 4 [pid 7553] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7548] <... futex resumed>) = 0 [pid 7548] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7548] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] rmdir("./69/file0" [pid 7553] <... futex resumed>) = 1 [pid 7564] <... mprotect resumed>) = 0 [pid 7553] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 7553] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7548] <... futex resumed>) = 0 [pid 7548] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7548] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... rmdir resumed>) = 0 [pid 7564] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7553] <... futex resumed>) = 1 [pid 5005] getdents64(3, [pid 7553] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5005] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7564] <... clone resumed>, parent_tid=[7567], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7567 ./strace-static-x86_64: Process 7567 attached [pid 7567] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7567] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5005] close(3) = 0 [pid 5005] rmdir("./69") = 0 [pid 5005] mkdir("./70", 0777) = 0 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5005] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 103.872386][ T7563] loop3: detected capacity change from 0 to 512 [ 103.883742][ T7563] EXT4-fs: Ignoring removed oldalloc option [ 103.888105][ T7552] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 103.909025][ T7553] EXT4-fs (loop4): 1 truncate cleaned up [ 103.914816][ T7553] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 5005] close(3) = 0 [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7564] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7567] <... futex resumed>) = 0 [pid 7564] <... futex resumed>) = 1 [pid 7567] memfd_create("syzkaller", 0) = 3 [pid 7567] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7567] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7564] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7567] <... write resumed>) = 262144 [pid 7567] munmap(0x7f5047cf1000, 262144) = 0 [pid 7567] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7567] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7567] close(3) = 0 [pid 7567] mkdir("./file0", 0777) = 0 [pid 7567] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"..../strace-static-x86_64: Process 7570 attached [pid 5005] <... clone resumed>, child_tidptr=0x5555562025d0) = 7570 [pid 7570] set_robust_list(0x5555562025e0, 24) = 0 [pid 7570] chdir("./70" [pid 7553] <... fsconfig resumed>) = 0 [pid 7570] <... chdir resumed>) = 0 [pid 7553] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7570] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7553] <... futex resumed>) = 1 [pid 7548] <... futex resumed>) = 0 [pid 7570] <... prctl resumed>) = 0 [pid 7548] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7548] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7570] setpgid(0, 0 [pid 7553] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7570] <... setpgid resumed>) = 0 [ 103.939327][ T7563] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 103.943090][ T7567] loop0: detected capacity change from 0 to 512 [ 103.956024][ T7553] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 103.956543][ T7567] EXT4-fs: Ignoring removed oldalloc option [ 103.978511][ T7552] EXT4-fs (loop1): 1 truncate cleaned up [pid 7570] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7553] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7570] <... openat resumed>) = 3 [pid 7553] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7570] write(3, "1000", 4) = 4 [pid 7570] close(3) = 0 [pid 7553] <... futex resumed>) = 1 [pid 7548] <... futex resumed>) = 0 [pid 7570] symlink("/dev/binderfs", "./binderfs" [pid 7553] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7548] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7570] <... symlink resumed>) = 0 [pid 7548] <... futex resumed>) = 0 [pid 7570] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7553] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7548] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7570] <... futex resumed>) = 0 [pid 7553] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7570] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7570] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7570] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7572], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7572 [pid 7570] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7570] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7572 attached [pid 7572] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7572] memfd_create("syzkaller", 0) = 3 [pid 7572] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7572] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7572] munmap(0x7f5047cf1000, 262144) = 0 [pid 7572] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 103.982119][ T7563] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 103.994293][ T7552] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.012862][ T7563] EXT4-fs (loop3): 1 truncate cleaned up [ 104.023137][ T7553] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [pid 7572] ioctl(4, LOOP_SET_FD, 3 [pid 7552] <... mount resumed>) = 0 [pid 7552] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7552] chdir("./file0") = 0 [pid 7552] ioctl(4, LOOP_CLR_FD) = 0 [pid 7552] close(4) = 0 [pid 7552] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7551] <... futex resumed>) = 0 [pid 7551] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7551] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7552] <... futex resumed>) = 1 [pid 7552] fspick(AT_FDCWD, ".", 0) = 4 [pid 7552] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7551] <... futex resumed>) = 0 [pid 7551] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7551] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7552] <... futex resumed>) = 1 [pid 7552] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 7552] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7551] <... futex resumed>) = 0 [pid 7551] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7551] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7552] <... futex resumed>) = 1 [pid 7552] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7572] <... ioctl resumed>) = 0 [pid 7572] close(3) = 0 [pid 7572] mkdir("./file0", 0777) = 0 [pid 7572] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7563] <... mount resumed>) = 0 [pid 7563] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7563] chdir("./file0") = 0 [pid 7563] ioctl(4, LOOP_CLR_FD) = 0 [pid 7563] close(4) = 0 [pid 7563] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7557] <... futex resumed>) = 0 [pid 7557] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7557] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7548] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7548] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7548] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7548] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7548] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7548] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7574], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7574 [pid 7548] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7548] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7563] <... futex resumed>) = 1 [pid 7563] fspick(AT_FDCWD, ".", 0) = 4 [pid 7563] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7557] <... futex resumed>) = 0 [pid 7557] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7557] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7563] <... futex resumed>) = 1 [pid 7563] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 7563] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7557] <... futex resumed>) = 0 [pid 7557] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7557] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7563] <... futex resumed>) = 1 [ 104.033642][ T7559] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 104.036151][ T7572] loop5: detected capacity change from 0 to 512 [ 104.044539][ T7563] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.058938][ T7572] EXT4-fs: Ignoring removed oldalloc option [ 104.078641][ T7553] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7563] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0./strace-static-x86_64: Process 7574 attached [pid 7574] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7574] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EROFS (Read-only file system) [pid 7574] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7548] <... futex resumed>) = 0 [pid 7574] <... futex resumed>) = 1 [pid 7574] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7551] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7551] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7551] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7551] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7551] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7575], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7575 [pid 7551] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7551] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7575 attached [pid 7575] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7575] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7575] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7551] <... futex resumed>) = 0 [pid 7551] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7551] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7575] <... futex resumed>) = 1 [pid 7575] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7557] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7557] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7557] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7557] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [ 104.089687][ T7567] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 104.098758][ T7559] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 104.121383][ T7567] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 7557] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7579], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7579 [pid 7557] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7557] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7579 attached [pid 7579] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7579] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7579] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7557] <... futex resumed>) = 0 [pid 7557] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7557] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7579] <... futex resumed>) = 1 [pid 7579] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7553] <... fsconfig resumed>) = 0 [pid 7553] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7553] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7548] exit_group(0 [pid 7574] <... futex resumed>) = ? [pid 7548] <... exit_group resumed>) = ? [pid 7574] +++ exited with 0 +++ [pid 7553] <... futex resumed>) = ? [pid 7553] +++ exited with 0 +++ [pid 7548] +++ exited with 0 +++ [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7548, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5004] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5004] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5004] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(3, [pid 7551] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5004] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7551] futex(0x7f50501ea7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7551] <... futex resumed>) = 0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7551] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5004] lstat("./70/binderfs", [pid 7551] <... mmap resumed>) = 0x7f5047cef000 [pid 5004] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7551] mprotect(0x7f5047cf0000, 131072, PROT_READ|PROT_WRITE [pid 5004] unlink("./70/binderfs" [pid 7551] <... mprotect resumed>) = 0 [pid 5004] <... unlink resumed>) = 0 [pid 7551] clone(child_stack=0x7f5047d0f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5004] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7551] <... clone resumed>, parent_tid=[7580], tls=0x7f5047d0f700, child_tidptr=0x7f5047d0f9d0) = 7580 [pid 7551] futex(0x7f50501ea7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 104.137080][ T7553] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 104.148654][ T7559] EXT4-fs (loop2): 1 truncate cleaned up [ 104.155934][ T7567] EXT4-fs (loop0): 1 truncate cleaned up [ 104.163257][ T7552] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 104.174659][ T7563] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 7551] futex(0x7f50501ea7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7559] <... mount resumed>) = 0 [pid 7557] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7557] futex(0x7f50501ea7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7557] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047cef000 [pid 7557] mprotect(0x7f5047cf0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7557] clone(child_stack=0x7f5047d0f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7581], tls=0x7f5047d0f700, child_tidptr=0x7f5047d0f9d0) = 7581 [pid 7557] futex(0x7f50501ea7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7557] futex(0x7f50501ea7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7559] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7559] chdir("./file0") = 0 [pid 7559] ioctl(4, LOOP_CLR_FD) = 0 [pid 7559] close(4) = 0 [pid 7559] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7555] <... futex resumed>) = 0 [pid 7555] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7555] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7559] <... futex resumed>) = 1 [pid 7559] fspick(AT_FDCWD, ".", 0) = 4 [pid 7559] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7555] <... futex resumed>) = 0 [pid 7555] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7555] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7559] <... futex resumed>) = 1 [pid 7559] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 7559] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7555] <... futex resumed>) = 0 [pid 7555] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7555] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7559] <... futex resumed>) = 1 [pid 7559] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7551] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 7580 attached [pid 7580] set_robust_list(0x7f5047d0f9e0, 24) = 0 [pid 7580] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EROFS (Read-only file system) [pid 7580] futex(0x7f50501ea7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7580] futex(0x7f50501ea7c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7581 attached [pid 7581] set_robust_list(0x7f5047d0f9e0, 24) = 0 [ 104.175370][ T7559] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.186268][ T7572] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 104.212994][ T7567] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7581] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7563] <... fsconfig resumed>) = 0 [pid 7557] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7552] <... fsconfig resumed>) = 0 [pid 7563] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7552] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7563] <... futex resumed>) = 0 [pid 7552] <... futex resumed>) = 0 [pid 7563] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7552] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7581] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 7581] futex(0x7f50501ea7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7555] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7555] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7581] <... futex resumed>) = 0 [ 104.232492][ T7572] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 104.238700][ T7575] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 104.257274][ T7579] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 104.257721][ T7572] EXT4-fs (loop5): 1 truncate cleaned up [ 104.272592][ T7572] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7581] futex(0x7f50501ea7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7567] <... mount resumed>) = 0 [pid 7555] <... futex resumed>) = 0 [pid 7572] <... mount resumed>) = 0 [pid 7572] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7572] chdir("./file0") = 0 [pid 7572] ioctl(4, LOOP_CLR_FD) = 0 [pid 7572] close(4) = 0 [pid 7567] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7555] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7567] <... openat resumed>) = 3 [pid 7555] <... mmap resumed>) = 0x7f5047d10000 [pid 7567] chdir("./file0" [pid 7555] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7567] <... chdir resumed>) = 0 [pid 7555] <... mprotect resumed>) = 0 [pid 7567] ioctl(4, LOOP_CLR_FD [pid 7555] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7567] <... ioctl resumed>) = 0 [pid 7567] close(4 [pid 7555] <... clone resumed>, parent_tid=[7582], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7582 [pid 7567] <... close resumed>) = 0 [pid 7555] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... umount2 resumed>) = 0 [pid 7567] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7555] <... futex resumed>) = 0 [pid 5004] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7567] <... futex resumed>) = 1 [pid 7564] <... futex resumed>) = 0 [pid 7555] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7567] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7564] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] lstat("./70/file0", [pid 7559] <... fsconfig resumed>) = 0 [pid 7572] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7567] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7564] <... futex resumed>) = 0 [pid 7559] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7567] fspick(AT_FDCWD, ".", 0) = 4 [pid 7572] <... futex resumed>) = 1 [pid 7570] <... futex resumed>) = 0 [pid 7567] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7564] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7559] <... futex resumed>) = 0 [pid 5004] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7572] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7567] <... futex resumed>) = 0 [pid 7567] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7582 attached [pid 7582] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7582] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7582] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7555] <... futex resumed>) = 0 [pid 7555] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7582] <... futex resumed>) = 1 [pid 7570] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7564] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7555] <... futex resumed>) = 0 [pid 7559] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7582] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7572] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7570] <... futex resumed>) = 0 [pid 7564] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7555] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 104.275582][ T7559] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 104.286309][ T7579] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 104.303458][ T7575] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 104.326096][ T7559] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [pid 7572] fspick(AT_FDCWD, ".", 0 [pid 7570] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7567] <... futex resumed>) = 0 [pid 7564] <... futex resumed>) = 1 [pid 5004] openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7572] <... fspick resumed>) = 4 [pid 7567] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7564] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... openat resumed>) = 4 [pid 7572] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7567] <... fsconfig resumed>) = 0 [pid 5004] fstat(4, [pid 7572] <... futex resumed>) = 1 [pid 7570] <... futex resumed>) = 0 [pid 7567] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7572] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7570] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7567] <... futex resumed>) = 1 [pid 7564] <... futex resumed>) = 0 [pid 5004] getdents64(4, [pid 7572] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7570] <... futex resumed>) = 0 [pid 7567] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7564] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7572] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7570] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7567] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7564] <... futex resumed>) = 0 [pid 5004] getdents64(4, [pid 7572] <... fsconfig resumed>) = 0 [pid 7567] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7564] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7572] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] close(4 [pid 7572] <... futex resumed>) = 1 [pid 7570] <... futex resumed>) = 0 [pid 5004] <... close resumed>) = 0 [pid 7572] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7570] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] rmdir("./70/file0" [pid 7579] <... fsconfig resumed>) = 0 [pid 7579] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7579] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7572] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7570] <... futex resumed>) = 0 [pid 7567] <... fsconfig resumed>) = 0 [pid 7557] exit_group(0 [pid 7555] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5004] <... rmdir resumed>) = 0 [pid 7581] <... futex resumed>) = ? [pid 7579] <... futex resumed>) = ? [pid 7575] <... fsconfig resumed>) = 0 [pid 7572] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 104.342878][ T7579] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 104.355810][ T7567] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 104.363779][ T7559] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 104.368051][ T7575] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 7570] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7563] <... futex resumed>) = ? [pid 7557] <... exit_group resumed>) = ? [pid 7555] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] getdents64(3, [pid 7581] +++ exited with 0 +++ [pid 7579] +++ exited with 0 +++ [pid 7575] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7572] <... fsconfig resumed>) = 0 [pid 7567] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7564] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7563] +++ exited with 0 +++ [pid 7559] <... fsconfig resumed>) = 0 [pid 7582] <... futex resumed>) = 0 [pid 7575] <... futex resumed>) = 0 [pid 7572] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7567] <... futex resumed>) = 0 [pid 7564] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7557] +++ exited with 0 +++ [pid 7555] <... futex resumed>) = 1 [pid 5004] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7582] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7575] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7572] <... futex resumed>) = 1 [pid 7570] <... futex resumed>) = 0 [pid 7567] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7564] <... futex resumed>) = 0 [pid 7559] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7555] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7551] exit_group(0 [pid 5004] close(3 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7557, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 7582] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7580] <... futex resumed>) = ? [pid 7575] <... futex resumed>) = ? [pid 7572] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7570] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7567] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7564] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7559] <... futex resumed>) = 0 [pid 7552] <... futex resumed>) = ? [pid 7551] <... exit_group resumed>) = ? [pid 5004] <... close resumed>) = 0 [pid 7582] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7580] +++ exited with 0 +++ [pid 7575] +++ exited with 0 +++ [pid 7572] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7570] <... futex resumed>) = 0 [pid 7559] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7552] +++ exited with 0 +++ [pid 5004] rmdir("./70" [pid 7582] <... futex resumed>) = 1 [pid 7570] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7555] <... futex resumed>) = 0 [pid 5004] <... rmdir resumed>) = 0 [pid 7551] +++ exited with 0 +++ [pid 7582] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7572] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7555] exit_group(0 [pid 7567] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] mkdir("./71", 0777 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7551, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 7582] <... futex resumed>) = ? [pid 7572] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7567] <... futex resumed>) = 1 [pid 7564] <... futex resumed>) = 0 [pid 7559] <... futex resumed>) = ? [pid 7555] <... exit_group resumed>) = ? [pid 5004] <... mkdir resumed>) = 0 [pid 7582] +++ exited with 0 +++ [pid 7572] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7567] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7564] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7559] +++ exited with 0 +++ [pid 7555] +++ exited with 0 +++ [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5002] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7572] <... futex resumed>) = 1 [pid 7570] <... futex resumed>) = 0 [pid 7567] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7564] <... futex resumed>) = 0 [pid 5004] <... openat resumed>) = 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW [ 104.389163][ T7572] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 104.394700][ T7559] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 104.425226][ T7567] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 7572] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7570] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7567] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7564] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] ioctl(3, LOOP_CLR_FD [pid 5002] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7555, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7572] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7570] <... futex resumed>) = 0 [pid 5004] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5000] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5004] close(3 [pid 5001] <... restart_syscall resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5004] <... close resumed>) = 0 [pid 5000] fstat(3, [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] getdents64(3, [pid 5004] <... clone resumed>, child_tidptr=0x5555562025d0) = 7586 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5001] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... openat resumed>) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] fstat(3, [pid 5000] lstat("./71/binderfs", [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] getdents64(3, [pid 5000] unlink("./71/binderfs" [pid 5001] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5000] <... unlink resumed>) = 0 [pid 5001] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./70/binderfs") = 0 [pid 5001] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7586 attached [pid 7586] set_robust_list(0x5555562025e0, 24) = 0 [pid 7586] chdir("./71") = 0 [pid 7586] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7586] setpgid(0, 0) = 0 [pid 7586] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7572] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7570] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... openat resumed>) = 3 [pid 7586] <... openat resumed>) = 3 [pid 7586] write(3, "1000", 4) = 4 [pid 7586] close(3) = 0 [pid 7586] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7586] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7586] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7586] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7586] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7587], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7587 [pid 7586] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7586] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7587 attached [pid 7587] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7587] memfd_create("syzkaller", 0) = 3 [pid 7587] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7587] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7587] munmap(0x7f5047cf1000, 262144) = 0 [pid 7587] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7587] ioctl(4, LOOP_SET_FD, 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7587] <... ioctl resumed>) = 0 [pid 7587] close(3) = 0 [pid 7587] mkdir("./file0", 0777) = 0 [pid 7587] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5002] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 7564] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7564] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5002] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5000] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./71/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] lstat("./70/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... openat resumed>) = 4 [pid 5001] openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] fstat(4, [pid 5001] <... openat resumed>) = 4 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] fstat(4, [pid 5000] getdents64(4, [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, [pid 5000] getdents64(4, [pid 5001] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5000] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] getdents64(4, [pid 5000] close(4 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5000] <... close resumed>) = 0 [pid 5001] close(4 [pid 5000] rmdir("./71/file0" [pid 5001] <... close resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5001] rmdir("./70/file0" [pid 5000] getdents64(3, [pid 7570] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7564] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] getdents64(3, [pid 5000] close(3 [pid 7570] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] <... close resumed>) = 0 [pid 7564] <... mmap resumed>) = 0x7f5047d10000 [pid 7570] <... futex resumed>) = 0 [pid 5002] lstat("./69/binderfs", [pid 7570] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7564] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] close(3 [pid 5000] rmdir("./71" [pid 7570] <... mmap resumed>) = 0x7f5047d10000 [pid 5002] unlink("./69/binderfs" [pid 7570] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7564] <... mprotect resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5001] rmdir("./70" [ 104.437150][ T7572] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 104.446623][ T7587] loop4: detected capacity change from 0 to 512 [ 104.453593][ T7572] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 104.460484][ T7587] EXT4-fs: Ignoring removed oldalloc option [ 104.462920][ T7567] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 5000] mkdir("./72", 0777 [pid 7570] <... mprotect resumed>) = 0 [pid 7564] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5002] <... unlink resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 5001] mkdir("./71", 0777 [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5001] <... mkdir resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5001] <... openat resumed>) = 3 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5000] close(3 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... close resumed>) = 0 [pid 5001] close(3 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... close resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... clone resumed>, child_tidptr=0x5555562025d0) = 7590 [pid 5001] <... clone resumed>, child_tidptr=0x5555562025d0) = 7591 ./strace-static-x86_64: Process 7590 attached [pid 7590] set_robust_list(0x5555562025e0, 24) = 0 [pid 7590] chdir("./72") = 0 [pid 7590] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7590] setpgid(0, 0) = 0 [pid 7590] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7590] write(3, "1000", 4) = 4 [pid 7590] close(3) = 0 [pid 7590] symlink("/dev/binderfs", "./binderfs" [pid 7570] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5002] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7570] <... clone resumed>, parent_tid=[7594], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7594 [pid 7564] <... clone resumed>, parent_tid=[7593], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7593 [pid 7570] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7564] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7590] <... symlink resumed>) = 0 [pid 7590] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7570] <... futex resumed>) = 0 [pid 7564] <... futex resumed>) = 0 [pid 7590] <... futex resumed>) = 0 [pid 7590] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7564] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7590] <... mmap resumed>) = 0x7f50500f1000 [pid 7590] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7570] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7590] <... mprotect resumed>) = 0 [pid 7590] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7596], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7596 ./strace-static-x86_64: Process 7593 attached [pid 7590] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7593] set_robust_list(0x7f5047d309e0, 24 [pid 7590] <... futex resumed>) = 0 [pid 7593] <... set_robust_list resumed>) = 0 [pid 7590] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7593] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 ENOSPC (No space left on device) [pid 7593] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7593] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7596 attached [pid 7596] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7596] memfd_create("syzkaller", 0) = 3 [pid 7596] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7596] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7564] <... futex resumed>) = 0 [pid 7567] <... fsconfig resumed>) = 0 [pid 7596] <... write resumed>) = 262144 [pid 7567] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7596] munmap(0x7f5047cf1000, 262144 [pid 7567] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7596] <... munmap resumed>) = 0 [pid 7596] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7596] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7594 attached ./strace-static-x86_64: Process 7591 attached [pid 7572] <... fsconfig resumed>) = 0 [ 104.497712][ T7572] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 104.515470][ T7567] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 104.515593][ T7587] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 104.540676][ T7596] loop1: detected capacity change from 0 to 512 [pid 7564] exit_group(0 [pid 7594] set_robust_list(0x7f5047d309e0, 24 [pid 7591] set_robust_list(0x5555562025e0, 24 [pid 7572] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7594] <... set_robust_list resumed>) = 0 [pid 7593] <... futex resumed>) = ? [pid 7591] <... set_robust_list resumed>) = 0 [pid 7564] <... exit_group resumed>) = ? [pid 7572] <... futex resumed>) = 0 [pid 7594] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7572] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7596] <... ioctl resumed>) = 0 [pid 7591] chdir("./71" [pid 7596] close(3) = 0 [pid 7596] mkdir("./file0", 0777 [pid 7593] +++ exited with 0 +++ [pid 7594] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7596] <... mkdir resumed>) = 0 [pid 7596] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5002] <... umount2 resumed>) = 0 [pid 7594] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7591] <... chdir resumed>) = 0 [pid 5002] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7594] <... futex resumed>) = 1 [pid 7591] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7570] <... futex resumed>) = 0 [pid 7567] <... futex resumed>) = ? [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7594] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7591] <... prctl resumed>) = 0 [pid 7570] exit_group(0 [pid 5002] lstat("./69/file0", [pid 7594] <... futex resumed>) = ? [pid 7591] setpgid(0, 0 [pid 7572] <... futex resumed>) = ? [pid 7570] <... exit_group resumed>) = ? [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7572] +++ exited with 0 +++ [pid 7591] <... setpgid resumed>) = 0 [pid 7594] +++ exited with 0 +++ [pid 7570] +++ exited with 0 +++ [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7570, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5005] restart_syscall(<... resuming interrupted clone ...> [pid 7591] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7591] <... openat resumed>) = 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7591] write(3, "1000", 4) = 4 [pid 5005] <... restart_syscall resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7591] close(3) = 0 [pid 5002] <... openat resumed>) = 4 [pid 7591] symlink("/dev/binderfs", "./binderfs" [pid 5002] fstat(4, [pid 7591] <... symlink resumed>) = 0 [pid 7591] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7591] <... futex resumed>) = 0 [pid 5002] getdents64(4, [pid 5005] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5005] fstat(3, [pid 7591] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5005] getdents64(3, [pid 7591] <... mmap resumed>) = 0x7f50500f1000 [pid 5002] getdents64(4, [pid 7591] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 5005] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7591] <... mprotect resumed>) = 0 [pid 5005] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7591] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] close(4 [pid 5005] lstat("./70/binderfs", [pid 5002] <... close resumed>) = 0 [pid 7591] <... clone resumed>, parent_tid=[7597], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7597 [pid 5005] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] rmdir("./69/file0" [pid 7591] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] unlink("./70/binderfs" [pid 7591] <... futex resumed>) = 0 [pid 5005] <... unlink resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 7591] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5005] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] getdents64(3, ./strace-static-x86_64: Process 7597 attached [pid 7567] +++ exited with 0 +++ [pid 7564] +++ exited with 0 +++ [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./69") = 0 [pid 5002] mkdir("./70", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7597] set_robust_list(0x7f50501119e0, 24 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7564, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 4999] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./70/binderfs" [pid 5002] <... openat resumed>) = 3 [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] ioctl(3, LOOP_CLR_FD [pid 7597] <... set_robust_list resumed>) = 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7597] memfd_create("syzkaller", 0) = 3 [pid 7597] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 5005] <... umount2 resumed>) = 0 [pid 5005] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] close(3) = 0 [pid 7597] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7597] munmap(0x7f5047cf1000, 262144) = 0 [pid 7597] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7597] <... openat resumed>) = 4 [ 104.553640][ T7596] EXT4-fs: Ignoring removed oldalloc option [ 104.574052][ T7587] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 7597] ioctl(4, LOOP_SET_FD, 3 [pid 5005] lstat("./70/file0", [pid 7597] <... ioctl resumed>) = 0 [pid 7597] close(3) = 0 [pid 7597] mkdir("./file0", 0777) = 0 [pid 7597] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5005] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... clone resumed>, child_tidptr=0x5555562025d0) = 7598 ./strace-static-x86_64: Process 7598 attached [pid 7598] set_robust_list(0x5555562025e0, 24 [pid 5005] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5005] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5005] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5005] close(4) = 0 [pid 5005] rmdir("./70/file0") = 0 [pid 5005] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5005] close(3) = 0 [pid 5005] rmdir("./70") = 0 [pid 7598] <... set_robust_list resumed>) = 0 [pid 7598] chdir("./70") = 0 [pid 7598] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7598] setpgid(0, 0) = 0 [pid 7598] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7598] write(3, "1000", 4) = 4 [pid 7598] close(3) = 0 [pid 7598] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7598] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5005] mkdir("./71", 0777 [pid 7598] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 4999] <... umount2 resumed>) = 0 [pid 5005] <... mkdir resumed>) = 0 [pid 4999] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] ioctl(3, LOOP_CLR_FD [pid 7598] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [ 104.608880][ T7597] loop2: detected capacity change from 0 to 512 [ 104.619800][ T7597] EXT4-fs: Ignoring removed oldalloc option [ 104.625511][ T7587] EXT4-fs (loop4): 1 truncate cleaned up [ 104.638132][ T7596] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7598] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7601], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7601 [pid 7598] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7598] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4999] lstat("./70/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] close(3 [pid 4999] openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5005] <... close resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 5005] <... clone resumed>, child_tidptr=0x5555562025d0) = 7603 [pid 4999] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./70/file0") = 0 [pid 4999] getdents64(3, ./strace-static-x86_64: Process 7603 attached 0x555556203620 /* 0 entries */, 32768) = 0 [pid 7603] set_robust_list(0x5555562025e0, 24 [pid 4999] close(3 [pid 7603] <... set_robust_list resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 7603] chdir("./71" [pid 4999] rmdir("./70"./strace-static-x86_64: Process 7601 attached [pid 7603] <... chdir resumed>) = 0 [pid 7587] <... mount resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 7603] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7601] set_robust_list(0x7f50501119e0, 24 [pid 7587] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7603] <... prctl resumed>) = 0 [pid 7601] <... set_robust_list resumed>) = 0 [pid 7587] <... openat resumed>) = 3 [pid 7603] setpgid(0, 0 [pid 7601] memfd_create("syzkaller", 0 [pid 7587] chdir("./file0" [pid 7603] <... setpgid resumed>) = 0 [pid 7601] <... memfd_create resumed>) = 3 [pid 7587] <... chdir resumed>) = 0 [pid 7603] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7601] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7603] <... openat resumed>) = 3 [pid 7601] <... mmap resumed>) = 0x7f5047cf1000 [pid 7587] ioctl(4, LOOP_CLR_FD [pid 7603] write(3, "1000", 4 [pid 7601] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7587] <... ioctl resumed>) = 0 [pid 7603] <... write resumed>) = 4 [pid 7601] <... write resumed>) = 262144 [pid 7587] close(4 [pid 7603] close(3 [pid 7601] munmap(0x7f5047cf1000, 262144 [ 104.655210][ T7587] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.679174][ T7596] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 4999] mkdir("./71", 0777 [pid 7603] <... close resumed>) = 0 [pid 7601] <... munmap resumed>) = 0 [pid 7587] <... close resumed>) = 0 [pid 7603] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7603] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7603] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7603] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7603] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7605], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7605 [pid 7603] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7603] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4999] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 7605 attached [pid 7601] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7587] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7601] <... openat resumed>) = 4 [pid 7587] <... futex resumed>) = 1 [pid 7586] <... futex resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 7601] ioctl(4, LOOP_SET_FD, 3 [pid 7587] fspick(AT_FDCWD, ".", 0 [pid 7586] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 7605] set_robust_list(0x7f50501119e0, 24 [pid 7601] <... ioctl resumed>) = 0 [pid 7587] <... fspick resumed>) = 4 [pid 7586] <... futex resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7587] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7586] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] close(3 [pid 7605] <... set_robust_list resumed>) = 0 [pid 7587] <... futex resumed>) = 0 [pid 7586] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] <... close resumed>) = 0 [pid 7605] memfd_create("syzkaller", 0 [pid 7587] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7586] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7605] <... memfd_create resumed>) = 3 [pid 7587] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7586] <... futex resumed>) = 0 [pid 7605] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7587] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7586] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... clone resumed>, child_tidptr=0x5555562025d0) = 7606 [pid 7605] <... mmap resumed>) = 0x7f5047cf1000 [pid 7587] <... fsconfig resumed>) = 0 [pid 7605] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7587] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7605] <... write resumed>) = 262144 [pid 7587] <... futex resumed>) = 1 [pid 7586] <... futex resumed>) = 0 [pid 7605] munmap(0x7f5047cf1000, 262144 [pid 7587] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7586] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7587] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7586] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7606 attached [pid 7605] <... munmap resumed>) = 0 [pid 7601] close(3 [pid 7596] <... mount resumed>) = 0 [ 104.704750][ T7597] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 104.718667][ T7601] loop3: detected capacity change from 0 to 512 [ 104.719233][ T7596] EXT4-fs (loop1): 1 truncate cleaned up [ 104.730398][ T7597] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 104.741010][ T7596] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7587] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7586] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7606] set_robust_list(0x5555562025e0, 24 [pid 7605] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7601] <... close resumed>) = 0 [pid 7596] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7606] <... set_robust_list resumed>) = 0 [pid 7605] <... openat resumed>) = 4 [pid 7601] mkdir("./file0", 0777 [pid 7597] <... mount resumed>) = 0 [pid 7596] <... openat resumed>) = 3 [pid 7587] <... fsconfig resumed>) = 0 [pid 7606] chdir("./71" [pid 7605] ioctl(4, LOOP_SET_FD, 3 [pid 7597] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7596] chdir("./file0" [pid 7587] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7601] <... mkdir resumed>) = 0 [pid 7606] <... chdir resumed>) = 0 [pid 7597] <... openat resumed>) = 3 [pid 7596] <... chdir resumed>) = 0 [pid 7606] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7596] ioctl(4, LOOP_CLR_FD [pid 7606] <... prctl resumed>) = 0 [pid 7596] <... ioctl resumed>) = 0 [pid 7606] setpgid(0, 0 [pid 7596] close(4 [pid 7606] <... setpgid resumed>) = 0 [pid 7596] <... close resumed>) = 0 [pid 7606] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7596] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7606] <... openat resumed>) = 3 [pid 7596] <... futex resumed>) = 1 [pid 7590] <... futex resumed>) = 0 [pid 7606] write(3, "1000", 4 [pid 7596] fspick(AT_FDCWD, ".", 0 [pid 7590] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7606] <... write resumed>) = 4 [pid 7596] <... fspick resumed>) = 4 [pid 7590] <... futex resumed>) = 0 [pid 7606] close(3 [pid 7596] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7590] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7606] <... close resumed>) = 0 [pid 7596] <... futex resumed>) = 0 [pid 7590] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7606] symlink("/dev/binderfs", "./binderfs" [pid 7596] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7590] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7606] <... symlink resumed>) = 0 [pid 7596] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7590] <... futex resumed>) = 0 [pid 7606] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7596] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7590] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7606] <... futex resumed>) = 0 [pid 7596] <... fsconfig resumed>) = 0 [pid 7606] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7596] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7606] <... mmap resumed>) = 0x7f50500f1000 [pid 7596] <... futex resumed>) = 1 [pid 7590] <... futex resumed>) = 0 [pid 7606] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7596] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7590] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7606] <... mprotect resumed>) = 0 [pid 7596] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7590] <... futex resumed>) = 0 [pid 7606] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7596] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7590] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7607 attached [ 104.759796][ T7597] EXT4-fs (loop2): 1 truncate cleaned up [ 104.761710][ T7587] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 104.765578][ T7597] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.790541][ T7605] loop5: detected capacity change from 0 to 512 [pid 7601] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7597] chdir("./file0" [pid 7605] <... ioctl resumed>) = 0 [pid 7587] <... futex resumed>) = 1 [pid 7606] <... clone resumed>, parent_tid=[7607], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7607 [pid 7586] <... futex resumed>) = 0 [pid 7597] <... chdir resumed>) = 0 [pid 7607] set_robust_list(0x7f50501119e0, 24 [pid 7605] close(3 [pid 7587] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7607] <... set_robust_list resumed>) = 0 [pid 7606] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7605] <... close resumed>) = 0 [pid 7597] ioctl(4, LOOP_CLR_FD [pid 7596] <... fsconfig resumed>) = 0 [pid 7587] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7586] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7606] <... futex resumed>) = 0 [pid 7605] mkdir("./file0", 0777 [pid 7597] <... ioctl resumed>) = 0 [pid 7587] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7586] <... futex resumed>) = 0 [pid 7606] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7597] close(4 [pid 7587] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7586] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7607] memfd_create("syzkaller", 0 [pid 7605] <... mkdir resumed>) = 0 [pid 7597] <... close resumed>) = 0 [pid 7596] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7587] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7607] <... memfd_create resumed>) = 3 [pid 7605] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7597] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7596] <... futex resumed>) = 1 [pid 7587] <... futex resumed>) = 1 [pid 7607] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7597] <... futex resumed>) = 1 [pid 7596] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7591] <... futex resumed>) = 0 [pid 7590] <... futex resumed>) = 0 [pid 7587] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7586] <... futex resumed>) = 0 [pid 7607] <... mmap resumed>) = 0x7f5047cf1000 [pid 7597] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7591] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7590] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7586] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7607] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7597] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7596] <... futex resumed>) = 0 [pid 7591] <... futex resumed>) = 0 [pid 7590] <... futex resumed>) = 1 [pid 7587] <... futex resumed>) = 0 [pid 7586] <... futex resumed>) = 1 [pid 7607] <... write resumed>) = 262144 [pid 7597] fspick(AT_FDCWD, ".", 0 [pid 7596] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7591] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7590] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7587] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7586] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7607] munmap(0x7f5047cf1000, 262144 [pid 7597] <... fspick resumed>) = 4 [pid 7596] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7607] <... munmap resumed>) = 0 [pid 7597] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7596] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7607] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7597] <... futex resumed>) = 1 [pid 7596] <... futex resumed>) = 1 [pid 7591] <... futex resumed>) = 0 [pid 7607] <... openat resumed>) = 4 [pid 7597] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7596] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7591] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7607] ioctl(4, LOOP_SET_FD, 3 [pid 7597] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7591] <... futex resumed>) = 0 [pid 7597] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7591] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7590] <... futex resumed>) = 0 [pid 7597] <... fsconfig resumed>) = 0 [ 104.800741][ T7596] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 104.808925][ T7601] EXT4-fs: Ignoring removed oldalloc option [ 104.824672][ T7605] EXT4-fs: Ignoring removed oldalloc option [ 104.842697][ T7587] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 104.846506][ T7607] loop0: detected capacity change from 0 to 512 [pid 7597] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7591] <... futex resumed>) = 0 [pid 7597] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7591] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7597] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7591] <... futex resumed>) = 0 [pid 7597] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7591] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7607] <... ioctl resumed>) = 0 [pid 7607] close(3) = 0 [pid 7607] mkdir("./file0", 0777) = 0 [pid 7607] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7590] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7590] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7596] <... futex resumed>) = 0 [pid 7597] <... fsconfig resumed>) = 0 [pid 7597] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7597] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7596] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7591] <... futex resumed>) = 0 [pid 7591] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7591] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7586] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7586] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7586] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7586] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7586] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7614], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7614 [pid 7586] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7586] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7614 attached [ 104.859086][ T7587] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 104.866298][ T7607] EXT4-fs: Ignoring removed oldalloc option [ 104.870909][ T7601] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 104.881289][ T7597] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 104.883538][ T7605] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7614] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7614] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7597] <... futex resumed>) = 0 [pid 7597] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7597] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7590] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7590] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7590] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7590] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7590] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7617], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7617 [pid 7590] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7590] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7617 attached [pid 7617] set_robust_list(0x7f5047d309e0, 24) = 0 [ 104.903663][ T7596] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 104.915557][ T7601] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 104.917932][ T7605] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 104.935526][ T7587] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 7617] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7597] <... futex resumed>) = 1 [pid 7591] <... futex resumed>) = 0 [pid 7586] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7614] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7597] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7591] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7614] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7614] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7597] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7591] <... futex resumed>) = 0 [pid 7597] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7591] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7617] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 7617] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7617] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7590] <... futex resumed>) = 0 [ 104.945904][ T7596] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 104.956455][ T7607] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 104.974920][ T7597] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 104.976519][ T7607] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 105.000839][ T7601] EXT4-fs (loop3): 1 truncate cleaned up [pid 7601] <... mount resumed>) = 0 [pid 7601] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7587] <... fsconfig resumed>) = 0 [pid 7601] <... openat resumed>) = 3 [pid 7587] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7601] chdir("./file0" [pid 7587] <... futex resumed>) = 0 [pid 7601] <... chdir resumed>) = 0 [pid 7587] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7601] ioctl(4, LOOP_CLR_FD) = 0 [pid 7601] close(4) = 0 [pid 7591] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7601] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7598] <... futex resumed>) = 0 [pid 7601] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7598] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7601] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7598] <... futex resumed>) = 0 [pid 7601] fspick(AT_FDCWD, ".", 0 [pid 7598] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7601] <... fspick resumed>) = 4 [pid 7591] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7591] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7601] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7598] <... futex resumed>) = 0 [pid 7591] <... mmap resumed>) = 0x7f5047d10000 [pid 7601] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7598] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7591] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7601] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7598] <... futex resumed>) = 0 [pid 7601] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7598] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7601] <... fsconfig resumed>) = 0 [pid 7601] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7591] <... mprotect resumed>) = 0 [pid 7601] <... futex resumed>) = 1 [pid 7598] <... futex resumed>) = 0 [pid 7591] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7601] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7598] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7601] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7598] <... futex resumed>) = 0 [pid 7591] <... clone resumed>, parent_tid=[7620], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7620 [pid 7601] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7598] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7591] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7591] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7586] exit_group(0) = ? [ 105.003061][ T7597] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 105.006798][ T7601] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.029797][ T7607] EXT4-fs (loop0): 1 truncate cleaned up [ 105.030382][ T7605] EXT4-fs (loop5): 1 truncate cleaned up [pid 7614] <... futex resumed>) = ? [pid 7587] <... futex resumed>) = ? [pid 7614] +++ exited with 0 +++ [pid 7605] <... mount resumed>) = 0 [pid 7601] <... fsconfig resumed>) = 0 [pid 7587] +++ exited with 0 +++ [pid 7586] +++ exited with 0 +++ ./strace-static-x86_64: Process 7620 attached [pid 7620] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7620] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 ENOSPC (No space left on device) [pid 7620] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7591] <... futex resumed>) = 0 [pid 7620] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7597] <... fsconfig resumed>) = 0 [pid 7597] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7597] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7596] <... fsconfig resumed>) = 0 [pid 7591] exit_group(0 [pid 7620] <... futex resumed>) = ? [pid 7591] <... exit_group resumed>) = ? [pid 7620] +++ exited with 0 +++ [pid 7597] <... futex resumed>) = ? [pid 7597] +++ exited with 0 +++ [pid 7591] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7591, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 7605] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7601] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7598] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7586, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5001] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7605] <... openat resumed>) = 3 [pid 7601] <... futex resumed>) = 0 [pid 7605] chdir("./file0" [pid 7601] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7598] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7607] <... mount resumed>) = 0 [pid 7605] <... chdir resumed>) = 0 [pid 7601] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7598] <... futex resumed>) = 0 [pid 7596] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7605] ioctl(4, LOOP_CLR_FD [pid 7601] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7598] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7590] exit_group(0 [pid 7596] <... futex resumed>) = ? [pid 7607] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] <... openat resumed>) = 3 [pid 7617] <... futex resumed>) = ? [pid 7605] <... ioctl resumed>) = 0 [pid 7601] <... futex resumed>) = 0 [pid 7598] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7590] <... exit_group resumed>) = ? [pid 5004] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] fstat(3, [pid 7617] +++ exited with 0 +++ [ 105.051728][ T7601] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 105.056006][ T7597] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 105.072645][ T7605] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.075536][ T7596] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 105.087294][ T7607] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7605] close(4 [pid 7601] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7598] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7605] <... close resumed>) = 0 [pid 7601] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7598] <... futex resumed>) = 0 [pid 5001] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./71/binderfs") = 0 [pid 5001] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7605] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7601] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7598] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7605] <... futex resumed>) = 1 [pid 7603] <... futex resumed>) = 0 [pid 7603] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7603] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7607] <... openat resumed>) = 3 [pid 7607] chdir("./file0") = 0 [pid 7607] ioctl(4, LOOP_CLR_FD) = 0 [pid 7607] close(4) = 0 [pid 7607] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7607] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7606] <... futex resumed>) = 0 [pid 7607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7606] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7605] fspick(AT_FDCWD, ".", 0 [pid 5004] <... openat resumed>) = 3 [pid 7607] fspick(AT_FDCWD, ".", 0 [pid 7606] <... futex resumed>) = 0 [pid 7605] <... fspick resumed>) = 4 [pid 5004] fstat(3, [pid 7607] <... fspick resumed>) = 4 [pid 7606] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7605] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7607] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7605] <... futex resumed>) = 1 [pid 7603] <... futex resumed>) = 0 [pid 7607] <... futex resumed>) = 1 [pid 7606] <... futex resumed>) = 0 [pid 7605] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7603] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] getdents64(3, [pid 7607] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7606] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7605] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7603] <... futex resumed>) = 0 [pid 7607] <... fsconfig resumed>) = 0 [pid 7606] <... futex resumed>) = 0 [pid 7605] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7603] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7607] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7606] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7605] <... fsconfig resumed>) = 0 [pid 5004] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7607] <... futex resumed>) = 0 [pid 7606] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7605] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7607] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7606] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7605] <... futex resumed>) = 1 [pid 7603] <... futex resumed>) = 0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7606] <... futex resumed>) = 0 [pid 7605] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7603] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] lstat("./71/binderfs", [pid 7607] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7606] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7605] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7603] <... futex resumed>) = 0 [pid 7603] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7596] +++ exited with 0 +++ [pid 7590] +++ exited with 0 +++ [pid 5004] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7590, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5000] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./72/binderfs") = 0 [pid 5000] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7605] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5004] unlink("./71/binderfs") = 0 [pid 5004] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7598] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 105.115176][ T7601] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 105.137876][ T7601] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 105.148384][ T7607] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 7598] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7598] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7598] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7598] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7621], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7621 [pid 7598] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7598] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7621 attached [pid 7621] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7621] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7607] <... fsconfig resumed>) = 0 [pid 7607] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7621] <... openat resumed>) = 5 [pid 7621] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7607] <... futex resumed>) = 1 [pid 7606] <... futex resumed>) = 0 [pid 7605] <... fsconfig resumed>) = 0 [pid 7603] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7598] <... futex resumed>) = 0 [pid 5004] <... umount2 resumed>) = 0 [pid 7606] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7603] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = 0 [pid 7607] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7606] <... futex resumed>) = 0 [pid 7605] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7603] <... futex resumed>) = 0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = 0 [pid 7606] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] lstat("./71/file0", [pid 5001] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7603] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5004] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] lstat("./71/file0", [pid 7621] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7603] <... mmap resumed>) = 0x7f5047d10000 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7603] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5004] openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] <... openat resumed>) = 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] fstat(4, [pid 5001] openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7603] <... mprotect resumed>) = 0 [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... openat resumed>) = 4 [pid 5000] lstat("./72/file0", [pid 7607] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7605] <... futex resumed>) = 0 [pid 7603] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5004] getdents64(4, [pid 5001] fstat(4, [pid 7607] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7605] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5004] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7607] <... futex resumed>) = 1 [pid 7606] <... futex resumed>) = 0 [pid 7603] <... clone resumed>, parent_tid=[7623], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7623 [pid 5004] getdents64(4, [pid 5001] getdents64(4, [pid 5000] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7607] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7606] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7603] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7606] <... futex resumed>) = 0 [pid 7603] <... futex resumed>) = 0 [pid 5004] close(4 [pid 5001] getdents64(4, [pid 5000] openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7606] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7603] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... close resumed>) = 0 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5000] <... openat resumed>) = 4 [pid 5004] rmdir("./71/file0" [pid 5001] close(4 [pid 5000] fstat(4, [pid 5004] <... rmdir resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5004] getdents64(3, [pid 5001] rmdir("./71/file0" [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5004] close(3 [pid 5001] getdents64(3, [pid 5004] <... close resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] getdents64(4, ./strace-static-x86_64: Process 7623 attached [pid 5004] rmdir("./71" [pid 5001] close(3 [pid 5000] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7623] set_robust_list(0x7f5047d309e0, 24 [pid 5004] <... rmdir resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5000] getdents64(4, [pid 7623] <... set_robust_list resumed>) = 0 [pid 5004] mkdir("./72", 0777 [pid 5001] rmdir("./71" [pid 5000] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7623] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 5004] <... mkdir resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] close(4 [pid 7623] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [ 105.167610][ T7605] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 105.206579][ T7607] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] mkdir("./72", 0777 [pid 7623] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... openat resumed>) = 3 [pid 5001] <... mkdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 7623] <... futex resumed>) = 1 [pid 7603] <... futex resumed>) = 0 [pid 5004] ioctl(3, LOOP_CLR_FD [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5000] rmdir("./72/file0" [pid 7623] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7603] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... openat resumed>) = 3 [pid 5004] close(3 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 7605] <... futex resumed>) = 0 [pid 7603] <... futex resumed>) = 1 [pid 5004] <... close resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... rmdir resumed>) = 0 [pid 7605] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7603] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] close(3 [pid 5000] getdents64(3, [pid 5001] <... close resumed>) = 0 [pid 5004] <... clone resumed>, child_tidptr=0x5555562025d0) = 7624 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] close(3 [pid 5001] <... clone resumed>, child_tidptr=0x5555562025d0) = 7625 [pid 5000] <... close resumed>) = 0 [pid 5000] rmdir("./72") = 0 [pid 5000] mkdir("./73", 0777) = 0 ./strace-static-x86_64: Process 7624 attached [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7624] set_robust_list(0x5555562025e0, 24) = 0 [pid 5000] <... openat resumed>) = 3 [pid 7624] chdir("./72" [pid 5000] ioctl(3, LOOP_CLR_FD [pid 7624] <... chdir resumed>) = 0 [pid 7606] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7624] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7601] <... fsconfig resumed>) = 0 [pid 5000] close(3./strace-static-x86_64: Process 7625 attached [pid 7624] <... prctl resumed>) = 0 [pid 7606] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7601] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... close resumed>) = 0 [pid 7624] setpgid(0, 0 [pid 7601] <... futex resumed>) = 0 [pid 7624] <... setpgid resumed>) = 0 [pid 7601] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7624] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7598] exit_group(0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7621] <... futex resumed>) = ? [pid 7598] <... exit_group resumed>) = ? [pid 7624] <... openat resumed>) = 3 [pid 7601] <... futex resumed>) = ? [pid 7624] write(3, "1000", 4 [pid 7621] +++ exited with 0 +++ [pid 7601] +++ exited with 0 +++ [pid 7624] <... write resumed>) = 4 [pid 7624] close(3) = 0 [pid 7624] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7624] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7598] +++ exited with 0 +++ [pid 7624] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7598, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5000] <... clone resumed>, child_tidptr=0x5555562025d0) = 7626 [pid 7625] set_robust_list(0x5555562025e0, 24 [pid 7624] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7625] <... set_robust_list resumed>) = 0 [pid 7624] <... mprotect resumed>) = 0 [pid 7606] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7626 attached [pid 7625] chdir("./72" [pid 7624] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7626] set_robust_list(0x5555562025e0, 24 [pid 7606] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5002] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7626] <... set_robust_list resumed>) = 0 [pid 7624] <... clone resumed>, parent_tid=[7627], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7627 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7626] chdir("./73" [pid 7624] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7606] <... mmap resumed>) = 0x7f5047d10000 [pid 5002] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7626] <... chdir resumed>) = 0 [pid 7624] <... futex resumed>) = 0 [pid 7606] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7626] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7625] <... chdir resumed>) = 0 [pid 7624] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5002] <... openat resumed>) = 3 [pid 7626] <... prctl resumed>) = 0 [pid 7625] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7606] <... mprotect resumed>) = 0 [pid 5002] fstat(3, ./strace-static-x86_64: Process 7627 attached [pid 7626] setpgid(0, 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7625] <... prctl resumed>) = 0 [pid 7606] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5002] getdents64(3, [pid 7627] set_robust_list(0x7f50501119e0, 24 [pid 7626] <... setpgid resumed>) = 0 [pid 7627] <... set_robust_list resumed>) = 0 [pid 7626] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7625] setpgid(0, 0 [pid 5002] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7627] memfd_create("syzkaller", 0 [pid 7626] <... openat resumed>) = 3 [pid 5002] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7625] <... setpgid resumed>) = 0 [pid 7606] <... clone resumed>, parent_tid=[7628], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7628 [pid 7627] <... memfd_create resumed>) = 3 [pid 7626] write(3, "1000", 4 [pid 7625] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7606] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7627] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7626] <... write resumed>) = 4 [pid 7625] <... openat resumed>) = 3 [pid 7606] <... futex resumed>) = 0 [pid 5002] lstat("./70/binderfs", [pid 7627] <... mmap resumed>) = 0x7f5047cf1000 [pid 7626] close(3 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7627] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7626] <... close resumed>) = 0 [pid 7625] write(3, "1000", 4 [pid 7606] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] unlink("./70/binderfs"./strace-static-x86_64: Process 7628 attached [pid 7627] <... write resumed>) = 262144 [pid 7626] symlink("/dev/binderfs", "./binderfs" [pid 7625] <... write resumed>) = 4 [pid 7626] <... symlink resumed>) = 0 [pid 7625] close(3 [pid 5002] <... unlink resumed>) = 0 [pid 7626] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7625] <... close resumed>) = 0 [pid 5002] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7627] munmap(0x7f5047cf1000, 262144 [pid 7626] <... futex resumed>) = 0 [pid 7625] symlink("/dev/binderfs", "./binderfs" [pid 7626] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7627] <... munmap resumed>) = 0 [pid 7626] <... mmap resumed>) = 0x7f50500f1000 [pid 7626] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7627] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7626] <... mprotect resumed>) = 0 [pid 7627] <... openat resumed>) = 4 [pid 7626] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7625] <... symlink resumed>) = 0 [pid 7628] set_robust_list(0x7f5047d309e0, 24 [ 105.225949][ T7601] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 105.240297][ T7605] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 105.255567][ T7607] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 105.266493][ T7605] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7627] ioctl(4, LOOP_SET_FD, 3 [pid 7625] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7628] <... set_robust_list resumed>) = 0 [pid 7626] <... clone resumed>, parent_tid=[7631], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7631 [pid 7603] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7626] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7626] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7631 attached [pid 7631] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7631] memfd_create("syzkaller", 0) = 3 [pid 7631] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7625] <... futex resumed>) = 0 [pid 7603] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7625] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7623] <... futex resumed>) = 0 [pid 7603] <... futex resumed>) = 1 [pid 7625] <... mmap resumed>) = 0x7f50500f1000 [pid 7623] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 ENOSPC (No space left on device) [pid 7623] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7623] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7631] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7631] munmap(0x7f5047cf1000, 262144) = 0 [pid 7627] <... ioctl resumed>) = 0 [pid 7627] close(3) = 0 [pid 7627] mkdir("./file0", 0777) = 0 [pid 7631] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7603] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7628] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7625] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 5002] <... umount2 resumed>) = 0 [pid 7631] <... openat resumed>) = 4 [pid 5002] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7631] ioctl(4, LOOP_SET_FD, 3 [pid 7627] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7625] <... mprotect resumed>) = 0 [pid 7603] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 105.300267][ T7627] loop4: detected capacity change from 0 to 512 [ 105.311175][ T7605] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 105.324834][ T7607] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 105.341297][ T7631] loop1: detected capacity change from 0 to 512 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7628] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7625] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7606] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7605] <... fsconfig resumed>) = 0 [pid 5002] lstat("./70/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7628] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7628] <... futex resumed>) = 0 [pid 7625] <... clone resumed>, parent_tid=[7632], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7632 [pid 7605] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7628] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7625] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7605] <... futex resumed>) = 0 [pid 5002] <... openat resumed>) = 4 [pid 7625] <... futex resumed>) = 0 [pid 7605] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7603] exit_group(0 [pid 5002] fstat(4, [pid 7625] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7623] <... futex resumed>) = ? [pid 7605] <... futex resumed>) = ? [pid 7603] <... exit_group resumed>) = ? [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7623] +++ exited with 0 +++ [pid 7605] +++ exited with 0 +++ [pid 5002] getdents64(4, [pid 7607] <... fsconfig resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7607] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] getdents64(4, [pid 7603] +++ exited with 0 +++ [pid 7607] <... futex resumed>) = 0 [pid 7606] exit_group(0 [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7603, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7628] <... futex resumed>) = ? [pid 7606] <... exit_group resumed>) = ? [pid 5002] close(4 [pid 7631] <... ioctl resumed>) = 0 [pid 7628] +++ exited with 0 +++ [pid 7607] +++ exited with 0 +++ [pid 7606] +++ exited with 0 +++ [pid 5002] <... close resumed>) = 0 [pid 7631] close(3 [pid 5005] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] rmdir("./70/file0"./strace-static-x86_64: Process 7632 attached [pid 7631] <... close resumed>) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... rmdir resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7606, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 7631] mkdir("./file0", 0777 [pid 5005] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] getdents64(3, [pid 7631] <... mkdir resumed>) = 0 [pid 5005] <... openat resumed>) = 3 [ 105.349309][ T7627] EXT4-fs: Ignoring removed oldalloc option [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 4999] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7631] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5005] fstat(3, [pid 5002] close(3 [pid 7632] set_robust_list(0x7f50501119e0, 24 [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7632] <... set_robust_list resumed>) = 0 [pid 5005] getdents64(3, [pid 5002] rmdir("./70" [pid 7632] memfd_create("syzkaller", 0 [pid 5005] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5002] <... rmdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5005] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] mkdir("./71", 0777 [pid 7632] <... memfd_create resumed>) = 3 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... mkdir resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 7632] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5005] lstat("./71/binderfs", [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7632] <... mmap resumed>) = 0x7f5047cf1000 [pid 5005] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... openat resumed>) = 3 [pid 4999] fstat(3, [pid 7632] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7632] <... write resumed>) = 262144 [pid 4999] getdents64(3, [pid 7632] munmap(0x7f5047cf1000, 262144 [pid 4999] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7632] <... munmap resumed>) = 0 [pid 4999] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7632] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7632] <... openat resumed>) = 4 [pid 4999] lstat("./71/binderfs", [pid 7632] ioctl(4, LOOP_SET_FD, 3 [pid 5005] unlink("./71/binderfs" [pid 5002] ioctl(3, LOOP_CLR_FD [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5005] <... unlink resumed>) = 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5005] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] close(3 [pid 7632] <... ioctl resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 4999] unlink("./71/binderfs" [pid 7632] close(3 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... unlink resumed>) = 0 [pid 7632] <... close resumed>) = 0 [pid 4999] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7632] mkdir("./file0", 0777) = 0 [ 105.382894][ T7631] EXT4-fs: Ignoring removed oldalloc option [ 105.401541][ T7627] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 105.412254][ T7632] loop2: detected capacity change from 0 to 512 [pid 7632] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"..../strace-static-x86_64: Process 7636 attached [pid 5002] <... clone resumed>, child_tidptr=0x5555562025d0) = 7636 [pid 7636] set_robust_list(0x5555562025e0, 24) = 0 [pid 7636] chdir("./71") = 0 [pid 7636] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7636] setpgid(0, 0) = 0 [pid 7636] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 105.434339][ T7632] EXT4-fs: Ignoring removed oldalloc option [ 105.445089][ T7627] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 105.445659][ T7631] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7636] write(3, "1000", 4) = 4 [pid 7636] close(3) = 0 [pid 7636] symlink("/dev/binderfs", "./binderfs" [pid 7627] <... mount resumed>) = 0 [pid 5005] <... umount2 resumed>) = 0 [pid 7636] <... symlink resumed>) = 0 [pid 7627] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7636] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7627] <... openat resumed>) = 3 [ 105.474730][ T7631] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 105.495488][ T7632] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 105.495835][ T7627] EXT4-fs (loop4): 1 truncate cleaned up [ 105.511066][ T7627] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7636] <... futex resumed>) = 0 [pid 7627] chdir("./file0" [pid 5005] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7636] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7627] <... chdir resumed>) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7636] <... mmap resumed>) = 0x7f50500f1000 [pid 7627] ioctl(4, LOOP_CLR_FD [pid 5005] lstat("./71/file0", [pid 7636] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7627] <... ioctl resumed>) = 0 [pid 5005] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7636] <... mprotect resumed>) = 0 [pid 7627] close(4 [pid 5005] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7636] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7631] <... mount resumed>) = 0 [pid 7627] <... close resumed>) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7627] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7636] <... clone resumed>, parent_tid=[7640], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7640 [pid 7627] <... futex resumed>) = 1 [pid 7624] <... futex resumed>) = 0 [pid 5005] <... openat resumed>) = 4 [pid 7636] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7627] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7624] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] fstat(4, [pid 7636] <... futex resumed>) = 0 [pid 7627] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7624] <... futex resumed>) = 0 [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7636] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7627] fspick(AT_FDCWD, ".", 0 [pid 7624] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] getdents64(4, [pid 7627] <... fspick resumed>) = 4 [pid 5005] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7627] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] getdents64(4, [pid 7627] <... futex resumed>) = 1 [pid 7624] <... futex resumed>) = 0 [pid 5005] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 7640 attached [pid 7627] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7624] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] close(4 [pid 7640] set_robust_list(0x7f50501119e0, 24 [pid 7627] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7624] <... futex resumed>) = 0 [pid 5005] <... close resumed>) = 0 [pid 7640] <... set_robust_list resumed>) = 0 [pid 7627] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7624] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] rmdir("./71/file0" [pid 7640] memfd_create("syzkaller", 0 [pid 7627] <... fsconfig resumed>) = 0 [pid 5005] <... rmdir resumed>) = 0 [pid 7640] <... memfd_create resumed>) = 3 [pid 7631] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7627] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] getdents64(3, [pid 7640] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7631] <... openat resumed>) = 3 [pid 7627] <... futex resumed>) = 1 [pid 7624] <... futex resumed>) = 0 [pid 5005] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7640] <... mmap resumed>) = 0x7f5047cf1000 [pid 7627] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7624] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] close(3 [pid 7640] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7627] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7624] <... futex resumed>) = 0 [pid 5005] <... close resumed>) = 0 [ 105.533883][ T7631] EXT4-fs (loop1): 1 truncate cleaned up [ 105.547166][ T7631] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.560795][ T7632] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 7640] <... write resumed>) = 262144 [pid 7631] chdir("./file0" [pid 7627] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7624] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] rmdir("./71" [pid 7631] <... chdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 7631] ioctl(4, LOOP_CLR_FD [pid 4999] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7631] <... ioctl resumed>) = 0 [pid 5005] <... rmdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7631] close(4 [pid 4999] lstat("./71/file0", [pid 5005] mkdir("./72", 0777 [pid 7631] <... close resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7631] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7631] <... futex resumed>) = 1 [pid 7626] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7631] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7626] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7631] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7626] <... futex resumed>) = 0 [pid 5005] <... mkdir resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 7631] fspick(AT_FDCWD, ".", 0 [pid 7626] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4999] fstat(4, [pid 7631] <... fspick resumed>) = 4 [pid 5005] <... openat resumed>) = 3 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7631] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] ioctl(3, LOOP_CLR_FD [pid 4999] getdents64(4, [pid 7640] munmap(0x7f5047cf1000, 262144 [pid 7631] <... futex resumed>) = 1 [pid 7627] <... fsconfig resumed>) = 0 [pid 7626] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7631] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./71/file0" [pid 5005] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./71" [pid 7640] <... munmap resumed>) = 0 [pid 7626] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] close(3 [pid 4999] <... rmdir resumed>) = 0 [pid 7640] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] mkdir("./72", 0777 [pid 7631] <... futex resumed>) = 0 [pid 7626] <... futex resumed>) = 1 [pid 4999] <... mkdir resumed>) = 0 [pid 7631] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [ 105.588725][ T7627] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 105.604216][ T7632] EXT4-fs (loop2): 1 truncate cleaned up [ 105.618107][ T7632] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7640] <... openat resumed>) = 4 [pid 7632] <... mount resumed>) = 0 [pid 7627] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7626] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... close resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7631] <... fsconfig resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 7631] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 7631] <... futex resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7631] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7641 ./strace-static-x86_64: Process 7641 attached [pid 7641] set_robust_list(0x5555562025e0, 24) = 0 [pid 7641] chdir("./72") = 0 [pid 7641] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7641] setpgid(0, 0) = 0 [pid 7641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7641] write(3, "1000", 4) = 4 [pid 7641] close(3) = 0 [pid 7640] ioctl(4, LOOP_SET_FD, 3 [pid 7627] <... futex resumed>) = 1 [pid 7626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7626] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7624] <... futex resumed>) = 0 [pid 7631] <... futex resumed>) = 0 [pid 7626] <... futex resumed>) = 1 [pid 7631] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7626] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7641] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7641] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7641] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7641] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7641] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7642], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7642 [pid 7641] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7641] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7624] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7627] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7627] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7624] <... futex resumed>) = 0 [pid 7624] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7627] <... futex resumed>) = 0 [pid 7624] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7627] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7624] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7627] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7624] <... futex resumed>) = 0 [pid 7627] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7624] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7643 attached [pid 7643] set_robust_list(0x5555562025e0, 24) = 0 [pid 7643] chdir("./72") = 0 [pid 7643] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7643] setpgid(0, 0) = 0 [pid 7643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 7642 attached [pid 7642] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7643] <... openat resumed>) = 3 [pid 7642] memfd_create("syzkaller", 0) = 3 [pid 7643] write(3, "1000", 4) = 4 [pid 7643] close(3) = 0 [pid 7642] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7643] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7640] <... ioctl resumed>) = 0 [pid 7632] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5005] <... clone resumed>, child_tidptr=0x5555562025d0) = 7643 [pid 7642] <... mmap resumed>) = 0x7f5047cf1000 [pid 7643] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7643] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7643] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7643] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7644], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7644 [pid 7643] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7643] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7642] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7642] munmap(0x7f5047cf1000, 262144) = 0 [pid 7642] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 105.647590][ T7640] loop3: detected capacity change from 0 to 512 [ 105.660449][ T7627] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 105.673709][ T7627] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 105.682013][ T7631] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 7642] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7644 attached ) = 0 [pid 7640] close(3 [pid 7632] <... openat resumed>) = 3 [pid 7631] <... fsconfig resumed>) = 0 [pid 7626] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7644] set_robust_list(0x7f50501119e0, 24 [pid 7626] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7642] close(3 [pid 7640] <... close resumed>) = 0 [pid 7632] chdir("./file0" [pid 7631] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7626] <... futex resumed>) = 0 [pid 7642] <... close resumed>) = 0 [pid 7644] <... set_robust_list resumed>) = 0 [pid 7626] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7632] <... chdir resumed>) = 0 [pid 7631] <... futex resumed>) = 0 [pid 7626] <... mmap resumed>) = 0x7f5047d10000 [pid 7626] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7644] memfd_create("syzkaller", 0 [pid 7642] mkdir("./file0", 0777 [pid 7640] mkdir("./file0", 0777 [pid 7626] <... mprotect resumed>) = 0 [pid 7632] ioctl(4, LOOP_CLR_FD [pid 7631] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7626] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7640] <... mkdir resumed>) = 0 [pid 7626] <... clone resumed>, parent_tid=[7645], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7645 [pid 7626] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7642] <... mkdir resumed>) = 0 [pid 7626] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7645 attached [pid 7632] <... ioctl resumed>) = 0 [pid 7645] set_robust_list(0x7f5047d309e0, 24 [pid 7644] <... memfd_create resumed>) = 3 [pid 7632] close(4 [pid 7644] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7642] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7644] <... mmap resumed>) = 0x7f5047cf1000 [pid 7640] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7632] <... close resumed>) = 0 [pid 7632] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7645] <... set_robust_list resumed>) = 0 [pid 7645] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7645] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7626] <... futex resumed>) = 0 [pid 7626] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7631] <... futex resumed>) = 0 [pid 7626] <... futex resumed>) = 1 [pid 7631] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7626] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7644] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7632] <... futex resumed>) = 1 [pid 7625] <... futex resumed>) = 0 [pid 7625] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7625] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7645] <... futex resumed>) = 1 [pid 7645] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7624] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7632] fspick(AT_FDCWD, ".", 0 [pid 7624] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7632] <... fspick resumed>) = 4 [pid 7624] <... futex resumed>) = 0 [pid 7632] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7624] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7632] <... futex resumed>) = 1 [pid 7625] <... futex resumed>) = 0 [pid 7624] <... mmap resumed>) = 0x7f5047d10000 [pid 7632] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7625] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7624] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7632] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7625] <... futex resumed>) = 0 [pid 7624] <... mprotect resumed>) = 0 [pid 7644] <... write resumed>) = 262144 [pid 7632] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7625] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7624] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7632] <... fsconfig resumed>) = 0 [pid 7644] munmap(0x7f5047cf1000, 262144 [pid 7632] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7624] <... clone resumed>, parent_tid=[7646], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7646 [pid 7624] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7624] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7644] <... munmap resumed>) = 0 [pid 7632] <... futex resumed>) = 1 [pid 7625] <... futex resumed>) = 0 [pid 7625] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7632] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7625] <... futex resumed>) = 0 [pid 7625] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7644] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 7644] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7646 attached [ 105.685097][ T7642] loop0: detected capacity change from 0 to 512 [ 105.705587][ T7642] EXT4-fs: Ignoring removed oldalloc option [ 105.713933][ T7631] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 105.715079][ T7640] EXT4-fs: Ignoring removed oldalloc option [pid 7646] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7646] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 7646] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7624] <... futex resumed>) = 0 [pid 7646] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7644] <... ioctl resumed>) = 0 [pid 7626] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7626] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7645] <... futex resumed>) = 0 [pid 7626] <... futex resumed>) = 1 [pid 7645] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7626] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7644] close(3 [pid 7627] <... fsconfig resumed>) = 0 [pid 7644] <... close resumed>) = 0 [pid 7627] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7644] mkdir("./file0", 0777 [pid 7627] <... futex resumed>) = 0 [pid 7644] <... mkdir resumed>) = 0 [pid 7627] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7644] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7625] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7624] exit_group(0 [pid 7625] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 105.742524][ T7644] loop5: detected capacity change from 0 to 512 [ 105.747497][ T7631] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 105.749322][ T7632] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 105.769686][ T7627] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 105.783310][ T7642] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 105.786553][ T7644] EXT4-fs: Ignoring removed oldalloc option [pid 7625] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7625] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7625] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7652], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7652 [pid 7625] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7625] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7632] <... fsconfig resumed>) = 0 [pid 7632] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7632] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7652 attached [pid 7652] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7652] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7646] <... futex resumed>) = ? [pid 7645] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7627] <... futex resumed>) = ? [pid 7624] <... exit_group resumed>) = ? [pid 7645] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7627] +++ exited with 0 +++ [pid 7645] <... futex resumed>) = 1 [pid 7626] <... futex resumed>) = 0 [pid 7645] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7652] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7625] <... futex resumed>) = 0 [pid 7625] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7625] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7632] <... futex resumed>) = 0 [pid 7632] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7646] +++ exited with 0 +++ [pid 7624] +++ exited with 0 +++ [pid 7652] <... futex resumed>) = 1 [ 105.792465][ T7631] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 105.808959][ T7640] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 105.814508][ T7632] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 105.820695][ T7642] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 7652] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7631] <... fsconfig resumed>) = 0 [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7624, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 7631] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7631] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5004] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5004] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(3, [pid 7626] exit_group(0 [pid 5004] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7631] <... futex resumed>) = ? [pid 7626] <... exit_group resumed>) = ? [pid 5004] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7631] +++ exited with 0 +++ [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5004] unlink("./72/binderfs") = 0 [pid 5004] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7645] <... futex resumed>) = ? [pid 7625] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7645] +++ exited with 0 +++ [pid 7626] +++ exited with 0 +++ [pid 7625] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7642] <... mount resumed>) = 0 [pid 7642] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7642] chdir("./file0") = 0 [pid 7642] ioctl(4, LOOP_CLR_FD) = 0 [ 105.831474][ T7640] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 105.856341][ T7632] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 105.863411][ T7642] EXT4-fs (loop0): 1 truncate cleaned up [ 105.870653][ T7642] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.875103][ T7640] EXT4-fs (loop3): 1 truncate cleaned up [pid 7642] close(4 [pid 7625] <... futex resumed>) = 1 [pid 7652] <... futex resumed>) = 0 [pid 7652] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7625] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7626, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5000] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7652] <... openat resumed>) = 5 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7652] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] unlink("./73/binderfs" [pid 7652] <... futex resumed>) = 1 [pid 7625] <... futex resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 7652] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5000] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7642] <... close resumed>) = 0 [pid 7640] <... mount resumed>) = 0 [pid 7640] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7642] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7642] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7640] <... openat resumed>) = 3 [pid 7641] <... futex resumed>) = 0 [pid 5004] <... umount2 resumed>) = 0 [pid 5004] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./72/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5004] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7641] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [ 105.897844][ T7640] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.912058][ T7644] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 105.922141][ T7644] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 5004] close(4) = 0 [pid 5004] rmdir("./72/file0") = 0 [pid 5004] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5004] close(3) = 0 [pid 5004] rmdir("./72") = 0 [pid 5004] mkdir("./73", 0777) = 0 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 7642] <... futex resumed>) = 0 [pid 7641] <... futex resumed>) = 1 [pid 7640] chdir("./file0" [pid 5004] ioctl(3, LOOP_CLR_FD [pid 5000] <... umount2 resumed>) = 0 [pid 7642] fspick(AT_FDCWD, ".", 0 [pid 7641] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7640] <... chdir resumed>) = 0 [pid 5004] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7642] <... fspick resumed>) = 4 [pid 7640] ioctl(4, LOOP_CLR_FD [pid 5004] close(3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7642] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7640] <... ioctl resumed>) = 0 [pid 5004] <... close resumed>) = 0 [pid 5000] lstat("./73/file0", [pid 7642] <... futex resumed>) = 1 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7642] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5000] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] <... clone resumed>, child_tidptr=0x5555562025d0) = 7657 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7641] <... futex resumed>) = 0 [pid 7640] close(4 [pid 5000] <... openat resumed>) = 4 [pid 7641] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7640] <... close resumed>) = 0 [pid 5000] fstat(4, [pid 7642] <... futex resumed>) = 0 [pid 7641] <... futex resumed>) = 1 [pid 7640] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7642] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7641] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7640] <... futex resumed>) = 1 [pid 7636] <... futex resumed>) = 0 [pid 5000] getdents64(4, [pid 7642] <... fsconfig resumed>) = 0 [pid 7640] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7636] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7642] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7636] <... futex resumed>) = 0 [pid 5000] getdents64(4, ./strace-static-x86_64: Process 7657 attached [pid 7642] <... futex resumed>) = 1 [pid 7641] <... futex resumed>) = 0 [pid 7640] fspick(AT_FDCWD, ".", 0 [pid 7636] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7657] set_robust_list(0x5555562025e0, 24 [pid 7642] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7641] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7640] <... fspick resumed>) = 4 [pid 5000] close(4 [pid 7657] <... set_robust_list resumed>) = 0 [pid 7642] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7641] <... futex resumed>) = 0 [pid 7640] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7632] <... fsconfig resumed>) = 0 [pid 5000] <... close resumed>) = 0 [ 105.947189][ T7632] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 7657] chdir("./73" [pid 7642] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7641] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7640] <... futex resumed>) = 1 [pid 7636] <... futex resumed>) = 0 [pid 5000] rmdir("./73/file0" [pid 7640] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7632] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7632] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7657] <... chdir resumed>) = 0 [pid 7657] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7657] setpgid(0, 0) = 0 [pid 7657] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7657] write(3, "1000", 4 [pid 7636] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7657] <... write resumed>) = 4 [pid 7625] exit_group(0 [pid 7657] close(3) = 0 [pid 7657] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7640] <... futex resumed>) = 0 [pid 7636] <... futex resumed>) = 1 [pid 7632] <... futex resumed>) = ? [pid 7652] <... futex resumed>) = ? [pid 7625] <... exit_group resumed>) = ? [pid 5000] <... rmdir resumed>) = 0 [pid 7657] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7640] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7636] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7632] +++ exited with 0 +++ [pid 7657] <... futex resumed>) = 0 [pid 7652] +++ exited with 0 +++ [pid 7640] <... fsconfig resumed>) = 0 [pid 7657] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7640] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7657] <... mmap resumed>) = 0x7f50500f1000 [pid 7640] <... futex resumed>) = 0 [pid 7657] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7640] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7657] <... mprotect resumed>) = 0 [pid 7625] +++ exited with 0 +++ [pid 7636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7625, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 7636] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7657] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7642] <... fsconfig resumed>) = 0 [pid 7640] <... futex resumed>) = 0 [pid 7636] <... futex resumed>) = 1 [pid 5001] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] getdents64(3, [pid 7642] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7640] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7636] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7642] <... futex resumed>) = 1 [pid 7641] <... futex resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] close(3 [pid 7642] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5001] <... openat resumed>) = 3 [pid 5000] <... close resumed>) = 0 [pid 5001] fstat(3, [pid 5000] rmdir("./73" [pid 7641] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 7658 attached [pid 7657] <... clone resumed>, parent_tid=[7658], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7658 [pid 7642] <... futex resumed>) = 0 [pid 7641] <... futex resumed>) = 1 [pid 5001] getdents64(3, [pid 5000] mkdir("./74", 0777 [pid 7642] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 5001] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5000] <... mkdir resumed>) = 0 [pid 7642] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 5001] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7642] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... openat resumed>) = 3 [pid 7642] <... futex resumed>) = 0 [pid 5001] lstat("./72/binderfs", [pid 5000] ioctl(3, LOOP_CLR_FD [pid 7642] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] unlink("./72/binderfs" [ 105.990025][ T7642] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 106.011012][ T7644] EXT4-fs (loop5): 1 truncate cleaned up [ 106.018994][ T7640] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 5000] close(3 [pid 5001] <... unlink resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 7658] set_robust_list(0x7f50501119e0, 24 [pid 7657] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7641] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7658] <... set_robust_list resumed>) = 0 [pid 7657] <... futex resumed>) = 0 [pid 7644] <... mount resumed>) = 0 [pid 7641] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7640] <... fsconfig resumed>) = 0 [pid 7658] memfd_create("syzkaller", 0 [pid 7657] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7644] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7641] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7658] <... memfd_create resumed>) = 3 [pid 7644] <... openat resumed>) = 3 [pid 7641] <... futex resumed>) = 1 [pid 7640] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7658] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7644] chdir("./file0" [pid 7641] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7658] <... mmap resumed>) = 0x7f5047cf1000 [pid 7644] <... chdir resumed>) = 0 [pid 7640] <... futex resumed>) = 1 [pid 7658] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7644] ioctl(4, LOOP_CLR_FD [pid 7642] <... futex resumed>) = 0 [pid 7636] <... futex resumed>) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x5555562025d0) = 7659 [pid 7658] <... write resumed>) = 262144 [pid 7644] <... ioctl resumed>) = 0 [pid 7642] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7640] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7636] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7658] munmap(0x7f5047cf1000, 262144 [pid 7644] close(4 [pid 7658] <... munmap resumed>) = 0 [pid 7644] <... close resumed>) = 0 [pid 7640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7658] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7644] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7658] <... openat resumed>) = 4 [pid 7644] <... futex resumed>) = 1 [pid 7643] <... futex resumed>) = 0 [pid 7640] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7636] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7659 attached [pid 7658] ioctl(4, LOOP_SET_FD, 3 [pid 7644] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7643] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7640] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 5001] <... umount2 resumed>) = 0 [pid 7659] set_robust_list(0x5555562025e0, 24 [pid 5001] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7659] <... set_robust_list resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7659] chdir("./74" [pid 5001] lstat("./72/file0", [pid 7659] <... chdir resumed>) = 0 [pid 7644] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 106.019396][ T7644] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.060194][ T7642] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 106.074298][ T7642] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 106.076783][ T7658] loop4: detected capacity change from 0 to 512 [pid 7643] <... futex resumed>) = 0 [pid 7640] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7636] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7659] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7658] <... ioctl resumed>) = 0 [pid 7644] fspick(AT_FDCWD, ".", 0 [pid 7643] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7640] <... futex resumed>) = 0 [pid 7636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7658] close(3 [pid 7644] <... fspick resumed>) = 4 [pid 7640] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7636] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7658] <... close resumed>) = 0 [pid 7644] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7636] <... futex resumed>) = 0 [pid 7658] mkdir("./file0", 0777 [pid 7644] <... futex resumed>) = 1 [pid 7643] <... futex resumed>) = 0 [pid 7640] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7636] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7659] <... prctl resumed>) = 0 [pid 7658] <... mkdir resumed>) = 0 [pid 7644] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7643] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7642] <... fsconfig resumed>) = 0 [pid 5001] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7659] setpgid(0, 0 [pid 7642] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7659] <... setpgid resumed>) = 0 [pid 7658] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7644] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7643] <... futex resumed>) = 0 [pid 7642] <... futex resumed>) = 0 [pid 7641] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5001] openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7659] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7644] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7643] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7642] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7641] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... openat resumed>) = 4 [pid 7659] <... openat resumed>) = 3 [pid 7644] <... fsconfig resumed>) = 0 [pid 7644] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7641] <... futex resumed>) = 0 [pid 7644] <... futex resumed>) = 1 [pid 7643] <... futex resumed>) = 0 [pid 7641] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7644] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7643] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7643] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7642] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7642] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7641] <... futex resumed>) = 0 [pid 7642] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7641] exit_group(0 [pid 7642] <... futex resumed>) = ? [pid 7641] <... exit_group resumed>) = ? [pid 7659] write(3, "1000", 4 [pid 7642] +++ exited with 0 +++ [pid 7641] +++ exited with 0 +++ [pid 5001] fstat(4, [pid 7659] <... write resumed>) = 4 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7659] close(3 [pid 5001] getdents64(4, [pid 7659] <... close resumed>) = 0 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7641, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 7659] symlink("/dev/binderfs", "./binderfs" [ 106.091614][ T7642] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 106.099390][ T7640] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 106.116545][ T7658] EXT4-fs: Ignoring removed oldalloc option [ 106.125084][ T7640] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 106.128373][ T7658] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 4999] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./72/binderfs") = 0 [pid 4999] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./72/file0") = 0 [pid 5001] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./72") = 0 [pid 5001] mkdir("./73", 0777 [pid 7659] <... symlink resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 7659] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7659] <... futex resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 7659] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 7659] <... mmap resumed>) = 0x7f50500f1000 [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7663 [pid 7659] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7659] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7664], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7664 [pid 7659] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7659] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7664 attached [pid 7664] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7664] memfd_create("syzkaller", 0) = 3 [pid 7636] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7636] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7636] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7636] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7636] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7665], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7665 [pid 7636] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7636] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7664] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7664] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7644] <... fsconfig resumed>) = 0 [pid 7644] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7664] munmap(0x7f5047cf1000, 262144 [pid 7644] <... futex resumed>) = 1 [pid 7643] <... futex resumed>) = 0 [pid 7643] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7644] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7643] <... futex resumed>) = 0 [pid 7664] <... munmap resumed>) = 0 [pid 7664] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7664] ioctl(4, LOOP_SET_FD, 3 [pid 7644] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7643] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7644] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7643] <... futex resumed>) = 0 [pid 7644] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7643] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7665 attached ./strace-static-x86_64: Process 7663 attached [pid 7664] <... ioctl resumed>) = 0 [pid 7643] <... futex resumed>) = 0 [pid 7665] set_robust_list(0x7f5047d309e0, 24 [pid 7664] close(3 [pid 7663] set_robust_list(0x5555562025e0, 24 [pid 7665] <... set_robust_list resumed>) = 0 [pid 7664] <... close resumed>) = 0 [pid 7663] <... set_robust_list resumed>) = 0 [pid 7665] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7664] mkdir("./file0", 0777 [ 106.143040][ T7644] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 106.169424][ T7658] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 106.170482][ T7664] loop1: detected capacity change from 0 to 512 [pid 7663] chdir("./73" [pid 7664] <... mkdir resumed>) = 0 [pid 7663] <... chdir resumed>) = 0 [pid 7664] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7663] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7665] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7663] <... prctl resumed>) = 0 [pid 7643] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7665] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7663] setpgid(0, 0 [pid 7665] <... futex resumed>) = 1 [pid 7663] <... setpgid resumed>) = 0 [pid 7636] <... futex resumed>) = 0 [pid 7665] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7663] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7663] write(3, "1000", 4) = 4 [pid 7663] close(3) = 0 [pid 7663] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7663] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7663] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7663] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7663] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7667], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7667 [pid 7663] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7663] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7667 attached [pid 7640] <... fsconfig resumed>) = 0 [pid 7640] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7636] exit_group(0) = ? [pid 7665] <... futex resumed>) = ? [pid 7665] +++ exited with 0 +++ [pid 7640] <... futex resumed>) = ? [pid 7640] +++ exited with 0 +++ [pid 7636] +++ exited with 0 +++ [pid 7667] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7667] memfd_create("syzkaller", 0) = 3 [pid 7667] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7667] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7667] munmap(0x7f5047cf1000, 262144 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7636, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 7667] <... munmap resumed>) = 0 [pid 7667] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7667] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7667] close(3) = 0 [pid 7667] mkdir("./file0", 0777) = 0 [ 106.189364][ T7644] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 106.195724][ T7664] EXT4-fs: Ignoring removed oldalloc option [ 106.200971][ T7640] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 106.218936][ T7644] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 106.228601][ T7658] EXT4-fs (loop4): 1 truncate cleaned up [ 106.230832][ T7667] loop2: detected capacity change from 0 to 512 [pid 7667] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5002] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./71/binderfs") = 0 [pid 5002] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7658] <... mount resumed>) = 0 [pid 7658] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7643] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7643] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 7643] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./72/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7658] <... openat resumed>) = 3 [pid 4999] close(4) = 0 [pid 4999] rmdir("./72/file0" [pid 7658] chdir("./file0" [pid 4999] <... rmdir resumed>) = 0 [pid 7658] <... chdir resumed>) = 0 [pid 7658] ioctl(4, LOOP_CLR_FD [pid 4999] getdents64(3, [pid 7658] <... ioctl resumed>) = 0 [pid 7658] close(4 [pid 4999] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7658] <... close resumed>) = 0 [pid 4999] close(3 [pid 7658] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... close resumed>) = 0 [pid 7658] <... futex resumed>) = 1 [pid 4999] rmdir("./72" [pid 7643] <... mmap resumed>) = 0x7f5047d10000 [pid 7658] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7657] <... futex resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 7658] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7657] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7643] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5002] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... rmdir resumed>) = 0 [pid 7658] fspick(AT_FDCWD, ".", 0 [pid 7657] <... futex resumed>) = 0 [pid 7643] <... mprotect resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7658] <... fspick resumed>) = 4 [pid 5002] lstat("./71/file0", [pid 4999] mkdir("./73", 0777 [pid 7658] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7657] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7643] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7658] <... futex resumed>) = 0 [pid 7657] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5002] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... mkdir resumed>) = 0 [pid 7658] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7657] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7643] <... clone resumed>, parent_tid=[7673], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7673 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7658] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7657] <... futex resumed>) = 0 [pid 7643] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... openat resumed>) = 3 [pid 7658] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7657] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7643] <... futex resumed>) = 0 [pid 5002] <... openat resumed>) = 4 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 7658] <... fsconfig resumed>) = 0 [pid 7643] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] fstat(4, [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 106.234335][ T7658] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.244162][ T7667] EXT4-fs: Ignoring removed oldalloc option [ 106.272753][ T7664] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 106.278064][ T7667] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] ./strace-static-x86_64: Process 7673 attached [pid 7658] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] close(3 [pid 7673] set_robust_list(0x7f5047d309e0, 24 [ 106.306369][ T7644] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 106.318356][ T7664] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 106.336533][ T7664] EXT4-fs (loop1): 1 truncate cleaned up [pid 7658] <... futex resumed>) = 1 [pid 7657] <... futex resumed>) = 0 [pid 7644] <... fsconfig resumed>) = 0 [pid 7673] <... set_robust_list resumed>) = 0 [pid 7658] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7657] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] getdents64(4, [pid 4999] <... close resumed>) = 0 [pid 7658] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7657] <... futex resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7658] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7657] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] getdents64(4, [pid 7673] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7644] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7643] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x5555562025d0) = 7674 [pid 5002] close(4) = 0 [pid 5002] rmdir("./71/file0") = 0 [pid 5002] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./71"./strace-static-x86_64: Process 7674 attached ) = 0 [pid 7674] set_robust_list(0x5555562025e0, 24 [pid 5002] mkdir("./72", 0777 [pid 7674] <... set_robust_list resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 7674] chdir("./73" [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7674] <... chdir resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 7674] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7644] <... futex resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 7674] <... prctl resumed>) = 0 [pid 7673] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7644] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7674] setpgid(0, 0 [pid 5002] close(3 [pid 7674] <... setpgid resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 7674] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7674] <... openat resumed>) = 3 [pid 7674] write(3, "1000", 4 [pid 5002] <... clone resumed>, child_tidptr=0x5555562025d0) = 7675 [pid 7674] <... write resumed>) = 4 [pid 7674] close(3./strace-static-x86_64: Process 7675 attached ) = 0 [pid 7673] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7667] <... mount resumed>) = 0 [pid 7674] symlink("/dev/binderfs", "./binderfs" [pid 7675] set_robust_list(0x5555562025e0, 24 [pid 7673] <... futex resumed>) = 0 [pid 7674] <... symlink resumed>) = 0 [pid 7667] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7658] <... fsconfig resumed>) = 0 [pid 7643] exit_group(0 [pid 7675] <... set_robust_list resumed>) = 0 [pid 7673] ???( [pid 7664] <... mount resumed>) = 0 [pid 7674] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7667] <... openat resumed>) = 3 [pid 7658] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7643] <... exit_group resumed>) = ? [pid 7675] chdir("./72" [pid 7674] <... futex resumed>) = 0 [pid 7673] <... ??? resumed>) = ? [pid 7667] chdir("./file0" [pid 7658] <... futex resumed>) = 1 [pid 7657] <... futex resumed>) = 0 [pid 7644] <... futex resumed>) = ? [pid 7675] <... chdir resumed>) = 0 [pid 7674] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7673] +++ exited with 0 +++ [pid 7667] <... chdir resumed>) = 0 [pid 7658] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7657] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7674] <... mmap resumed>) = 0x7f50500f1000 [pid 7657] <... futex resumed>) = 0 [pid 7674] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7657] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7675] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7674] <... mprotect resumed>) = 0 [pid 7667] ioctl(4, LOOP_CLR_FD [pid 7658] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7644] +++ exited with 0 +++ [pid 7664] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7643] +++ exited with 0 +++ [pid 7675] <... prctl resumed>) = 0 [pid 7674] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7667] <... ioctl resumed>) = 0 [pid 7664] <... openat resumed>) = 3 [pid 7658] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7643, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- ./strace-static-x86_64: Process 7676 attached [pid 7675] setpgid(0, 0 [pid 7667] close(4 [pid 7664] chdir("./file0" [pid 7658] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7674] <... clone resumed>, parent_tid=[7676], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7676 [pid 7675] <... setpgid resumed>) = 0 [pid 7674] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7658] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7674] <... futex resumed>) = 0 [pid 7667] <... close resumed>) = 0 [pid 7674] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5005] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5005] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(3, [pid 7675] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7667] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7658] <... futex resumed>) = 1 [pid 7657] <... futex resumed>) = 0 [pid 5005] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [ 106.344787][ T7667] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 106.354546][ T7658] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 106.371386][ T7667] EXT4-fs (loop2): 1 truncate cleaned up [ 106.379264][ T7667] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.383103][ T7664] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7676] set_robust_list(0x7f50501119e0, 24 [pid 7658] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7657] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7667] <... futex resumed>) = 1 [pid 7663] <... futex resumed>) = 0 [pid 7676] <... set_robust_list resumed>) = 0 [pid 7675] <... openat resumed>) = 3 [pid 7657] <... futex resumed>) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7676] memfd_create("syzkaller", 0 [pid 5005] lstat("./72/binderfs", [pid 7676] <... memfd_create resumed>) = 3 [pid 5005] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7676] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5005] unlink("./72/binderfs" [pid 7676] <... mmap resumed>) = 0x7f5047cf1000 [pid 5005] <... unlink resumed>) = 0 [pid 7676] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5005] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7676] <... write resumed>) = 262144 [pid 7676] munmap(0x7f5047cf1000, 262144) = 0 [pid 7676] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7676] ioctl(4, LOOP_SET_FD, 3 [pid 7675] write(3, "1000", 4 [pid 7667] fspick(AT_FDCWD, ".", 0 [pid 7664] <... chdir resumed>) = 0 [pid 7663] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7657] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7675] <... write resumed>) = 4 [pid 7667] <... fspick resumed>) = 4 [pid 7664] ioctl(4, LOOP_CLR_FD [pid 7663] <... futex resumed>) = 0 [pid 7675] close(3 [pid 7667] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7664] <... ioctl resumed>) = 0 [pid 7663] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7675] <... close resumed>) = 0 [pid 7667] <... futex resumed>) = 0 [pid 7664] close(4 [pid 7663] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7675] symlink("/dev/binderfs", "./binderfs" [pid 7667] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7664] <... close resumed>) = 0 [pid 7663] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7676] <... ioctl resumed>) = 0 [pid 7676] close(3) = 0 [pid 7676] mkdir("./file0", 0777 [pid 7675] <... symlink resumed>) = 0 [pid 7667] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7664] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7663] <... futex resumed>) = 0 [pid 7675] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... umount2 resumed>) = 0 [pid 7667] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7664] <... futex resumed>) = 1 [pid 7663] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7659] <... futex resumed>) = 0 [pid 7675] <... futex resumed>) = 0 [pid 5005] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7667] <... fsconfig resumed>) = 0 [pid 7664] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7675] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7667] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7659] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7664] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7659] <... futex resumed>) = 0 [pid 5005] lstat("./72/file0", [pid 7675] <... mmap resumed>) = 0x7f50500f1000 [pid 7667] <... futex resumed>) = 1 [pid 7664] fspick(AT_FDCWD, ".", 0 [pid 7663] <... futex resumed>) = 0 [pid 7659] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7675] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7667] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7664] <... fspick resumed>) = 4 [pid 7663] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7675] <... mprotect resumed>) = 0 [pid 7667] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7664] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7663] <... futex resumed>) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7676] <... mkdir resumed>) = 0 [pid 7675] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7667] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7664] <... futex resumed>) = 1 [pid 7663] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7659] <... futex resumed>) = 0 [ 106.418163][ T7658] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 106.428976][ T7658] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 106.434825][ T7676] loop0: detected capacity change from 0 to 512 [pid 5005] openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 7677 attached [pid 7676] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7664] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7659] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... openat resumed>) = 4 [pid 7677] set_robust_list(0x7f50501119e0, 24 [pid 7675] <... clone resumed>, parent_tid=[7677], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7677 [pid 7664] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7659] <... futex resumed>) = 0 [pid 5005] fstat(4, [pid 7677] <... set_robust_list resumed>) = 0 [pid 7675] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7664] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7659] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(4, [pid 7677] memfd_create("syzkaller", 0 [pid 7675] <... futex resumed>) = 0 [pid 7664] <... fsconfig resumed>) = 0 [pid 5005] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7675] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5005] getdents64(4, [pid 7664] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7677] <... memfd_create resumed>) = 3 [pid 5005] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7664] <... futex resumed>) = 1 [pid 7677] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7659] <... futex resumed>) = 0 [pid 5005] close(4 [pid 7677] <... mmap resumed>) = 0x7f5047cf1000 [pid 7664] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7659] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... close resumed>) = 0 [pid 5005] rmdir("./72/file0") = 0 [pid 5005] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5005] close(3) = 0 [pid 5005] rmdir("./72") = 0 [pid 5005] mkdir("./73", 0777) = 0 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5005] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5005] close(3) = 0 [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7679 [pid 7657] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7659] <... futex resumed>) = 0 [pid 7664] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7657] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7664] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7659] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7657] <... futex resumed>) = 0 [pid 7677] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7667] <... fsconfig resumed>) = 0 [pid 7657] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [ 106.464115][ T7667] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 106.475583][ T7676] EXT4-fs: Ignoring removed oldalloc option [ 106.486729][ T7658] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 7657] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7667] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7663] <... futex resumed>) = 0 [pid 7657] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7667] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7663] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7667] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7663] <... futex resumed>) = 0 [pid 7667] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7663] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7667] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7680 attached [pid 7680] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7680] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7658] <... fsconfig resumed>) = 0 [pid 7658] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7658] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7663] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7663] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7657] <... clone resumed>, parent_tid=[7680], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7680 [pid 7667] <... futex resumed>) = 0 [pid 7663] <... futex resumed>) = 1 [pid 7657] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7663] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7657] <... futex resumed>) = 1 [pid 7680] <... futex resumed>) = 0 [pid 7667] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7657] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7679 attached [pid 7680] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7677] <... write resumed>) = 262144 [pid 7680] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7679] set_robust_list(0x5555562025e0, 24 [pid 7677] munmap(0x7f5047cf1000, 262144 [pid 7664] <... fsconfig resumed>) = 0 [pid 7679] <... set_robust_list resumed>) = 0 [pid 7677] <... munmap resumed>) = 0 [pid 7679] chdir("./73" [pid 7677] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7679] <... chdir resumed>) = 0 [pid 7677] <... openat resumed>) = 4 [pid 7680] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [ 106.505904][ T7664] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 106.519298][ T7667] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 106.535831][ T7676] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 106.541515][ T7667] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 106.545046][ T7677] loop3: detected capacity change from 0 to 512 [pid 7679] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7677] ioctl(4, LOOP_SET_FD, 3 [pid 7664] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7680] <... futex resumed>) = 1 [pid 7679] <... prctl resumed>) = 0 [pid 7663] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7659] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7657] <... futex resumed>) = 0 [pid 7680] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7679] setpgid(0, 0 [pid 7664] <... futex resumed>) = 0 [pid 7659] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7657] exit_group(0 [pid 7679] <... setpgid resumed>) = 0 [pid 7663] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7659] <... futex resumed>) = 0 [pid 7657] <... exit_group resumed>) = ? [pid 7679] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7663] <... futex resumed>) = 0 [pid 7659] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7679] <... openat resumed>) = 3 [pid 7663] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7679] write(3, "1000", 4) = 4 [pid 7663] <... mmap resumed>) = 0x7f5047d10000 [pid 7679] close(3) = 0 [pid 7663] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7679] symlink("/dev/binderfs", "./binderfs" [pid 7680] <... futex resumed>) = ? [pid 7679] <... symlink resumed>) = 0 [pid 7664] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7663] <... mprotect resumed>) = 0 [pid 7658] <... futex resumed>) = ? [pid 7680] +++ exited with 0 +++ [pid 7679] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7664] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7679] <... futex resumed>) = 0 [pid 7663] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7679] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7679] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7658] +++ exited with 0 +++ [pid 7657] +++ exited with 0 +++ [pid 7679] <... mprotect resumed>) = 0 [pid 7664] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7657, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 7679] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7685], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7685 [pid 7679] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7679] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7663] <... clone resumed>, parent_tid=[7684], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7684 [pid 7663] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7663] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7684 attached [pid 7684] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7684] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7677] <... ioctl resumed>) = 0 [pid 7664] <... futex resumed>) = 1 ./strace-static-x86_64: Process 7685 attached [pid 7684] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7677] close(3 [pid 7676] <... mount resumed>) = 0 [pid 7664] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7659] <... futex resumed>) = 0 [pid 7685] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7676] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7685] memfd_create("syzkaller", 0 [pid 7676] <... openat resumed>) = 3 [pid 7685] <... memfd_create resumed>) = 3 [pid 7676] chdir("./file0" [pid 5004] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7685] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7676] <... chdir resumed>) = 0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7685] <... mmap resumed>) = 0x7f5047cf1000 [pid 7676] ioctl(4, LOOP_CLR_FD [pid 5004] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7685] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7676] <... ioctl resumed>) = 0 [pid 5004] <... openat resumed>) = 3 [pid 7685] <... write resumed>) = 262144 [pid 7676] close(4 [pid 5004] fstat(3, [pid 7684] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7677] <... close resumed>) = 0 [pid 7676] <... close resumed>) = 0 [pid 7667] <... fsconfig resumed>) = 0 [pid 7659] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7685] munmap(0x7f5047cf1000, 262144 [pid 7684] <... futex resumed>) = 1 [pid 7676] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7664] <... futex resumed>) = 0 [pid 7663] <... futex resumed>) = 0 [pid 7659] <... futex resumed>) = 1 [pid 5004] getdents64(3, [pid 7684] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7676] <... futex resumed>) = 1 [pid 7674] <... futex resumed>) = 0 [pid 7664] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7659] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7674] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7667] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7677] mkdir("./file0", 0777 [pid 7663] exit_group(0 [pid 7684] <... futex resumed>) = ? [ 106.554259][ T7676] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 106.575260][ T7676] EXT4-fs (loop0): 1 truncate cleaned up [ 106.584630][ T7676] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.599021][ T7667] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 7663] <... exit_group resumed>) = ? [pid 7684] +++ exited with 0 +++ [pid 7674] <... futex resumed>) = 0 [pid 7667] <... futex resumed>) = ? [pid 7685] <... munmap resumed>) = 0 [pid 7677] <... mkdir resumed>) = 0 [pid 7676] fspick(AT_FDCWD, ".", 0 [pid 7674] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7685] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7676] <... fspick resumed>) = 4 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7685] <... openat resumed>) = 4 [pid 7676] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] lstat("./73/binderfs", [pid 7685] ioctl(4, LOOP_SET_FD, 3 [pid 7676] <... futex resumed>) = 1 [pid 7674] <... futex resumed>) = 0 [pid 5004] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7677] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7676] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7667] +++ exited with 0 +++ [pid 7663] +++ exited with 0 +++ [pid 7685] <... ioctl resumed>) = 0 [pid 7676] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7674] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] unlink("./73/binderfs" [pid 7676] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7674] <... futex resumed>) = 0 [pid 5004] <... unlink resumed>) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7663, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 7676] <... fsconfig resumed>) = 0 [pid 7674] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 7676] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7674] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5001] <... restart_syscall resumed>) = 0 [pid 7676] <... futex resumed>) = 0 [pid 7674] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7676] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7674] <... futex resumed>) = 0 [pid 7674] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./73/binderfs") = 0 [pid 5001] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7685] close(3) = 0 [pid 7685] mkdir("./file0", 0777) = 0 [pid 7685] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7659] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7659] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7659] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7659] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7659] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7686], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7686 [pid 7659] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 106.614585][ T7664] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 106.624794][ T7664] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 106.632129][ T7685] loop5: detected capacity change from 0 to 512 [ 106.636240][ T7677] EXT4-fs: Ignoring removed oldalloc option [ 106.648685][ T7676] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 106.655963][ T7685] EXT4-fs: Ignoring removed oldalloc option ./strace-static-x86_64: Process 7686 attached [pid 7676] <... fsconfig resumed>) = 0 [pid 7659] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7686] set_robust_list(0x7f5047d309e0, 24 [pid 7676] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7686] <... set_robust_list resumed>) = 0 [pid 7676] <... futex resumed>) = 1 [pid 7686] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7676] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7686] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7674] <... futex resumed>) = 0 [pid 7686] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7674] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7686] <... futex resumed>) = 1 [pid 7676] <... futex resumed>) = 0 [pid 7674] <... futex resumed>) = 1 [pid 7659] <... futex resumed>) = 0 [pid 7686] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7674] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7664] <... fsconfig resumed>) = 0 [pid 7664] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7664] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5004] <... umount2 resumed>) = 0 [pid 7659] exit_group(0 [pid 7686] <... futex resumed>) = ? [pid 7659] <... exit_group resumed>) = ? [pid 7686] +++ exited with 0 +++ [pid 7664] <... futex resumed>) = ? [pid 7664] +++ exited with 0 +++ [pid 7659] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7659, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5000] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7676] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./74/binderfs", [pid 7676] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 5004] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7676] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7676] <... futex resumed>) = 1 [pid 7674] <... futex resumed>) = 0 [pid 5004] lstat("./73/file0", [pid 7676] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7674] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7676] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7674] <... futex resumed>) = 0 [pid 7676] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5004] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7674] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] unlink("./74/binderfs") = 0 [pid 5000] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5004] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5004] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5004] close(4) = 0 [pid 5004] rmdir("./73/file0") = 0 [ 106.671427][ T5001] EXT4-fs unmount: 375 callbacks suppressed [ 106.671442][ T5001] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.673503][ T7664] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 106.709538][ T7676] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 5004] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5004] close(3) = 0 [pid 5004] rmdir("./73") = 0 [pid 5004] mkdir("./74", 0777) = 0 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5004] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5004] close(3) = 0 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7692 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./73/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./73/file0") = 0 [pid 5001] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./73") = 0 [pid 5001] mkdir("./74", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7693 ./strace-static-x86_64: Process 7692 attached [pid 7674] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7674] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7674] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7674] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7674] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7694], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7694 [pid 7674] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7674] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7692] set_robust_list(0x5555562025e0, 24) = 0 [pid 7692] chdir("./74") = 0 [pid 7692] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7692] setpgid(0, 0) = 0 [pid 7692] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7692] write(3, "1000", 4) = 4 [pid 7692] close(3) = 0 [pid 7692] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7692] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7692] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7692] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7692] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7695], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7695 [pid 7692] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7692] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7693 attached [ 106.721622][ T5000] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.739285][ T7685] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 106.739566][ T7676] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 106.761880][ T7677] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7693] set_robust_list(0x5555562025e0, 24) = 0 [pid 7693] chdir("./74") = 0 [pid 7693] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7693] setpgid(0, 0) = 0 [pid 7693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7693] write(3, "1000", 4) = 4 [pid 7693] close(3) = 0 [pid 7693] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7693] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7693] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7693] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7696], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7696 [pid 7693] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7693] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7696 attached [pid 7696] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7696] memfd_create("syzkaller", 0) = 3 [pid 7696] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7696] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7696] munmap(0x7f5047cf1000, 262144) = 0 [pid 7696] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7696] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7695 attached ./strace-static-x86_64: Process 7694 attached [pid 7695] set_robust_list(0x7f50501119e0, 24 [pid 7694] set_robust_list(0x7f5047d309e0, 24 [pid 7695] <... set_robust_list resumed>) = 0 [pid 7694] <... set_robust_list resumed>) = 0 [pid 7695] memfd_create("syzkaller", 0 [pid 7694] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7674] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7696] <... ioctl resumed>) = 0 [pid 7696] close(3) = 0 [pid 7696] mkdir("./file0", 0777) = 0 [ 106.786311][ T7685] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 106.798944][ T7696] loop2: detected capacity change from 0 to 512 [ 106.809877][ T7677] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 106.815084][ T7685] EXT4-fs (loop5): 1 truncate cleaned up [ 106.827544][ T7696] EXT4-fs: Ignoring removed oldalloc option [pid 7696] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7695] <... memfd_create resumed>) = 3 [pid 7695] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [ 106.839114][ T7685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.852963][ T7676] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 106.864762][ T7677] EXT4-fs (loop3): 1 truncate cleaned up [ 106.871604][ T7685] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7695] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7694] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7676] <... fsconfig resumed>) = 0 [pid 7695] munmap(0x7f5047cf1000, 262144 [pid 7694] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7676] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7674] exit_group(0 [pid 7676] <... futex resumed>) = 0 [pid 7694] <... futex resumed>) = 0 [pid 7695] <... munmap resumed>) = 0 [pid 7674] <... exit_group resumed>) = ? [pid 7694] +++ exited with 0 +++ [pid 7676] +++ exited with 0 +++ [pid 7685] <... mount resumed>) = 0 [pid 7685] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7685] chdir("./file0") = 0 [pid 7685] ioctl(4, LOOP_CLR_FD) = 0 [pid 7685] close(4) = 0 [pid 7685] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7674] +++ exited with 0 +++ [pid 7685] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7695] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7679] <... futex resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 7695] <... openat resumed>) = 4 [pid 7679] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7674, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 7695] ioctl(4, LOOP_SET_FD, 3 [pid 7679] <... futex resumed>) = 1 [pid 7685] <... futex resumed>) = 0 [pid 7679] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, [pid 7685] fspick(AT_FDCWD, ".", 0 [pid 4999] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./73/binderfs") = 0 [pid 4999] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./74/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 106.873932][ T7677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.886503][ T7696] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 106.909601][ T7677] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.923091][ T7695] loop4: detected capacity change from 0 to 512 [pid 5000] openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7695] <... ioctl resumed>) = 0 [pid 7695] close(3 [pid 5000] getdents64(4, [pid 7695] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7695] mkdir("./file0", 0777 [pid 5000] close(4) = 0 [pid 5000] rmdir("./74/file0") = 0 [pid 7685] <... fspick resumed>) = 4 [pid 5000] getdents64(3, [pid 7685] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7685] <... futex resumed>) = 1 [pid 7679] <... futex resumed>) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./74") = 0 [pid 5000] mkdir("./75", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7700 [pid 7679] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7685] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7679] <... futex resumed>) = 0 [pid 7685] <... fsconfig resumed>) = 0 [pid 7679] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7700 attached [pid 7695] <... mkdir resumed>) = 0 [pid 7685] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7679] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7677] <... mount resumed>) = 0 [pid 7695] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7685] <... futex resumed>) = 0 [pid 7679] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7700] set_robust_list(0x5555562025e0, 24) = 0 [pid 7700] chdir("./75") = 0 [pid 7700] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7700] setpgid(0, 0 [pid 7685] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7679] <... futex resumed>) = 0 [pid 7679] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7677] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7677] chdir("./file0") = 0 [pid 7677] ioctl(4, LOOP_CLR_FD) = 0 [pid 7677] close(4 [pid 7700] <... setpgid resumed>) = 0 [pid 7677] <... close resumed>) = 0 [pid 7677] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7675] <... futex resumed>) = 0 [pid 7675] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7675] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 106.933375][ T7696] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 106.950812][ T4999] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.969097][ T7695] EXT4-fs: Ignoring removed oldalloc option [ 106.979440][ T7685] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 7677] <... futex resumed>) = 1 [pid 7677] fspick(AT_FDCWD, ".", 0 [pid 7700] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7685] <... fsconfig resumed>) = 0 [pid 7677] <... fspick resumed>) = 4 [pid 4999] <... umount2 resumed>) = 0 [pid 7677] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7675] <... futex resumed>) = 0 [pid 7677] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7675] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7677] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7675] <... futex resumed>) = 0 [pid 7700] <... openat resumed>) = 3 [pid 7685] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7677] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7675] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7677] <... fsconfig resumed>) = 0 [pid 7677] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7675] <... futex resumed>) = 0 [pid 7677] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7675] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7677] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7675] <... futex resumed>) = 0 [pid 7677] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7675] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7685] <... futex resumed>) = 1 [pid 7679] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 106.996341][ T7696] EXT4-fs (loop2): 1 truncate cleaned up [ 106.999810][ T7695] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 107.022727][ T7695] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 7700] write(3, "1000", 4) = 4 [pid 7685] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7679] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] lstat("./73/file0", [pid 7700] close(3 [pid 7685] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7679] <... futex resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7685] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7679] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7700] <... close resumed>) = 0 [pid 7685] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4999] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7685] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7700] symlink("/dev/binderfs", "./binderfs" [pid 7685] <... futex resumed>) = 1 [pid 7679] <... futex resumed>) = 0 [ 107.028902][ T7696] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.053827][ T7677] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 107.055272][ T7695] EXT4-fs (loop4): 1 truncate cleaned up [ 107.064812][ T7685] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 107.073779][ T7696] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7700] <... symlink resumed>) = 0 [pid 7685] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7679] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7679] <... futex resumed>) = 0 [pid 7675] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7675] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7675] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7675] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7675] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7703], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7703 [pid 7675] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7675] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7703 attached [pid 7703] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7703] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7679] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7703] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7700] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7675] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7677] <... fsconfig resumed>) = 0 [pid 7696] <... mount resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7703] <... futex resumed>) = 0 [pid 7700] <... futex resumed>) = 0 [pid 7696] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7677] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7675] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... openat resumed>) = 4 [pid 7675] <... futex resumed>) = 0 [pid 4999] fstat(4, [pid 7703] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7700] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7675] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7696] <... openat resumed>) = 3 [pid 7677] <... futex resumed>) = 0 [pid 4999] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./73/file0") = 0 [pid 4999] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./73") = 0 [pid 4999] mkdir("./74", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 7677] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 107.087222][ T7695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.104743][ T7695] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.106314][ T7685] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 107.128350][ T7703] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 107.139379][ T7703] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7700] <... mmap resumed>) = 0x7f50500f1000 [pid 7696] chdir("./file0" [pid 7700] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7696] <... chdir resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x5555562025d0) = 7704 [pid 7695] <... mount resumed>) = 0 [pid 7695] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7700] <... mprotect resumed>) = 0 [pid 7696] ioctl(4, LOOP_CLR_FD) = 0 [pid 7695] <... openat resumed>) = 3 [pid 7695] chdir("./file0") = 0 [pid 7695] ioctl(4, LOOP_CLR_FD) = 0 [pid 7695] close(4./strace-static-x86_64: Process 7704 attached [pid 7700] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7696] close(4 [pid 7695] <... close resumed>) = 0 [pid 7704] set_robust_list(0x5555562025e0, 24 [pid 7696] <... close resumed>) = 0 [pid 7704] <... set_robust_list resumed>) = 0 [pid 7700] <... clone resumed>, parent_tid=[7706], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7706 [pid 7696] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7704] chdir("./74" [pid 7700] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7696] <... futex resumed>) = 1 [pid 7693] <... futex resumed>) = 0 [pid 7704] <... chdir resumed>) = 0 [pid 7700] <... futex resumed>) = 0 [pid 7696] fspick(AT_FDCWD, ".", 0 [pid 7693] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7704] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7700] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7696] <... fspick resumed>) = 4 [pid 7693] <... futex resumed>) = 0 [pid 7704] <... prctl resumed>) = 0 [pid 7696] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7693] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7704] setpgid(0, 0 [pid 7696] <... futex resumed>) = 0 [pid 7693] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7704] <... setpgid resumed>) = 0 [pid 7696] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7693] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7704] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7696] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7693] <... futex resumed>) = 0 [pid 7704] <... openat resumed>) = 3 [pid 7696] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7695] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7692] <... futex resumed>) = 0 [pid 7692] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7692] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7704] write(3, "1000", 4 [pid 7696] <... fsconfig resumed>) = 0 [pid 7693] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7704] <... write resumed>) = 4 [pid 7696] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7704] close(3) = 0 [pid 7696] <... futex resumed>) = 1 [pid 7693] <... futex resumed>) = 0 [pid 7704] symlink("/dev/binderfs", "./binderfs" [pid 7696] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7693] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7696] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7693] <... futex resumed>) = 0 [pid 7695] <... futex resumed>) = 1 [pid 7695] fspick(AT_FDCWD, ".", 0 [pid 7704] <... symlink resumed>) = 0 [pid 7693] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7696] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7695] <... fspick resumed>) = 4 [pid 7695] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7692] <... futex resumed>) = 0 [pid 7695] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7692] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7695] <... fsconfig resumed>) = 0 [pid 7692] <... futex resumed>) = 0 [pid 7704] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7695] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7692] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7679] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 7706 attached [pid 7704] <... futex resumed>) = 0 [pid 7695] <... futex resumed>) = 0 [pid 7692] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7679] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7706] set_robust_list(0x7f50501119e0, 24 [pid 7695] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7692] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7679] <... futex resumed>) = 0 [pid 7706] <... set_robust_list resumed>) = 0 [pid 7692] <... futex resumed>) = 0 [pid 7679] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7675] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7706] memfd_create("syzkaller", 0 [pid 7692] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7679] <... mmap resumed>) = 0x7f5047d10000 [pid 7675] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7706] <... memfd_create resumed>) = 3 [pid 7679] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7675] <... futex resumed>) = 1 [pid 7706] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7679] <... mprotect resumed>) = 0 [pid 7675] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7706] <... mmap resumed>) = 0x7f5047cf1000 [pid 7679] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7706] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7679] <... clone resumed>, parent_tid=[7708], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7708 [pid 7679] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7704] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7696] <... fsconfig resumed>) = 0 [pid 7685] <... fsconfig resumed>) = 0 [pid 7679] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7677] <... futex resumed>) = 0 [pid 7706] <... write resumed>) = 262144 ./strace-static-x86_64: Process 7708 attached [pid 7704] <... mmap resumed>) = 0x7f50500f1000 [pid 7677] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7708] set_robust_list(0x7f5047d309e0, 24 [pid 7704] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7703] <... fsconfig resumed>) = 0 [pid 7696] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7685] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7708] <... set_robust_list resumed>) = 0 [ 107.158156][ T7685] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 107.177287][ T7696] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 107.191674][ T7703] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 7708] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7706] munmap(0x7f5047cf1000, 262144 [pid 7704] <... mprotect resumed>) = 0 [pid 7696] <... futex resumed>) = 1 [pid 7685] <... futex resumed>) = 0 [pid 7696] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7704] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7703] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7693] <... futex resumed>) = 0 [pid 7685] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7677] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7703] <... futex resumed>) = 0 [pid 7693] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7704] <... clone resumed>, parent_tid=[7709], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7709 [pid 7703] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7696] <... futex resumed>) = 0 [pid 7693] <... futex resumed>) = 1 [pid 7704] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7696] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7693] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7704] <... futex resumed>) = 0 [pid 7696] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7704] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7696] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7693] <... futex resumed>) = 0 [pid 7696] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7693] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7696] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7693] <... futex resumed>) = 0 [pid 7696] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7693] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7706] <... munmap resumed>) = 0 [pid 7677] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7675] <... futex resumed>) = 0 [pid 7677] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7675] exit_group(0 [pid 7677] <... futex resumed>) = ? [pid 7675] <... exit_group resumed>) = ? [pid 7677] +++ exited with 0 +++ [pid 7706] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7706] ioctl(4, LOOP_SET_FD, 3 [pid 7708] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7703] <... futex resumed>) = ? [pid 7692] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7692] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7708] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7692] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7708] <... futex resumed>) = 1 [pid 7703] +++ exited with 0 +++ [pid 7692] <... mmap resumed>) = 0x7f5047d10000 [pid 7679] <... futex resumed>) = 0 [pid 7675] +++ exited with 0 +++ ./strace-static-x86_64: Process 7709 attached [pid 7708] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7706] <... ioctl resumed>) = 0 [pid 7695] <... fsconfig resumed>) = 0 [pid 7692] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7679] exit_group(0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7675, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 7709] set_robust_list(0x7f50501119e0, 24 [pid 7706] close(3 [pid 7695] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7692] <... mprotect resumed>) = 0 [pid 7679] <... exit_group resumed>) = ? [pid 7685] <... futex resumed>) = ? [pid 7709] <... set_robust_list resumed>) = 0 [ 107.208714][ T7695] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 107.215981][ T7696] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 107.225499][ T7706] loop1: detected capacity change from 0 to 512 [ 107.230065][ T7696] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7708] <... futex resumed>) = ? [pid 7706] <... close resumed>) = 0 [pid 7695] <... futex resumed>) = 0 [pid 7692] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7709] memfd_create("syzkaller", 0 [pid 7706] mkdir("./file0", 0777 [pid 7695] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7685] +++ exited with 0 +++ [pid 7709] <... memfd_create resumed>) = 3 [pid 7708] +++ exited with 0 +++ [pid 7706] <... mkdir resumed>) = 0 [pid 7679] +++ exited with 0 +++ [pid 7709] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7706] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7679, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 7709] <... mmap resumed>) = 0x7f5047cf1000 [pid 7696] <... fsconfig resumed>) = 0 [pid 7692] <... clone resumed>, parent_tid=[7711], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7711 ./strace-static-x86_64: Process 7711 attached [pid 7709] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7711] set_robust_list(0x7f5047d309e0, 24 [pid 7696] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7692] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7711] <... set_robust_list resumed>) = 0 [pid 7709] <... write resumed>) = 262144 [pid 7696] <... futex resumed>) = 1 [pid 7693] <... futex resumed>) = 0 [pid 7709] munmap(0x7f5047cf1000, 262144 [pid 7693] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7692] <... futex resumed>) = 0 [pid 5002] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7711] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7696] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7693] <... futex resumed>) = 0 [pid 7692] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7709] <... munmap resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7711] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7696] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7693] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7711] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7709] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7696] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7693] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... openat resumed>) = 3 [pid 7711] <... futex resumed>) = 1 [pid 7696] <... futex resumed>) = 0 [pid 7693] exit_group(0 [pid 7692] <... futex resumed>) = 0 [pid 5005] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] fstat(3, [pid 7711] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7709] <... openat resumed>) = 4 [pid 7693] <... exit_group resumed>) = ? [pid 7692] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... openat resumed>) = 3 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7696] +++ exited with 0 +++ [pid 7692] <... futex resumed>) = 1 [pid 5002] getdents64(3, [pid 7692] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7693] +++ exited with 0 +++ [pid 5002] unlink("./72/binderfs" [pid 7709] ioctl(4, LOOP_SET_FD, 3 [pid 7695] <... futex resumed>) = 0 [pid 5005] fstat(3, [pid 5002] <... unlink resumed>) = 0 [pid 7695] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7693, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [ 107.250018][ T7696] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 107.250721][ T7706] EXT4-fs: Ignoring removed oldalloc option [ 107.279275][ T7709] loop0: detected capacity change from 0 to 512 [ 107.280142][ T7706] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 107.285737][ T7695] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [pid 7709] <... ioctl resumed>) = 0 [pid 5005] getdents64(3, [pid 7709] close(3) = 0 [pid 7709] mkdir("./file0", 0777) = 0 [pid 7709] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5005] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7692] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5005] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7692] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7711] <... futex resumed>) = 0 [pid 7692] <... futex resumed>) = 1 [pid 7711] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7692] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] lstat("./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5005] unlink("./73/binderfs") = 0 [pid 5005] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7711] <... openat resumed>) = 5 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7711] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7711] <... futex resumed>) = 1 [pid 7692] <... futex resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 7711] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./74/binderfs") = 0 [ 107.296546][ T7706] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 107.305356][ T7695] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 107.320992][ T7709] EXT4-fs: Ignoring removed oldalloc option [ 107.328467][ T5002] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.352701][ T5005] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.353035][ T7695] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 107.362775][ T7706] EXT4-fs (loop1): 1 truncate cleaned up [ 107.378703][ T7706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.379868][ T7709] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 5001] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = 0 [pid 7706] <... mount resumed>) = 0 [pid 7695] <... fsconfig resumed>) = 0 [pid 5002] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7706] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7695] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7706] <... openat resumed>) = 3 [pid 7695] <... futex resumed>) = 0 [pid 7706] chdir("./file0" [pid 7695] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7706] <... chdir resumed>) = 0 [pid 7706] ioctl(4, LOOP_CLR_FD) = 0 [pid 7706] close(4) = 0 [pid 7706] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7706] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5002] lstat("./72/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7700] <... futex resumed>) = 0 [pid 7700] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... openat resumed>) = 4 [pid 7706] <... futex resumed>) = 0 [pid 7700] <... futex resumed>) = 1 [pid 7692] exit_group(0 [pid 5002] fstat(4, [pid 7711] <... futex resumed>) = ? [pid 7706] fspick(AT_FDCWD, ".", 0 [pid 7700] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7695] <... futex resumed>) = ? [pid 7692] <... exit_group resumed>) = ? [pid 7711] +++ exited with 0 +++ [pid 7706] <... fspick resumed>) = 4 [pid 7695] +++ exited with 0 +++ [pid 7692] +++ exited with 0 +++ [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7706] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7692, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 7706] <... futex resumed>) = 1 [pid 7700] <... futex resumed>) = 0 [pid 5002] getdents64(4, [pid 7706] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7700] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5005] <... umount2 resumed>) = 0 [pid 5002] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./72/file0") = 0 [pid 5002] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./72") = 0 [pid 5002] mkdir("./73", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7717 [pid 7706] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7700] <... futex resumed>) = 0 [pid 7706] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7700] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7706] <... fsconfig resumed>) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] lstat("./73/file0", [pid 7706] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7700] <... futex resumed>) = 0 [pid 5005] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7706] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7700] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7700] <... futex resumed>) = 0 [pid 5005] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7706] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7700] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7706] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 7717 attached [pid 7717] set_robust_list(0x5555562025e0, 24) = 0 [pid 7717] chdir("./73" [pid 5005] openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5004] <... openat resumed>) = 3 [pid 5005] <... openat resumed>) = 4 [pid 5005] fstat(4, [pid 5004] fstat(3, [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5004] getdents64(3, [pid 5005] getdents64(4, [pid 5004] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7717] <... chdir resumed>) = 0 [pid 7717] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 107.391446][ T7706] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.403775][ T5001] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.444235][ T7709] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 7717] setpgid(0, 0) = 0 [pid 7717] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7717] write(3, "1000", 4) = 4 [pid 7717] close(3) = 0 [pid 7717] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7717] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7717] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7717] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7717] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7718], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7718 [pid 7717] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7717] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7718 attached [pid 7718] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7718] memfd_create("syzkaller", 0) = 3 [pid 7718] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7718] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5005] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5004] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] close(4 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] <... close resumed>) = 0 [pid 5004] lstat("./74/binderfs", [pid 5005] rmdir("./73/file0" [pid 5004] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5005] <... rmdir resumed>) = 0 [pid 5004] unlink("./74/binderfs") = 0 [pid 5004] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5005] close(3) = 0 [ 107.477480][ T7709] __quota_error: 148 callbacks suppressed [ 107.477496][ T7709] Quota error (device loop0): write_blk: dquota write failed [ 107.494569][ T7706] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 107.512582][ T5004] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 5005] rmdir("./73" [pid 7718] <... write resumed>) = 262144 [pid 7700] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5005] <... rmdir resumed>) = 0 [pid 7718] munmap(0x7f5047cf1000, 262144 [pid 7700] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] mkdir("./74", 0777 [pid 7700] <... futex resumed>) = 0 [pid 7718] <... munmap resumed>) = 0 [pid 7700] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5005] <... mkdir resumed>) = 0 [pid 7700] <... mmap resumed>) = 0x7f5047d10000 [pid 7700] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7700] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5001] <... umount2 resumed>) = 0 [pid 7700] <... clone resumed>, parent_tid=[7719], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7719 [pid 7700] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7700] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7706] <... fsconfig resumed>) = 0 [pid 7706] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7706] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7718] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7718] ioctl(4, LOOP_SET_FD, 3 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7718] <... ioctl resumed>) = 0 [pid 7718] close(3) = 0 [pid 7718] mkdir("./file0", 0777 [pid 5005] <... openat resumed>) = 3 [pid 5005] ioctl(3, LOOP_CLR_FD [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] lstat("./74/file0", [pid 5005] close(3 [pid 7718] <... mkdir resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] <... close resumed>) = 0 [pid 7718] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] <... clone resumed>, child_tidptr=0x5555562025d0) = 7720 [pid 5001] openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 7720 attached ) = 4 [pid 7720] set_robust_list(0x5555562025e0, 24 [pid 5001] fstat(4, [pid 7720] <... set_robust_list resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, [pid 7720] chdir("./74" [pid 5001] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7720] <... chdir resumed>) = 0 [pid 7720] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7720] setpgid(0, 0) = 0 [pid 5001] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./74/file0" [pid 7720] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7720] write(3, "1000", 4 [pid 5001] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, [pid 7720] <... write resumed>) = 4 [pid 7720] close(3) = 0 [pid 7720] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5001] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] close(3 [ 107.516297][ T7709] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 107.542502][ T7718] loop3: detected capacity change from 0 to 512 [ 107.552491][ T7718] EXT4-fs: Ignoring removed oldalloc option [ 107.566779][ T7709] EXT4-fs (loop0): 1 truncate cleaned up [pid 7720] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... close resumed>) = 0 ./strace-static-x86_64: Process 7719 attached [pid 7720] <... futex resumed>) = 0 [pid 7720] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7720] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7720] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7719] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7719] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7719] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7700] <... futex resumed>) = 0 [pid 7700] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7706] <... futex resumed>) = 0 [pid 7700] <... futex resumed>) = 1 [pid 7719] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7706] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7700] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] rmdir("./74" [pid 7720] <... clone resumed>, parent_tid=[7722], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7722 [pid 7720] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7720] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7722 attached [pid 7722] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7722] memfd_create("syzkaller", 0) = 3 [pid 7722] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7722] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7722] munmap(0x7f5047cf1000, 262144) = 0 [pid 7722] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 7722] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... rmdir resumed>) = 0 [pid 5001] mkdir("./75", 0777 [pid 7722] <... ioctl resumed>) = 0 [pid 7722] close(3) = 0 [pid 7722] mkdir("./file0", 0777 [pid 5001] <... mkdir resumed>) = 0 [pid 7722] <... mkdir resumed>) = 0 [pid 7722] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [ 107.580009][ T7706] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 107.585698][ T7709] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.599754][ T7722] loop5: detected capacity change from 0 to 512 [ 107.609574][ T7706] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 107.619601][ T7722] EXT4-fs: Ignoring removed oldalloc option [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7709] <... mount resumed>) = 0 [pid 7700] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5004] <... umount2 resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 7700] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7719] <... futex resumed>) = 0 [pid 7700] <... futex resumed>) = 1 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 7719] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7709] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7700] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] lstat("./74/file0", [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7709] <... openat resumed>) = 3 [pid 5004] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] close(3 [pid 7709] chdir("./file0" [pid 5004] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... close resumed>) = 0 [pid 7709] <... chdir resumed>) = 0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7709] ioctl(4, LOOP_CLR_FD [pid 5004] openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7709] <... ioctl resumed>) = 0 [pid 5004] <... openat resumed>) = 4 [pid 5001] <... clone resumed>, child_tidptr=0x5555562025d0) = 7725 [pid 7709] close(4 [pid 5004] fstat(4, [pid 7709] <... close resumed>) = 0 [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7709] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] getdents64(4, [pid 7709] <... futex resumed>) = 1 [pid 7704] <... futex resumed>) = 0 [pid 5004] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7709] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7704] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] getdents64(4, [pid 7709] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7704] <... futex resumed>) = 0 [pid 5004] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7709] fspick(AT_FDCWD, ".", 0 [pid 7704] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] close(4 [pid 7709] <... fspick resumed>) = 4 [pid 5004] <... close resumed>) = 0 [pid 7709] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] rmdir("./74/file0" [pid 7709] <... futex resumed>) = 1 [pid 7704] <... futex resumed>) = 0 [pid 5004] <... rmdir resumed>) = 0 [pid 7709] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7704] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] getdents64(3, [pid 7709] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7704] <... futex resumed>) = 0 [pid 5004] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7719] <... openat resumed>) = 5 [pid 7709] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7704] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] close(3 [pid 7719] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7709] <... fsconfig resumed>) = 0 [pid 5004] <... close resumed>) = 0 [pid 7719] <... futex resumed>) = 1 [ 107.626383][ T7718] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 107.627657][ T7709] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.655003][ T7706] Quota error (device loop1): write_blk: dquota write failed [ 107.664401][ T7718] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 7709] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7700] <... futex resumed>) = 0 [pid 5004] rmdir("./74" [pid 7709] <... futex resumed>) = 1 [pid 7704] <... futex resumed>) = 0 [pid 5004] <... rmdir resumed>) = 0 [pid 7709] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7704] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] mkdir("./75", 0777 [pid 7709] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7704] <... futex resumed>) = 0 [pid 5004] <... mkdir resumed>) = 0 [pid 7709] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7704] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5004] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5004] close(3) = 0 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7719] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5004] <... clone resumed>, child_tidptr=0x5555562025d0) = 7726 ./strace-static-x86_64: Process 7725 attached ./strace-static-x86_64: Process 7726 attached [pid 7726] set_robust_list(0x5555562025e0, 24) = 0 [pid 7726] chdir("./75") = 0 [pid 7726] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7726] setpgid(0, 0) = 0 [pid 7726] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7726] write(3, "1000", 4) = 4 [pid 7726] close(3) = 0 [pid 7726] symlink("/dev/binderfs", "./binderfs" [pid 7725] set_robust_list(0x5555562025e0, 24 [pid 7726] <... symlink resumed>) = 0 [pid 7725] <... set_robust_list resumed>) = 0 [pid 7726] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 107.688670][ T7706] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 107.700670][ T7709] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 107.711926][ T7718] Quota error (device loop3): write_blk: dquota write failed [ 107.719951][ T7706] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 107.731106][ T7722] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7725] chdir("./75" [pid 7704] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7704] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7704] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7704] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7704] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7729 attached [pid 7725] <... chdir resumed>) = 0 [pid 7726] <... futex resumed>) = 0 [pid 7725] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7726] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7725] setpgid(0, 0 [pid 7726] <... mmap resumed>) = 0x7f50500f1000 [pid 7725] <... setpgid resumed>) = 0 [pid 7725] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7726] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7725] <... openat resumed>) = 3 [pid 7726] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7725] write(3, "1000", 4) = 4 [pid 7725] close(3) = 0 [pid 7725] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7726] <... clone resumed>, parent_tid=[7730], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7730 [pid 7726] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7726] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7725] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7725] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7725] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7709] <... fsconfig resumed>) = 0 [pid 7729] set_robust_list(0x7f5047d309e0, 24 [pid 7704] <... clone resumed>, parent_tid=[7729], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7729 [pid 7704] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7729] <... set_robust_list resumed>) = 0 [pid 7709] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7725] <... mprotect resumed>) = 0 [pid 7725] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7731], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7731 [pid 7725] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7725] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7730 attached [pid 7730] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7730] memfd_create("syzkaller", 0) = 3 [pid 7730] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 ./strace-static-x86_64: Process 7731 attached [pid 7731] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7731] memfd_create("syzkaller", 0) = 3 [pid 7731] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7704] <... futex resumed>) = 0 [pid 7729] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7709] <... futex resumed>) = 0 [pid 7729] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7709] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7706] <... fsconfig resumed>) = 0 [pid 7704] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7729] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7706] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7704] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7729] <... futex resumed>) = 0 [pid 7704] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7729] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7709] <... futex resumed>) = 0 [pid 7706] <... futex resumed>) = 0 [pid 7704] <... futex resumed>) = 1 [pid 7709] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7706] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7704] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7700] exit_group(0 [pid 7719] <... futex resumed>) = ? [pid 7700] <... exit_group resumed>) = ? [pid 7719] +++ exited with 0 +++ [pid 7731] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7730] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [ 107.739831][ T7718] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 107.750111][ T7706] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 107.761014][ T7706] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 107.774001][ T7709] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 7731] <... write resumed>) = 262144 [pid 7730] munmap(0x7f5047cf1000, 262144 [pid 7706] <... futex resumed>) = ? [pid 7731] munmap(0x7f5047cf1000, 262144 [pid 7706] +++ exited with 0 +++ [pid 7700] +++ exited with 0 +++ [pid 7731] <... munmap resumed>) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7700, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 7731] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7730] <... munmap resumed>) = 0 [pid 7731] <... openat resumed>) = 4 [pid 7730] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 7731] ioctl(4, LOOP_SET_FD, 3 [pid 7730] <... openat resumed>) = 4 [pid 5000] <... restart_syscall resumed>) = 0 [pid 7731] <... ioctl resumed>) = 0 [ 107.785666][ T7709] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 107.794426][ T7722] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 107.799860][ T7718] EXT4-fs (loop3): 1 truncate cleaned up [ 107.811191][ T7731] loop2: detected capacity change from 0 to 512 [ 107.815488][ T7722] Quota error (device loop5): write_blk: dquota write failed [pid 7730] ioctl(4, LOOP_SET_FD, 3 [pid 7731] close(3 [pid 7704] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7731] <... close resumed>) = 0 [pid 7731] mkdir("./file0", 0777 [pid 7704] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7731] <... mkdir resumed>) = 0 [pid 7730] <... ioctl resumed>) = 0 [pid 7729] <... futex resumed>) = 0 [pid 7704] <... futex resumed>) = 1 [pid 5000] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7731] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7730] close(3 [pid 7729] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7704] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7730] <... close resumed>) = 0 [pid 7730] mkdir("./file0", 0777 [pid 5000] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7730] <... mkdir resumed>) = 0 [pid 7718] <... mount resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 7730] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [ 107.821348][ T7718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.843051][ T7730] loop4: detected capacity change from 0 to 512 [ 107.850665][ T7722] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 107.851451][ T7718] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.874920][ T7731] EXT4-fs: Ignoring removed oldalloc option [ 107.875791][ T7722] EXT4-fs (loop5): 1 truncate cleaned up [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7729] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7729] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] getdents64(3, [pid 7729] <... futex resumed>) = 1 [pid 7704] <... futex resumed>) = 0 [pid 7729] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5000] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./75/binderfs" [pid 7718] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] <... unlink resumed>) = 0 [pid 5000] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7718] <... openat resumed>) = 3 [pid 7718] chdir("./file0") = 0 [pid 7718] ioctl(4, LOOP_CLR_FD) = 0 [ 107.883836][ T7730] EXT4-fs: Ignoring removed oldalloc option [ 107.887524][ T7709] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 107.908526][ T7722] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.909851][ T5000] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 7718] close(4 [pid 7722] <... mount resumed>) = 0 [pid 7718] <... close resumed>) = 0 [pid 7709] <... fsconfig resumed>) = 0 [pid 7722] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7709] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7704] exit_group(0 [pid 7729] <... futex resumed>) = ? [pid 7722] <... openat resumed>) = 3 [pid 7709] <... futex resumed>) = ? [pid 7704] <... exit_group resumed>) = ? [pid 7729] +++ exited with 0 +++ [pid 7722] chdir("./file0" [pid 7718] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7709] +++ exited with 0 +++ [pid 7704] +++ exited with 0 +++ [pid 7722] <... chdir resumed>) = 0 [pid 7718] <... futex resumed>) = 1 [pid 7717] <... futex resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7704, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 7722] ioctl(4, LOOP_CLR_FD [pid 7718] fspick(AT_FDCWD, ".", 0 [pid 7717] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 7722] <... ioctl resumed>) = 0 [pid 7718] <... fspick resumed>) = 4 [pid 7717] <... futex resumed>) = 0 [pid 4999] <... restart_syscall resumed>) = 0 [pid 7722] close(4 [pid 7718] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7717] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7722] <... close resumed>) = 0 [pid 7718] <... futex resumed>) = 0 [pid 7722] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7718] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7717] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7722] <... futex resumed>) = 1 [pid 7720] <... futex resumed>) = 0 [pid 7718] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7717] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7722] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7718] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 4999] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7718] <... fsconfig resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 7718] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] fstat(3, [pid 7718] <... futex resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [ 107.921767][ T7722] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7720] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7718] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7717] <... futex resumed>) = 0 [pid 4999] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./74/binderfs") = 0 [pid 4999] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7722] <... futex resumed>) = 0 [pid 7720] <... futex resumed>) = 1 [pid 7717] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7722] fspick(AT_FDCWD, ".", 0) = 4 [pid 7722] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7722] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7720] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7717] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7720] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7717] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] lstat("./75/file0", [pid 7720] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7718] <... futex resumed>) = 0 [pid 7717] <... futex resumed>) = 1 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7722] <... futex resumed>) = 0 [pid 7720] <... futex resumed>) = 1 [pid 7718] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7717] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7722] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7720] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... openat resumed>) = 4 [pid 7722] <... fsconfig resumed>) = 0 [pid 5000] fstat(4, [pid 7722] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./75/file0") = 0 [pid 5000] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./75") = 0 [pid 5000] mkdir("./76", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7722] <... futex resumed>) = 1 [pid 7720] <... futex resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 7722] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7720] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7722] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7720] <... futex resumed>) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD [ 107.964891][ T7731] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 107.976611][ T4999] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.987040][ T7730] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 107.998413][ T7718] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 7722] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7720] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7737 ./strace-static-x86_64: Process 7737 attached [pid 7718] <... fsconfig resumed>) = 0 [pid 7718] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 108.011335][ T7731] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 108.027467][ T7730] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 108.043840][ T7722] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 108.047700][ T7731] EXT4-fs (loop2): 1 truncate cleaned up [pid 7718] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7737] set_robust_list(0x5555562025e0, 24 [pid 7722] <... fsconfig resumed>) = 0 [pid 7717] <... futex resumed>) = 0 [pid 7737] <... set_robust_list resumed>) = 0 [pid 7717] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7737] chdir("./76" [pid 7718] <... futex resumed>) = 0 [pid 7717] <... futex resumed>) = 1 [pid 7737] <... chdir resumed>) = 0 [pid 7718] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7717] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7737] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7718] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7737] <... prctl resumed>) = 0 [pid 7718] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7737] setpgid(0, 0 [pid 7718] <... futex resumed>) = 1 [pid 7717] <... futex resumed>) = 0 [pid 7737] <... setpgid resumed>) = 0 [pid 7718] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7717] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7737] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7718] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7717] <... futex resumed>) = 0 [pid 7737] <... openat resumed>) = 3 [pid 7718] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7717] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7737] write(3, "1000", 4 [pid 7722] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7737] <... write resumed>) = 4 [pid 7737] close(3 [pid 7722] <... futex resumed>) = 1 [pid 7720] <... futex resumed>) = 0 [pid 7737] <... close resumed>) = 0 [pid 7722] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7720] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7737] symlink("/dev/binderfs", "./binderfs" [pid 7722] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7720] <... futex resumed>) = 0 [pid 7737] <... symlink resumed>) = 0 [pid 7722] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7720] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7737] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7722] <... futex resumed>) = 0 [pid 7720] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7737] <... futex resumed>) = 0 [pid 7722] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7720] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7737] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7720] <... futex resumed>) = 0 [pid 7737] <... mmap resumed>) = 0x7f50500f1000 [ 108.063065][ T7718] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 108.075176][ T7722] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 108.076470][ T7731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.085120][ T7730] EXT4-fs (loop4): 1 truncate cleaned up [ 108.102815][ T7718] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7720] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7737] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7717] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7737] <... mprotect resumed>) = 0 [pid 7717] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7737] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7717] <... futex resumed>) = 0 [pid 7730] <... mount resumed>) = 0 [pid 7730] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7730] chdir("./file0") = 0 [pid 7730] ioctl(4, LOOP_CLR_FD) = 0 [ 108.110666][ T7722] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 108.114655][ T7730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.134336][ T7731] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.135885][ T7730] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7730] close(4 [pid 7717] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7720] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7737] <... clone resumed>, parent_tid=[7740], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7740 [pid 7720] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7717] <... mmap resumed>) = 0x7f5047d10000 [pid 7737] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7720] <... futex resumed>) = 0 [pid 7717] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7730] <... close resumed>) = 0 [pid 7730] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7730] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7740 attached [pid 7737] <... futex resumed>) = 0 [pid 7731] <... mount resumed>) = 0 [pid 7726] <... futex resumed>) = 0 [pid 7722] <... fsconfig resumed>) = 0 [pid 7720] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7718] <... fsconfig resumed>) = 0 [pid 7717] <... mprotect resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 7737] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7731] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7726] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7722] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7720] <... mmap resumed>) = 0x7f5047d10000 [pid 7717] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7718] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7731] <... openat resumed>) = 3 [pid 7726] <... futex resumed>) = 1 [pid 7722] <... futex resumed>) = 0 [pid 7720] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7718] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7731] chdir("./file0" [pid 7726] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7722] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7720] <... mprotect resumed>) = 0 [pid 7718] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7717] <... clone resumed>, parent_tid=[7741], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7741 [pid 4999] lstat("./74/file0", [pid 7731] <... chdir resumed>) = 0 [pid 7720] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7717] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7731] ioctl(4, LOOP_CLR_FD [pid 7717] <... futex resumed>) = 0 [pid 4999] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7731] <... ioctl resumed>) = 0 [pid 7720] <... clone resumed>, parent_tid=[7742], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7742 [pid 7717] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7731] close(4 [pid 7720] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7731] <... close resumed>) = 0 [pid 7720] <... futex resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 7731] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7720] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] fstat(4, [pid 7731] <... futex resumed>) = 1 [pid 7725] <... futex resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7731] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7725] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] getdents64(4, [pid 7731] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7725] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7731] fspick(AT_FDCWD, ".", 0 [pid 7725] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] getdents64(4, [pid 7731] <... fspick resumed>) = 4 [pid 4999] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7731] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] close(4 [pid 7731] <... futex resumed>) = 1 [pid 7725] <... futex resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 7731] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7725] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] rmdir("./74/file0" [pid 7731] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7725] <... futex resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 7731] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7725] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] getdents64(3, [pid 7731] <... fsconfig resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7731] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] close(3 [pid 7731] <... futex resumed>) = 1 [pid 7725] <... futex resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 7731] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7725] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] rmdir("./74" [pid 7731] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7725] <... futex resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 7742 attached [pid 7731] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7725] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] mkdir("./75", 0777./strace-static-x86_64: Process 7741 attached [pid 7742] set_robust_list(0x7f5047d309e0, 24 [pid 7740] set_robust_list(0x7f50501119e0, 24 [pid 7730] <... futex resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 7742] <... set_robust_list resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7742] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4999] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7742] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7741] set_robust_list(0x7f5047d309e0, 24 [pid 7740] <... set_robust_list resumed>) = 0 [pid 7730] fspick(AT_FDCWD, ".", 0 [pid 7742] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... clone resumed>, child_tidptr=0x5555562025d0) = 7743 [pid 7742] <... futex resumed>) = 1 [pid 7720] <... futex resumed>) = 0 [pid 7742] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7720] exit_group(0 [pid 7742] <... futex resumed>) = ? [pid 7722] <... futex resumed>) = ? [pid 7720] <... exit_group resumed>) = ? [pid 7742] +++ exited with 0 +++ [pid 7741] <... set_robust_list resumed>) = 0 [pid 7740] memfd_create("syzkaller", 0 [pid 7730] <... fspick resumed>) = 4 [pid 7722] +++ exited with 0 +++ [pid 7720] +++ exited with 0 +++ ./strace-static-x86_64: Process 7743 attached [pid 7740] <... memfd_create resumed>) = 3 [pid 7730] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7740] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7730] <... futex resumed>) = 1 [pid 7726] <... futex resumed>) = 0 [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7720, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 7740] <... mmap resumed>) = 0x7f5047cf1000 [pid 7726] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 108.147861][ T7718] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 108.171957][ T7722] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 108.199084][ T7731] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 7730] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5005] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7730] <... fsconfig resumed>) = 0 [pid 7726] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7731] <... fsconfig resumed>) = 0 [pid 7731] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7725] <... futex resumed>) = 0 [pid 7725] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7725] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7731] <... futex resumed>) = 1 [pid 7731] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7740] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7741] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7730] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7730] <... futex resumed>) = 1 [pid 7726] <... futex resumed>) = 0 [pid 7726] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... openat resumed>) = 3 [pid 7731] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7730] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7726] <... futex resumed>) = 0 [pid 5005] fstat(3, [pid 7731] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7726] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7731] <... futex resumed>) = 1 [pid 7725] <... futex resumed>) = 0 [pid 7731] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7725] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7743] set_robust_list(0x5555562025e0, 24 [pid 7741] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7740] <... write resumed>) = 262144 [pid 7725] <... futex resumed>) = 0 [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7725] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7743] <... set_robust_list resumed>) = 0 [pid 7743] chdir("./75") = 0 [pid 7743] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7743] setpgid(0, 0) = 0 [pid 7743] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7743] write(3, "1000", 4) = 4 [pid 7743] close(3) = 0 [pid 7743] symlink("/dev/binderfs", "./binderfs" [pid 7717] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7743] <... symlink resumed>) = 0 [pid 7717] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 7743] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7717] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7743] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7743] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7743] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7741] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7740] munmap(0x7f5047cf1000, 262144 [pid 5005] getdents64(3, [pid 7743] <... clone resumed>, parent_tid=[7744], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7744 [pid 7743] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7743] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7740] <... munmap resumed>) = 0 [pid 7741] <... futex resumed>) = 0 [pid 7717] exit_group(0 [pid 5005] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7718] <... futex resumed>) = ? [pid 7717] <... exit_group resumed>) = ? [pid 7718] +++ exited with 0 +++ [pid 7740] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5005] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7744 attached [pid 7744] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7741] +++ exited with 0 +++ [pid 7717] +++ exited with 0 +++ [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7740] <... openat resumed>) = 4 [pid 5005] lstat("./74/binderfs", [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7717, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 7744] memfd_create("syzkaller", 0 [pid 7740] ioctl(4, LOOP_SET_FD, 3 [pid 5005] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 7744] <... memfd_create resumed>) = 3 [pid 7744] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7744] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7744] munmap(0x7f5047cf1000, 262144) = 0 [pid 7740] <... ioctl resumed>) = 0 [pid 7730] <... fsconfig resumed>) = 0 [pid 5005] unlink("./74/binderfs" [pid 5002] <... restart_syscall resumed>) = 0 [pid 5005] <... unlink resumed>) = 0 [pid 7744] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7740] close(3 [pid 7730] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7740] <... close resumed>) = 0 [pid 5002] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 108.222260][ T7731] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 108.232010][ T7730] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 108.254846][ T7740] loop1: detected capacity change from 0 to 512 [ 108.256673][ T7731] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7740] mkdir("./file0", 0777) = 0 [pid 5002] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7744] <... openat resumed>) = 4 [pid 7726] <... futex resumed>) = 0 [pid 7726] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7730] <... futex resumed>) = 1 [pid 7726] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7744] ioctl(4, LOOP_SET_FD, 3 [pid 7740] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7730] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 5002] <... openat resumed>) = 3 [pid 5002] fstat(3, [pid 7730] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7725] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7730] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7725] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7730] <... futex resumed>) = 1 [pid 7726] <... futex resumed>) = 0 [pid 7725] <... futex resumed>) = 0 [pid 7730] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7726] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7725] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7726] <... futex resumed>) = 0 [pid 7725] <... mmap resumed>) = 0x7f5047d10000 [pid 5002] getdents64(3, [pid 7726] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7725] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7725] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7746], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7746 [pid 7725] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7725] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7746 attached [pid 7746] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7746] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5002] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7744] <... ioctl resumed>) = 0 [pid 7744] close(3) = 0 [pid 7744] mkdir("./file0", 0777 [pid 5002] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./73/binderfs", [pid 7746] <... openat resumed>) = 5 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7746] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7725] <... futex resumed>) = 0 [pid 7746] <... futex resumed>) = 1 [pid 7746] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7744] <... mkdir resumed>) = 0 [pid 7744] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [ 108.272641][ T7744] loop0: detected capacity change from 0 to 512 [ 108.273340][ T5005] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.279565][ T7740] EXT4-fs: Ignoring removed oldalloc option [ 108.295392][ T7730] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 108.311031][ T7744] EXT4-fs: Ignoring removed oldalloc option [pid 5002] unlink("./73/binderfs") = 0 [pid 5002] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7731] <... fsconfig resumed>) = 0 [pid 7731] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... umount2 resumed>) = 0 [pid 7725] exit_group(0 [pid 7746] <... futex resumed>) = ? [pid 7725] <... exit_group resumed>) = ? [pid 7746] +++ exited with 0 +++ [pid 7731] <... futex resumed>) = ? [pid 7731] +++ exited with 0 +++ [pid 7725] +++ exited with 0 +++ [pid 5005] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7725, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] lstat("./74/file0", [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5005] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... openat resumed>) = 3 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] fstat(3, [pid 5005] openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] <... openat resumed>) = 4 [pid 5001] getdents64(3, [pid 7726] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5005] fstat(4, [pid 5001] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] getdents64(4, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5001] lstat("./75/binderfs", [pid 5005] getdents64(4, [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5005] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] unlink("./75/binderfs" [pid 5005] close(4 [pid 5001] <... unlink resumed>) = 0 [pid 5005] <... close resumed>) = 0 [pid 5001] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] rmdir("./74/file0") = 0 [pid 5005] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5005] close(3) = 0 [pid 5005] rmdir("./74") = 0 [pid 5005] mkdir("./75", 0777) = 0 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5005] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 108.317758][ T7730] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 108.327516][ T7731] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 108.345475][ T5002] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 5005] close(3 [pid 7726] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7726] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7726] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7726] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7750], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7750 [pid 7726] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7726] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... close resumed>) = 0 [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7753 ./strace-static-x86_64: Process 7753 attached [pid 7753] set_robust_list(0x5555562025e0, 24) = 0 [pid 7753] chdir("./75") = 0 [pid 7753] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7753] setpgid(0, 0) = 0 [pid 7753] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7753] write(3, "1000", 4) = 4 [pid 7753] close(3) = 0 [pid 7753] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7753] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7753] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7753] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7753] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7754], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7754 [pid 7753] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7753] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7754 attached [pid 7754] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7754] memfd_create("syzkaller", 0) = 3 [pid 7754] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 7750 attached [pid 7730] <... fsconfig resumed>) = 0 [pid 7754] <... mmap resumed>) = 0x7f5047cf1000 [pid 7750] set_robust_list(0x7f5047d309e0, 24 [pid 7730] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7750] <... set_robust_list resumed>) = 0 [pid 7750] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7730] <... futex resumed>) = 0 [pid 7730] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7754] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7754] munmap(0x7f5047cf1000, 262144) = 0 [pid 7754] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 7754] ioctl(4, LOOP_SET_FD, 3 [pid 7750] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7750] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7754] <... ioctl resumed>) = 0 [pid 7754] close(3 [pid 7750] <... futex resumed>) = 1 [pid 7726] <... futex resumed>) = 0 [pid 7750] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7726] exit_group(0 [pid 7730] <... futex resumed>) = ? [pid 7750] <... futex resumed>) = ? [pid 7726] <... exit_group resumed>) = ? [pid 7750] +++ exited with 0 +++ [pid 7730] +++ exited with 0 +++ [pid 7726] +++ exited with 0 +++ [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./73/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7754] <... close resumed>) = 0 [pid 7754] mkdir("./file0", 0777 [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7726, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5004] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7754] <... mkdir resumed>) = 0 [pid 5004] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] close(4 [pid 5004] <... openat resumed>) = 3 [pid 5002] <... close resumed>) = 0 [pid 7754] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5004] fstat(3, [pid 5002] rmdir("./73/file0" [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(3, [pid 5002] <... rmdir resumed>) = 0 [pid 5004] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5002] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5004] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [ 108.370140][ T5001] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.380865][ T7730] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 108.400112][ T7744] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 108.408899][ T7740] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 108.413769][ T7754] loop5: detected capacity change from 0 to 512 [pid 5002] close(3) = 0 [pid 5002] rmdir("./73") = 0 [pid 5002] mkdir("./74", 0777 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5004] unlink("./75/binderfs") = 0 [pid 5004] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... umount2 resumed>) = 0 [pid 5002] <... clone resumed>, child_tidptr=0x5555562025d0) = 7755 [pid 5001] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./75/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./75/file0") = 0 ./strace-static-x86_64: Process 7755 attached [pid 5001] getdents64(3, [pid 7755] set_robust_list(0x5555562025e0, 24) = 0 [pid 5001] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7755] chdir("./74" [pid 5001] close(3 [pid 7755] <... chdir resumed>) = 0 [pid 7755] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] <... close resumed>) = 0 [pid 7755] <... prctl resumed>) = 0 [pid 7755] setpgid(0, 0 [pid 5001] rmdir("./75" [pid 7755] <... setpgid resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 7755] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 108.442436][ T7754] EXT4-fs: Ignoring removed oldalloc option [ 108.450867][ T7740] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 108.456214][ T7744] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 5001] mkdir("./76", 0777 [pid 7755] <... openat resumed>) = 3 [pid 5001] <... mkdir resumed>) = 0 [ 108.507887][ T7740] EXT4-fs (loop1): 1 truncate cleaned up [ 108.509056][ T7744] EXT4-fs (loop0): 1 truncate cleaned up [ 108.514905][ T7740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.519349][ T7744] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.534151][ T5004] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7744] <... mount resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 7744] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] <... close resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7744] <... openat resumed>) = 3 [pid 7755] write(3, "1000", 4 [pid 7744] chdir("./file0" [pid 5001] <... clone resumed>, child_tidptr=0x5555562025d0) = 7758 [pid 7755] <... write resumed>) = 4 [pid 7755] close(3) = 0 [pid 7755] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7755] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7744] <... chdir resumed>) = 0 [pid 7755] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7744] ioctl(4, LOOP_CLR_FD [pid 7755] <... mmap resumed>) = 0x7f50500f1000 [pid 7744] <... ioctl resumed>) = 0 [pid 7755] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7744] close(4./strace-static-x86_64: Process 7758 attached [pid 7755] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7744] <... close resumed>) = 0 [pid 7755] <... clone resumed>, parent_tid=[7759], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7759 [pid 7755] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7755] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7759 attached [pid 7758] set_robust_list(0x5555562025e0, 24 [pid 7744] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7740] <... mount resumed>) = 0 [pid 7759] set_robust_list(0x7f50501119e0, 24 [pid 7758] <... set_robust_list resumed>) = 0 [pid 7744] <... futex resumed>) = 1 [pid 7740] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7759] <... set_robust_list resumed>) = 0 [ 108.545531][ T7744] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.568950][ T7754] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 108.583043][ T7740] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7758] chdir("./76" [pid 7744] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7740] <... openat resumed>) = 3 [pid 7759] memfd_create("syzkaller", 0 [pid 7758] <... chdir resumed>) = 0 [pid 7743] <... futex resumed>) = 0 [pid 7740] chdir("./file0" [pid 7759] <... memfd_create resumed>) = 3 [pid 7758] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7740] <... chdir resumed>) = 0 [pid 7759] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7758] <... prctl resumed>) = 0 [pid 7740] ioctl(4, LOOP_CLR_FD [pid 7759] <... mmap resumed>) = 0x7f5047cf1000 [pid 7758] setpgid(0, 0 [pid 7743] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7740] <... ioctl resumed>) = 0 [ 108.589306][ T7754] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 7759] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7758] <... setpgid resumed>) = 0 [pid 7744] <... futex resumed>) = 0 [pid 7743] <... futex resumed>) = 1 [pid 7740] close(4 [pid 5004] <... umount2 resumed>) = 0 [pid 7759] <... write resumed>) = 262144 [pid 7758] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7740] <... close resumed>) = 0 [pid 7759] munmap(0x7f5047cf1000, 262144 [pid 7758] <... openat resumed>) = 3 [pid 7740] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7759] <... munmap resumed>) = 0 [pid 7758] write(3, "1000", 4 [pid 7744] fspick(AT_FDCWD, ".", 0 [pid 7743] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7740] <... futex resumed>) = 1 [pid 7737] <... futex resumed>) = 0 [pid 5004] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7759] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7758] <... write resumed>) = 4 [pid 7744] <... fspick resumed>) = 4 [pid 7740] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7737] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7759] <... openat resumed>) = 4 [pid 7758] close(3 [pid 7744] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7740] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7737] <... futex resumed>) = 0 [pid 5004] lstat("./75/file0", [pid 7759] ioctl(4, LOOP_SET_FD, 3 [pid 7758] <... close resumed>) = 0 [pid 7740] fspick(AT_FDCWD, ".", 0 [pid 7758] symlink("/dev/binderfs", "./binderfs" [pid 7744] <... futex resumed>) = 1 [pid 7743] <... futex resumed>) = 0 [pid 7740] <... fspick resumed>) = 4 [pid 7737] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7758] <... symlink resumed>) = 0 [pid 7744] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7743] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7740] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7737] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5004] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7758] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7744] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7743] <... futex resumed>) = 0 [pid 7740] <... futex resumed>) = 0 [pid 7737] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7758] <... futex resumed>) = 0 [pid 7744] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7743] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7740] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7737] <... futex resumed>) = 0 [pid 5004] openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7758] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7744] <... fsconfig resumed>) = 0 [pid 7740] <... fsconfig resumed>) = 0 [pid 7737] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... openat resumed>) = 4 [pid 7758] <... mmap resumed>) = 0x7f50500f1000 [pid 7744] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7740] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7758] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7740] <... futex resumed>) = 0 [pid 7758] <... mprotect resumed>) = 0 [pid 7740] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7758] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7760], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7760 [pid 7758] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7758] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7759] <... ioctl resumed>) = 0 [pid 7759] close(3) = 0 [ 108.628704][ T7754] EXT4-fs (loop5): 1 truncate cleaned up [ 108.639596][ T7754] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.642187][ T7759] loop3: detected capacity change from 0 to 512 [pid 7759] mkdir("./file0", 0777) = 0 [pid 7759] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7737] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5004] fstat(4, [pid 7744] <... futex resumed>) = 1 [pid 7743] <... futex resumed>) = 0 [pid 7737] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7744] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7743] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7737] <... futex resumed>) = 1 [pid 7744] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7743] <... futex resumed>) = 0 [pid 7740] <... futex resumed>) = 0 [pid 5004] getdents64(4, [pid 7737] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7744] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7743] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7740] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5004] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5004] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5004] close(4) = 0 [pid 5004] rmdir("./75/file0" [pid 7754] <... mount resumed>) = 0 [pid 7754] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7754] chdir("./file0") = 0 [pid 7754] ioctl(4, LOOP_CLR_FD) = 0 [pid 7754] close(4) = 0 [pid 7754] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7754] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7760 attached [pid 7760] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7760] memfd_create("syzkaller", 0) = 3 [pid 7760] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7753] <... futex resumed>) = 0 [pid 7753] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... rmdir resumed>) = 0 [pid 7754] <... futex resumed>) = 0 [pid 7753] <... futex resumed>) = 1 [pid 5004] getdents64(3, [pid 7754] fspick(AT_FDCWD, ".", 0 [pid 7753] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7754] <... fspick resumed>) = 4 [pid 5004] close(3 [pid 7754] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... close resumed>) = 0 [pid 7754] <... futex resumed>) = 1 [pid 7753] <... futex resumed>) = 0 [pid 5004] rmdir("./75" [pid 7754] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7753] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... rmdir resumed>) = 0 [pid 7754] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7753] <... futex resumed>) = 0 [pid 5004] mkdir("./76", 0777 [pid 7754] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7753] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... mkdir resumed>) = 0 [pid 7760] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7754] <... fsconfig resumed>) = 0 [pid 7744] <... fsconfig resumed>) = 0 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7754] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... openat resumed>) = 3 [pid 7754] <... futex resumed>) = 1 [pid 7753] <... futex resumed>) = 0 [pid 7744] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] ioctl(3, LOOP_CLR_FD [pid 7754] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7753] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7754] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7753] <... futex resumed>) = 0 [pid 5004] close(3 [pid 7760] <... write resumed>) = 262144 [pid 7754] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7753] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7744] <... futex resumed>) = 1 [pid 7743] <... futex resumed>) = 0 [pid 7740] <... fsconfig resumed>) = 0 [pid 7737] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5004] <... close resumed>) = 0 [ 108.670129][ T7754] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.686214][ T7744] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 108.707473][ T7759] EXT4-fs: Ignoring removed oldalloc option [ 108.714336][ T7740] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 7760] munmap(0x7f5047cf1000, 262144 [pid 7744] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7743] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7740] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7760] <... munmap resumed>) = 0 [pid 7744] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7740] <... futex resumed>) = 0 [pid 7760] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7744] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7740] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7760] <... openat resumed>) = 4 [pid 7744] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7760] ioctl(4, LOOP_SET_FD, 3 [pid 7744] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7743] <... futex resumed>) = 0 [pid 7737] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7744] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7760] <... ioctl resumed>) = 0 [pid 7760] close(3) = 0 [pid 7760] mkdir("./file0", 0777 [pid 7743] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7760] <... mkdir resumed>) = 0 [pid 7743] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7740] <... futex resumed>) = 0 [pid 7737] <... futex resumed>) = 1 [pid 5004] <... clone resumed>, child_tidptr=0x5555562025d0) = 7763 ./strace-static-x86_64: Process 7763 attached [pid 7760] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7754] <... fsconfig resumed>) = 0 [ 108.741314][ T7754] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 108.750966][ T7760] loop2: detected capacity change from 0 to 512 [ 108.759133][ T7759] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 108.772804][ T7759] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 7743] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7740] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7737] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7763] set_robust_list(0x5555562025e0, 24 [pid 7754] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7753] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7744] <... futex resumed>) = 0 [pid 7743] <... futex resumed>) = 1 [pid 7740] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7744] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7740] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7763] <... set_robust_list resumed>) = 0 [pid 7754] <... futex resumed>) = 0 [pid 7753] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7743] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7740] <... futex resumed>) = 1 [pid 7737] <... futex resumed>) = 0 [pid 7740] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7737] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7740] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7737] <... futex resumed>) = 0 [ 108.772954][ T7760] EXT4-fs: Ignoring removed oldalloc option [ 108.795503][ T7759] EXT4-fs (loop3): 1 truncate cleaned up [ 108.801779][ T7759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.804562][ T7744] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 108.814806][ T7759] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7740] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7737] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7763] chdir("./76" [pid 7759] <... mount resumed>) = 0 [pid 7754] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7753] <... futex resumed>) = 0 [pid 7763] <... chdir resumed>) = 0 [pid 7759] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7754] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7753] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7763] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7759] <... openat resumed>) = 3 [pid 7754] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7753] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7763] <... prctl resumed>) = 0 [pid 7759] chdir("./file0" [pid 7754] <... futex resumed>) = 0 [pid 7753] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7763] setpgid(0, 0 [pid 7759] <... chdir resumed>) = 0 [pid 7754] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7753] <... futex resumed>) = 0 [pid 7763] <... setpgid resumed>) = 0 [pid 7759] ioctl(4, LOOP_CLR_FD [pid 7753] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7763] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7759] <... ioctl resumed>) = 0 [pid 7763] <... openat resumed>) = 3 [pid 7759] close(4 [pid 7763] write(3, "1000", 4 [pid 7759] <... close resumed>) = 0 [pid 7763] <... write resumed>) = 4 [pid 7759] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7763] close(3 [pid 7759] <... futex resumed>) = 1 [pid 7755] <... futex resumed>) = 0 [pid 7763] <... close resumed>) = 0 [pid 7759] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7755] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7763] symlink("/dev/binderfs", "./binderfs" [pid 7759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7755] <... futex resumed>) = 0 [pid 7763] <... symlink resumed>) = 0 [pid 7759] fspick(AT_FDCWD, ".", 0 [pid 7755] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7763] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7759] <... fspick resumed>) = 4 [pid 7763] <... futex resumed>) = 0 [pid 7759] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7763] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7759] <... futex resumed>) = 1 [pid 7755] <... futex resumed>) = 0 [pid 7763] <... mmap resumed>) = 0x7f50500f1000 [pid 7759] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7755] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7763] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7755] <... futex resumed>) = 0 [pid 7763] <... mprotect resumed>) = 0 [pid 7759] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7755] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7763] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7759] <... fsconfig resumed>) = 0 [pid 7759] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7763] <... clone resumed>, parent_tid=[7766], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7766 [pid 7759] <... futex resumed>) = 1 [pid 7755] <... futex resumed>) = 0 [pid 7763] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7759] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7755] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7743] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7763] <... futex resumed>) = 0 [pid 7759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7755] <... futex resumed>) = 0 [pid 7743] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7763] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7759] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7755] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7743] <... futex resumed>) = 0 [pid 7743] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7743] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7743] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7767], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7767 [pid 7743] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7743] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7766 attached [pid 7766] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7766] memfd_create("syzkaller", 0) = 3 [ 108.832133][ T7740] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 108.839636][ T7754] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 108.847562][ T7744] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 108.864091][ T7754] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 108.867167][ T7740] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7766] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7766] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7737] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7737] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7737] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7737] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7766] <... write resumed>) = 262144 [pid 7737] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7766] munmap(0x7f5047cf1000, 262144) = 0 [pid 7766] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7766] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7770 attached [pid 7753] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7766] <... ioctl resumed>) = 0 [pid 7766] close(3) = 0 [pid 7766] mkdir("./file0", 0777) = 0 [pid 7766] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7770] set_robust_list(0x7f5047d309e0, 24 [pid 7753] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7737] <... clone resumed>, parent_tid=[7770], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7770 ./strace-static-x86_64: Process 7767 attached [pid 7767] set_robust_list(0x7f5047d309e0, 24) = 0 [ 108.886618][ T7760] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 108.900465][ T7759] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 108.903223][ T7766] loop4: detected capacity change from 0 to 512 [ 108.912795][ T7754] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 108.920881][ T7766] EXT4-fs: Ignoring removed oldalloc option [pid 7767] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7755] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7754] <... fsconfig resumed>) = 0 [pid 7753] <... futex resumed>) = 0 [pid 7743] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7737] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7753] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7737] <... futex resumed>) = 0 [pid 7753] <... mmap resumed>) = 0x7f5047d10000 [pid 7737] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7753] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7753] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7772], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7772 [pid 7770] <... set_robust_list resumed>) = 0 [pid 7753] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7770] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7753] <... futex resumed>) = 0 [pid 7770] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7753] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7770] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7737] <... futex resumed>) = 0 [pid 7770] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7772 attached [pid 7772] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7772] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 ENOSPC (No space left on device) [pid 7772] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7753] <... futex resumed>) = 0 [pid 7772] <... futex resumed>) = 1 [pid 7772] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7767] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7759] <... fsconfig resumed>) = 0 [pid 7759] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7759] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7755] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7767] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7759] <... futex resumed>) = 0 [pid 7755] <... futex resumed>) = 1 [pid 7754] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7753] exit_group(0 [pid 7744] <... fsconfig resumed>) = 0 [pid 7740] <... fsconfig resumed>) = 0 [pid 7772] <... futex resumed>) = ? [pid 7759] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7753] <... exit_group resumed>) = ? [pid 7772] +++ exited with 0 +++ [pid 7767] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7759] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7755] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7759] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7759] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7755] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7754] <... futex resumed>) = ? [pid 7755] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7754] +++ exited with 0 +++ [pid 7753] +++ exited with 0 +++ [pid 7755] <... futex resumed>) = 1 [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7753, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 7755] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5005] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7759] <... futex resumed>) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 108.931119][ T7760] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 108.948695][ T7744] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 108.959581][ T7740] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 108.973581][ T7760] EXT4-fs (loop2): 1 truncate cleaned up [pid 7759] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7744] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7743] exit_group(0 [pid 7740] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7737] exit_group(0 [pid 5005] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7767] <... futex resumed>) = ? [pid 7743] <... exit_group resumed>) = ? [pid 7737] <... exit_group resumed>) = ? [pid 5005] <... openat resumed>) = 3 [pid 7767] +++ exited with 0 +++ [pid 5005] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5005] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] lstat("./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5005] unlink("./75/binderfs") = 0 [pid 5005] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7760] <... mount resumed>) = 0 [pid 7760] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7760] chdir("./file0") = 0 [pid 7760] ioctl(4, LOOP_CLR_FD) = 0 [pid 7760] close(4) = 0 [pid 7760] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7760] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7770] <... futex resumed>) = ? [pid 7770] +++ exited with 0 +++ [pid 7758] <... futex resumed>) = 0 [pid 7755] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7755] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7755] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7755] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7755] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7775], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7775 [pid 7755] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7755] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7744] <... futex resumed>) = ? [pid 7744] +++ exited with 0 +++ [pid 7743] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7743, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 7758] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7740] <... futex resumed>) = ? [pid 7758] <... futex resumed>) = 1 [pid 4999] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7758] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7740] +++ exited with 0 +++ [pid 7737] +++ exited with 0 +++ [pid 4999] fstat(3, [pid 7760] <... futex resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7760] fspick(AT_FDCWD, ".", 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7737, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 4999] getdents64(3, [pid 7760] <... fspick resumed>) = 4 [pid 5000] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7760] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7760] <... futex resumed>) = 1 [pid 7758] <... futex resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7760] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7758] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... openat resumed>) = 3 [pid 4999] lstat("./75/binderfs", [pid 7760] <... fsconfig resumed>) = 0 [pid 7758] <... futex resumed>) = 0 [pid 5000] fstat(3, [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7760] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7758] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] unlink("./75/binderfs" [pid 7760] <... futex resumed>) = 0 [pid 7758] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5000] getdents64(3, [pid 4999] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 7775 attached [pid 7760] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7758] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7760] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7758] <... futex resumed>) = 0 [pid 5000] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7760] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7758] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 108.981149][ T7760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.981445][ T7759] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 108.994854][ T7766] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 109.011099][ T7760] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.025683][ T7759] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 109.029136][ T5005] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 5000] lstat("./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./76/binderfs") = 0 [pid 5000] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7775] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7775] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7759] <... fsconfig resumed>) = 0 [pid 7759] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7759] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7755] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7755] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7775] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7775] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7775] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7755] exit_group(0 [pid 7775] <... futex resumed>) = ? [pid 7755] <... exit_group resumed>) = ? [pid 7775] +++ exited with 0 +++ [pid 7759] <... futex resumed>) = ? [pid 7759] +++ exited with 0 +++ [pid 7755] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7755, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5002] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./74/binderfs") = 0 [ 109.063646][ T4999] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.075291][ T7759] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 109.075990][ T5000] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.096444][ T7766] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 5002] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7758] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7758] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 109.113256][ T5002] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.122874][ T7760] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 109.124803][ T7766] EXT4-fs (loop4): 1 truncate cleaned up [ 109.139541][ T7766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [pid 7758] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7758] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7758] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7777], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7777 [pid 7758] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7758] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7766] <... mount resumed>) = 0 ./strace-static-x86_64: Process 7777 attached [pid 7766] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7760] <... fsconfig resumed>) = 0 [pid 7777] set_robust_list(0x7f5047d309e0, 24 [pid 7766] <... openat resumed>) = 3 [pid 7760] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7766] chdir("./file0") = 0 [pid 7766] ioctl(4, LOOP_CLR_FD) = 0 [pid 7766] close(4 [pid 5002] <... umount2 resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 7766] <... close resumed>) = 0 [pid 5005] <... umount2 resumed>) = 0 [pid 7766] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7763] <... futex resumed>) = 0 [pid 7766] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7763] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7766] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7763] <... futex resumed>) = 0 [pid 7760] <... futex resumed>) = 0 [pid 7766] fspick(AT_FDCWD, ".", 0 [pid 7763] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7766] <... fspick resumed>) = 4 [pid 7760] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5005] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7766] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7777] <... set_robust_list resumed>) = 0 [pid 7766] <... futex resumed>) = 1 [pid 7763] <... futex resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7777] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7766] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7763] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7777] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7766] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7763] <... futex resumed>) = 0 [pid 7777] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7766] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7763] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7777] <... futex resumed>) = 1 [pid 7766] <... fsconfig resumed>) = 0 [pid 7758] <... futex resumed>) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./74/file0", [pid 5000] <... umount2 resumed>) = 0 [pid 4999] lstat("./75/file0", [pid 7777] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7766] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7758] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] lstat("./75/file0", [pid 7766] <... futex resumed>) = 1 [pid 7763] <... futex resumed>) = 0 [pid 7760] <... futex resumed>) = 0 [pid 7758] <... futex resumed>) = 1 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7766] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 109.153006][ T7766] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7763] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7760] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7758] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7766] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7763] <... futex resumed>) = 0 [pid 7766] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7763] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./76/file0", [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5005] openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... openat resumed>) = 4 [pid 5005] <... openat resumed>) = 4 [pid 5002] fstat(4, [pid 5000] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... openat resumed>) = 4 [pid 5005] fstat(4, [pid 4999] fstat(4, [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(4, [pid 5002] getdents64(4, [pid 5000] <... openat resumed>) = 4 [pid 4999] getdents64(4, [pid 7766] <... fsconfig resumed>) = 0 [pid 5005] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5000] fstat(4, [pid 4999] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5005] getdents64(4, [pid 5002] getdents64(4, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 5005] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5000] getdents64(4, [pid 4999] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5005] close(4 [pid 5002] close(4 [pid 5000] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] close(4 [pid 5005] <... close resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5000] getdents64(4, [pid 4999] <... close resumed>) = 0 [pid 5005] rmdir("./75/file0" [pid 5002] rmdir("./74/file0" [pid 5000] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 4999] rmdir("./75/file0" [pid 7766] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... rmdir resumed>) = 0 [pid 5000] close(4 [pid 4999] <... rmdir resumed>) = 0 [pid 5005] getdents64(3, [pid 5002] <... rmdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] getdents64(3, [pid 5005] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5002] getdents64(3, [pid 5000] rmdir("./76/file0" [pid 7766] <... futex resumed>) = 1 [pid 7763] <... futex resumed>) = 0 [pid 5005] close(3 [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7763] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... close resumed>) = 0 [pid 5002] close(3 [pid 5000] getdents64(3, [pid 7763] <... futex resumed>) = 0 [pid 5005] rmdir("./75" [pid 5002] <... close resumed>) = 0 [pid 4999] close(3 [pid 5000] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7763] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... rmdir resumed>) = 0 [pid 5002] rmdir("./74" [pid 5005] mkdir("./76", 0777 [pid 5002] <... rmdir resumed>) = 0 [pid 5005] <... mkdir resumed>) = 0 [pid 5002] mkdir("./75", 0777 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] <... mkdir resumed>) = 0 [pid 5005] <... openat resumed>) = 3 [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5005] ioctl(3, LOOP_CLR_FD [pid 5002] <... openat resumed>) = 3 [pid 5005] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5005] close(3 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5005] <... close resumed>) = 0 [pid 5002] close(3 [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... close resumed>) = 0 [ 109.204656][ T7760] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 109.221163][ T7760] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 109.221819][ T7766] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5005] <... clone resumed>, child_tidptr=0x5555562025d0) = 7780 [pid 5002] <... clone resumed>, child_tidptr=0x5555562025d0) = 7781 [pid 7766] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7766] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7763] <... futex resumed>) = 0 [pid 7763] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7763] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7766] <... futex resumed>) = 1 [pid 5000] close(3 [pid 4999] <... close resumed>) = 0 [pid 7766] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7760] <... fsconfig resumed>) = 0 [pid 7758] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5000] <... close resumed>) = 0 [pid 4999] rmdir("./75" [pid 7760] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7758] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5000] rmdir("./76" [pid 7760] <... futex resumed>) = 0 [pid 7758] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 7781 attached [pid 7760] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] mkdir("./76", 0777 [pid 7781] set_robust_list(0x5555562025e0, 24 [pid 7760] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 5000] mkdir("./77", 0777./strace-static-x86_64: Process 7780 attached [pid 7781] <... set_robust_list resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 7781] chdir("./75" [pid 7780] set_robust_list(0x5555562025e0, 24 [pid 7760] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7781] <... chdir resumed>) = 0 [pid 7780] <... set_robust_list resumed>) = 0 [pid 7760] <... futex resumed>) = 1 [pid 7758] <... futex resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7781] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7780] chdir("./76" [pid 7760] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7758] exit_group(0 [pid 4999] <... openat resumed>) = 3 [pid 7781] <... prctl resumed>) = 0 [pid 7780] <... chdir resumed>) = 0 [pid 7777] <... futex resumed>) = ? [pid 7760] <... futex resumed>) = ? [pid 7758] <... exit_group resumed>) = ? [pid 5000] <... openat resumed>) = 3 [pid 7781] setpgid(0, 0 [pid 7780] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7777] +++ exited with 0 +++ [pid 4999] ioctl(3, LOOP_CLR_FD [pid 7781] <... setpgid resumed>) = 0 [pid 7780] <... prctl resumed>) = 0 [pid 7781] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7780] setpgid(0, 0 [pid 7781] <... openat resumed>) = 3 [pid 7780] <... setpgid resumed>) = 0 [pid 7781] write(3, "1000", 4 [pid 7780] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7781] <... write resumed>) = 4 [pid 7780] <... openat resumed>) = 3 [pid 7781] close(3 [pid 7780] write(3, "1000", 4 [pid 7760] +++ exited with 0 +++ [pid 7758] +++ exited with 0 +++ [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7781] <... close resumed>) = 0 [pid 7780] <... write resumed>) = 4 [pid 7781] symlink("/dev/binderfs", "./binderfs" [pid 7780] close(3 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7758, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7781] <... symlink resumed>) = 0 [pid 7780] <... close resumed>) = 0 [pid 5000] close(3 [pid 4999] close(3 [pid 7781] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7780] symlink("/dev/binderfs", "./binderfs" [pid 7781] <... futex resumed>) = 0 [pid 7780] <... symlink resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 7781] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7780] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7781] <... mmap resumed>) = 0x7f50500f1000 [pid 7780] <... futex resumed>) = 0 [pid 7781] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7780] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7781] <... mprotect resumed>) = 0 [pid 7780] <... mmap resumed>) = 0x7f50500f1000 [pid 7781] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7780] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7781] <... clone resumed>, parent_tid=[7782], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7782 [pid 7780] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7781] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7781] <... futex resumed>) = 0 [pid 7780] <... clone resumed>, parent_tid=[7783], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7783 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7781] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7780] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7780] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7782 attached [pid 5001] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... clone resumed>, child_tidptr=0x5555562025d0) = 7784 [pid 5001] <... openat resumed>) = 3 [pid 4999] <... clone resumed>, child_tidptr=0x5555562025d0) = 7785 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./76/binderfs", [pid 7782] set_robust_list(0x7f50501119e0, 24 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7782] <... set_robust_list resumed>) = 0 [pid 7782] memfd_create("syzkaller", 0 [pid 5001] unlink("./76/binderfs" [pid 7782] <... memfd_create resumed>) = 3 [pid 7782] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 7784 attached [pid 7782] <... mmap resumed>) = 0x7f5047cf1000 [pid 5001] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7783 attached [pid 7784] set_robust_list(0x5555562025e0, 24 [pid 7782] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144./strace-static-x86_64: Process 7785 attached [pid 7785] set_robust_list(0x5555562025e0, 24) = 0 [pid 7785] chdir("./76" [pid 7763] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7785] <... chdir resumed>) = 0 [pid 7763] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7785] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7763] <... futex resumed>) = 0 [ 109.249262][ T7760] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 109.261555][ T7766] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 109.279602][ T7766] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7785] <... prctl resumed>) = 0 [pid 7763] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7785] setpgid(0, 0 [pid 7782] <... write resumed>) = 262144 [pid 7763] <... mmap resumed>) = 0x7f5047d10000 [pid 7785] <... setpgid resumed>) = 0 [pid 7763] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7785] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7763] <... mprotect resumed>) = 0 [pid 7785] <... openat resumed>) = 3 [pid 7763] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7785] write(3, "1000", 4) = 4 [pid 7763] <... clone resumed>, parent_tid=[7787], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7787 [pid 7785] close(3 [pid 7763] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7785] <... close resumed>) = 0 [pid 7763] <... futex resumed>) = 0 [pid 7785] symlink("/dev/binderfs", "./binderfs" [pid 7782] munmap(0x7f5047cf1000, 262144 [pid 7763] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7785] <... symlink resumed>) = 0 [pid 7785] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7782] <... munmap resumed>) = 0 [pid 7785] <... futex resumed>) = 0 [pid 7785] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7782] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7785] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7782] <... openat resumed>) = 4 ./strace-static-x86_64: Process 7787 attached [pid 7785] <... mprotect resumed>) = 0 [pid 7782] ioctl(4, LOOP_SET_FD, 3 [pid 7785] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7784] <... set_robust_list resumed>) = 0 [pid 7783] set_robust_list(0x7f50501119e0, 24 [pid 7766] <... fsconfig resumed>) = 0 [pid 7784] chdir("./77" [pid 7783] <... set_robust_list resumed>) = 0 [pid 7766] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7784] <... chdir resumed>) = 0 [pid 7783] memfd_create("syzkaller", 0 [pid 7766] <... futex resumed>) = 0 [pid 7784] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7783] <... memfd_create resumed>) = 3 [pid 7766] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7784] <... prctl resumed>) = 0 [pid 7783] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7784] setpgid(0, 0 [pid 7783] <... mmap resumed>) = 0x7f5047cf1000 [pid 7784] <... setpgid resumed>) = 0 [pid 7783] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7784] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7783] <... write resumed>) = 262144 [pid 7784] <... openat resumed>) = 3 [pid 7783] munmap(0x7f5047cf1000, 262144 [pid 7784] write(3, "1000", 4 [pid 7783] <... munmap resumed>) = 0 [pid 7784] <... write resumed>) = 4 [pid 7783] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7784] close(3 [pid 7783] <... openat resumed>) = 4 [pid 7785] <... clone resumed>, parent_tid=[7788], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7788 [pid 7784] <... close resumed>) = 0 [ 109.310828][ T5001] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.323356][ T7766] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 109.325753][ T7782] loop3: detected capacity change from 0 to 512 [pid 7783] ioctl(4, LOOP_SET_FD, 3 [pid 7787] set_robust_list(0x7f5047d309e0, 24./strace-static-x86_64: Process 7788 attached ) = 0 [pid 7785] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7784] symlink("/dev/binderfs", "./binderfs" [pid 7782] <... ioctl resumed>) = 0 [pid 7788] set_robust_list(0x7f50501119e0, 24 [pid 7787] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7785] <... futex resumed>) = 0 [pid 7782] close(3 [pid 7788] <... set_robust_list resumed>) = 0 [pid 7787] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7785] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7782] <... close resumed>) = 0 [pid 7788] memfd_create("syzkaller", 0 [pid 7787] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7782] mkdir("./file0", 0777 [pid 7788] <... memfd_create resumed>) = 3 [pid 7787] <... futex resumed>) = 1 [pid 7782] <... mkdir resumed>) = 0 [pid 7763] <... futex resumed>) = 0 [pid 7788] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7787] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7782] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7763] exit_group(0 [pid 7788] <... mmap resumed>) = 0x7f5047cf1000 [pid 7787] <... futex resumed>) = ? [pid 7784] <... symlink resumed>) = 0 [pid 7783] <... ioctl resumed>) = 0 [pid 7766] <... futex resumed>) = ? [pid 7763] <... exit_group resumed>) = ? [pid 7784] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7783] close(3 [pid 7766] +++ exited with 0 +++ [pid 7784] <... futex resumed>) = 0 [pid 7783] <... close resumed>) = 0 [pid 7784] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7783] mkdir("./file0", 0777 [pid 7784] <... mmap resumed>) = 0x7f50500f1000 [pid 7787] +++ exited with 0 +++ [pid 7784] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7783] <... mkdir resumed>) = 0 [pid 7784] <... mprotect resumed>) = 0 [pid 7783] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7763] +++ exited with 0 +++ [pid 7784] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7763, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5001] <... umount2 resumed>) = 0 [pid 7784] <... clone resumed>, parent_tid=[7789], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7789 [pid 5004] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7784] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7784] <... futex resumed>) = 0 [pid 5004] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] lstat("./76/file0", [pid 7784] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5004] <... openat resumed>) = 3 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] fstat(3, [pid 5001] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7788] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5004] getdents64(3, [pid 5001] openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5004] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5001] <... openat resumed>) = 4 [pid 5004] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] fstat(4, [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 7789 attached [pid 7788] <... write resumed>) = 262144 [pid 5004] lstat("./76/binderfs", [pid 5001] getdents64(4, [pid 7789] set_robust_list(0x7f50501119e0, 24 [pid 7788] munmap(0x7f5047cf1000, 262144 [pid 5004] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7789] <... set_robust_list resumed>) = 0 [pid 5004] unlink("./76/binderfs" [pid 5001] getdents64(4, [pid 7789] memfd_create("syzkaller", 0 [pid 7788] <... munmap resumed>) = 0 [pid 5004] <... unlink resumed>) = 0 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7789] <... memfd_create resumed>) = 3 [pid 7788] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5004] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] close(4 [pid 7789] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7788] <... openat resumed>) = 4 [ 109.361529][ T7783] loop5: detected capacity change from 0 to 512 [ 109.365685][ T7782] EXT4-fs: Ignoring removed oldalloc option [ 109.376973][ T7783] EXT4-fs: Ignoring removed oldalloc option [pid 7788] ioctl(4, LOOP_SET_FD, 3 [pid 7789] <... mmap resumed>) = 0x7f5047cf1000 [pid 5001] <... close resumed>) = 0 [pid 7789] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5001] rmdir("./76/file0") = 0 [pid 5001] getdents64(3, [pid 7789] <... write resumed>) = 262144 [pid 5001] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] close(3 [pid 7789] munmap(0x7f5047cf1000, 262144 [pid 7788] <... ioctl resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 7789] <... munmap resumed>) = 0 [pid 7788] close(3) = 0 [pid 7789] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7788] mkdir("./file0", 0777 [pid 7789] <... openat resumed>) = 4 [pid 7788] <... mkdir resumed>) = 0 [pid 7789] ioctl(4, LOOP_SET_FD, 3 [pid 7788] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5001] rmdir("./76") = 0 [pid 5001] mkdir("./77", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7794 ./strace-static-x86_64: Process 7794 attached [ 109.406412][ T7788] loop0: detected capacity change from 0 to 512 [ 109.414257][ T5004] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.417291][ T7788] EXT4-fs: Ignoring removed oldalloc option [ 109.424413][ T7789] loop1: detected capacity change from 0 to 512 [ 109.442769][ T7782] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7794] set_robust_list(0x5555562025e0, 24 [pid 7789] <... ioctl resumed>) = 0 [pid 5004] <... umount2 resumed>) = 0 [pid 5004] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./76/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5004] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5004] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5004] close(4) = 0 [pid 5004] rmdir("./76/file0") = 0 [pid 5004] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5004] close(3) = 0 [pid 5004] rmdir("./76") = 0 [pid 5004] mkdir("./77", 0777) = 0 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5004] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5004] close(3) = 0 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7797 [pid 7789] close(3) = 0 [pid 7789] mkdir("./file0", 0777) = 0 [pid 7789] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7794] <... set_robust_list resumed>) = 0 [ 109.452734][ T7783] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 109.467816][ T7782] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 109.468739][ T7789] EXT4-fs: Ignoring removed oldalloc option [ 109.488630][ T7783] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set ./strace-static-x86_64: Process 7797 attached [pid 7794] chdir("./77" [pid 7797] set_robust_list(0x5555562025e0, 24) = 0 [pid 7797] chdir("./77") = 0 [pid 7797] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7797] setpgid(0, 0) = 0 [pid 7797] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7797] write(3, "1000", 4) = 4 [pid 7797] close(3) = 0 [pid 7797] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7797] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7797] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7797] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7797] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7798], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7798 [pid 7797] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7797] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7794] <... chdir resumed>) = 0 [pid 7794] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7794] setpgid(0, 0) = 0 [pid 7794] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7794] write(3, "1000", 4) = 4 [pid 7794] close(3) = 0 [pid 7794] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7794] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7794] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7794] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7794] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7799], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7799 [pid 7794] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7794] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7799 attached [pid 7799] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7799] memfd_create("syzkaller", 0) = 3 [pid 7799] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7799] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7799] munmap(0x7f5047cf1000, 262144) = 0 [pid 7799] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7799] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7799] close(3) = 0 [pid 7799] mkdir("./file0", 0777) = 0 [pid 7799] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"..../strace-static-x86_64: Process 7798 attached [ 109.504863][ T7788] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 109.515927][ T7782] EXT4-fs (loop3): 1 truncate cleaned up [ 109.524500][ T7799] loop2: detected capacity change from 0 to 512 [ 109.524906][ T7783] EXT4-fs (loop5): 1 truncate cleaned up [ 109.533078][ T7799] EXT4-fs: Ignoring removed oldalloc option [ 109.542304][ T7788] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 109.557391][ T7782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.561421][ T7783] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.570214][ T7782] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.584970][ T7789] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7798] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7783] <... mount resumed>) = 0 [pid 7782] <... mount resumed>) = 0 [pid 7798] memfd_create("syzkaller", 0 [pid 7783] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7782] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7798] <... memfd_create resumed>) = 3 [pid 7783] <... openat resumed>) = 3 [pid 7782] <... openat resumed>) = 3 [pid 7798] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7783] chdir("./file0" [pid 7782] chdir("./file0" [pid 7798] <... mmap resumed>) = 0x7f5047cf1000 [pid 7783] <... chdir resumed>) = 0 [pid 7782] <... chdir resumed>) = 0 [pid 7798] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7783] ioctl(4, LOOP_CLR_FD [pid 7782] ioctl(4, LOOP_CLR_FD [pid 7798] <... write resumed>) = 262144 [pid 7783] <... ioctl resumed>) = 0 [pid 7782] <... ioctl resumed>) = 0 [pid 7783] close(4 [pid 7782] close(4 [pid 7783] <... close resumed>) = 0 [pid 7782] <... close resumed>) = 0 [pid 7783] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7782] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7783] <... futex resumed>) = 1 [pid 7782] <... futex resumed>) = 1 [pid 7783] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7782] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7798] munmap(0x7f5047cf1000, 262144) = 0 [pid 7798] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7798] ioctl(4, LOOP_SET_FD, 3 [pid 7781] <... futex resumed>) = 0 [pid 7780] <... futex resumed>) = 0 [pid 7781] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7782] <... futex resumed>) = 0 [pid 7781] <... futex resumed>) = 1 [pid 7780] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7782] fspick(AT_FDCWD, ".", 0 [pid 7781] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7783] <... futex resumed>) = 0 [pid 7782] <... fspick resumed>) = 4 [pid 7780] <... futex resumed>) = 1 [pid 7783] fspick(AT_FDCWD, ".", 0 [pid 7782] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7783] <... fspick resumed>) = 4 [pid 7782] <... futex resumed>) = 1 [pid 7781] <... futex resumed>) = 0 [pid 7780] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7783] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7782] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7781] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7780] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7783] <... futex resumed>) = 0 [pid 7782] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7781] <... futex resumed>) = 0 [pid 7780] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7783] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7782] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7781] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7780] <... futex resumed>) = 0 [pid 7783] <... fsconfig resumed>) = 0 [pid 7782] <... fsconfig resumed>) = 0 [pid 7780] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7783] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7782] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7780] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7783] <... futex resumed>) = 0 [pid 7782] <... futex resumed>) = 1 [pid 7781] <... futex resumed>) = 0 [pid 7780] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [ 109.595743][ T7783] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.603809][ T7788] EXT4-fs (loop0): 1 truncate cleaned up [ 109.618270][ T7789] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 109.637304][ T7788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.645247][ T7798] loop4: detected capacity change from 0 to 512 [pid 7783] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7782] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7781] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7780] <... futex resumed>) = 0 [pid 7782] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7781] <... futex resumed>) = 0 [pid 7782] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7781] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7780] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7798] <... ioctl resumed>) = 0 [pid 7798] close(3) = 0 [pid 7798] mkdir("./file0", 0777) = 0 [ 109.667786][ T7799] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 109.677506][ T7783] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 109.690971][ T7799] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 109.692348][ T7798] EXT4-fs: Ignoring removed oldalloc option [pid 7798] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7781] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7781] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7781] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7783] <... fsconfig resumed>) = 0 [pid 7781] <... mmap resumed>) = 0x7f5047d10000 [pid 7781] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7788] <... mount resumed>) = 0 [pid 7783] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7781] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7788] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7783] <... futex resumed>) = 1 [pid 7780] <... futex resumed>) = 0 [pid 7782] <... fsconfig resumed>) = 0 [pid 7781] <... clone resumed>, parent_tid=[7804], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7804 [pid 7788] <... openat resumed>) = 3 [pid 7783] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7781] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7780] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7781] <... futex resumed>) = 0 [pid 7781] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7804 attached [pid 7788] chdir("./file0" [pid 7783] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7782] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7780] <... futex resumed>) = 0 [pid 7788] <... chdir resumed>) = 0 [pid 7783] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7782] <... futex resumed>) = 0 [pid 7780] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7788] ioctl(4, LOOP_CLR_FD [pid 7783] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7782] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7788] <... ioctl resumed>) = 0 [pid 7783] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7788] close(4 [pid 7783] <... futex resumed>) = 1 [pid 7780] <... futex resumed>) = 0 [pid 7788] <... close resumed>) = 0 [pid 7783] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7788] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7783] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7780] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7788] <... futex resumed>) = 1 [pid 7785] <... futex resumed>) = 0 [pid 7783] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7780] <... futex resumed>) = 0 [pid 7788] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7785] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7804] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7804] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7804] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7781] <... futex resumed>) = 0 [pid 7781] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7781] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7804] <... futex resumed>) = 1 [ 109.712178][ T7782] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 109.716091][ T7788] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.741435][ T7799] EXT4-fs (loop2): 1 truncate cleaned up [ 109.749579][ T7783] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [pid 7804] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7788] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7785] <... futex resumed>) = 0 [pid 7782] <... futex resumed>) = 0 [pid 7780] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7788] fspick(AT_FDCWD, ".", 0 [pid 7785] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7782] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7788] <... fspick resumed>) = 4 [pid 7788] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7785] <... futex resumed>) = 0 [pid 7788] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7785] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7788] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7785] <... futex resumed>) = 0 [pid 7788] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7785] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7788] <... fsconfig resumed>) = 0 [pid 7788] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7785] <... futex resumed>) = 0 [pid 7788] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7785] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7788] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7785] <... futex resumed>) = 0 [pid 7788] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 109.755613][ T7799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.775353][ T7789] EXT4-fs (loop1): 1 truncate cleaned up [ 109.776293][ T7782] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 109.786459][ T7783] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 109.794442][ T7782] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7785] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7781] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7780] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7780] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7780] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7780] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7780] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7807], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7807 [pid 7780] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 109.799219][ T7789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.809299][ T7798] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 109.820097][ T7789] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.831539][ T7799] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.843187][ T7798] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 7780] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7807 attached [pid 7789] <... mount resumed>) = 0 [pid 7781] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7807] set_robust_list(0x7f5047d309e0, 24 [pid 7781] <... futex resumed>) = 1 [pid 7785] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7807] <... set_robust_list resumed>) = 0 [pid 7804] <... futex resumed>) = 0 [pid 7788] <... fsconfig resumed>) = 0 [pid 7785] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7781] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7807] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7804] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7788] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7785] <... futex resumed>) = 0 [pid 7780] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7788] <... futex resumed>) = 0 [pid 7788] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7789] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7789] chdir("./file0") = 0 [pid 7789] ioctl(4, LOOP_CLR_FD) = 0 [pid 7807] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7804] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7799] <... mount resumed>) = 0 [pid 7785] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7783] <... fsconfig resumed>) = 0 [pid 7782] <... fsconfig resumed>) = 0 [pid 7804] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7785] <... mmap resumed>) = 0x7f5047d10000 [pid 7804] <... futex resumed>) = 1 [pid 7785] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7781] <... futex resumed>) = 0 [pid 7804] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7785] <... mprotect resumed>) = 0 [pid 7785] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7810], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7810 [pid 7785] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7785] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7783] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7783] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7810 attached [pid 7810] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7810] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [ 109.853222][ T7788] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 109.878980][ T7782] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 109.893812][ T7798] EXT4-fs (loop4): 1 truncate cleaned up [ 109.894017][ T7783] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 7810] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7785] <... futex resumed>) = 0 [pid 7785] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7785] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7810] <... futex resumed>) = 1 [pid 7810] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7807] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7789] close(4 [pid 7799] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7782] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7788] <... futex resumed>) = 0 [pid 7807] <... futex resumed>) = 0 [pid 7799] <... openat resumed>) = 3 [pid 7789] <... close resumed>) = 0 [pid 7788] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7782] <... futex resumed>) = 0 [pid 7781] exit_group(0 [pid 7804] <... futex resumed>) = ? [pid 7781] <... exit_group resumed>) = ? [pid 7804] +++ exited with 0 +++ [pid 7807] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7799] chdir("./file0" [pid 7789] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7782] +++ exited with 0 +++ [pid 7781] +++ exited with 0 +++ [pid 7780] exit_group(0 [pid 7807] <... futex resumed>) = ? [pid 7799] <... chdir resumed>) = 0 [pid 7789] <... futex resumed>) = 1 [pid 7784] <... futex resumed>) = 0 [pid 7783] <... futex resumed>) = ? [pid 7780] <... exit_group resumed>) = ? [pid 7807] +++ exited with 0 +++ [pid 7799] ioctl(4, LOOP_CLR_FD [pid 7789] fspick(AT_FDCWD, ".", 0 [pid 7784] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7783] +++ exited with 0 +++ [pid 7780] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7781, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 7799] <... ioctl resumed>) = 0 [pid 7789] <... fspick resumed>) = 4 [pid 7784] <... futex resumed>) = 0 [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7780, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5002] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7799] close(4 [pid 7789] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7784] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7799] <... close resumed>) = 0 [pid 7789] <... futex resumed>) = 0 [pid 7784] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5002] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7799] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7789] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7784] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... openat resumed>) = 3 [pid 7799] <... futex resumed>) = 1 [pid 7798] <... mount resumed>) = 0 [pid 7794] <... futex resumed>) = 0 [pid 7789] <... fsconfig resumed>) = 0 [pid 7784] <... futex resumed>) = 0 [pid 5002] fstat(3, [pid 7799] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7794] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7789] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7784] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7799] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7794] <... futex resumed>) = 0 [pid 7789] <... futex resumed>) = 0 [pid 7784] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5005] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] getdents64(3, [pid 7799] fspick(AT_FDCWD, ".", 0 [pid 7794] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7789] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7784] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7799] <... fspick resumed>) = 4 [pid 7789] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7784] <... futex resumed>) = 0 [pid 5005] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7799] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7789] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 109.900163][ T7798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.925910][ T7798] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.927048][ T7788] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 109.948550][ T7788] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7784] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... openat resumed>) = 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7799] <... futex resumed>) = 1 [pid 7798] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7794] <... futex resumed>) = 0 [pid 5005] fstat(3, [pid 5002] lstat("./75/binderfs", [pid 7798] <... openat resumed>) = 3 [pid 7794] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7785] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7799] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7798] chdir("./file0" [pid 7794] <... futex resumed>) = 0 [pid 7785] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7810] <... futex resumed>) = 0 [pid 7799] <... fsconfig resumed>) = 0 [pid 7798] <... chdir resumed>) = 0 [pid 7794] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7785] <... futex resumed>) = 1 [pid 5005] getdents64(3, [pid 5002] unlink("./75/binderfs" [pid 7810] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7799] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7798] ioctl(4, LOOP_CLR_FD [pid 7794] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7785] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7799] <... futex resumed>) = 0 [pid 7798] <... ioctl resumed>) = 0 [pid 7794] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... unlink resumed>) = 0 [pid 7799] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7798] close(4 [pid 7794] <... futex resumed>) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7810] <... openat resumed>) = 5 [pid 7798] <... close resumed>) = 0 [pid 7794] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7798] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7797] <... futex resumed>) = 0 [pid 7798] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7797] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] lstat("./76/binderfs", [pid 5002] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7798] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7797] <... futex resumed>) = 0 [pid 5005] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7798] fspick(AT_FDCWD, ".", 0 [pid 7797] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] unlink("./76/binderfs" [pid 7798] <... fspick resumed>) = 4 [pid 7798] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7798] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7797] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7797] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... unlink resumed>) = 0 [pid 7797] <... futex resumed>) = 1 [pid 7798] <... futex resumed>) = 0 [pid 7797] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7798] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 7798] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7798] <... futex resumed>) = 1 [pid 7797] <... futex resumed>) = 0 [pid 7798] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7797] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7798] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7797] <... futex resumed>) = 0 [pid 7798] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7797] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7784] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 109.959957][ T7789] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 109.988562][ T7799] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 110.002537][ T5002] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 7810] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7784] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7810] <... futex resumed>) = 1 [pid 7785] <... futex resumed>) = 0 [pid 7784] <... futex resumed>) = 0 [pid 7788] <... fsconfig resumed>) = 0 [pid 7788] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7788] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7785] exit_group(0 [pid 7784] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7785] <... exit_group resumed>) = ? [pid 7788] <... futex resumed>) = ? [pid 7784] <... mmap resumed>) = 0x7f5047d10000 [pid 7788] +++ exited with 0 +++ [pid 7784] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7799] <... fsconfig resumed>) = 0 [pid 7810] +++ exited with 0 +++ [pid 7785] +++ exited with 0 +++ [pid 7794] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7794] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7784] <... mprotect resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7785, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 7794] <... futex resumed>) = 0 [pid 7794] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7784] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 7799] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7799] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7794] <... mmap resumed>) = 0x7f5047d10000 [pid 7794] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7789] <... fsconfig resumed>) = 0 [pid 7789] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... restart_syscall resumed>) = 0 [pid 7789] <... futex resumed>) = 0 [pid 7789] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7784] <... clone resumed>, parent_tid=[7812], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7812 [pid 7794] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7784] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7812 attached ) = 0 [pid 7812] set_robust_list(0x7f5047d309e0, 24 [pid 4999] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7784] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7812] <... set_robust_list resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7812] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 4999] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7812] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7812] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7798] <... fsconfig resumed>) = 0 [pid 7797] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] <... openat resumed>) = 3 [pid 7797] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7794] <... clone resumed>, parent_tid=[7813], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7813 [pid 7797] <... futex resumed>) = 0 [pid 7794] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7797] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7794] <... futex resumed>) = 0 [pid 7798] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7797] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7794] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] fstat(3, [pid 7812] <... futex resumed>) = 1 [pid 7798] <... futex resumed>) = 0 [pid 7797] <... mprotect resumed>) = 0 [pid 7784] <... futex resumed>) = 0 [pid 7812] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7798] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7797] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7784] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7789] <... futex resumed>) = 0 [pid 7784] <... futex resumed>) = 1 [pid 7797] <... clone resumed>, parent_tid=[7814], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7814 [pid 7789] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7784] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] getdents64(3, [pid 7797] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7797] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7814 attached [pid 7814] set_robust_list(0x7f5047d309e0, 24) = 0 [ 110.014059][ T7788] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 110.014692][ T7798] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 110.041206][ T5005] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 7814] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7814] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7797] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7813 attached [pid 7797] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7798] <... futex resumed>) = 0 [pid 7797] <... futex resumed>) = 1 [pid 7813] set_robust_list(0x7f5047d309e0, 24 [pid 7798] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7797] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7814] <... futex resumed>) = 1 [pid 7814] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7813] <... set_robust_list resumed>) = 0 [pid 7813] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7813] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7794] <... futex resumed>) = 0 [pid 7794] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7799] <... futex resumed>) = 0 [pid 7794] <... futex resumed>) = 1 [pid 7799] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7794] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... umount2 resumed>) = 0 [pid 4999] lstat("./76/binderfs", [pid 5002] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./76/binderfs") = 0 [pid 7813] <... futex resumed>) = 1 [pid 7813] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 110.061439][ T7789] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 110.072946][ T7789] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 110.081464][ T7798] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 110.089953][ T7799] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [pid 5002] lstat("./75/file0", [pid 7797] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5005] <... umount2 resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7797] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7797] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7814] <... futex resumed>) = 0 [pid 7797] <... futex resumed>) = 1 [pid 7814] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7797] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7814] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 7814] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7797] <... futex resumed>) = 0 [pid 7814] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7784] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5002] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7784] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7812] <... futex resumed>) = 0 [pid 7784] <... futex resumed>) = 1 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7812] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7784] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] lstat("./76/file0", [pid 7812] <... openat resumed>) = 5 [pid 5005] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... openat resumed>) = 4 [pid 7812] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] fstat(4, [pid 7812] <... futex resumed>) = 1 [pid 7784] <... futex resumed>) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7794] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7794] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7813] <... futex resumed>) = 0 [pid 7794] <... futex resumed>) = 1 [pid 7813] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7794] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7813] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 7812] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5005] openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7813] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7794] <... futex resumed>) = 0 [pid 7813] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7789] <... fsconfig resumed>) = 0 [pid 7789] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7789] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5005] <... openat resumed>) = 4 [pid 5002] getdents64(4, [pid 5005] fstat(4, [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(4, [pid 5002] getdents64(4, [pid 5005] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5005] getdents64(4, [pid 5002] close(4 [pid 5005] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5002] <... close resumed>) = 0 [pid 5005] close(4 [pid 5002] rmdir("./75/file0" [pid 7784] exit_group(0 [pid 5005] <... close resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 7784] <... exit_group resumed>) = ? [pid 5005] rmdir("./76/file0" [pid 5002] getdents64(3, [pid 7812] <... futex resumed>) = ? [pid 5005] <... rmdir resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5005] getdents64(3, [pid 5002] close(3 [pid 7812] +++ exited with 0 +++ [pid 5005] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5002] <... close resumed>) = 0 [pid 5005] close(3 [pid 5002] rmdir("./75" [pid 7789] <... futex resumed>) = ? [pid 5005] <... close resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5005] rmdir("./76" [pid 5002] mkdir("./76", 0777 [pid 5005] <... rmdir resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5005] mkdir("./77", 0777 [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5005] <... mkdir resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5005] <... openat resumed>) = 3 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 110.119409][ T7798] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 110.128461][ T4999] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.148172][ T7799] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 110.157966][ T7789] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 5005] ioctl(3, LOOP_CLR_FD [pid 5002] close(3 [pid 5005] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... close resumed>) = 0 [pid 5005] close(3 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5005] <... close resumed>) = 0 [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... clone resumed>, child_tidptr=0x5555562025d0) = 7818 [pid 5005] <... clone resumed>, child_tidptr=0x5555562025d0) = 7819 ./strace-static-x86_64: Process 7818 attached [pid 7818] set_robust_list(0x5555562025e0, 24) = 0 [pid 7818] chdir("./76" [pid 7789] +++ exited with 0 +++ [pid 7784] +++ exited with 0 +++ [pid 4999] <... umount2 resumed>) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7784, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 4999] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7818] <... chdir resumed>) = 0 [pid 5000] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7818] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7818] <... prctl resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7818] setpgid(0, 0 [pid 5000] <... openat resumed>) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 7818] <... setpgid resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7818] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./76/file0", ./strace-static-x86_64: Process 7819 attached [pid 7818] <... openat resumed>) = 3 [pid 7818] write(3, "1000", 4) = 4 [pid 5000] lstat("./77/binderfs", [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7819] set_robust_list(0x5555562025e0, 24 [pid 7818] close(3) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] unlink("./77/binderfs" [pid 7818] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5000] <... unlink resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7818] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7819] <... set_robust_list resumed>) = 0 [pid 7818] <... futex resumed>) = 0 [pid 7818] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] <... openat resumed>) = 4 [pid 7819] chdir("./77" [pid 7818] <... mmap resumed>) = 0x7f50500f1000 [pid 7798] <... fsconfig resumed>) = 0 [ 110.187292][ T7798] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 110.205299][ T7799] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 110.223738][ T5000] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 4999] fstat(4, [pid 7819] <... chdir resumed>) = 0 [pid 7818] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7798] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7818] <... mprotect resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7818] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7798] <... futex resumed>) = 0 [pid 7798] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] getdents64(4, [pid 7818] <... clone resumed>, parent_tid=[7820], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7820 [pid 7818] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7818] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7799] <... fsconfig resumed>) = 0 [pid 7799] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7799] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7820 attached [pid 7820] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7820] memfd_create("syzkaller", 0) = 3 [pid 7820] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7820] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7820] munmap(0x7f5047cf1000, 262144) = 0 [pid 7820] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7820] ioctl(4, LOOP_SET_FD, 3 [pid 7794] exit_group(0 [pid 7797] exit_group(0 [pid 7813] <... futex resumed>) = ? [pid 7797] <... exit_group resumed>) = ? [pid 7794] <... exit_group resumed>) = ? [pid 7814] <... futex resumed>) = ? [pid 7813] +++ exited with 0 +++ [pid 7799] <... futex resumed>) = ? [pid 7798] <... futex resumed>) = ? [pid 7814] +++ exited with 0 +++ [pid 7799] +++ exited with 0 +++ [pid 7798] +++ exited with 0 +++ [pid 7820] <... ioctl resumed>) = 0 [pid 7820] close(3) = 0 [pid 7820] mkdir("./file0", 0777 [pid 7797] +++ exited with 0 +++ [pid 7820] <... mkdir resumed>) = 0 [pid 7820] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7819] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7794] +++ exited with 0 +++ [pid 4999] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7794, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7797, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 4999] getdents64(4, [pid 7819] <... prctl resumed>) = 0 [pid 5004] restart_syscall(<... resuming interrupted clone ...> [pid 4999] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7819] setpgid(0, 0 [pid 5004] <... restart_syscall resumed>) = 0 [pid 4999] close(4) = 0 [pid 7819] <... setpgid resumed>) = 0 [pid 4999] rmdir("./76/file0" [pid 5004] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... rmdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] <... openat resumed>) = 3 [pid 5001] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] getdents64(3, [pid 5004] fstat(3, [pid 5001] <... openat resumed>) = 3 [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] fstat(3, [pid 5004] getdents64(3, [pid 7819] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] close(3 [pid 5004] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5001] getdents64(3, [pid 4999] <... close resumed>) = 0 [pid 5004] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] rmdir("./76" [pid 5001] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] lstat("./77/binderfs", [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] lstat("./77/binderfs", [pid 4999] <... rmdir resumed>) = 0 [pid 5004] unlink("./77/binderfs" [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] mkdir("./77", 0777 [pid 5001] unlink("./77/binderfs" [pid 5004] <... unlink resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 5004] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 7819] <... openat resumed>) = 3 [pid 7819] write(3, "1000", 4 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 7819] <... write resumed>) = 4 [pid 7819] close(3 [pid 4999] <... close resumed>) = 0 [pid 7819] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7819] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4999] <... clone resumed>, child_tidptr=0x5555562025d0) = 7821 [pid 7819] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7819] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7819] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7819] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7822], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7822 [pid 7819] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7819] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7821 attached [pid 7821] set_robust_list(0x5555562025e0, 24) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./77/file0", [pid 7821] chdir("./77" [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7821] <... chdir resumed>) = 0 [pid 7821] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7821] setpgid(0, 0 [pid 5000] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7821] <... setpgid resumed>) = 0 [pid 5000] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7821] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] close(4) = 0 [pid 5000] rmdir("./77/file0" [pid 7821] <... openat resumed>) = 3 [pid 5000] <... rmdir resumed>) = 0 [pid 7821] write(3, "1000", 4) = 4 [pid 5000] getdents64(3, [pid 7821] close(3 [pid 5000] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 7821] <... close resumed>) = 0 [pid 7821] symlink("/dev/binderfs", "./binderfs" [pid 5000] rmdir("./77" [pid 7821] <... symlink resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5000] mkdir("./78", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7824 ./strace-static-x86_64: Process 7822 attached [pid 7822] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7822] memfd_create("syzkaller", 0) = 3 [pid 7822] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7822] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7821] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7821] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7821] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 7824 attached [pid 7822] <... write resumed>) = 262144 [pid 7821] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7826], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7826 [pid 7821] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7824] set_robust_list(0x5555562025e0, 24 [pid 7821] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7824] <... set_robust_list resumed>) = 0 [pid 7822] munmap(0x7f5047cf1000, 262144 [ 110.232118][ T7820] loop3: detected capacity change from 0 to 512 [ 110.242531][ T7820] EXT4-fs: Ignoring removed oldalloc option [ 110.256144][ T5001] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.266510][ T5004] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 7824] chdir("./78"./strace-static-x86_64: Process 7826 attached ) = 0 [pid 7822] <... munmap resumed>) = 0 [pid 7826] set_robust_list(0x7f50501119e0, 24 [pid 7824] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7822] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7826] <... set_robust_list resumed>) = 0 [pid 7824] <... prctl resumed>) = 0 [pid 7822] <... openat resumed>) = 4 [pid 7826] memfd_create("syzkaller", 0 [pid 7824] setpgid(0, 0 [pid 7822] ioctl(4, LOOP_SET_FD, 3 [pid 7826] <... memfd_create resumed>) = 3 [pid 7824] <... setpgid resumed>) = 0 [pid 7826] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7824] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7826] <... mmap resumed>) = 0x7f5047cf1000 [pid 7824] <... openat resumed>) = 3 [pid 5001] <... umount2 resumed>) = 0 [pid 7826] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [ 110.312085][ T7820] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 110.330380][ T7822] loop5: detected capacity change from 0 to 512 [pid 7824] write(3, "1000", 4 [pid 5004] <... umount2 resumed>) = 0 [pid 5001] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7826] <... write resumed>) = 262144 [pid 7824] <... write resumed>) = 4 [pid 7824] close(3) = 0 [pid 7824] symlink("/dev/binderfs", "./binderfs" [pid 7826] munmap(0x7f5047cf1000, 262144 [pid 7824] <... symlink resumed>) = 0 [pid 7826] <... munmap resumed>) = 0 [pid 7824] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7824] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7824] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7826] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7824] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7826] <... openat resumed>) = 4 [pid 7826] ioctl(4, LOOP_SET_FD, 3 [pid 7824] <... clone resumed>, parent_tid=[7827], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7827 [pid 7824] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7822] <... ioctl resumed>) = 0 [pid 5004] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7822] close(3 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./77/file0", [pid 7822] <... close resumed>) = 0 [pid 5004] lstat("./77/file0", [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7822] mkdir("./file0", 0777 [pid 5004] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7822] <... mkdir resumed>) = 0 [pid 5004] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7822] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 7827 attached [pid 7826] <... ioctl resumed>) = 0 [pid 7824] <... futex resumed>) = 0 [pid 7827] set_robust_list(0x7f50501119e0, 24 [pid 7826] close(3 [pid 7824] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7827] <... set_robust_list resumed>) = 0 [pid 7826] <... close resumed>) = 0 [pid 7827] memfd_create("syzkaller", 0 [pid 7826] mkdir("./file0", 0777 [pid 7827] <... memfd_create resumed>) = 3 [pid 7826] <... mkdir resumed>) = 0 [pid 7827] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7826] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7827] <... mmap resumed>) = 0x7f5047cf1000 [pid 5004] openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... openat resumed>) = 4 [pid 7827] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7827] munmap(0x7f5047cf1000, 262144) = 0 [ 110.354923][ T7820] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 110.363151][ T7826] loop0: detected capacity change from 0 to 512 [ 110.374670][ T7822] EXT4-fs: Ignoring removed oldalloc option [ 110.383060][ T7826] EXT4-fs: Ignoring removed oldalloc option [ 110.389744][ T7820] EXT4-fs (loop3): 1 truncate cleaned up [pid 7827] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5004] <... openat resumed>) = 4 [pid 5004] fstat(4, [pid 5001] fstat(4, [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(4, [pid 5001] getdents64(4, [pid 5004] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5004] getdents64(4, [pid 5001] getdents64(4, [pid 5004] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5004] close(4 [pid 5001] close(4 [pid 5004] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5004] rmdir("./77/file0" [pid 5001] rmdir("./77/file0" [pid 5004] <... rmdir resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5004] getdents64(3, [pid 5001] getdents64(3, [pid 7827] <... openat resumed>) = 4 [pid 5004] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7827] ioctl(4, LOOP_SET_FD, 3 [pid 5004] close(3 [pid 5001] close(3 [pid 7820] <... mount resumed>) = 0 [pid 7820] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7820] chdir("./file0") = 0 [pid 7820] ioctl(4, LOOP_CLR_FD) = 0 [pid 7820] close(4) = 0 [pid 7820] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7820] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5004] <... close resumed>) = 0 [pid 5004] rmdir("./77") = 0 [pid 5004] mkdir("./78", 0777) = 0 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5004] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5004] close(3) = 0 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7828 [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./77") = 0 [pid 7827] <... ioctl resumed>) = 0 [pid 7818] <... futex resumed>) = 0 [pid 7818] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] mkdir("./78", 0777 [pid 7827] close(3 [pid 7820] <... futex resumed>) = 0 [pid 7818] <... futex resumed>) = 1 [pid 7820] fspick(AT_FDCWD, ".", 0 [pid 7818] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] <... mkdir resumed>) = 0 [pid 7827] <... close resumed>) = 0 [pid 7820] <... fspick resumed>) = 4 [pid 7820] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7818] <... futex resumed>) = 0 [pid 7820] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7818] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7827] mkdir("./file0", 0777 [pid 7820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7818] <... futex resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7820] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7818] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7828 attached [pid 7827] <... mkdir resumed>) = 0 [pid 7820] <... fsconfig resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 7828] set_robust_list(0x5555562025e0, 24 [ 110.396248][ T7820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.409957][ T7820] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.423956][ T7827] loop1: detected capacity change from 0 to 512 [ 110.442687][ T7822] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7827] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7820] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 7828] <... set_robust_list resumed>) = 0 [pid 7820] <... futex resumed>) = 1 [pid 7818] <... futex resumed>) = 0 [pid 7820] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7818] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7818] <... futex resumed>) = 0 [pid 7820] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7818] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 110.456254][ T7827] EXT4-fs: Ignoring removed oldalloc option [ 110.459898][ T7822] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 110.463172][ T7826] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 110.486062][ T7820] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 7828] chdir("./78" [pid 5001] close(3 [pid 7828] <... chdir resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 7828] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7828] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 7833 attached [pid 7828] setpgid(0, 0 [pid 7820] <... fsconfig resumed>) = 0 [pid 7818] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7828] <... setpgid resumed>) = 0 [pid 7820] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... clone resumed>, child_tidptr=0x5555562025d0) = 7833 [pid 7818] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7828] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7818] <... futex resumed>) = 0 [pid 7820] <... futex resumed>) = 0 [pid 7818] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7828] <... openat resumed>) = 3 [pid 7820] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7833] set_robust_list(0x5555562025e0, 24 [pid 7820] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7833] <... set_robust_list resumed>) = 0 [pid 7828] write(3, "1000", 4 [pid 7833] chdir("./78" [pid 7828] <... write resumed>) = 4 [pid 7820] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7822] <... mount resumed>) = 0 [pid 7822] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7822] chdir("./file0") = 0 [pid 7822] ioctl(4, LOOP_CLR_FD) = 0 [ 110.488468][ T7826] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 110.512804][ T7822] EXT4-fs (loop5): 1 truncate cleaned up [ 110.520911][ T7822] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.537444][ T7822] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.538941][ T7826] EXT4-fs (loop0): 1 truncate cleaned up [pid 7822] close(4 [pid 7833] <... chdir resumed>) = 0 [pid 7828] close(3 [pid 7820] <... futex resumed>) = 1 [pid 7818] <... futex resumed>) = 0 [pid 7828] <... close resumed>) = 0 [pid 7820] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7818] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7833] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7828] symlink("/dev/binderfs", "./binderfs" [pid 7820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7818] <... futex resumed>) = 0 [pid 7820] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7828] <... symlink resumed>) = 0 [pid 7818] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7822] <... close resumed>) = 0 [pid 7822] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7822] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7833] <... prctl resumed>) = 0 [pid 7828] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7819] <... futex resumed>) = 0 [pid 7833] setpgid(0, 0 [pid 7828] <... futex resumed>) = 0 [pid 7819] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7826] <... mount resumed>) = 0 [pid 7826] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7826] chdir("./file0") = 0 [pid 7826] ioctl(4, LOOP_CLR_FD) = 0 [pid 7826] close(4 [pid 7833] <... setpgid resumed>) = 0 [pid 7828] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7822] <... futex resumed>) = 0 [pid 7819] <... futex resumed>) = 1 [pid 7822] fspick(AT_FDCWD, ".", 0) = 4 [pid 7822] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7833] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7822] <... futex resumed>) = 0 [pid 7822] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7828] <... mmap resumed>) = 0x7f50500f1000 [pid 7819] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7828] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7819] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7833] <... openat resumed>) = 3 [pid 7828] <... mprotect resumed>) = 0 [pid 7826] <... close resumed>) = 0 [pid 7819] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7833] write(3, "1000", 4 [pid 7828] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7819] <... futex resumed>) = 1 [pid 7819] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7833] <... write resumed>) = 4 [pid 7822] <... futex resumed>) = 0 [pid 7822] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7833] close(3) = 0 [pid 7828] <... clone resumed>, parent_tid=[7836], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7836 [pid 7822] <... fsconfig resumed>) = 0 [pid 7822] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 ./strace-static-x86_64: Process 7836 attached [pid 7833] symlink("/dev/binderfs", "./binderfs" [pid 7828] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7826] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7822] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7819] <... futex resumed>) = 0 [ 110.559455][ T7820] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 110.566720][ T7826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.570784][ T7820] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 110.582240][ T7826] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.591385][ T7827] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7833] <... symlink resumed>) = 0 [pid 7828] <... futex resumed>) = 0 [pid 7819] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7836] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7836] memfd_create("syzkaller", 0) = 3 [pid 7836] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7836] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7836] munmap(0x7f5047cf1000, 262144) = 0 [pid 7836] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7836] ioctl(4, LOOP_SET_FD, 3 [pid 7833] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7828] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7826] <... futex resumed>) = 1 [pid 7821] <... futex resumed>) = 0 [pid 7819] <... futex resumed>) = 1 [pid 7818] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7836] <... ioctl resumed>) = 0 [pid 7833] <... futex resumed>) = 0 [pid 7826] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7822] <... futex resumed>) = 0 [pid 7821] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7819] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7818] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7822] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7833] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7826] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7821] <... futex resumed>) = 0 [pid 7818] <... futex resumed>) = 0 [pid 7833] <... mmap resumed>) = 0x7f50500f1000 [pid 7826] fspick(AT_FDCWD, ".", 0 [pid 7821] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7818] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7833] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7826] <... fspick resumed>) = 4 [pid 7818] <... mmap resumed>) = 0x7f5047d10000 [pid 7833] <... mprotect resumed>) = 0 [pid 7826] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7818] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7833] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7826] <... futex resumed>) = 1 [pid 7821] <... futex resumed>) = 0 [pid 7818] <... mprotect resumed>) = 0 [pid 7826] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7821] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7818] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7833] <... clone resumed>, parent_tid=[7838], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7838 [pid 7826] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7821] <... futex resumed>) = 0 [pid 7833] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7826] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7821] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7818] <... clone resumed>, parent_tid=[7839], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7839 [pid 7833] <... futex resumed>) = 0 [pid 7826] <... fsconfig resumed>) = 0 [pid 7818] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7833] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7826] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7818] <... futex resumed>) = 0 [pid 7826] <... futex resumed>) = 1 [pid 7821] <... futex resumed>) = 0 [pid 7818] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7826] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7821] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7826] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7821] <... futex resumed>) = 0 [pid 7826] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7821] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7836] close(3) = 0 [pid 7836] mkdir("./file0", 0777) = 0 [ 110.618322][ T7827] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 110.626939][ T7836] loop4: detected capacity change from 0 to 512 [ 110.641591][ T7820] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 110.654746][ T7826] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 7836] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"..../strace-static-x86_64: Process 7839 attached ./strace-static-x86_64: Process 7838 attached [pid 7826] <... fsconfig resumed>) = 0 [pid 7822] <... fsconfig resumed>) = 0 [pid 7820] <... fsconfig resumed>) = 0 [pid 7839] set_robust_list(0x7f5047d309e0, 24 [pid 7838] set_robust_list(0x7f50501119e0, 24 [pid 7826] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7822] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7820] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7839] <... set_robust_list resumed>) = 0 [pid 7838] <... set_robust_list resumed>) = 0 [pid 7826] <... futex resumed>) = 1 [pid 7822] <... futex resumed>) = 1 [pid 7820] <... futex resumed>) = 0 [pid 7821] <... futex resumed>) = 0 [pid 7819] <... futex resumed>) = 0 [pid 7821] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7819] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7821] <... futex resumed>) = 0 [pid 7819] <... futex resumed>) = 0 [pid 7821] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7819] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7839] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7822] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7820] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7838] memfd_create("syzkaller", 0 [pid 7826] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7839] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7822] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7838] <... memfd_create resumed>) = 3 [pid 7838] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7838] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7838] munmap(0x7f5047cf1000, 262144) = 0 [pid 7838] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7838] ioctl(4, LOOP_SET_FD, 3 [pid 7839] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7826] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7822] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7818] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7818] exit_group(0) = ? [pid 7838] <... ioctl resumed>) = 0 [pid 7838] close(3) = 0 [pid 7838] mkdir("./file0", 0777) = 0 [ 110.665386][ T7822] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 110.670498][ T7836] EXT4-fs: Ignoring removed oldalloc option [ 110.682945][ T7827] EXT4-fs (loop1): 1 truncate cleaned up [ 110.690158][ T7827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.700546][ T7838] loop2: detected capacity change from 0 to 512 [pid 7838] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7839] <... futex resumed>) = ? [pid 7827] <... mount resumed>) = 0 [pid 7826] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7822] <... futex resumed>) = 1 [pid 7820] <... futex resumed>) = ? [pid 7839] +++ exited with 0 +++ [pid 7826] <... futex resumed>) = 1 [pid 7822] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7820] +++ exited with 0 +++ [pid 7818] +++ exited with 0 +++ [pid 7826] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7818, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5002] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./76/binderfs", [pid 7819] <... futex resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./76/binderfs" [pid 7821] <... futex resumed>) = 0 [pid 7819] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... unlink resumed>) = 0 [pid 7821] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7826] <... futex resumed>) = 0 [pid 7822] <... futex resumed>) = 0 [pid 7821] <... futex resumed>) = 1 [pid 7819] <... futex resumed>) = 1 [pid 7826] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 110.703371][ T7827] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.719642][ T7838] EXT4-fs: Ignoring removed oldalloc option [ 110.728695][ T7836] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 110.729588][ T7826] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 110.738839][ T7836] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 7822] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7821] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7819] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7827] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7827] chdir("./file0") = 0 [pid 7827] ioctl(4, LOOP_CLR_FD) = 0 [pid 7827] close(4) = 0 [pid 7827] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7827] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7824] <... futex resumed>) = 0 [pid 7824] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7824] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7827] <... futex resumed>) = 0 [pid 7827] fspick(AT_FDCWD, ".", 0) = 4 [pid 7827] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7827] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7824] <... futex resumed>) = 0 [pid 7824] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7824] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7827] <... futex resumed>) = 0 [ 110.746765][ T7822] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 110.772756][ T5002] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.782277][ T7826] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 110.782587][ T7822] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 110.799876][ T7836] EXT4-fs (loop4): 1 truncate cleaned up [ 110.805530][ T7836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [pid 7827] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7821] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7819] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7821] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7819] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7821] <... futex resumed>) = 0 [pid 7819] <... futex resumed>) = 0 [pid 7821] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7819] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7821] <... mmap resumed>) = 0x7f5047d10000 [pid 7819] <... mmap resumed>) = 0x7f5047d10000 [pid 7821] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7819] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7827] <... fsconfig resumed>) = 0 [pid 7821] <... mprotect resumed>) = 0 [pid 7819] <... mprotect resumed>) = 0 [pid 7827] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7821] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7819] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7827] <... futex resumed>) = 1 [pid 7824] <... futex resumed>) = 0 [pid 7827] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7824] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7821] <... clone resumed>, parent_tid=[7843], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7843 [pid 7819] <... clone resumed>, parent_tid=[7842], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7842 [pid 7824] <... futex resumed>) = 0 [pid 7821] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7819] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7824] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7821] <... futex resumed>) = 0 [pid 7819] <... futex resumed>) = 0 [pid 7821] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7819] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7843 attached [pid 7843] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7843] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000./strace-static-x86_64: Process 7842 attached [pid 7842] set_robust_list(0x7f5047d309e0, 24 [pid 7843] <... openat resumed>) = 5 [pid 7842] <... set_robust_list resumed>) = 0 [pid 7836] <... mount resumed>) = 0 [pid 7836] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7836] chdir("./file0") = 0 [pid 7836] ioctl(4, LOOP_CLR_FD) = 0 [pid 7836] close(4) = 0 [pid 7843] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7836] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7843] <... futex resumed>) = 1 [pid 7836] <... futex resumed>) = 1 [pid 7843] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7836] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7842] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7828] <... futex resumed>) = 0 [pid 7821] <... futex resumed>) = 0 [pid 7828] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7836] <... futex resumed>) = 0 [pid 7828] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7836] fspick(AT_FDCWD, ".", 0) = 4 [pid 7836] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7828] <... futex resumed>) = 0 [pid 7836] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7828] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7836] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7828] <... futex resumed>) = 0 [pid 7836] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7828] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7836] <... fsconfig resumed>) = 0 [pid 7836] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7828] <... futex resumed>) = 0 [pid 7836] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7828] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7836] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7828] <... futex resumed>) = 0 [pid 7836] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7828] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7842] <... openat resumed>) = 5 [pid 7842] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7842] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7827] <... fsconfig resumed>) = 0 [pid 7827] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7827] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7819] <... futex resumed>) = 0 [pid 7824] <... futex resumed>) = 0 [pid 7824] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7827] <... futex resumed>) = 0 [pid 7824] <... futex resumed>) = 1 [pid 7827] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7824] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7827] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7827] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7824] <... futex resumed>) = 0 [ 110.821038][ T7836] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.835153][ T7827] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 110.858169][ T7836] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 7827] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7824] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7827] <... futex resumed>) = 0 [pid 7824] <... futex resumed>) = 1 [pid 7827] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7824] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7826] <... fsconfig resumed>) = 0 [pid 7826] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7826] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7822] <... fsconfig resumed>) = 0 [pid 7822] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 110.871702][ T7826] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 110.882785][ T7822] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 110.886621][ T7838] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 110.901738][ T7827] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [pid 7822] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7836] <... fsconfig resumed>) = 0 [pid 7828] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7821] exit_group(0 [pid 7819] exit_group(0 [pid 7836] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7836] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7828] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7821] <... exit_group resumed>) = ? [pid 7819] <... exit_group resumed>) = ? [pid 7843] <... futex resumed>) = ? [pid 7842] <... futex resumed>) = ? [pid 7828] <... futex resumed>) = 1 [pid 7843] +++ exited with 0 +++ [pid 7842] +++ exited with 0 +++ [pid 7836] <... futex resumed>) = 0 [pid 7826] <... futex resumed>) = ? [pid 7822] <... futex resumed>) = ? [pid 7828] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... umount2 resumed>) = 0 [pid 7836] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 5002] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./76/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, [pid 7822] +++ exited with 0 +++ [pid 7819] +++ exited with 0 +++ [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./76/file0") = 0 [pid 5002] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 7826] +++ exited with 0 +++ [pid 7821] +++ exited with 0 +++ [pid 5002] rmdir("./76" [pid 7836] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 5002] <... rmdir resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7821, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5002] mkdir("./77", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7848 ./strace-static-x86_64: Process 7848 attached [pid 7848] set_robust_list(0x5555562025e0, 24) = 0 [pid 7848] chdir("./77") = 0 [pid 7848] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7848] setpgid(0, 0) = 0 [pid 7848] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7848] write(3, "1000", 4) = 4 [pid 7848] close(3) = 0 [pid 7848] symlink("/dev/binderfs", "./binderfs" [pid 7836] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7819, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 7836] <... futex resumed>) = 1 [pid 7828] <... futex resumed>) = 0 [pid 7828] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7836] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5005] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7828] <... futex resumed>) = 0 [pid 7848] <... symlink resumed>) = 0 [pid 7848] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7848] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7848] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7848] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7849], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7849 [pid 7848] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7848] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7849 attached [pid 7849] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7849] memfd_create("syzkaller", 0) = 3 [pid 7849] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7849] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7849] munmap(0x7f5047cf1000, 262144) = 0 [pid 7849] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7849] ioctl(4, LOOP_SET_FD, 3 [pid 7828] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7849] <... ioctl resumed>) = 0 [pid 7849] close(3) = 0 [pid 7849] mkdir("./file0", 0777) = 0 [ 110.911695][ T7838] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 110.926949][ T7827] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 110.947953][ T7836] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 110.955781][ T7849] loop3: detected capacity change from 0 to 512 [ 110.961728][ T7838] EXT4-fs (loop2): 1 truncate cleaned up [pid 7849] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7824] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5005] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7824] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... openat resumed>) = 3 [pid 7824] <... futex resumed>) = 0 [pid 5005] fstat(3, [pid 4999] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7824] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7824] <... mmap resumed>) = 0x7f5047d10000 [pid 5005] getdents64(3, [pid 4999] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7824] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5005] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] <... openat resumed>) = 3 [pid 7838] <... mount resumed>) = 0 [pid 7827] <... fsconfig resumed>) = 0 [pid 7838] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7828] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7827] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7838] chdir("./file0" [pid 7824] <... mprotect resumed>) = 0 [pid 5005] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] fstat(3, [pid 7828] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7838] <... chdir resumed>) = 0 [pid 7827] <... futex resumed>) = 0 [pid 7824] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7828] <... futex resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7838] ioctl(4, LOOP_CLR_FD [pid 7828] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5005] lstat("./77/binderfs", [pid 7838] <... ioctl resumed>) = 0 [pid 7827] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] getdents64(3, [pid 7838] close(4 [pid 7828] <... mmap resumed>) = 0x7f5047d10000 [pid 7838] <... close resumed>) = 0 [pid 5005] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7838] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7838] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7851 attached [pid 7851] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7851] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7824] <... clone resumed>, parent_tid=[7851], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7851 [pid 7824] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7824] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7851] <... futex resumed>) = 0 [pid 7851] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7828] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7833] <... futex resumed>) = 0 [pid 7828] <... mprotect resumed>) = 0 [pid 5005] unlink("./77/binderfs" [pid 7833] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7828] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7838] <... futex resumed>) = 0 [pid 7833] <... futex resumed>) = 1 [pid 5005] <... unlink resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7838] fspick(AT_FDCWD, ".", 0 [pid 7833] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7828] <... clone resumed>, parent_tid=[7853], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7853 [pid 5005] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] lstat("./77/binderfs", [pid 7838] <... fspick resumed>) = 4 [pid 7828] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7838] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7828] <... futex resumed>) = 0 [pid 7838] <... futex resumed>) = 1 [pid 7833] <... futex resumed>) = 0 [pid 7828] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] unlink("./77/binderfs" [pid 7838] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7853 attached [ 110.965894][ T7849] EXT4-fs: Ignoring removed oldalloc option [ 110.971072][ T7827] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 110.979956][ T7838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.989218][ T7836] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 111.006668][ T7838] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7853] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7853] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7851] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7851] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7824] <... futex resumed>) = 0 [pid 7824] exit_group(0 [pid 7827] <... futex resumed>) = ? [pid 7824] <... exit_group resumed>) = ? [pid 7827] +++ exited with 0 +++ [pid 7851] <... futex resumed>) = ? [pid 7851] +++ exited with 0 +++ [pid 7824] +++ exited with 0 +++ [pid 7833] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7838] <... futex resumed>) = 0 [pid 7833] <... futex resumed>) = 1 [pid 7838] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7833] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7838] <... fsconfig resumed>) = 0 [pid 7838] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7824, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 7838] <... futex resumed>) = 1 [pid 7833] <... futex resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 7838] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7833] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7838] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7833] <... futex resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7838] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7833] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... openat resumed>) = 3 [pid 7853] <... openat resumed>) = 5 [pid 5000] fstat(3, [pid 7853] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7853] <... futex resumed>) = 1 [pid 7828] <... futex resumed>) = 0 [pid 7853] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5000] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./78/binderfs") = 0 [ 111.033198][ T5005] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.047653][ T4999] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.058995][ T7838] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 111.069640][ T7849] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 5000] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7838] <... fsconfig resumed>) = 0 [pid 7838] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7838] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7836] <... fsconfig resumed>) = 0 [pid 7836] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7836] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7833] <... futex resumed>) = 0 [pid 7833] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7828] exit_group(0 [pid 7853] <... futex resumed>) = ? [pid 7833] <... futex resumed>) = 1 [pid 7828] <... exit_group resumed>) = ? [pid 7853] +++ exited with 0 +++ [pid 7833] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7838] <... futex resumed>) = 0 [pid 7838] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7836] <... futex resumed>) = ? [pid 7838] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7838] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7836] +++ exited with 0 +++ [pid 7828] +++ exited with 0 +++ [pid 7838] <... futex resumed>) = 1 [pid 7833] <... futex resumed>) = 0 [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7828, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 7833] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7838] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7833] <... futex resumed>) = 0 [pid 7833] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5004] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5004] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5004] unlink("./78/binderfs") = 0 [ 111.076071][ T7836] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 111.089284][ T5000] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.091676][ T7849] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 111.117913][ T7838] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [pid 5004] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] <... umount2 resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5005] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] lstat("./77/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5005] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./77/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5005] close(4 [pid 4999] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] rmdir("./77/file0" [pid 4999] openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5005] <... rmdir resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 5005] getdents64(3, [pid 4999] rmdir("./77/file0" [pid 5005] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5005] close(3) = 0 [pid 5005] rmdir("./77") = 0 [pid 4999] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./77" [pid 5005] mkdir("./78", 0777 [pid 4999] <... rmdir resumed>) = 0 [pid 5005] <... mkdir resumed>) = 0 [pid 4999] mkdir("./78", 0777) = 0 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5005] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5005] close(3) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7849] <... mount resumed>) = 0 [pid 7833] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5000] <... umount2 resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] ioctl(3, LOOP_CLR_FD [pid 7833] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 7833] <... futex resumed>) = 0 [pid 5005] <... clone resumed>, child_tidptr=0x5555562025d0) = 7856 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7849] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7833] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5000] lstat("./78/file0", [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7849] <... openat resumed>) = 3 [pid 7833] <... mmap resumed>) = 0x7f5047d10000 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x5555562025d0) = 7858 [pid 7849] chdir("./file0" [pid 7833] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5000] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7856 attached [pid 7849] <... chdir resumed>) = 0 [pid 7833] <... mprotect resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7849] ioctl(4, LOOP_CLR_FD [pid 7833] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5000] openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7849] <... ioctl resumed>) = 0 [ 111.137434][ T7838] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 111.140009][ T5004] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.155831][ T7849] EXT4-fs (loop3): 1 truncate cleaned up [ 111.161881][ T7849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.174983][ T7849] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/77/file0 supports timestamps until 2038-01-19 (0x7fffffff) ./strace-static-x86_64: Process 7859 attached ./strace-static-x86_64: Process 7858 attached [pid 7856] set_robust_list(0x5555562025e0, 24 [pid 7849] close(4 [pid 7833] <... clone resumed>, parent_tid=[7859], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7859 [pid 5004] <... umount2 resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 7859] set_robust_list(0x7f5047d309e0, 24 [pid 7858] set_robust_list(0x5555562025e0, 24 [pid 7856] <... set_robust_list resumed>) = 0 [pid 7849] <... close resumed>) = 0 [pid 7838] <... fsconfig resumed>) = 0 [pid 7833] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] fstat(4, [pid 7859] <... set_robust_list resumed>) = 0 [pid 7858] <... set_robust_list resumed>) = 0 [pid 7856] chdir("./78" [pid 7849] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7838] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7833] <... futex resumed>) = 0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7856] <... chdir resumed>) = 0 [pid 7856] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7856] setpgid(0, 0) = 0 [pid 7856] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7856] write(3, "1000", 4) = 4 [pid 7856] close(3) = 0 [pid 7856] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7856] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7856] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7856] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7859] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7858] chdir("./78" [pid 7856] <... mprotect resumed>) = 0 [pid 7849] <... futex resumed>) = 1 [pid 7833] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7848] <... futex resumed>) = 0 [pid 5004] lstat("./78/file0", [pid 7856] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5000] getdents64(4, [pid 7856] <... clone resumed>, parent_tid=[7860], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7860 [pid 7856] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7856] <... futex resumed>) = 0 [pid 7848] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7856] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7860 attached [pid 7860] set_robust_list(0x7f50501119e0, 24 [pid 7849] fspick(AT_FDCWD, ".", 0 [pid 7848] <... futex resumed>) = 0 [pid 5004] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7858] <... chdir resumed>) = 0 [pid 7849] <... fspick resumed>) = 4 [pid 7848] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7858] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7849] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] getdents64(4, [pid 7859] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7858] <... prctl resumed>) = 0 [pid 7849] <... futex resumed>) = 0 [pid 7848] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7858] setpgid(0, 0 [pid 7849] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7848] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7859] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7858] <... setpgid resumed>) = 0 [pid 7849] <... fsconfig resumed>) = 0 [pid 7848] <... futex resumed>) = 0 [pid 5000] close(4 [pid 7859] <... futex resumed>) = 1 [pid 7833] <... futex resumed>) = 0 [pid 5004] <... openat resumed>) = 4 [pid 7858] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7848] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7833] exit_group(0 [pid 7849] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7848] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5004] fstat(4, [pid 5000] <... close resumed>) = 0 [pid 7858] <... openat resumed>) = 3 [pid 7833] <... exit_group resumed>) = ? [pid 7849] <... futex resumed>) = 0 [pid 7848] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7860] <... set_robust_list resumed>) = 0 [pid 7848] <... futex resumed>) = 0 [pid 7849] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5000] rmdir("./78/file0" [pid 7848] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] getdents64(4, [pid 7860] memfd_create("syzkaller", 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5004] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7859] +++ exited with 0 +++ [pid 7858] write(3, "1000", 4 [pid 5004] getdents64(4, [pid 5000] getdents64(3, [pid 7858] <... write resumed>) = 4 [pid 7838] <... futex resumed>) = ? [pid 5004] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7860] <... memfd_create resumed>) = 3 [pid 5004] close(4 [pid 7860] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7858] close(3 [pid 5000] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7860] <... mmap resumed>) = 0x7f5047cf1000 [pid 7858] <... close resumed>) = 0 [pid 5004] <... close resumed>) = 0 [pid 5000] close(3 [pid 7858] symlink("/dev/binderfs", "./binderfs" [pid 5004] rmdir("./78/file0" [pid 5000] <... close resumed>) = 0 [pid 7860] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7858] <... symlink resumed>) = 0 [pid 5004] <... rmdir resumed>) = 0 [pid 5000] rmdir("./78" [pid 7858] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5004] getdents64(3, [pid 5000] <... rmdir resumed>) = 0 [pid 7858] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5004] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7858] <... mmap resumed>) = 0x7f50500f1000 [pid 5004] close(3 [pid 5000] mkdir("./79", 0777 [pid 7858] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 5004] <... close resumed>) = 0 [pid 5004] rmdir("./78" [pid 5000] <... mkdir resumed>) = 0 [pid 7858] <... mprotect resumed>) = 0 [pid 5004] <... rmdir resumed>) = 0 [pid 7858] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5004] mkdir("./79", 0777 [pid 7860] <... write resumed>) = 262144 [pid 7860] munmap(0x7f5047cf1000, 262144 [pid 5000] <... openat resumed>) = 3 [pid 7858] <... clone resumed>, parent_tid=[7861], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7861 [pid 5004] <... mkdir resumed>) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 7858] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7860] <... munmap resumed>) = 0 [pid 7858] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7860] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5004] <... openat resumed>) = 3 [pid 5000] close(3 [pid 5004] ioctl(3, LOOP_CLR_FD [pid 7860] <... openat resumed>) = 4 [pid 5000] <... close resumed>) = 0 [pid 7860] ioctl(4, LOOP_SET_FD, 3 [pid 5004] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 111.217566][ T7838] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 111.251690][ T7849] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7861 attached [pid 7838] +++ exited with 0 +++ [pid 7833] +++ exited with 0 +++ [pid 5004] close(3 [pid 7861] set_robust_list(0x7f50501119e0, 24) = 0 [pid 5004] <... close resumed>) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7833, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5000] <... clone resumed>, child_tidptr=0x5555562025d0) = 7862 ./strace-static-x86_64: Process 7862 attached [pid 7861] memfd_create("syzkaller", 0) = 3 [pid 7861] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7862] set_robust_list(0x5555562025e0, 24 [pid 7861] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7849] <... fsconfig resumed>) = 0 [pid 7849] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7849] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7862] <... set_robust_list resumed>) = 0 [pid 7848] <... futex resumed>) = 0 [pid 5004] <... clone resumed>, child_tidptr=0x5555562025d0) = 7863 [pid 5001] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7848] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7849] <... futex resumed>) = 0 [pid 7848] <... futex resumed>) = 1 [pid 5001] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7849] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7849] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7849] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7848] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7861] <... write resumed>) = 262144 [pid 7848] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5001] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7863 attached [pid 7848] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] fstat(3, [pid 7863] set_robust_list(0x5555562025e0, 24 [pid 7862] chdir("./79" [pid 7861] munmap(0x7f5047cf1000, 262144 [pid 7849] <... futex resumed>) = 0 [pid 7848] <... futex resumed>) = 1 [pid 7863] <... set_robust_list resumed>) = 0 [pid 7862] <... chdir resumed>) = 0 [pid 7861] <... munmap resumed>) = 0 [pid 7849] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7848] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7863] chdir("./79" [pid 7862] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7861] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7863] <... chdir resumed>) = 0 [pid 7861] <... openat resumed>) = 4 [pid 7863] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7861] ioctl(4, LOOP_SET_FD, 3 [pid 7863] <... prctl resumed>) = 0 [pid 7862] <... prctl resumed>) = 0 [pid 5001] getdents64(3, [pid 7860] <... ioctl resumed>) = 0 [pid 7863] setpgid(0, 0) = 0 [pid 7863] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7862] setpgid(0, 0 [pid 5001] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7862] <... setpgid resumed>) = 0 [pid 5001] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7860] close(3 [pid 7863] write(3, "1000", 4) = 4 [pid 7862] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7860] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7863] close(3) = 0 [pid 7863] symlink("/dev/binderfs", "./binderfs" [pid 5001] lstat("./78/binderfs", [pid 7863] <... symlink resumed>) = 0 [pid 7862] <... openat resumed>) = 3 [pid 7860] mkdir("./file0", 0777 [pid 7863] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7863] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7863] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7862] write(3, "1000", 4 [pid 7863] <... mprotect resumed>) = 0 [pid 7863] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7862] <... write resumed>) = 4 [pid 7860] <... mkdir resumed>) = 0 [pid 5001] unlink("./78/binderfs" [pid 7863] <... clone resumed>, parent_tid=[7864], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7864 [pid 7863] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7863] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7861] <... ioctl resumed>) = 0 [pid 7861] close(3) = 0 [pid 7861] mkdir("./file0", 0777./strace-static-x86_64: Process 7864 attached [pid 7864] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7864] memfd_create("syzkaller", 0) = 3 [pid 7864] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7861] <... mkdir resumed>) = 0 [ 111.273992][ T7860] loop5: detected capacity change from 0 to 512 [ 111.292015][ T7849] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 111.303638][ T7861] loop0: detected capacity change from 0 to 512 [ 111.315276][ T7849] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7861] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7864] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7862] close(3 [pid 7860] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5001] <... unlink resumed>) = 0 [pid 7862] <... close resumed>) = 0 [pid 7864] <... write resumed>) = 262144 [pid 7864] munmap(0x7f5047cf1000, 262144) = 0 [pid 7864] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7864] ioctl(4, LOOP_SET_FD, 3 [pid 7862] symlink("/dev/binderfs", "./binderfs" [pid 5001] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7864] <... ioctl resumed>) = 0 [pid 7864] close(3) = 0 [pid 7864] mkdir("./file0", 0777 [pid 7862] <... symlink resumed>) = 0 [pid 7864] <... mkdir resumed>) = 0 [pid 7864] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7862] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7862] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7848] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7848] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7848] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7848] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7848] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7866], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7866 [pid 7848] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7848] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7866 attached [pid 7866] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7866] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 ENOSPC (No space left on device) [pid 7866] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7848] <... futex resumed>) = 0 [pid 7866] <... futex resumed>) = 1 [pid 7866] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7862] <... mmap resumed>) = 0x7f50500f1000 [pid 7862] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7862] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7849] <... fsconfig resumed>) = 0 ./strace-static-x86_64: Process 7869 attached [pid 7849] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7862] <... clone resumed>, parent_tid=[7869], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7869 [pid 7862] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7862] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7849] <... futex resumed>) = 0 [pid 7849] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7869] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7869] memfd_create("syzkaller", 0) = 3 [pid 7869] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [ 111.320586][ T7861] EXT4-fs: Ignoring removed oldalloc option [ 111.330223][ T7860] EXT4-fs: Ignoring removed oldalloc option [ 111.332631][ T7864] loop4: detected capacity change from 0 to 512 [ 111.346213][ T5001] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.346221][ T7864] EXT4-fs: Ignoring removed oldalloc option [ 111.348391][ T7849] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 7869] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7869] munmap(0x7f5047cf1000, 262144 [pid 7848] exit_group(0 [pid 7866] <... futex resumed>) = ? [pid 7849] <... futex resumed>) = ? [pid 7848] <... exit_group resumed>) = ? [pid 7869] <... munmap resumed>) = 0 [pid 7866] +++ exited with 0 +++ [pid 7849] +++ exited with 0 +++ [pid 5001] <... umount2 resumed>) = 0 [pid 7848] +++ exited with 0 +++ [pid 7869] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7848, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5001] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7869] <... openat resumed>) = 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./77/binderfs") = 0 [pid 5002] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7869] ioctl(4, LOOP_SET_FD, 3 [pid 5001] lstat("./78/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./78/file0") = 0 [pid 5001] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./78") = 0 [pid 5001] mkdir("./79", 0777) = 0 [ 111.382703][ T7861] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 111.396581][ T7864] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 111.408413][ T7861] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 111.424653][ T7860] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7874 ./strace-static-x86_64: Process 7874 attached [pid 7869] <... ioctl resumed>) = 0 [pid 7874] set_robust_list(0x5555562025e0, 24 [pid 7869] close(3 [pid 7874] <... set_robust_list resumed>) = 0 [pid 7869] <... close resumed>) = 0 [pid 7874] chdir("./79" [pid 7869] mkdir("./file0", 0777 [pid 7874] <... chdir resumed>) = 0 [pid 7869] <... mkdir resumed>) = 0 [pid 7874] prctl(PR_SET_PDEATHSIG, SIGKILL [ 111.434366][ T5002] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.444012][ T7869] loop1: detected capacity change from 0 to 512 [ 111.455322][ T7860] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 111.477950][ T7861] EXT4-fs (loop0): 1 truncate cleaned up [pid 7869] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7874] <... prctl resumed>) = 0 [pid 7874] setpgid(0, 0) = 0 [pid 7874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7874] write(3, "1000", 4) = 4 [pid 7874] close(3) = 0 [pid 7874] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7874] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7874] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7874] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7874] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7875], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7875 [pid 7874] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7874] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7861] <... mount resumed>) = 0 [pid 7861] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7861] chdir("./file0") = 0 [pid 7861] ioctl(4, LOOP_CLR_FD) = 0 [ 111.481381][ T7869] EXT4-fs: Ignoring removed oldalloc option [ 111.483778][ T7864] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 111.501789][ T7861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.505135][ T7860] EXT4-fs (loop5): 1 truncate cleaned up [ 111.517141][ T7861] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7861] close(4./strace-static-x86_64: Process 7875 attached ) = 0 [pid 7861] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7858] <... futex resumed>) = 0 [pid 7861] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7875] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7875] memfd_create("syzkaller", 0 [pid 7858] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7875] <... memfd_create resumed>) = 3 [pid 7875] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7875] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [ 111.539473][ T7864] EXT4-fs (loop4): 1 truncate cleaned up [ 111.547317][ T7860] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.565495][ T7860] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7875] munmap(0x7f5047cf1000, 262144 [pid 7861] <... futex resumed>) = 0 [pid 7860] <... mount resumed>) = 0 [pid 7858] <... futex resumed>) = 1 [pid 7861] fspick(AT_FDCWD, ".", 0 [pid 7858] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7861] <... fspick resumed>) = 4 [pid 7861] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7858] <... futex resumed>) = 0 [pid 7861] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7858] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7861] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7858] <... futex resumed>) = 0 [pid 7861] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7858] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7861] <... fsconfig resumed>) = 0 [pid 7860] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7861] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7860] <... openat resumed>) = 3 [pid 7875] <... munmap resumed>) = 0 [pid 7861] <... futex resumed>) = 1 [pid 7860] chdir("./file0" [pid 7858] <... futex resumed>) = 0 [pid 7875] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7861] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7860] <... chdir resumed>) = 0 [pid 7858] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7875] <... openat resumed>) = 4 [pid 7861] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7860] ioctl(4, LOOP_CLR_FD [pid 7858] <... futex resumed>) = 0 [pid 7875] ioctl(4, LOOP_SET_FD, 3 [pid 7861] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7860] <... ioctl resumed>) = 0 [pid 7858] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7860] close(4) = 0 [pid 7860] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7860] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7875] <... ioctl resumed>) = 0 [pid 7875] close(3) = 0 [pid 7875] mkdir("./file0", 0777) = 0 [pid 7875] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7856] <... futex resumed>) = 0 [pid 7856] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7860] <... futex resumed>) = 0 [pid 7856] <... futex resumed>) = 1 [pid 7864] <... mount resumed>) = 0 [pid 7864] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7860] fspick(AT_FDCWD, ".", 0 [pid 5002] <... umount2 resumed>) = 0 [pid 7860] <... fspick resumed>) = 4 [pid 7856] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7860] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7856] <... futex resumed>) = 0 [pid 7856] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7860] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7864] <... openat resumed>) = 3 [pid 7864] chdir("./file0") = 0 [pid 7864] ioctl(4, LOOP_CLR_FD) = 0 [pid 7864] close(4) = 0 [pid 7864] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7864] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7863] <... futex resumed>) = 0 [pid 7863] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7856] <... futex resumed>) = 0 [pid 7863] <... futex resumed>) = 1 [pid 7860] <... fsconfig resumed>) = 0 [pid 7864] <... futex resumed>) = 0 [pid 7864] fspick(AT_FDCWD, ".", 0 [pid 7863] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7860] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7856] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7860] <... futex resumed>) = 0 [pid 7856] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5002] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7860] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7856] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7864] <... fspick resumed>) = 4 [pid 7860] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7856] <... futex resumed>) = 0 [pid 5002] lstat("./77/file0", [pid 7864] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7863] <... futex resumed>) = 0 [pid 7863] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7863] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7860] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7856] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 111.576446][ T7864] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.584639][ T7875] loop2: detected capacity change from 0 to 512 [ 111.592630][ T7864] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.600969][ T7875] EXT4-fs: Ignoring removed oldalloc option [ 111.618699][ T7861] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 5002] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7864] <... futex resumed>) = 1 [pid 5002] openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7864] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 7864] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7863] <... futex resumed>) = 0 [pid 7863] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5002] <... openat resumed>) = 4 [pid 7863] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7864] <... futex resumed>) = 1 [pid 7864] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7861] <... fsconfig resumed>) = 0 [pid 5002] fstat(4, [pid 7861] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7861] <... futex resumed>) = 1 [pid 5002] getdents64(4, [pid 7861] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, [pid 7858] <... futex resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5002] close(4 [pid 7858] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... close resumed>) = 0 [pid 7861] <... futex resumed>) = 0 [pid 7858] <... futex resumed>) = 1 [pid 5002] rmdir("./77/file0") = 0 [pid 5002] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./77") = 0 [pid 5002] mkdir("./78", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 7861] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7858] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... close resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7880 [pid 7856] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7861] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7863] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7863] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7861] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7863] <... futex resumed>) = 0 [pid 7861] <... futex resumed>) = 1 [pid 7858] <... futex resumed>) = 0 [pid 7863] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7858] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7863] <... mmap resumed>) = 0x7f5047d10000 [pid 7858] <... futex resumed>) = 0 [pid 7856] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7858] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7863] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7861] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7856] <... futex resumed>) = 0 [pid 7856] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7856] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7856] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7881], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7881 [pid 7856] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 111.634661][ T7869] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 111.645662][ T7860] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 111.661192][ T7875] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 111.670971][ T7869] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 7856] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7863] <... mprotect resumed>) = 0 [pid 7863] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7882], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7882 [pid 7863] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7863] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7882 attached ./strace-static-x86_64: Process 7881 attached ./strace-static-x86_64: Process 7880 attached [pid 7864] <... fsconfig resumed>) = 0 [pid 7860] <... fsconfig resumed>) = 0 [pid 7880] set_robust_list(0x5555562025e0, 24) = 0 [pid 7864] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7880] chdir("./78") = 0 [pid 7864] <... futex resumed>) = 0 [pid 7880] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7880] setpgid(0, 0) = 0 [pid 7880] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7880] write(3, "1000", 4 [pid 7860] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7880] <... write resumed>) = 4 [pid 7880] close(3 [pid 7860] <... futex resumed>) = 0 [pid 7880] <... close resumed>) = 0 [pid 7880] symlink("/dev/binderfs", "./binderfs" [pid 7860] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7880] <... symlink resumed>) = 0 [pid 7880] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7880] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7880] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7880] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7883], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7883 [pid 7880] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7880] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7864] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7881] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7881] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [ 111.687498][ T7861] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 111.690700][ T7864] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 111.712410][ T7869] EXT4-fs (loop1): 1 truncate cleaned up [ 111.718802][ T7875] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 7881] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7856] <... futex resumed>) = 0 [pid 7881] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7856] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7860] <... futex resumed>) = 0 [pid 7856] <... futex resumed>) = 1 [pid 7860] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7856] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7882] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7882] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7882] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7882] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7858] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7858] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7858] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7863] <... futex resumed>) = 0 [pid 7858] <... mmap resumed>) = 0x7f5047d10000 [pid 7858] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7863] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7864] <... futex resumed>) = 0 [pid 7863] <... futex resumed>) = 1 [pid 7858] <... mprotect resumed>) = 0 [pid 7864] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7863] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7858] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7884 attached ./strace-static-x86_64: Process 7883 attached [pid 7856] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7856] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7881] <... futex resumed>) = 0 [pid 7856] <... futex resumed>) = 1 [pid 7881] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 111.721093][ T7860] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 111.733703][ T7861] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 111.756965][ T7864] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 111.757822][ T7860] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 111.771728][ T7864] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7856] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7884] set_robust_list(0x7f5047d309e0, 24 [pid 7883] set_robust_list(0x7f50501119e0, 24 [pid 7858] <... clone resumed>, parent_tid=[7884], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7884 [pid 7884] <... set_robust_list resumed>) = 0 [pid 7884] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7883] <... set_robust_list resumed>) = 0 [pid 7881] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 7858] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7881] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7856] <... futex resumed>) = 0 [pid 7883] memfd_create("syzkaller", 0 [pid 7881] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7858] <... futex resumed>) = 0 [pid 7858] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7883] <... memfd_create resumed>) = 3 [pid 7883] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7869] <... mount resumed>) = 0 [pid 7884] <... openat resumed>) = 5 [pid 7869] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7883] <... mmap resumed>) = 0x7f5047cf1000 [pid 7884] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7869] <... openat resumed>) = 3 [pid 7869] chdir("./file0") = 0 [pid 7869] ioctl(4, LOOP_CLR_FD [pid 7883] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7884] <... futex resumed>) = 1 [pid 7858] <... futex resumed>) = 0 [pid 7884] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7869] <... ioctl resumed>) = 0 [pid 7869] close(4 [pid 7883] <... write resumed>) = 262144 [pid 7883] munmap(0x7f5047cf1000, 262144 [pid 7863] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7869] <... close resumed>) = 0 [pid 7883] <... munmap resumed>) = 0 [pid 7863] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7882] <... futex resumed>) = 0 [pid 7863] <... futex resumed>) = 1 [pid 7882] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7863] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7883] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7882] <... openat resumed>) = 5 [pid 7882] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7882] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7869] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7869] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7875] <... mount resumed>) = 0 [pid 7875] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7875] chdir("./file0") = 0 [ 111.778494][ T7869] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.807482][ T7875] EXT4-fs (loop2): 1 truncate cleaned up [ 111.813316][ T7875] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7875] ioctl(4, LOOP_CLR_FD) = 0 [pid 7875] close(4 [pid 7863] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7862] <... futex resumed>) = 0 [pid 7862] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7869] <... futex resumed>) = 0 [pid 7862] <... futex resumed>) = 1 [pid 7883] <... openat resumed>) = 4 [pid 7875] <... close resumed>) = 0 [pid 7869] fspick(AT_FDCWD, ".", 0 [pid 7862] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7861] <... fsconfig resumed>) = 0 [pid 7883] ioctl(4, LOOP_SET_FD, 3 [pid 7875] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7874] <... futex resumed>) = 0 [pid 7869] <... fspick resumed>) = 4 [pid 7875] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7874] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7875] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7874] <... futex resumed>) = 0 [pid 7875] fspick(AT_FDCWD, ".", 0 [pid 7874] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7875] <... fspick resumed>) = 4 [pid 7875] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7874] <... futex resumed>) = 0 [pid 7875] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7874] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7875] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7874] <... futex resumed>) = 0 [pid 7875] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7874] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7875] <... fsconfig resumed>) = 0 [pid 7875] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 111.831135][ T7861] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 111.843382][ T7860] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 111.853571][ T7883] loop3: detected capacity change from 0 to 512 [ 111.860442][ T7864] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 111.875457][ T7875] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 7874] <... futex resumed>) = 0 [pid 7861] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7883] <... ioctl resumed>) = 0 [pid 7875] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7874] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7869] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7864] <... fsconfig resumed>) = 0 [pid 7860] <... fsconfig resumed>) = 0 [pid 7875] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7874] <... futex resumed>) = 0 [pid 7869] <... futex resumed>) = 1 [pid 7864] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7862] <... futex resumed>) = 0 [pid 7860] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7858] exit_group(0 [pid 7884] <... futex resumed>) = ? [pid 7883] close(3 [pid 7875] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7874] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7869] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7862] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7858] <... exit_group resumed>) = ? [pid 7884] +++ exited with 0 +++ [pid 7883] <... close resumed>) = 0 [pid 7869] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7864] <... futex resumed>) = 0 [pid 7862] <... futex resumed>) = 0 [pid 7860] <... futex resumed>) = 0 [pid 7883] mkdir("./file0", 0777 [pid 7869] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7864] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7860] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7856] exit_group(0 [pid 7883] <... mkdir resumed>) = 0 [pid 7881] <... futex resumed>) = ? [pid 7869] <... fsconfig resumed>) = 0 [pid 7862] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7860] <... futex resumed>) = ? [pid 7856] <... exit_group resumed>) = ? [pid 7883] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7881] +++ exited with 0 +++ [pid 7869] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7860] +++ exited with 0 +++ [pid 7856] +++ exited with 0 +++ [pid 7869] <... futex resumed>) = 0 [pid 7863] exit_group(0 [pid 7862] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7882] <... futex resumed>) = ? [pid 7869] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7864] <... futex resumed>) = ? [pid 7863] <... exit_group resumed>) = ? [pid 7862] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7861] <... futex resumed>) = ? [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7856, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 7882] +++ exited with 0 +++ [pid 7869] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7864] +++ exited with 0 +++ [pid 7869] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7863] +++ exited with 0 +++ [pid 7862] <... futex resumed>) = 0 [pid 5005] restart_syscall(<... resuming interrupted clone ...> [pid 7862] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... restart_syscall resumed>) = 0 [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7863, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5004] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5005] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5004] <... openat resumed>) = 3 [pid 5005] fstat(3, [pid 5004] fstat(3, [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(3, [pid 5004] getdents64(3, [pid 5005] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7861] +++ exited with 0 +++ [pid 7858] +++ exited with 0 +++ [pid 5005] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] lstat("./78/binderfs", [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7858, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5004] lstat("./79/binderfs", [pid 7875] <... fsconfig resumed>) = 0 [pid 5005] unlink("./78/binderfs" [pid 5004] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7875] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7874] <... futex resumed>) = 0 [pid 5005] <... unlink resumed>) = 0 [pid 5004] unlink("./79/binderfs" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7874] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7875] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7875] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7874] <... futex resumed>) = 0 [pid 5004] <... unlink resumed>) = 0 [pid 7874] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5004] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7874] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7875] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] <... openat resumed>) = 3 [pid 7874] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7875] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7874] <... futex resumed>) = 0 [pid 4999] fstat(3, [pid 7875] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7874] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./78/binderfs" [pid 7869] <... fsconfig resumed>) = 0 [pid 7869] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7862] <... futex resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 7862] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7869] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7862] <... futex resumed>) = 0 [pid 7869] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7869] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7862] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 7862] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7869] <... futex resumed>) = 0 [pid 7862] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 111.878205][ T7883] EXT4-fs: Ignoring removed oldalloc option [ 111.904312][ T7869] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 111.918935][ T7875] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 111.929967][ T7883] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7869] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5005] <... umount2 resumed>) = 0 [pid 7874] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7874] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7874] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7874] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7874] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7890], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7890 [pid 7874] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7874] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] lstat("./78/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7862] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5005] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7862] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7862] <... futex resumed>) = 0 [pid 5005] openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7862] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5005] <... openat resumed>) = 4 [pid 7862] <... mmap resumed>) = 0x7f5047d10000 [pid 7862] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7862] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7892], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7892 [pid 7862] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7862] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 111.940726][ T7869] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 111.944307][ T7875] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 111.952575][ T7869] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 111.976434][ T7883] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 5005] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5005] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5005] close(4) = 0 [pid 5005] rmdir("./78/file0") = 0 [pid 5005] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5005] close(3) = 0 [pid 5005] rmdir("./78") = 0 [pid 5005] mkdir("./79", 0777) = 0 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5004] <... umount2 resumed>) = 0 [pid 5005] <... openat resumed>) = 3 [pid 5005] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 111.998005][ T7883] EXT4-fs (loop3): 1 truncate cleaned up [ 112.004072][ T7883] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.020671][ T7869] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 112.036064][ T7883] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 5005] close(3./strace-static-x86_64: Process 7892 attached ./strace-static-x86_64: Process 7890 attached [pid 7883] <... mount resumed>) = 0 [pid 5004] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7892] set_robust_list(0x7f5047d309e0, 24 [pid 7890] set_robust_list(0x7f5047d309e0, 24 [pid 7883] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7892] <... set_robust_list resumed>) = 0 [pid 7890] <... set_robust_list resumed>) = 0 [pid 7883] <... openat resumed>) = 3 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7892] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7890] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7883] chdir("./file0") = 0 [pid 5004] lstat("./79/file0", [pid 7883] ioctl(4, LOOP_CLR_FD) = 0 [pid 5004] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7883] close(4) = 0 [pid 5004] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7883] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7880] <... futex resumed>) = 0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7883] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7880] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7883] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7880] <... futex resumed>) = 0 [pid 5004] openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7883] fspick(AT_FDCWD, ".", 0 [pid 7880] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7883] <... fspick resumed>) = 4 [pid 5004] <... openat resumed>) = 4 [pid 7883] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7880] <... futex resumed>) = 0 [pid 5004] fstat(4, [pid 7883] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7880] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7883] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7880] <... futex resumed>) = 0 [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7883] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7880] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] getdents64(4, [pid 7883] <... fsconfig resumed>) = 0 [pid 5004] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7883] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] getdents64(4, [pid 7883] <... futex resumed>) = 1 [pid 7880] <... futex resumed>) = 0 [pid 5004] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7883] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7880] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] close(4 [pid 7883] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7880] <... futex resumed>) = 0 [pid 5004] <... close resumed>) = 0 [pid 7883] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7880] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] rmdir("./79/file0") = 0 [pid 5004] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5004] close(3) = 0 [pid 5004] rmdir("./79") = 0 [pid 5004] mkdir("./80", 0777) = 0 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5004] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5004] close(3) = 0 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7894 ./strace-static-x86_64: Process 7894 attached [pid 7894] set_robust_list(0x5555562025e0, 24) = 0 [pid 7874] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7894] chdir("./80") = 0 [pid 7894] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7894] setpgid(0, 0) = 0 [pid 7894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7892] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7892] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7862] <... futex resumed>) = 0 [pid 7892] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7894] <... openat resumed>) = 3 [pid 7894] write(3, "1000", 4) = 4 [pid 7894] close(3) = 0 [pid 7894] symlink("/dev/binderfs", "./binderfs" [pid 7890] <... openat resumed>) = 5 [pid 7890] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7890] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7894] <... symlink resumed>) = 0 [pid 7894] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7894] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7894] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7894] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7895], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7895 [pid 7894] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7894] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7895 attached [pid 7895] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7895] memfd_create("syzkaller", 0) = 3 [pid 7895] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7895] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7895] munmap(0x7f5047cf1000, 262144) = 0 [pid 7895] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7895] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5005] <... close resumed>) = 0 [pid 7869] <... fsconfig resumed>) = 0 [pid 7869] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7869] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7895] close(3 [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7862] exit_group(0 [pid 7892] <... futex resumed>) = ? [pid 7862] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 7896 attached [pid 7895] <... close resumed>) = 0 [pid 7892] +++ exited with 0 +++ [pid 7875] <... fsconfig resumed>) = 0 [pid 7883] <... fsconfig resumed>) = 0 [pid 7896] set_robust_list(0x5555562025e0, 24 [pid 7895] mkdir("./file0", 0777 [pid 5005] <... clone resumed>, child_tidptr=0x5555562025d0) = 7896 [pid 7896] <... set_robust_list resumed>) = 0 [pid 7869] <... futex resumed>) = ? [pid 7895] <... mkdir resumed>) = 0 [pid 7896] chdir("./79" [pid 7895] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7896] <... chdir resumed>) = 0 [pid 7896] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7883] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7880] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7875] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7869] +++ exited with 0 +++ [pid 7862] +++ exited with 0 +++ [pid 4999] <... umount2 resumed>) = 0 [pid 7896] <... prctl resumed>) = 0 [pid 7883] <... futex resumed>) = 0 [pid 7880] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7875] <... futex resumed>) = 0 [pid 7874] exit_group(0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7862, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 4999] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7896] setpgid(0, 0 [pid 7890] <... futex resumed>) = ? [pid 7883] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7880] <... futex resumed>) = 0 [pid 7874] <... exit_group resumed>) = ? [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7896] <... setpgid resumed>) = 0 [pid 7890] +++ exited with 0 +++ [pid 7883] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7880] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7875] +++ exited with 0 +++ [pid 7874] +++ exited with 0 +++ [pid 4999] lstat("./78/file0", [pid 7896] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7883] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7880] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5000] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7883] <... futex resumed>) = 0 [pid 7880] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7874, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7896] <... openat resumed>) = 3 [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5000] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 112.045259][ T7895] loop4: detected capacity change from 0 to 512 [ 112.048145][ T7875] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 112.071940][ T7895] EXT4-fs: Ignoring removed oldalloc option [pid 7896] write(3, "1000", 4 [pid 7883] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7880] <... futex resumed>) = 0 [pid 5001] <... restart_syscall resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 4999] openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7896] <... write resumed>) = 4 [pid 5000] fstat(3, [pid 4999] <... openat resumed>) = 4 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] fstat(4, [pid 5001] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] getdents64(3, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] getdents64(4, [pid 5001] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5001] <... openat resumed>) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] getdents64(4, [pid 5001] fstat(3, [pid 5000] lstat("./79/binderfs", [pid 4999] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] close(4 [pid 5001] getdents64(3, [pid 5000] unlink("./79/binderfs" [pid 4999] <... close resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5000] <... unlink resumed>) = 0 [pid 4999] rmdir("./78/file0" [pid 5001] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... rmdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] getdents64(3, [pid 5001] lstat("./79/binderfs", [pid 4999] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] close(3 [pid 5001] unlink("./79/binderfs" [pid 4999] <... close resumed>) = 0 [pid 7880] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] <... unlink resumed>) = 0 [pid 4999] rmdir("./78" [pid 7896] close(3 [pid 5001] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./79", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7899 ./strace-static-x86_64: Process 7899 attached [pid 7899] set_robust_list(0x5555562025e0, 24 [pid 7896] <... close resumed>) = 0 [pid 7896] symlink("/dev/binderfs", "./binderfs" [pid 7899] <... set_robust_list resumed>) = 0 [pid 7899] chdir("./79") = 0 [pid 7899] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7899] setpgid(0, 0) = 0 [pid 7899] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7899] write(3, "1000", 4) = 4 [pid 7899] close(3) = 0 [pid 7899] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7899] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7899] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7899] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7899] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7900], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7900 [pid 7899] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7899] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7900 attached [pid 7900] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7896] <... symlink resumed>) = 0 [pid 7900] memfd_create("syzkaller", 0 [pid 7896] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 7896] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5000] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7896] <... mmap resumed>) = 0x7f50500f1000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./79/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7896] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5000] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7896] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5000] openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./79/file0") = 0 [pid 5000] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./79") = 0 [pid 5000] mkdir("./80", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 7896] <... clone resumed>, parent_tid=[7901], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7901 [pid 5000] <... close resumed>) = 0 [pid 7896] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7896] <... futex resumed>) = 0 [ 112.090730][ T7883] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 112.101731][ T7883] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 112.117451][ T7895] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7896] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7880] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7880] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x5555562025d0) = 7903 [pid 7880] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 7903 attached ./strace-static-x86_64: Process 7901 attached [pid 7900] <... memfd_create resumed>) = 3 [pid 7883] <... fsconfig resumed>) = 0 [pid 7880] <... mmap resumed>) = 0x7f5047d10000 [pid 7903] set_robust_list(0x5555562025e0, 24 [pid 7901] set_robust_list(0x7f50501119e0, 24 [pid 7900] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7883] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7880] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7903] <... set_robust_list resumed>) = 0 [pid 7901] <... set_robust_list resumed>) = 0 [pid 7900] <... mmap resumed>) = 0x7f5047cf1000 [pid 7883] <... futex resumed>) = 0 [pid 7880] <... mprotect resumed>) = 0 [pid 7903] chdir("./80" [pid 7901] memfd_create("syzkaller", 0 [pid 7900] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7883] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7880] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7903] <... chdir resumed>) = 0 [pid 7901] <... memfd_create resumed>) = 3 [pid 7900] <... write resumed>) = 262144 [pid 5001] <... umount2 resumed>) = 0 [pid 7903] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7901] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7900] munmap(0x7f5047cf1000, 262144 [pid 7880] <... clone resumed>, parent_tid=[7904], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7904 [pid 5001] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7903] <... prctl resumed>) = 0 [pid 7901] <... mmap resumed>) = 0x7f5047cf1000 [pid 7900] <... munmap resumed>) = 0 [pid 7880] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7903] setpgid(0, 0 [pid 7901] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7900] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7880] <... futex resumed>) = 0 [pid 7903] <... setpgid resumed>) = 0 [pid 7901] <... write resumed>) = 262144 [pid 7900] <... openat resumed>) = 4 [pid 7880] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7903] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7901] munmap(0x7f5047cf1000, 262144 [pid 7900] ioctl(4, LOOP_SET_FD, 3 [pid 7903] <... openat resumed>) = 3 [pid 7901] <... munmap resumed>) = 0 [pid 5001] lstat("./79/file0", [pid 7903] write(3, "1000", 4 [pid 7901] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7903] <... write resumed>) = 4 [pid 7901] <... openat resumed>) = 4 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7903] close(3 [ 112.144362][ T7883] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 112.158535][ T7895] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 112.185213][ T7895] EXT4-fs (loop4): 1 truncate cleaned up [ 112.191342][ T7900] loop0: detected capacity change from 0 to 512 [pid 7901] ioctl(4, LOOP_SET_FD, 3 [pid 5001] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7904 attached [pid 7903] <... close resumed>) = 0 [pid 7901] <... ioctl resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7900] <... ioctl resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7900] close(3 [pid 5001] <... openat resumed>) = 4 [pid 7900] <... close resumed>) = 0 [pid 5001] fstat(4, [pid 7904] set_robust_list(0x7f5047d309e0, 24 [pid 7903] symlink("/dev/binderfs", "./binderfs" [pid 7901] close(3 [pid 7900] mkdir("./file0", 0777 [pid 7895] <... mount resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7904] <... set_robust_list resumed>) = 0 [pid 7903] <... symlink resumed>) = 0 [pid 7901] <... close resumed>) = 0 [pid 7900] <... mkdir resumed>) = 0 [pid 7895] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] getdents64(4, [pid 7904] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7903] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7901] mkdir("./file0", 0777 [pid 7900] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7895] <... openat resumed>) = 3 [pid 7904] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7903] <... futex resumed>) = 0 [pid 7901] <... mkdir resumed>) = 0 [pid 7895] chdir("./file0" [pid 5001] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7904] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7903] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7901] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7895] <... chdir resumed>) = 0 [pid 7904] <... futex resumed>) = 1 [pid 7903] <... mmap resumed>) = 0x7f50500f1000 [pid 7895] ioctl(4, LOOP_CLR_FD [pid 7880] <... futex resumed>) = 0 [pid 5001] getdents64(4, [pid 7904] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7903] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7895] <... ioctl resumed>) = 0 [pid 7880] exit_group(0 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7904] <... futex resumed>) = ? [pid 7903] <... mprotect resumed>) = 0 [pid 7895] close(4 [pid 7883] <... futex resumed>) = ? [pid 7880] <... exit_group resumed>) = ? [pid 5001] close(4 [pid 7904] +++ exited with 0 +++ [pid 7903] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7895] <... close resumed>) = 0 [pid 7883] +++ exited with 0 +++ [pid 7880] +++ exited with 0 +++ [pid 5001] <... close resumed>) = 0 [pid 7895] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] rmdir("./79/file0" [pid 7903] <... clone resumed>, parent_tid=[7905], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7905 [pid 7895] <... futex resumed>) = 1 [pid 7894] <... futex resumed>) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7880, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 7903] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7895] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 7903] <... futex resumed>) = 0 [pid 5002] <... restart_syscall resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 7894] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7903] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7894] <... futex resumed>) = 1 [pid 7895] <... futex resumed>) = 0 [pid 5001] getdents64(3, [pid 7895] fspick(AT_FDCWD, ".", 0 [pid 7894] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7895] <... fspick resumed>) = 4 [pid 5002] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] close(3 [pid 7895] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... close resumed>) = 0 [pid 7895] <... futex resumed>) = 1 [pid 7894] <... futex resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] rmdir("./79" [pid 7895] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7894] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... openat resumed>) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7895] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7894] <... futex resumed>) = 0 [pid 5002] getdents64(3, [pid 5001] <... rmdir resumed>) = 0 [pid 7895] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7894] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5001] mkdir("./80", 0777 [pid 7895] <... fsconfig resumed>) = 0 [pid 5002] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./78/binderfs", [pid 7895] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 7895] <... futex resumed>) = 1 [pid 7894] <... futex resumed>) = 0 [pid 5002] unlink("./78/binderfs" [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7895] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7894] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... unlink resumed>) = 0 [pid 7895] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7894] <... futex resumed>) = 0 [ 112.200407][ T7901] loop5: detected capacity change from 0 to 512 [ 112.207886][ T7895] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.229277][ T7900] EXT4-fs: Ignoring removed oldalloc option [ 112.230465][ T7901] EXT4-fs: Ignoring removed oldalloc option [pid 5002] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... openat resumed>) = 3 [pid 7895] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7894] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7905 attached [pid 7905] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7905] memfd_create("syzkaller", 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 7905] <... memfd_create resumed>) = 3 [pid 7905] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7905] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7905] munmap(0x7f5047cf1000, 262144) = 0 [pid 7905] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7905] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7895] <... fsconfig resumed>) = 0 [pid 7895] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7894] <... futex resumed>) = 0 [pid 7895] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7894] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... clone resumed>, child_tidptr=0x5555562025d0) = 7909 [pid 7894] <... futex resumed>) = 0 [pid 7894] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7909 attached [pid 7895] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7895] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7895] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7894] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7894] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 112.258600][ T7895] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 112.265003][ T7905] loop1: detected capacity change from 0 to 512 [ 112.277351][ T7900] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 112.297650][ T7895] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [pid 7895] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7909] set_robust_list(0x5555562025e0, 24 [pid 7894] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7905] <... ioctl resumed>) = 0 [pid 7905] close(3) = 0 [pid 7905] mkdir("./file0", 0777) = 0 [pid 7905] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7909] <... set_robust_list resumed>) = 0 [pid 7909] chdir("./80") = 0 [ 112.298348][ T7900] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 112.310139][ T7905] EXT4-fs: Ignoring removed oldalloc option [ 112.328699][ T7895] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 112.329494][ T7900] EXT4-fs (loop0): 1 truncate cleaned up [ 112.339721][ T7901] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7909] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... umount2 resumed>) = 0 [pid 7909] <... prctl resumed>) = 0 [pid 5002] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7909] setpgid(0, 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7909] <... setpgid resumed>) = 0 [pid 5002] lstat("./78/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7909] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7909] <... openat resumed>) = 3 [pid 7909] write(3, "1000", 4 [pid 5002] openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7909] <... write resumed>) = 4 [pid 5002] fstat(4, [pid 7909] close(3 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7909] <... close resumed>) = 0 [pid 7894] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7909] symlink("/dev/binderfs", "./binderfs" [pid 7894] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] getdents64(4, [pid 7909] <... symlink resumed>) = 0 [pid 7894] <... futex resumed>) = 0 [pid 7894] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7894] <... mmap resumed>) = 0x7f5047d10000 [pid 5002] getdents64(4, [pid 7909] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7894] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7909] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7894] <... mprotect resumed>) = 0 [pid 5002] close(4 [pid 7909] <... mmap resumed>) = 0x7f50500f1000 [pid 7900] <... mount resumed>) = 0 [pid 7894] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5002] <... close resumed>) = 0 [pid 7895] <... fsconfig resumed>) = 0 [pid 7895] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7895] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7914 attached [pid 7909] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7900] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] rmdir("./78/file0" [pid 7914] set_robust_list(0x7f5047d309e0, 24 [pid 7909] <... mprotect resumed>) = 0 [pid 7900] <... openat resumed>) = 3 [pid 7894] <... clone resumed>, parent_tid=[7914], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7914 [pid 5002] <... rmdir resumed>) = 0 [pid 7894] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7914] <... set_robust_list resumed>) = 0 [pid 7894] <... futex resumed>) = 0 [pid 7900] chdir("./file0" [pid 7909] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7914] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7900] <... chdir resumed>) = 0 [pid 7894] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7900] ioctl(4, LOOP_CLR_FD [pid 7914] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7900] <... ioctl resumed>) = 0 [pid 7900] close(4 [pid 5002] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [ 112.353729][ T7900] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.375192][ T7895] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 112.377275][ T7901] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 112.387329][ T7905] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7914] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7909] <... clone resumed>, parent_tid=[7915], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7915 [pid 7900] <... close resumed>) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./78") = 0 [pid 5002] mkdir("./79", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7900] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7914] <... futex resumed>) = 1 [pid 7909] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7900] <... futex resumed>) = 1 [pid 7899] <... futex resumed>) = 0 [pid 7894] <... futex resumed>) = 0 [pid 7914] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5002] <... clone resumed>, child_tidptr=0x5555562025d0) = 7916 [pid 7899] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7894] exit_group(0 [pid 7909] <... futex resumed>) = 0 [pid 7900] fspick(AT_FDCWD, ".", 0 [pid 7914] <... futex resumed>) = ? [pid 7909] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7900] <... fspick resumed>) = 4 [pid 7899] <... futex resumed>) = 0 [pid 7895] <... futex resumed>) = ? [pid 7894] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 7915 attached [pid 7915] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7915] memfd_create("syzkaller", 0) = 3 [pid 7915] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7915] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7914] +++ exited with 0 +++ [pid 7900] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7899] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7895] +++ exited with 0 +++ [pid 7915] <... write resumed>) = 262144 [pid 7915] munmap(0x7f5047cf1000, 262144) = 0 [pid 7915] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7894] +++ exited with 0 +++ [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7894, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 7900] <... futex resumed>) = 0 [pid 7899] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7915] <... openat resumed>) = 4 [pid 7915] ioctl(4, LOOP_SET_FD, 3 [pid 7900] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7899] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7900] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7899] <... futex resumed>) = 0 [pid 7899] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7900] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 5004] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7900] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7916 attached ) = 1 [pid 7899] <... futex resumed>) = 0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7900] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7899] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7915] <... ioctl resumed>) = 0 [pid 7915] close(3 [pid 7900] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7899] <... futex resumed>) = 0 [pid 5004] <... openat resumed>) = 3 [pid 7899] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7900] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5004] fstat(3, [pid 7915] <... close resumed>) = 0 [pid 7915] mkdir("./file0", 0777 [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5004] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7915] <... mkdir resumed>) = 0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./80/binderfs", [pid 7915] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5004] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 112.414484][ T7901] EXT4-fs (loop5): 1 truncate cleaned up [ 112.422490][ T7905] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 112.441488][ T7915] loop2: detected capacity change from 0 to 512 [ 112.453429][ T7900] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 7916] set_robust_list(0x5555562025e0, 24 [pid 5004] unlink("./80/binderfs" [pid 7901] <... mount resumed>) = 0 [pid 7901] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5004] <... unlink resumed>) = 0 [pid 7901] <... openat resumed>) = 3 [pid 7901] chdir("./file0") = 0 [pid 7901] ioctl(4, LOOP_CLR_FD) = 0 [pid 7901] close(4) = 0 [pid 7901] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7896] <... futex resumed>) = 0 [pid 7896] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7901] fspick(AT_FDCWD, ".", 0 [pid 7896] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7901] <... fspick resumed>) = 4 [pid 7901] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7901] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7916] <... set_robust_list resumed>) = 0 [pid 7916] chdir("./79") = 0 [pid 7896] <... futex resumed>) = 0 [pid 7896] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7896] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7916] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7916] setpgid(0, 0) = 0 [pid 7916] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7916] write(3, "1000", 4) = 4 [pid 7916] close(3) = 0 [pid 7916] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7916] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7916] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7916] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7916] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7917], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7917 [pid 7916] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7916] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7917 attached [pid 7917] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7917] memfd_create("syzkaller", 0) = 3 [pid 7917] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7917] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7917] munmap(0x7f5047cf1000, 262144) = 0 [pid 7917] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7899] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7899] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 7917] <... openat resumed>) = 4 [pid 7917] ioctl(4, LOOP_SET_FD, 3 [pid 7899] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7899] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7899] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7899] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7917] <... ioctl resumed>) = 0 [pid 7917] close(3) = 0 [pid 7917] mkdir("./file0", 0777 [pid 7899] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7917] <... mkdir resumed>) = 0 [pid 7917] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7899] <... clone resumed>, parent_tid=[7919], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7919 [pid 7899] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 112.453901][ T7915] EXT4-fs: Ignoring removed oldalloc option [ 112.469231][ T7901] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.487722][ T7905] EXT4-fs (loop1): 1 truncate cleaned up [ 112.502238][ T7917] loop3: detected capacity change from 0 to 512 [pid 7899] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7901] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7919 attached [pid 7919] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7919] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7919] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7899] <... futex resumed>) = 0 [pid 7899] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7899] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7919] <... futex resumed>) = 1 [pid 7919] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7901] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 7901] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7901] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7896] <... futex resumed>) = 0 [pid 7896] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7905] <... mount resumed>) = 0 [pid 7901] <... futex resumed>) = 0 [pid 7900] <... fsconfig resumed>) = 0 [pid 7901] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7896] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7905] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7905] chdir("./file0" [pid 7900] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7900] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7905] <... chdir resumed>) = 0 [pid 7905] ioctl(4, LOOP_CLR_FD) = 0 [pid 7905] close(4) = 0 [pid 7905] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7905] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7903] <... futex resumed>) = 0 [pid 7903] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 112.512597][ T7917] EXT4-fs: Ignoring removed oldalloc option [ 112.517209][ T7905] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.532656][ T7919] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 112.543373][ T7901] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 112.554432][ T7915] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7903] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7899] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7899] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7900] <... futex resumed>) = 0 [pid 7899] <... futex resumed>) = 1 [pid 7900] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7899] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7900] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 7905] <... futex resumed>) = 0 [pid 7901] <... fsconfig resumed>) = 0 [pid 7900] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7905] fspick(AT_FDCWD, ".", 0 [pid 7901] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7900] <... futex resumed>) = 1 [pid 7899] <... futex resumed>) = 0 [pid 7905] <... fspick resumed>) = 4 [pid 7900] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7905] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7901] <... futex resumed>) = 1 [pid 7896] <... futex resumed>) = 0 [pid 7905] <... futex resumed>) = 1 [pid 7903] <... futex resumed>) = 0 [pid 7901] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7896] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7905] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7903] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7901] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7896] <... futex resumed>) = 0 [pid 7905] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7903] <... futex resumed>) = 0 [pid 7901] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7896] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7905] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7903] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7905] <... fsconfig resumed>) = 0 [pid 7901] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7905] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7901] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7905] <... futex resumed>) = 1 [pid 7903] <... futex resumed>) = 0 [pid 5004] <... umount2 resumed>) = 0 [pid 7905] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7903] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7901] <... futex resumed>) = 1 [pid 7896] <... futex resumed>) = 0 [pid 7905] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7903] <... futex resumed>) = 0 [pid 7901] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7896] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7903] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7896] <... futex resumed>) = 0 [pid 7896] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./80/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5004] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5004] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5004] close(4) = 0 [pid 5004] rmdir("./80/file0") = 0 [pid 5004] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5004] close(3) = 0 [pid 5004] rmdir("./80") = 0 [pid 5004] mkdir("./81", 0777) = 0 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5004] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5004] close(3) = 0 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7923 ./strace-static-x86_64: Process 7923 attached [pid 7923] set_robust_list(0x5555562025e0, 24) = 0 [pid 7923] chdir("./81") = 0 [ 112.564292][ T7917] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 112.589207][ T7901] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 112.594368][ T7919] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7923] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7923] setpgid(0, 0) = 0 [pid 7923] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7923] write(3, "1000", 4) = 4 [pid 7923] close(3) = 0 [pid 7923] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7923] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7923] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7923] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7923] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7924], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7924 [pid 7923] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7923] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7924 attached [pid 7924] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7924] memfd_create("syzkaller", 0) = 3 [pid 7924] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7924] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7924] munmap(0x7f5047cf1000, 262144 [pid 7905] <... fsconfig resumed>) = 0 [pid 7905] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7905] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7924] <... munmap resumed>) = 0 [pid 7924] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7903] <... futex resumed>) = 0 [pid 7903] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7905] <... futex resumed>) = 0 [pid 7903] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7905] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7905] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7905] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7924] <... openat resumed>) = 4 [ 112.599285][ T7905] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 112.618682][ T7915] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 112.638219][ T7917] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 112.638259][ T7901] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7924] ioctl(4, LOOP_SET_FD, 3 [pid 7903] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7896] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7903] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7896] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7903] <... futex resumed>) = 1 [pid 7896] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7903] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7905] <... futex resumed>) = 0 [pid 7896] <... mmap resumed>) = 0x7f5047d10000 [pid 7905] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 112.640096][ T7924] loop4: detected capacity change from 0 to 512 [ 112.669111][ T7917] __quota_error: 136 callbacks suppressed [ 112.669129][ T7917] Quota error (device loop3): write_blk: dquota write failed [ 112.669169][ T7915] Quota error (device loop2): write_blk: dquota write failed [ 112.675346][ T7917] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 112.684550][ T7905] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [pid 7896] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7924] <... ioctl resumed>) = 0 [pid 7924] close(3) = 0 [pid 7924] mkdir("./file0", 0777) = 0 [pid 7924] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7903] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7896] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7903] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7926 attached [pid 7926] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7926] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7903] <... futex resumed>) = 0 [pid 7896] <... clone resumed>, parent_tid=[7926], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7926 [ 112.701803][ T7915] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 112.711277][ T7917] EXT4-fs (loop3): 1 truncate cleaned up [ 112.723946][ T7924] EXT4-fs: Ignoring removed oldalloc option [ 112.726784][ T7919] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 112.731896][ T7905] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 112.742523][ T7917] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7896] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7903] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7919] <... fsconfig resumed>) = 0 [pid 7896] <... futex resumed>) = 1 [pid 7926] <... futex resumed>) = 0 [pid 7919] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7917] <... mount resumed>) = 0 [pid 7903] <... mmap resumed>) = 0x7f5047d10000 [pid 7896] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7926] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7919] <... futex resumed>) = 0 [pid 7917] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7903] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7899] exit_group(0 [pid 7900] <... futex resumed>) = ? [pid 7899] <... exit_group resumed>) = ? [pid 7900] +++ exited with 0 +++ [pid 7901] <... fsconfig resumed>) = 0 [pid 7901] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7901] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7919] +++ exited with 0 +++ [pid 7899] +++ exited with 0 +++ [pid 7917] <... openat resumed>) = 3 [pid 7917] chdir("./file0") = 0 [pid 7917] ioctl(4, LOOP_CLR_FD) = 0 [pid 7917] close(4) = 0 [pid 7917] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7917] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7903] <... mprotect resumed>) = 0 [pid 7903] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7929], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7929 [pid 7903] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7903] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7899, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 7916] <... futex resumed>) = 0 [pid 4999] <... restart_syscall resumed>) = 0 [pid 4999] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./79/binderfs") = 0 [ 112.764002][ T7901] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 112.765041][ T7915] EXT4-fs (loop2): 1 truncate cleaned up [ 112.782106][ T7915] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.793758][ T7926] Quota error (device loop5): write_blk: dquota write failed [ 112.797823][ T7905] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 4999] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7929 attached [pid 7916] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7915] <... mount resumed>) = 0 [pid 7905] <... fsconfig resumed>) = 0 [pid 7929] set_robust_list(0x7f5047d309e0, 24 [pid 7916] <... futex resumed>) = 1 [pid 7929] <... set_robust_list resumed>) = 0 [pid 7916] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7929] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7917] <... futex resumed>) = 0 [pid 7917] fspick(AT_FDCWD, ".", 0 [pid 7905] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7917] <... fspick resumed>) = 4 [pid 7905] <... futex resumed>) = 0 [pid 7896] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7905] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7917] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7915] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7917] <... futex resumed>) = 1 [pid 7916] <... futex resumed>) = 0 [pid 7917] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7916] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7917] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7916] <... futex resumed>) = 0 [pid 7917] <... fsconfig resumed>) = 0 [pid 7916] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7915] <... openat resumed>) = 3 [pid 7915] chdir("./file0") = 0 [pid 7915] ioctl(4, LOOP_CLR_FD) = 0 [pid 7915] close(4) = 0 [pid 7915] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7915] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7917] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7909] <... futex resumed>) = 0 [pid 7903] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7909] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7917] <... futex resumed>) = 1 [pid 7916] <... futex resumed>) = 0 [pid 7909] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7916] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7917] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7916] <... futex resumed>) = 0 [pid 7916] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7915] <... futex resumed>) = 0 [pid 7915] fspick(AT_FDCWD, ".", 0) = 4 [pid 7915] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7909] <... futex resumed>) = 0 [pid 7915] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7909] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7915] <... fsconfig resumed>) = 0 [pid 7909] <... futex resumed>) = 0 [pid 7915] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7909] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7915] <... futex resumed>) = 0 [pid 7909] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7915] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7909] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7909] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./79/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./79/file0") = 0 [pid 4999] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [ 112.808252][ T7926] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 112.820078][ T7929] Quota error (device loop1): write_blk: dquota write failed [ 112.836510][ T7929] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 112.854943][ T7917] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 4999] rmdir("./79") = 0 [pid 7929] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7926] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7917] <... fsconfig resumed>) = 0 [pid 4999] mkdir("./80", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 7926] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7917] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7916] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7896] exit_group(0) = ? [pid 7915] <... fsconfig resumed>) = 0 [pid 7915] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7909] <... futex resumed>) = 0 [pid 7915] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7929] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7929] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7926] <... futex resumed>) = ? [pid 7917] <... futex resumed>) = 0 [pid 7916] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7909] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7901] <... futex resumed>) = ? [pid 7901] +++ exited with 0 +++ [pid 7917] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7903] exit_group(0 [pid 7916] <... futex resumed>) = 0 [pid 7915] <... futex resumed>) = 0 [pid 7909] <... futex resumed>) = 1 [pid 4999] <... clone resumed>, child_tidptr=0x5555562025d0) = 7932 [pid 7915] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7915] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7915] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7926] +++ exited with 0 +++ [pid 7896] +++ exited with 0 +++ [pid 7916] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7929] <... futex resumed>) = ? [pid 7917] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7909] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7905] <... futex resumed>) = ? [pid 7903] <... exit_group resumed>) = ? [pid 7929] +++ exited with 0 +++ [pid 7917] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7909] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7905] +++ exited with 0 +++ [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7896, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5005] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7917] <... futex resumed>) = 1 [pid 7916] <... futex resumed>) = 0 [pid 7909] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7903] +++ exited with 0 +++ [pid 5005] <... openat resumed>) = 3 [pid 7917] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7916] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7915] <... futex resumed>) = 0 [pid 7909] <... futex resumed>) = 1 [pid 5005] fstat(3, [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7903, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 7917] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7916] <... futex resumed>) = 0 [ 112.879881][ T7915] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 112.892039][ T7924] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 112.914597][ T7915] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [pid 7915] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7909] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 7917] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7916] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] getdents64(3, [pid 5000] <... restart_syscall resumed>) = 0 [pid 5005] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5005] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] lstat("./79/binderfs", [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5005] unlink("./79/binderfs" [pid 5000] <... openat resumed>) = 3 [pid 5005] <... unlink resumed>) = 0 [pid 5000] fstat(3, [pid 5005] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./80/binderfs") = 0 [pid 5000] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7932 attached [pid 7932] set_robust_list(0x5555562025e0, 24) = 0 [pid 7932] chdir("./80") = 0 [pid 7932] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7932] setpgid(0, 0) = 0 [pid 7932] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7932] write(3, "1000", 4) = 4 [pid 7932] close(3) = 0 [pid 7932] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7932] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7932] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7932] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7932] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7933], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7933 [pid 7932] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7932] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7933 attached [pid 7933] set_robust_list(0x7f50501119e0, 24) = 0 [pid 7933] memfd_create("syzkaller", 0) = 3 [pid 7933] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7933] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7933] munmap(0x7f5047cf1000, 262144) = 0 [pid 7933] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7933] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7933] close(3) = 0 [pid 7933] mkdir("./file0", 0777) = 0 [ 112.915358][ T7924] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 112.939658][ T7917] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 112.948657][ T7933] loop0: detected capacity change from 0 to 512 [ 112.950217][ T7917] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 112.955382][ T7915] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 112.965621][ T7924] Quota error (device loop4): write_blk: dquota write failed [pid 7933] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7909] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7909] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7909] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7916] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7909] <... mmap resumed>) = 0x7f5047d10000 [pid 7916] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7909] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7916] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7917] <... fsconfig resumed>) = 0 [pid 7916] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7909] <... mprotect resumed>) = 0 [pid 5005] <... umount2 resumed>) = 0 [pid 7916] <... mprotect resumed>) = 0 [ 112.973871][ T7933] EXT4-fs: Ignoring removed oldalloc option [ 112.981305][ T7924] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 113.004188][ T7917] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 113.018856][ T7924] EXT4-fs (loop4): 1 truncate cleaned up [pid 7909] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7917] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7916] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5005] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7917] <... futex resumed>) = 0 [pid 7909] <... clone resumed>, parent_tid=[7936], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7936 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7917] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7916] <... clone resumed>, parent_tid=[7937], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7937 [pid 7909] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] lstat("./79/file0", [pid 7916] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7909] <... futex resumed>) = 0 [pid 5005] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7916] <... futex resumed>) = 0 [pid 7909] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7937 attached ./strace-static-x86_64: Process 7936 attached [pid 7924] <... mount resumed>) = 0 [pid 7916] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = 0 [pid 7937] set_robust_list(0x7f5047d309e0, 24 [pid 7936] set_robust_list(0x7f5047d309e0, 24 [pid 7924] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7937] <... set_robust_list resumed>) = 0 [pid 7936] <... set_robust_list resumed>) = 0 [pid 7924] <... openat resumed>) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7937] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7936] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7924] chdir("./file0" [pid 5000] lstat("./80/file0", [pid 7924] <... chdir resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7924] ioctl(4, LOOP_CLR_FD [pid 5000] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7924] <... ioctl resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7924] close(4 [pid 5000] openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7924] <... close resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 7924] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] fstat(4, [pid 7924] <... futex resumed>) = 1 [pid 7923] <... futex resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7937] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7936] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7924] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5005] openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] getdents64(4, [pid 7937] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7936] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7937] <... futex resumed>) = 1 [pid 7936] <... futex resumed>) = 1 [pid 7923] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7909] <... futex resumed>) = 0 [pid 5000] getdents64(4, [pid 7937] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7936] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7924] <... futex resumed>) = 0 [pid 7923] <... futex resumed>) = 1 [pid 7916] <... futex resumed>) = 0 [pid 5005] <... openat resumed>) = 4 [pid 5000] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 7924] fspick(AT_FDCWD, ".", 0 [pid 5000] close(4 [pid 7924] <... fspick resumed>) = 4 [pid 5000] <... close resumed>) = 0 [pid 7924] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7923] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7916] exit_group(0 [pid 5005] fstat(4, [pid 5000] rmdir("./80/file0" [pid 7937] <... futex resumed>) = ? [pid 7924] <... futex resumed>) = 0 [pid 7923] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7917] <... futex resumed>) = ? [pid 7916] <... exit_group resumed>) = ? [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 7937] +++ exited with 0 +++ [pid 7924] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7923] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7917] +++ exited with 0 +++ [pid 5000] getdents64(3, [pid 7924] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5000] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7924] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5000] close(3 [pid 7924] <... fsconfig resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 7924] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] rmdir("./80" [pid 7924] <... futex resumed>) = 0 [pid 7923] <... futex resumed>) = 0 [pid 7916] +++ exited with 0 +++ [pid 5005] getdents64(4, [pid 5000] <... rmdir resumed>) = 0 [pid 7924] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7923] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] mkdir("./81", 0777 [pid 5005] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7923] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5005] getdents64(4, [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7916, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5000] <... mkdir resumed>) = 0 [pid 7923] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7924] <... futex resumed>) = 0 [pid 7923] <... futex resumed>) = 1 [pid 5005] close(4 [pid 5002] <... restart_syscall resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 7924] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7923] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... close resumed>) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 7915] <... fsconfig resumed>) = 0 [pid 5005] rmdir("./79/file0" [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7915] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... rmdir resumed>) = 0 [ 113.026205][ T7924] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.041002][ T7915] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 113.065082][ T7924] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 5002] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7915] <... futex resumed>) = 0 [pid 5005] getdents64(3, [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7915] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5005] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5002] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7909] exit_group(0 [pid 5005] close(3 [pid 5002] <... openat resumed>) = 3 [pid 7915] <... futex resumed>) = ? [pid 7909] <... exit_group resumed>) = ? [pid 5005] <... close resumed>) = 0 [pid 5002] fstat(3, [pid 7915] +++ exited with 0 +++ [pid 5005] rmdir("./79" [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7936] <... futex resumed>) = ? [pid 5005] <... rmdir resumed>) = 0 [pid 5002] getdents64(3, [pid 5000] close(3 [pid 5005] mkdir("./80", 0777 [pid 5002] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5005] <... mkdir resumed>) = 0 [pid 5002] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] <... openat resumed>) = 3 [pid 5002] lstat("./79/binderfs", [pid 5005] ioctl(3, LOOP_CLR_FD [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5005] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] unlink("./79/binderfs" [pid 5005] close(3 [pid 5002] <... unlink resumed>) = 0 [pid 7936] +++ exited with 0 +++ [pid 7909] +++ exited with 0 +++ [pid 5005] <... close resumed>) = 0 [pid 5002] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... close resumed>) = 0 [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7909, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5005] <... clone resumed>, child_tidptr=0x5555562025d0) = 7940 [pid 5001] <... restart_syscall resumed>) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x5555562025d0) = 7941 [pid 5001] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7924] <... fsconfig resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7924] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... openat resumed>) = 3 [pid 5001] fstat(3, [pid 7924] <... futex resumed>) = 1 [pid 7923] <... futex resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7924] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7923] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] getdents64(3, [pid 7924] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7923] <... futex resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 7941 attached [pid 7924] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7923] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7941] set_robust_list(0x5555562025e0, 24 [pid 7923] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7941] <... set_robust_list resumed>) = 0 [pid 7923] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] lstat("./80/binderfs", [pid 7941] chdir("./81" [pid 7923] <... futex resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7941] <... chdir resumed>) = 0 [pid 5001] unlink("./80/binderfs" [pid 7941] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] <... unlink resumed>) = 0 [pid 7941] <... prctl resumed>) = 0 [pid 5001] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7941] setpgid(0, 0) = 0 [pid 7923] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7941] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7941] write(3, "1000", 4) = 4 [pid 7941] close(3) = 0 [pid 7941] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7941] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7941] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7941] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7941] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7942], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7942 [pid 7941] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7941] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5001] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 7940 attached [pid 7940] set_robust_list(0x5555562025e0, 24 [pid 5002] <... umount2 resumed>) = 0 [pid 7923] <... futex resumed>) = 0 [pid 7924] <... futex resumed>) = 1 [pid 5001] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7923] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=39000000} [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7924] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 113.077853][ T7933] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 113.089339][ T7933] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 5001] lstat("./80/file0", [pid 7940] <... set_robust_list resumed>) = 0 [pid 7940] chdir("./80") = 0 [pid 7940] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7940] setpgid(0, 0) = 0 [pid 7940] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7940] write(3, "1000", 4) = 4 [pid 7940] close(3) = 0 [pid 7940] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7940] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7940] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7940] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7940] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7943], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7943 [pid 7940] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] lstat("./79/file0", [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7940] <... futex resumed>) = 0 [pid 7940] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7942 attached [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7942] set_robust_list(0x7f50501119e0, 24 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7942] <... set_robust_list resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... openat resumed>) = 4 [pid 5002] <... openat resumed>) = 4 [pid 5001] fstat(4, [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7942] memfd_create("syzkaller", 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, [pid 5001] getdents64(4, [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7942] <... memfd_create resumed>) = 3 [pid 5002] getdents64(4, [pid 7942] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] getdents64(4, [pid 5002] close(4 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5002] <... close resumed>) = 0 [pid 5001] close(4 [pid 5002] rmdir("./79/file0" [pid 5001] <... close resumed>) = 0 ./strace-static-x86_64: Process 7943 attached [pid 7943] set_robust_list(0x7f50501119e0, 24 [pid 5001] rmdir("./80/file0" [pid 7943] <... set_robust_list resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5002] getdents64(3, [pid 5001] <... rmdir resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] getdents64(3, [pid 7942] <... mmap resumed>) = 0x7f5047cf1000 [pid 5002] close(3 [pid 5001] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5002] <... close resumed>) = 0 [pid 5001] close(3 [pid 5002] rmdir("./79" [pid 5001] <... close resumed>) = 0 [pid 7943] memfd_create("syzkaller", 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] rmdir("./80" [pid 7923] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7923] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... rmdir resumed>) = 0 [pid 7923] <... futex resumed>) = 0 [pid 5002] mkdir("./80", 0777 [pid 5001] mkdir("./81", 0777 [pid 7923] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7943] <... memfd_create resumed>) = 3 [pid 5001] <... mkdir resumed>) = 0 [pid 7943] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7923] <... mmap resumed>) = 0x7f5047d10000 [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7923] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5001] <... openat resumed>) = 3 [pid 7923] <... mprotect resumed>) = 0 [pid 7923] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5002] <... mkdir resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7943] <... mmap resumed>) = 0x7f5047cf1000 [pid 7923] <... clone resumed>, parent_tid=[7944], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7944 [pid 5002] <... openat resumed>) = 3 [pid 5001] close(3 [pid 7923] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5001] <... close resumed>) = 0 [pid 7943] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7923] <... futex resumed>) = 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7942] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7923] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... clone resumed>, child_tidptr=0x5555562025d0) = 7945 [pid 5002] <... clone resumed>, child_tidptr=0x5555562025d0) = 7946 [pid 7943] <... write resumed>) = 262144 [pid 7942] <... write resumed>) = 262144 [pid 7943] munmap(0x7f5047cf1000, 262144) = 0 [pid 7943] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 113.132997][ T7924] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 113.143261][ T7933] EXT4-fs (loop0): 1 truncate cleaned up [ 113.150894][ T7933] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7943] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7946 attached ./strace-static-x86_64: Process 7945 attached ./strace-static-x86_64: Process 7944 attached [pid 7942] munmap(0x7f5047cf1000, 262144 [pid 7943] <... ioctl resumed>) = 0 [pid 7943] close(3) = 0 [pid 7943] mkdir("./file0", 0777 [pid 7942] <... munmap resumed>) = 0 [pid 7944] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7944] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EROFS (Read-only file system) [pid 7944] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7942] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7923] <... futex resumed>) = 0 [pid 7946] set_robust_list(0x5555562025e0, 24 [pid 7944] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7942] <... openat resumed>) = 4 [pid 7946] <... set_robust_list resumed>) = 0 [pid 7945] set_robust_list(0x5555562025e0, 24 [pid 7942] ioctl(4, LOOP_SET_FD, 3 [pid 7943] <... mkdir resumed>) = 0 [pid 7943] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7945] <... set_robust_list resumed>) = 0 [pid 7946] chdir("./80" [pid 7945] chdir("./81") = 0 [pid 7946] <... chdir resumed>) = 0 [pid 7945] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7946] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7945] <... prctl resumed>) = 0 [pid 7946] <... prctl resumed>) = 0 [pid 7946] setpgid(0, 0 [pid 7945] setpgid(0, 0 [pid 7946] <... setpgid resumed>) = 0 [pid 7945] <... setpgid resumed>) = 0 [pid 7946] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7945] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7946] <... openat resumed>) = 3 [pid 7946] write(3, "1000", 4 [pid 7945] <... openat resumed>) = 3 [pid 7945] write(3, "1000", 4) = 4 [pid 7946] <... write resumed>) = 4 [pid 7945] close(3 [pid 7946] close(3) = 0 [pid 7945] <... close resumed>) = 0 [pid 7946] symlink("/dev/binderfs", "./binderfs" [pid 7945] symlink("/dev/binderfs", "./binderfs" [pid 7946] <... symlink resumed>) = 0 [pid 7946] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7945] <... symlink resumed>) = 0 [pid 7946] <... futex resumed>) = 0 [pid 7945] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7946] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7945] <... futex resumed>) = 0 [pid 7945] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7946] <... mmap resumed>) = 0x7f50500f1000 [pid 7942] <... ioctl resumed>) = 0 [pid 7933] <... mount resumed>) = 0 [pid 7946] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7945] <... mmap resumed>) = 0x7f50500f1000 [pid 7942] close(3 [pid 7933] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7946] <... mprotect resumed>) = 0 [pid 7945] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7942] <... close resumed>) = 0 [ 113.191883][ T7924] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 113.192732][ T7943] loop5: detected capacity change from 0 to 512 [ 113.211993][ T7942] loop1: detected capacity change from 0 to 512 [ 113.214186][ T7943] EXT4-fs: Ignoring removed oldalloc option [pid 7933] <... openat resumed>) = 3 [pid 7946] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7945] <... mprotect resumed>) = 0 [pid 7942] mkdir("./file0", 0777 [pid 7933] chdir("./file0" [pid 7945] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7942] <... mkdir resumed>) = 0 [pid 7933] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 7951 attached ./strace-static-x86_64: Process 7950 attached [pid 7946] <... clone resumed>, parent_tid=[7950], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7950 [pid 7942] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7933] ioctl(4, LOOP_CLR_FD [pid 7924] <... fsconfig resumed>) = 0 [pid 7951] set_robust_list(0x7f50501119e0, 24 [pid 7950] set_robust_list(0x7f50501119e0, 24 [pid 7946] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7945] <... clone resumed>, parent_tid=[7951], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7951 [pid 7933] <... ioctl resumed>) = 0 [pid 7946] <... futex resumed>) = 0 [pid 7945] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7933] close(4 [pid 7946] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7945] <... futex resumed>) = 0 [pid 7933] <... close resumed>) = 0 [pid 7945] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7933] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7932] <... futex resumed>) = 0 [pid 7933] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7932] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7933] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7932] <... futex resumed>) = 0 [pid 7933] fspick(AT_FDCWD, ".", 0 [pid 7932] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7933] <... fspick resumed>) = 4 [pid 7933] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7932] <... futex resumed>) = 0 [pid 7933] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7932] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7933] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7932] <... futex resumed>) = 0 [pid 7933] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7932] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7933] <... fsconfig resumed>) = 0 [pid 7933] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7932] <... futex resumed>) = 0 [pid 7933] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7932] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7933] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7932] <... futex resumed>) = 0 [pid 7933] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7932] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7951] <... set_robust_list resumed>) = 0 [pid 7950] <... set_robust_list resumed>) = 0 [pid 7924] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7923] exit_group(0 [pid 7944] <... futex resumed>) = ? [pid 7923] <... exit_group resumed>) = ? [pid 7950] memfd_create("syzkaller", 0 [pid 7951] memfd_create("syzkaller", 0 [pid 7944] +++ exited with 0 +++ [pid 7924] <... futex resumed>) = ? [pid 7951] <... memfd_create resumed>) = 3 [pid 7950] <... memfd_create resumed>) = 3 [pid 7924] +++ exited with 0 +++ [pid 7923] +++ exited with 0 +++ [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7923, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 7951] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7950] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5004] restart_syscall(<... resuming interrupted clone ...> [pid 7951] <... mmap resumed>) = 0x7f5047cf1000 [pid 7950] <... mmap resumed>) = 0x7f5047cf1000 [pid 5004] <... restart_syscall resumed>) = 0 [pid 7951] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7950] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5004] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7951] <... write resumed>) = 262144 [pid 7950] <... write resumed>) = 262144 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7951] munmap(0x7f5047cf1000, 262144) = 0 [ 113.238185][ T7924] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 113.250112][ T7943] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 113.250644][ T7942] EXT4-fs: Ignoring removed oldalloc option [ 113.260298][ T7943] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 7951] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7951] ioctl(4, LOOP_SET_FD, 3 [pid 7950] munmap(0x7f5047cf1000, 262144 [pid 5004] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7951] <... ioctl resumed>) = 0 [pid 7951] close(3) = 0 [pid 7951] mkdir("./file0", 0777) = 0 [pid 7951] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7950] <... munmap resumed>) = 0 [pid 5004] <... openat resumed>) = 3 [pid 7932] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7950] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7943] <... mount resumed>) = 0 [pid 7932] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [ 113.290797][ T7933] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 113.295193][ T7951] loop2: detected capacity change from 0 to 512 [ 113.303717][ T7943] EXT4-fs (loop5): 1 truncate cleaned up [ 113.313292][ T7951] EXT4-fs: Ignoring removed oldalloc option [ 113.314221][ T7943] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.333767][ T7942] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 5004] fstat(3, [pid 7950] <... openat resumed>) = 4 [pid 7943] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7932] <... futex resumed>) = 0 [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7950] ioctl(4, LOOP_SET_FD, 3 [pid 7943] <... openat resumed>) = 3 [pid 7932] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5004] getdents64(3, [pid 7943] chdir("./file0" [pid 7932] <... mmap resumed>) = 0x7f5047d10000 [pid 5004] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7943] <... chdir resumed>) = 0 [pid 7932] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5004] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7943] ioctl(4, LOOP_CLR_FD [pid 7932] <... mprotect resumed>) = 0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7943] <... ioctl resumed>) = 0 [pid 7932] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5004] lstat("./81/binderfs", [pid 7943] close(4 [pid 5004] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7943] <... close resumed>) = 0 [pid 5004] unlink("./81/binderfs" [pid 7943] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... unlink resumed>) = 0 [pid 7943] <... futex resumed>) = 1 [pid 7940] <... futex resumed>) = 0 [pid 7932] <... clone resumed>, parent_tid=[7954], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7954 [pid 5004] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7943] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7940] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7932] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7943] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7940] <... futex resumed>) = 0 [pid 7932] <... futex resumed>) = 0 [pid 7943] fspick(AT_FDCWD, ".", 0 [pid 7940] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7932] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7943] <... fspick resumed>) = 4 [pid 7943] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7940] <... futex resumed>) = 0 [pid 7943] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7940] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7943] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7940] <... futex resumed>) = 0 [pid 7943] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7940] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7954 attached [pid 7950] <... ioctl resumed>) = 0 [pid 7943] <... fsconfig resumed>) = 0 [pid 7933] <... fsconfig resumed>) = 0 [pid 7943] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7940] <... futex resumed>) = 0 [pid 7943] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7940] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7943] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7940] <... futex resumed>) = 0 [pid 7943] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 113.335237][ T7950] loop3: detected capacity change from 0 to 512 [ 113.344108][ T7942] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 113.365534][ T7942] EXT4-fs (loop1): 1 truncate cleaned up [ 113.372427][ T7943] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 7940] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7954] set_robust_list(0x7f5047d309e0, 24 [pid 7950] close(3 [pid 7942] <... mount resumed>) = 0 [pid 7933] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7954] <... set_robust_list resumed>) = 0 [pid 7950] <... close resumed>) = 0 [pid 7942] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7933] <... futex resumed>) = 0 [pid 7954] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7950] mkdir("./file0", 0777 [pid 7942] <... openat resumed>) = 3 [pid 7933] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7954] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7950] <... mkdir resumed>) = 0 [pid 7942] chdir("./file0" [pid 7954] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7950] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7954] <... futex resumed>) = 1 [pid 7942] <... chdir resumed>) = 0 [pid 7954] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7942] ioctl(4, LOOP_CLR_FD) = 0 [pid 7942] close(4 [pid 7932] <... futex resumed>) = 0 [pid 7942] <... close resumed>) = 0 [pid 7932] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7942] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7942] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7943] <... fsconfig resumed>) = 0 [pid 7943] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7943] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7941] <... futex resumed>) = 0 [pid 7940] <... futex resumed>) = 0 [pid 7941] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7940] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7942] <... futex resumed>) = 0 [pid 7941] <... futex resumed>) = 1 [pid 7940] <... futex resumed>) = 1 [pid 7942] fspick(AT_FDCWD, ".", 0 [pid 7941] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7940] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7942] <... fspick resumed>) = 4 [pid 7932] <... futex resumed>) = 1 [pid 7942] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7941] <... futex resumed>) = 0 [pid 7942] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7941] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7942] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7941] <... futex resumed>) = 0 [pid 7942] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7941] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7942] <... fsconfig resumed>) = 0 [pid 7942] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7933] <... futex resumed>) = 0 [pid 7932] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7942] <... futex resumed>) = 1 [pid 7941] <... futex resumed>) = 0 [pid 7942] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7941] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7942] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7941] <... futex resumed>) = 0 [pid 7942] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7941] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7933] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7943] <... futex resumed>) = 0 [pid 7943] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7943] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7940] <... futex resumed>) = 0 [pid 7943] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7940] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 113.373827][ T7942] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.398117][ T7950] EXT4-fs: Ignoring removed oldalloc option [ 113.410088][ T7933] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 113.416200][ T7943] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 113.427417][ T7951] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7940] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7941] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7932] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7941] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7932] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7954] <... futex resumed>) = 0 [pid 7941] <... futex resumed>) = 0 [pid 7932] <... futex resumed>) = 1 [pid 5004] <... umount2 resumed>) = 0 [pid 7954] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7941] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7932] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7941] <... mmap resumed>) = 0x7f5047d10000 [pid 7941] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5004] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7941] <... mprotect resumed>) = 0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7941] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5004] lstat("./81/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7941] <... clone resumed>, parent_tid=[7959], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7959 [pid 7940] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5004] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7940] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7941] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7940] <... futex resumed>) = 0 [pid 7941] <... futex resumed>) = 0 [pid 7940] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7941] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7940] <... mmap resumed>) = 0x7f5047d10000 [pid 7940] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7940] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7960], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7960 [pid 7940] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7940] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5004] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5004] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5004] close(4) = 0 [pid 5004] rmdir("./81/file0") = 0 [pid 5004] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 7954] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 5004] close(3 [pid 7954] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... close resumed>) = 0 ./strace-static-x86_64: Process 7960 attached ./strace-static-x86_64: Process 7959 attached [pid 7954] <... futex resumed>) = 1 [ 113.436219][ T7943] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 113.438409][ T7950] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 113.446546][ T7942] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 113.467676][ T7933] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 113.467719][ T7951] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 7932] <... futex resumed>) = 0 [pid 5004] rmdir("./81" [pid 7954] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5004] <... rmdir resumed>) = 0 [pid 5004] mkdir("./82", 0777) = 0 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5004] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5004] close(3) = 0 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7961 ./strace-static-x86_64: Process 7961 attached [pid 7961] set_robust_list(0x5555562025e0, 24) = 0 [pid 7961] chdir("./82" [pid 7960] set_robust_list(0x7f5047d309e0, 24 [pid 7959] set_robust_list(0x7f5047d309e0, 24 [pid 7961] <... chdir resumed>) = 0 [pid 7961] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7961] setpgid(0, 0) = 0 [pid 7961] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7961] write(3, "1000", 4) = 4 [pid 7960] <... set_robust_list resumed>) = 0 [pid 7959] <... set_robust_list resumed>) = 0 [pid 7961] close(3) = 0 [pid 7961] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7961] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7961] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7960] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7959] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7961] <... mmap resumed>) = 0x7f50500f1000 [pid 7961] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7961] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7964], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7964 [pid 7961] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7961] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7941] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7940] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7959] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7941] futex(0x7f50501ea7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7941] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 7964 attached ) = 0x7f5047cef000 [pid 7964] set_robust_list(0x7f50501119e0, 24 [pid 7941] mprotect(0x7f5047cf0000, 131072, PROT_READ|PROT_WRITE [pid 7964] <... set_robust_list resumed>) = 0 [pid 7941] <... mprotect resumed>) = 0 [pid 7964] memfd_create("syzkaller", 0 [ 113.493711][ T7950] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 113.511177][ T7951] EXT4-fs (loop2): 1 truncate cleaned up [ 113.518664][ T7950] EXT4-fs (loop3): 1 truncate cleaned up [ 113.525046][ T7950] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 7941] clone(child_stack=0x7f5047d0f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7964] <... memfd_create resumed>) = 3 [pid 7964] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7941] <... clone resumed>, parent_tid=[7965], tls=0x7f5047d0f700, child_tidptr=0x7f5047d0f9d0) = 7965 [pid 7964] <... mmap resumed>) = 0x7f5047cf1000 [pid 7941] futex(0x7f50501ea7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7964] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7941] <... futex resumed>) = 0 [pid 7959] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7964] <... write resumed>) = 262144 [pid 7960] <... openat resumed>) = 5 [pid 7941] futex(0x7f50501ea7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7964] munmap(0x7f5047cf1000, 262144) = 0 ./strace-static-x86_64: Process 7965 attached [pid 7964] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7965] set_robust_list(0x7f5047d0f9e0, 24 [pid 7964] <... openat resumed>) = 4 [pid 7965] <... set_robust_list resumed>) = 0 [pid 7964] ioctl(4, LOOP_SET_FD, 3 [pid 7965] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7960] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7959] <... futex resumed>) = 0 [pid 7942] <... fsconfig resumed>) = 0 [pid 7964] <... ioctl resumed>) = 0 [pid 7960] <... futex resumed>) = 0 [pid 7959] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7951] <... mount resumed>) = 0 [pid 7950] <... mount resumed>) = 0 [pid 7943] <... fsconfig resumed>) = 0 [ 113.538487][ T7933] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 113.551029][ T7943] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 113.558573][ T7964] loop4: detected capacity change from 0 to 512 [ 113.562127][ T7951] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.569212][ T7965] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [pid 7942] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7933] <... fsconfig resumed>) = 0 [pid 7942] <... futex resumed>) = 0 [pid 7933] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7942] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7933] <... futex resumed>) = 0 [pid 7933] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7932] exit_group(0 [pid 7954] <... futex resumed>) = ? [pid 7933] <... futex resumed>) = ? [pid 7932] <... exit_group resumed>) = ? [pid 7954] +++ exited with 0 +++ [pid 7933] +++ exited with 0 +++ [pid 7932] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7932, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 7964] close(3 [pid 7960] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7964] <... close resumed>) = 0 [pid 7951] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7950] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7943] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... restart_syscall resumed>) = 0 [pid 7964] mkdir("./file0", 0777 [pid 7951] <... openat resumed>) = 3 [pid 7950] <... openat resumed>) = 3 [pid 7943] <... futex resumed>) = 0 [pid 7941] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7940] exit_group(0 [pid 7960] <... futex resumed>) = ? [pid 7951] chdir("./file0" [pid 7950] chdir("./file0" [pid 7940] <... exit_group resumed>) = ? [pid 7964] <... mkdir resumed>) = 0 [pid 7960] +++ exited with 0 +++ [pid 7951] <... chdir resumed>) = 0 [pid 7950] <... chdir resumed>) = 0 [pid 7943] +++ exited with 0 +++ [pid 7941] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7940] +++ exited with 0 +++ [pid 7964] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7951] ioctl(4, LOOP_CLR_FD [pid 7950] ioctl(4, LOOP_CLR_FD [pid 7941] <... futex resumed>) = 1 [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7940, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 7942] <... futex resumed>) = 0 [pid 4999] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7951] <... ioctl resumed>) = 0 [pid 7950] <... ioctl resumed>) = 0 [pid 7951] close(4 [pid 7950] close(4 [pid 7951] <... close resumed>) = 0 [pid 7942] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7941] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, [pid 5005] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] <... openat resumed>) = 3 [pid 4999] lstat("./80/binderfs", [pid 5005] fstat(3, [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] unlink("./80/binderfs" [pid 5005] getdents64(3, [pid 4999] <... unlink resumed>) = 0 [pid 7965] <... fsconfig resumed>) = 0 [pid 7951] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7950] <... close resumed>) = 0 [pid 5005] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7965] futex(0x7f50501ea7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7951] <... futex resumed>) = 1 [pid 7950] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7945] <... futex resumed>) = 0 [pid 7965] <... futex resumed>) = 0 [pid 7951] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7950] <... futex resumed>) = 1 [pid 7946] <... futex resumed>) = 0 [pid 7945] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7965] futex(0x7f50501ea7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7951] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7950] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7946] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7945] <... futex resumed>) = 0 [pid 7951] fspick(AT_FDCWD, ".", 0 [pid 7950] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7946] <... futex resumed>) = 0 [pid 7945] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7951] <... fspick resumed>) = 4 [pid 7950] fspick(AT_FDCWD, ".", 0 [pid 7946] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7951] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7950] <... fspick resumed>) = 4 [pid 7951] <... futex resumed>) = 1 [pid 7950] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7945] <... futex resumed>) = 0 [pid 7951] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7950] <... futex resumed>) = 1 [pid 7946] <... futex resumed>) = 0 [pid 7945] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7951] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7950] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7946] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7945] <... futex resumed>) = 0 [pid 7951] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7950] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7946] <... futex resumed>) = 0 [pid 7945] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7951] <... fsconfig resumed>) = 0 [pid 7950] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7946] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7951] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7950] <... fsconfig resumed>) = 0 [pid 7951] <... futex resumed>) = 1 [pid 7950] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7945] <... futex resumed>) = 0 [pid 7942] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 5005] lstat("./80/binderfs", [pid 7951] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7950] <... futex resumed>) = 1 [pid 7946] <... futex resumed>) = 0 [pid 7945] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7951] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7950] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7946] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7945] <... futex resumed>) = 0 [pid 7951] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7950] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7946] <... futex resumed>) = 0 [pid 7945] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7950] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7946] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7942] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 113.593524][ T7965] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 113.605844][ T7964] EXT4-fs: Ignoring removed oldalloc option [ 113.612938][ T7965] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 7951] <... fsconfig resumed>) = 0 [pid 7950] <... fsconfig resumed>) = 0 [pid 7942] <... futex resumed>) = 1 [pid 7941] <... futex resumed>) = 0 [pid 5005] unlink("./80/binderfs" [pid 7951] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7950] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7942] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7941] exit_group(0 [pid 5005] <... unlink resumed>) = 0 [pid 7951] <... futex resumed>) = 1 [pid 7950] <... futex resumed>) = 1 [pid 7946] <... futex resumed>) = 0 [pid 7942] <... futex resumed>) = ? [pid 7941] <... exit_group resumed>) = ? [pid 5005] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7959] <... futex resumed>) = ? [pid 7951] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7950] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7946] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7945] <... futex resumed>) = 0 [pid 7942] +++ exited with 0 +++ [pid 7959] +++ exited with 0 +++ [pid 7950] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7946] <... futex resumed>) = 0 [pid 7950] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7946] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7945] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7950] <... futex resumed>) = 0 [pid 7946] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7950] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7946] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7965] <... futex resumed>) = ? [pid 7951] <... futex resumed>) = 0 [pid 7946] <... futex resumed>) = 0 [pid 7945] <... futex resumed>) = 1 [pid 5005] <... umount2 resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 7951] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7946] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7965] +++ exited with 0 +++ [pid 7951] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7945] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7941] +++ exited with 0 +++ [pid 5005] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7951] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7945] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7941, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 7951] <... futex resumed>) = 0 [pid 7951] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7945] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] lstat("./80/file0", [pid 7945] <... futex resumed>) = 1 [pid 4999] lstat("./80/file0", [pid 7951] <... futex resumed>) = 0 [pid 7951] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5005] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7945] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 113.636430][ T7951] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 113.644726][ T7950] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 113.661424][ T7950] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./81/binderfs") = 0 [pid 5000] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] <... openat resumed>) = 4 [pid 5005] fstat(4, [pid 4999] openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... openat resumed>) = 4 [pid 5005] getdents64(4, [pid 4999] fstat(4, [pid 5005] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 5005] getdents64(4, [pid 4999] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5005] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5005] close(4 [pid 4999] getdents64(4, [pid 5005] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5005] rmdir("./80/file0" [pid 4999] close(4 [pid 5005] <... rmdir resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5005] getdents64(3, [pid 4999] rmdir("./80/file0") = 0 [pid 5005] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 4999] getdents64(3, [pid 5005] close(3 [pid 4999] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5005] <... close resumed>) = 0 [pid 7946] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5005] rmdir("./80" [pid 5000] <... umount2 resumed>) = 0 [pid 4999] close(3 [pid 7946] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5000] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7946] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7946] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5000] lstat("./81/file0", [pid 7946] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7946] <... clone resumed>, parent_tid=[7969], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7969 [pid 7946] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7946] <... futex resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7946] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./81/file0") = 0 [pid 5000] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./81") = 0 [pid 5000] mkdir("./82", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7970 ./strace-static-x86_64: Process 7970 attached [pid 7970] set_robust_list(0x5555562025e0, 24) = 0 [pid 7970] chdir("./82" [pid 7945] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7945] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... close resumed>) = 0 [pid 7945] <... futex resumed>) = 0 [pid 7945] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5005] <... rmdir resumed>) = 0 [pid 4999] rmdir("./80" [pid 7945] <... mmap resumed>) = 0x7f5047d10000 [pid 7945] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7945] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] <... rmdir resumed>) = 0 [pid 5005] mkdir("./81", 0777 [pid 7945] <... clone resumed>, parent_tid=[7971], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7971 [pid 4999] mkdir("./81", 0777 [pid 7945] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... mkdir resumed>) = 0 [pid 7945] <... futex resumed>) = 0 [ 113.685974][ T7951] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 113.686633][ T7964] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 113.698619][ T7950] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 113.726633][ T7964] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 7945] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4999] <... mkdir resumed>) = 0 [pid 5005] <... openat resumed>) = 3 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7970] <... chdir resumed>) = 0 [pid 7970] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7970] setpgid(0, 0) = 0 [pid 7970] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7970] write(3, "1000", 4) = 4 [pid 7970] close(3) = 0 [pid 7970] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7970] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7970] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7970] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7970] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7973], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7973 [pid 7970] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7971 attached ) = 0 [pid 7971] set_robust_list(0x7f5047d309e0, 24 [pid 7970] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7971] <... set_robust_list resumed>) = 0 [pid 7971] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4999] <... openat resumed>) = 3 [pid 5005] ioctl(3, LOOP_CLR_FD [pid 4999] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 7973 attached [pid 7973] set_robust_list(0x7f50501119e0, 24 [pid 5005] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7973] <... set_robust_list resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5005] close(3 [pid 7971] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 7971] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7945] <... futex resumed>) = 0 [pid 7971] <... futex resumed>) = 1 [pid 7971] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] close(3 [pid 5005] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7973] memfd_create("syzkaller", 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7973] <... memfd_create resumed>) = 3 [pid 7973] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5005] <... clone resumed>, child_tidptr=0x5555562025d0) = 7974 [pid 7973] <... mmap resumed>) = 0x7f5047cf1000 [pid 4999] <... clone resumed>, child_tidptr=0x5555562025d0) = 7975 ./strace-static-x86_64: Process 7969 attached ./strace-static-x86_64: Process 7974 attached [pid 7969] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 7969] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7974] set_robust_list(0x5555562025e0, 24./strace-static-x86_64: Process 7975 attached [pid 7975] set_robust_list(0x5555562025e0, 24) = 0 [pid 7973] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7969] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 7974] <... set_robust_list resumed>) = 0 [pid 7975] chdir("./81" [pid 7973] <... write resumed>) = 262144 [pid 7969] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7975] <... chdir resumed>) = 0 [pid 7969] <... futex resumed>) = 1 [pid 7946] <... futex resumed>) = 0 [pid 7975] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7975] setpgid(0, 0) = 0 [pid 7973] munmap(0x7f5047cf1000, 262144 [pid 7969] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7975] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7974] chdir("./81" [pid 7973] <... munmap resumed>) = 0 [pid 7975] <... openat resumed>) = 3 [pid 7973] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7974] <... chdir resumed>) = 0 [pid 7975] write(3, "1000", 4 [pid 7973] <... openat resumed>) = 4 [pid 7975] <... write resumed>) = 4 [pid 7974] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7973] ioctl(4, LOOP_SET_FD, 3 [pid 7975] close(3 [pid 7974] <... prctl resumed>) = 0 [pid 7950] <... fsconfig resumed>) = 0 [pid 7974] setpgid(0, 0 [pid 7950] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7974] <... setpgid resumed>) = 0 [pid 7950] <... futex resumed>) = 0 [pid 7974] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7950] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7974] <... openat resumed>) = 3 [pid 7946] exit_group(0 [pid 7974] write(3, "1000", 4 [pid 7969] <... futex resumed>) = ? [pid 7950] <... futex resumed>) = ? [pid 7946] <... exit_group resumed>) = ? [ 113.751190][ T7951] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 113.752595][ T7950] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 113.790370][ T7973] loop1: detected capacity change from 0 to 512 [pid 7975] <... close resumed>) = 0 [pid 7974] <... write resumed>) = 4 [pid 7969] +++ exited with 0 +++ [pid 7950] +++ exited with 0 +++ [pid 7946] +++ exited with 0 +++ [pid 7974] close(3) = 0 [pid 7974] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7974] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7974] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7974] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7974] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7977], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7977 [pid 7974] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7974] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7977 attached [pid 7977] set_robust_list(0x7f50501119e0, 24) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7946, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 7977] memfd_create("syzkaller", 0 [pid 7975] symlink("/dev/binderfs", "./binderfs" [pid 7973] <... ioctl resumed>) = 0 [pid 7951] <... fsconfig resumed>) = 0 [pid 5002] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./80/binderfs") = 0 [pid 5002] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7977] <... memfd_create resumed>) = 3 [pid 7977] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7975] <... symlink resumed>) = 0 [pid 7977] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7975] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7973] close(3 [pid 7964] <... mount resumed>) = 0 [pid 7951] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7975] <... futex resumed>) = 0 [pid 7973] <... close resumed>) = 0 [pid 7951] <... futex resumed>) = 0 [pid 7975] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7973] mkdir("./file0", 0777 [pid 7951] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7975] <... mmap resumed>) = 0x7f50500f1000 [pid 7973] <... mkdir resumed>) = 0 [pid 7975] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7973] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7945] exit_group(0 [pid 7975] <... mprotect resumed>) = 0 [pid 7971] <... futex resumed>) = ? [pid 7964] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7951] <... futex resumed>) = ? [pid 7945] <... exit_group resumed>) = ? [pid 7975] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7971] +++ exited with 0 +++ [pid 7964] <... openat resumed>) = 3 [pid 7951] +++ exited with 0 +++ [pid 7945] +++ exited with 0 +++ [pid 7964] chdir("./file0" [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7945, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 7975] <... clone resumed>, parent_tid=[7978], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7978 [pid 7964] <... chdir resumed>) = 0 [pid 7975] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7964] ioctl(4, LOOP_CLR_FD [pid 7975] <... futex resumed>) = 0 [pid 7975] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7964] <... ioctl resumed>) = 0 [pid 7964] close(4) = 0 [pid 7964] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7961] <... futex resumed>) = 0 [pid 7964] fspick(AT_FDCWD, ".", 0 [pid 7961] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7964] <... fspick resumed>) = 4 [pid 7961] <... futex resumed>) = 0 [pid 7964] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7961] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7964] <... futex resumed>) = 0 [pid 7961] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7964] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7961] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7964] <... fsconfig resumed>) = 0 [pid 7961] <... futex resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7964] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7961] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7964] <... futex resumed>) = 0 [pid 7961] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5001] <... openat resumed>) = 3 [pid 7964] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7961] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] fstat(3, [pid 7964] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7961] <... futex resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7964] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7961] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] getdents64(3, ./strace-static-x86_64: Process 7978 attached [pid 7977] <... write resumed>) = 262144 [pid 5001] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7978] set_robust_list(0x7f50501119e0, 24 [pid 5001] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7978] <... set_robust_list resumed>) = 0 [pid 7977] munmap(0x7f5047cf1000, 262144 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7978] memfd_create("syzkaller", 0 [pid 7977] <... munmap resumed>) = 0 [pid 5001] lstat("./81/binderfs", [pid 7978] <... memfd_create resumed>) = 3 [pid 7977] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7978] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7977] <... openat resumed>) = 4 [ 113.804613][ T7951] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 113.815648][ T7964] EXT4-fs (loop4): 1 truncate cleaned up [ 113.821884][ T7964] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.837824][ T7973] EXT4-fs: Ignoring removed oldalloc option [pid 7978] <... mmap resumed>) = 0x7f5047cf1000 [pid 7977] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./81/binderfs") = 0 [pid 5001] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7978] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7978] munmap(0x7f5047cf1000, 262144) = 0 [pid 7978] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7978] ioctl(4, LOOP_SET_FD, 3 [pid 7977] <... ioctl resumed>) = 0 [pid 7977] close(3) = 0 [pid 7977] mkdir("./file0", 0777) = 0 [pid 7977] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7978] <... ioctl resumed>) = 0 [pid 7964] <... fsconfig resumed>) = 0 [pid 7978] close(3 [pid 7964] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7978] <... close resumed>) = 0 [pid 7964] <... futex resumed>) = 1 [pid 7961] <... futex resumed>) = 0 [pid 7961] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7961] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7978] mkdir("./file0", 0777 [pid 7964] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 5002] <... umount2 resumed>) = 0 [pid 7978] <... mkdir resumed>) = 0 [pid 7964] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [ 113.863732][ T7964] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 113.867010][ T7977] loop5: detected capacity change from 0 to 512 [ 113.878595][ T7978] loop0: detected capacity change from 0 to 512 [ 113.885992][ T7977] EXT4-fs: Ignoring removed oldalloc option [ 113.887150][ T7973] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7978] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7964] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7964] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7961] <... futex resumed>) = 0 [pid 7961] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5002] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./80/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7964] <... futex resumed>) = 0 [pid 7961] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7964] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5002] openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 113.908002][ T7973] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 113.909203][ T7978] EXT4-fs: Ignoring removed oldalloc option [ 113.938516][ T7964] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 113.948662][ T7973] EXT4-fs (loop1): 1 truncate cleaned up [ 113.955312][ T7964] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 5002] getdents64(4, [pid 5001] lstat("./81/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] getdents64(4, [pid 5001] openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] close(4 [pid 5001] getdents64(4, [pid 5002] <... close resumed>) = 0 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5002] rmdir("./80/file0" [pid 5001] getdents64(4, [pid 5002] <... rmdir resumed>) = 0 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5002] getdents64(3, [pid 7973] <... mount resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] close(4 [pid 5002] close(3 [pid 5001] <... close resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5001] rmdir("./81/file0" [pid 5002] rmdir("./80" [pid 5001] <... rmdir resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, [pid 5002] mkdir("./81", 0777 [pid 5001] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5001] close(3 [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5001] <... close resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5001] rmdir("./81" [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5001] <... rmdir resumed>) = 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] mkdir("./82", 0777 [pid 5002] close(3 [pid 5001] <... mkdir resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... openat resumed>) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5002] <... clone resumed>, child_tidptr=0x5555562025d0) = 7983 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7984 [pid 7973] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7973] chdir("./file0") = 0 [pid 7973] ioctl(4, LOOP_CLR_FD) = 0 [pid 7973] close(4 [pid 7961] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7961] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7961] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7961] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7973] <... close resumed>) = 0 [pid 7961] <... mprotect resumed>) = 0 [pid 7961] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7973] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7961] <... clone resumed>, parent_tid=[7987], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7987 [pid 7973] <... futex resumed>) = 1 [pid 7970] <... futex resumed>) = 0 [pid 7961] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7984 attached [pid 7973] fspick(AT_FDCWD, ".", 0 [pid 7970] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7961] <... futex resumed>) = 0 [pid 7973] <... fspick resumed>) = 4 [pid 7973] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7973] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7964] <... fsconfig resumed>) = 0 [pid 7964] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7964] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7983 attached [pid 7983] set_robust_list(0x5555562025e0, 24) = 0 [pid 7983] chdir("./81" [pid 7970] <... futex resumed>) = 1 [pid 7961] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7987 attached [pid 7984] set_robust_list(0x5555562025e0, 24 [pid 7983] <... chdir resumed>) = 0 [pid 7973] <... futex resumed>) = 0 [pid 7970] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7987] set_robust_list(0x7f5047d309e0, 24 [pid 7984] <... set_robust_list resumed>) = 0 [pid 7983] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7973] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7970] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7987] <... set_robust_list resumed>) = 0 [pid 7984] chdir("./82" [pid 7983] <... prctl resumed>) = 0 [pid 7970] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7987] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7984] <... chdir resumed>) = 0 [pid 7983] setpgid(0, 0 [pid 7973] <... futex resumed>) = 0 [pid 7970] <... futex resumed>) = 1 [pid 7984] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7983] <... setpgid resumed>) = 0 [pid 7973] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7970] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7987] <... openat resumed>) = -1 ENOSPC (No space left on device) [ 113.955559][ T7973] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.980066][ T7964] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 114.003012][ T7977] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7984] <... prctl resumed>) = 0 [pid 7983] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7973] <... fsconfig resumed>) = 0 [pid 7987] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7984] setpgid(0, 0 [pid 7983] <... openat resumed>) = 3 [pid 7973] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7987] <... futex resumed>) = 1 [pid 7984] <... setpgid resumed>) = 0 [pid 7983] write(3, "1000", 4 [pid 7973] <... futex resumed>) = 1 [pid 7970] <... futex resumed>) = 0 [pid 7961] <... futex resumed>) = 0 [pid 7987] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7984] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7983] <... write resumed>) = 4 [pid 7973] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7970] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7961] exit_group(0 [pid 7987] <... futex resumed>) = ? [pid 7984] <... openat resumed>) = 3 [pid 7983] close(3 [pid 7973] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7970] <... futex resumed>) = 0 [pid 7961] <... exit_group resumed>) = ? [pid 7987] +++ exited with 0 +++ [pid 7984] write(3, "1000", 4 [pid 7983] <... close resumed>) = 0 [pid 7973] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7970] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7984] <... write resumed>) = 4 [pid 7983] symlink("/dev/binderfs", "./binderfs" [pid 7984] close(3 [pid 7983] <... symlink resumed>) = 0 [pid 7984] <... close resumed>) = 0 [pid 7983] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7984] symlink("/dev/binderfs", "./binderfs" [pid 7983] <... futex resumed>) = 0 [pid 7984] <... symlink resumed>) = 0 [pid 7983] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7984] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7983] <... mmap resumed>) = 0x7f50500f1000 [pid 7984] <... futex resumed>) = 0 [pid 7983] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7984] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7983] <... mprotect resumed>) = 0 [pid 7984] <... mmap resumed>) = 0x7f50500f1000 [pid 7983] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7984] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7983] <... clone resumed>, parent_tid=[7989], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7989 [pid 7984] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7983] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7984] <... clone resumed>, parent_tid=[7990], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 7990 [pid 7983] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7984] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7984] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7990 attached ./strace-static-x86_64: Process 7989 attached [pid 7964] <... futex resumed>) = ? [pid 7990] set_robust_list(0x7f50501119e0, 24 [pid 7989] set_robust_list(0x7f50501119e0, 24 [pid 7990] <... set_robust_list resumed>) = 0 [pid 7989] <... set_robust_list resumed>) = 0 [pid 7990] memfd_create("syzkaller", 0 [pid 7989] memfd_create("syzkaller", 0 [pid 7990] <... memfd_create resumed>) = 3 [pid 7989] <... memfd_create resumed>) = 3 [pid 7990] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7989] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7990] <... mmap resumed>) = 0x7f5047cf1000 [ 114.017570][ T7978] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 114.027099][ T7977] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 114.046404][ T7978] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 7989] <... mmap resumed>) = 0x7f5047cf1000 [pid 7990] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7989] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7990] <... write resumed>) = 262144 [pid 7964] +++ exited with 0 +++ [pid 7961] +++ exited with 0 +++ [pid 7973] <... fsconfig resumed>) = 0 [pid 7973] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7970] <... futex resumed>) = 0 [pid 7973] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7970] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7973] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7970] <... futex resumed>) = 0 [pid 7973] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7970] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7973] <... futex resumed>) = 0 [pid 7970] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7973] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7970] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7990] munmap(0x7f5047cf1000, 262144 [pid 7989] <... write resumed>) = 262144 [pid 7978] <... mount resumed>) = 0 [pid 7970] <... futex resumed>) = 0 [pid 7990] <... munmap resumed>) = 0 [pid 7989] munmap(0x7f5047cf1000, 262144 [pid 7978] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7961, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 7990] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7989] <... munmap resumed>) = 0 [pid 7978] <... openat resumed>) = 3 [pid 5004] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7990] <... openat resumed>) = 4 [pid 7989] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7978] chdir("./file0" [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7990] ioctl(4, LOOP_SET_FD, 3 [pid 7989] <... openat resumed>) = 4 [pid 7978] <... chdir resumed>) = 0 [pid 5004] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7970] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 114.047013][ T7973] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 114.074027][ T7978] EXT4-fs (loop0): 1 truncate cleaned up [ 114.080061][ T7978] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.084644][ T7973] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 114.097523][ T7990] loop2: detected capacity change from 0 to 512 [ 114.105566][ T7977] EXT4-fs (loop5): 1 truncate cleaned up [pid 7989] ioctl(4, LOOP_SET_FD, 3 [pid 5004] <... openat resumed>) = 3 [pid 7989] <... ioctl resumed>) = 0 [pid 7989] close(3) = 0 [pid 7989] mkdir("./file0", 0777) = 0 [pid 7989] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7978] ioctl(4, LOOP_CLR_FD [pid 5004] fstat(3, [pid 7990] <... ioctl resumed>) = 0 [pid 7990] close(3) = 0 [pid 7990] mkdir("./file0", 0777) = 0 [pid 7990] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7978] <... ioctl resumed>) = 0 [pid 7977] <... mount resumed>) = 0 [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7978] close(4 [pid 7977] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5004] getdents64(3, [pid 7978] <... close resumed>) = 0 [pid 7977] <... openat resumed>) = 3 [pid 7970] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5004] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 7978] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7977] chdir("./file0" [pid 7970] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7978] <... futex resumed>) = 1 [pid 7977] <... chdir resumed>) = 0 [pid 7970] <... futex resumed>) = 0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7978] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7977] ioctl(4, LOOP_CLR_FD [pid 7970] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5004] lstat("./82/binderfs", [pid 7977] <... ioctl resumed>) = 0 [pid 7975] <... futex resumed>) = 0 [pid 7970] <... mmap resumed>) = 0x7f5047d10000 [pid 5004] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7977] close(4 [pid 7975] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7970] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5004] unlink("./82/binderfs" [pid 7977] <... close resumed>) = 0 [pid 7975] <... futex resumed>) = 1 [pid 7970] <... mprotect resumed>) = 0 [pid 7978] <... futex resumed>) = 0 [pid 7977] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7970] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5004] <... unlink resumed>) = 0 [pid 7978] fspick(AT_FDCWD, ".", 0 [pid 7977] <... futex resumed>) = 1 [pid 7974] <... futex resumed>) = 0 [pid 5004] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7978] <... fspick resumed>) = 4 [pid 7977] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7975] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7974] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7970] <... clone resumed>, parent_tid=[7993], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7993 [pid 7978] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7977] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7975] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7974] <... futex resumed>) = 0 [pid 7970] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7978] <... futex resumed>) = 0 [pid 7977] fspick(AT_FDCWD, ".", 0 [pid 7975] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7974] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7970] <... futex resumed>) = 0 [pid 7978] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7977] <... fspick resumed>) = 4 [pid 7975] <... futex resumed>) = 0 [pid 7970] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7978] <... fsconfig resumed>) = 0 [pid 7977] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7975] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7978] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7977] <... futex resumed>) = 1 [pid 7975] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7974] <... futex resumed>) = 0 [ 114.108601][ T7989] loop3: detected capacity change from 0 to 512 [ 114.114199][ T7977] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.123296][ T7989] EXT4-fs: Ignoring removed oldalloc option [ 114.132822][ T7973] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 114.151341][ T7990] EXT4-fs: Ignoring removed oldalloc option [ 114.160209][ T7989] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7978] <... futex resumed>) = 0 [pid 7977] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7974] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7978] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7977] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7974] <... futex resumed>) = 0 [pid 7977] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7974] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7977] <... fsconfig resumed>) = 0 [pid 7977] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7974] <... futex resumed>) = 0 [pid 7977] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7974] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7977] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7974] <... futex resumed>) = 0 [pid 7977] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7974] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7975] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7993 attached [pid 7978] <... futex resumed>) = 0 [pid 7975] <... futex resumed>) = 1 [pid 7993] set_robust_list(0x7f5047d309e0, 24 [pid 7975] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7993] <... set_robust_list resumed>) = 0 [pid 7978] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 114.175816][ T7989] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 114.194934][ T7989] EXT4-fs (loop3): 1 truncate cleaned up [ 114.196547][ T7977] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 114.201312][ T7973] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 7993] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 ENOSPC (No space left on device) [pid 7977] <... fsconfig resumed>) = 0 [pid 7974] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7973] <... fsconfig resumed>) = 0 [pid 7970] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5004] <... umount2 resumed>) = 0 [pid 7974] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7974] <... futex resumed>) = 0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7974] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5004] lstat("./82/file0", [pid 7974] <... mmap resumed>) = 0x7f5047d10000 [pid 5004] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7974] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5004] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7974] <... mprotect resumed>) = 0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7974] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5004] openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7993] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7977] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7975] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7973] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... openat resumed>) = 4 [pid 7974] <... clone resumed>, parent_tid=[7997], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7997 [pid 7970] exit_group(0 [pid 5004] fstat(4, [pid 7974] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7970] <... exit_group resumed>) = ? [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7974] <... futex resumed>) = 0 [pid 5004] getdents64(4, [pid 7974] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 7993] <... futex resumed>) = ? [pid 7989] <... mount resumed>) = 0 [pid 7977] <... futex resumed>) = 0 [pid 7975] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7973] <... futex resumed>) = ? [pid 5004] getdents64(4, [pid 7993] +++ exited with 0 +++ [pid 7989] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7977] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7975] <... futex resumed>) = 0 [pid 7973] +++ exited with 0 +++ [pid 7970] +++ exited with 0 +++ [pid 5004] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 7997 attached [pid 7989] <... openat resumed>) = 3 [pid 7975] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5004] close(4 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7970, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 7997] set_robust_list(0x7f5047d309e0, 24 [pid 7989] chdir("./file0" [pid 7975] <... mmap resumed>) = 0x7f5047d10000 [pid 5004] <... close resumed>) = 0 [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 7997] <... set_robust_list resumed>) = 0 [pid 7989] <... chdir resumed>) = 0 [pid 7975] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5004] rmdir("./82/file0" [pid 5000] <... restart_syscall resumed>) = 0 [pid 7997] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7989] ioctl(4, LOOP_CLR_FD [pid 7975] <... mprotect resumed>) = 0 [pid 5004] <... rmdir resumed>) = 0 [pid 7997] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [ 114.221596][ T7990] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 114.224761][ T7978] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 114.230954][ T7989] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.253839][ T7990] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 114.269753][ T7990] EXT4-fs (loop2): 1 truncate cleaned up [pid 7989] <... ioctl resumed>) = 0 [pid 7975] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5004] getdents64(3, [pid 7997] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7989] close(4 [pid 5004] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7997] <... futex resumed>) = 1 [pid 7989] <... close resumed>) = 0 [pid 7978] <... fsconfig resumed>) = 0 [pid 7975] <... clone resumed>, parent_tid=[7998], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 7998 [pid 7974] <... futex resumed>) = 0 [pid 5004] close(3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7998 attached [pid 7997] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7990] <... mount resumed>) = 0 [pid 7989] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7978] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7975] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7974] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... close resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7998] set_robust_list(0x7f5047d309e0, 24 [pid 7990] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7989] <... futex resumed>) = 1 [pid 7983] <... futex resumed>) = 0 [pid 7977] <... futex resumed>) = 0 [pid 7975] <... futex resumed>) = 0 [pid 7974] <... futex resumed>) = 1 [pid 5004] rmdir("./82" [pid 7998] <... set_robust_list resumed>) = 0 [pid 7990] <... openat resumed>) = 3 [pid 7983] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7975] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... openat resumed>) = 3 [pid 7998] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7990] chdir("./file0" [pid 7998] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 7990] <... chdir resumed>) = 0 [pid 7983] <... futex resumed>) = 0 [pid 5004] <... rmdir resumed>) = 0 [pid 7974] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7977] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7998] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7990] ioctl(4, LOOP_CLR_FD [pid 7989] fspick(AT_FDCWD, ".", 0 [pid 7983] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7978] <... futex resumed>) = 0 [pid 5004] mkdir("./83", 0777 [pid 5000] fstat(3, [pid 7998] <... futex resumed>) = 1 [pid 7990] <... ioctl resumed>) = 0 [pid 7998] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7990] close(4) = 0 [pid 7990] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7984] <... futex resumed>) = 0 [pid 7990] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7984] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7990] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7984] <... futex resumed>) = 0 [pid 7990] fspick(AT_FDCWD, ".", 0 [pid 7984] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7990] <... fspick resumed>) = 4 [pid 7990] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7984] <... futex resumed>) = 0 [pid 7990] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7984] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7990] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7984] <... futex resumed>) = 0 [pid 7990] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7984] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7990] <... fsconfig resumed>) = 0 [pid 7990] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7984] <... futex resumed>) = 0 [pid 7990] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7984] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7990] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7984] <... futex resumed>) = 0 [pid 7990] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7984] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7975] <... futex resumed>) = 0 [pid 7975] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7975] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7989] <... fspick resumed>) = 4 [pid 7989] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7989] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7983] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7983] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7989] <... futex resumed>) = 0 [pid 7983] <... futex resumed>) = 1 [pid 7989] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 7983] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7989] <... fsconfig resumed>) = 0 [pid 7989] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7983] <... futex resumed>) = 0 [pid 7989] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7983] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7989] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7983] <... futex resumed>) = 0 [pid 7989] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7983] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7978] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5004] <... mkdir resumed>) = 0 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5004] <... openat resumed>) = 3 [pid 5000] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./82/binderfs", [pid 5004] ioctl(3, LOOP_CLR_FD [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5004] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5004] close(3) = 0 [ 114.275447][ T7990] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.291247][ T7977] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 114.297688][ T7978] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 114.314406][ T7989] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 7999 ./strace-static-x86_64: Process 7999 attached [pid 7999] set_robust_list(0x5555562025e0, 24) = 0 [pid 7999] chdir("./83") = 0 [pid 7999] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7999] setpgid(0, 0) = 0 [pid 7999] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7999] write(3, "1000", 4) = 4 [pid 7999] close(3) = 0 [pid 7999] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7999] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7999] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7999] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 5000] unlink("./82/binderfs") = 0 [pid 5000] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7999] <... mprotect resumed>) = 0 [pid 7989] <... fsconfig resumed>) = 0 [pid 7989] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7999] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7983] <... futex resumed>) = 0 [pid 7983] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7983] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7989] <... futex resumed>) = 1 [pid 7989] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 7989] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7983] <... futex resumed>) = 0 [pid 7983] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7983] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7989] <... futex resumed>) = 1 [pid 7989] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7984] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7975] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7974] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7984] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7975] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7974] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7998] <... futex resumed>) = 0 [pid 7997] <... futex resumed>) = 0 [pid 7990] <... fsconfig resumed>) = 0 [pid 7984] <... futex resumed>) = 0 [pid 7975] <... futex resumed>) = 1 [pid 7974] <... futex resumed>) = 1 [pid 7998] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7984] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7975] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7974] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7998] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 7997] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7984] <... mmap resumed>) = 0x7f5047d10000 [pid 7998] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7984] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 7998] <... futex resumed>) = 1 [pid 7984] <... mprotect resumed>) = 0 [pid 7975] <... futex resumed>) = 0 [pid 7998] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7984] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8001], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8001 [pid 7999] <... clone resumed>, parent_tid=[8000], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8000 [pid 7984] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7999] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7984] <... futex resumed>) = 0 [pid 7999] <... futex resumed>) = 0 [pid 7984] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7999] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7990] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8001 attached [pid 8001] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8001] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7990] <... futex resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 7997] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 7997] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7990] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5000] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8001] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8001] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7984] <... futex resumed>) = 0 [pid 8001] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7984] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7984] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8000 attached [pid 8000] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8000] memfd_create("syzkaller", 0) = 3 [pid 8000] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 8000] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 7997] <... futex resumed>) = 1 [pid 7974] <... futex resumed>) = 0 [pid 7997] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7990] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 114.324780][ T7990] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 114.338430][ T7978] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 114.343173][ T7989] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 114.367682][ T7977] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 7990] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5000] lstat("./82/file0", [pid 8000] <... write resumed>) = 262144 [pid 8000] munmap(0x7f5047cf1000, 262144) = 0 [pid 8000] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8000] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7983] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7983] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7983] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 7983] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7983] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8002], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8002 [pid 7983] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7983] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./82/file0") = 0 [pid 5000] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./82") = 0 [pid 5000] mkdir("./83", 0777) = 0 ./strace-static-x86_64: Process 8002 attached [pid 8002] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8002] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8000] <... ioctl resumed>) = 0 [pid 8000] close(3) = 0 [pid 8000] mkdir("./file0", 0777) = 0 [pid 8000] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 7984] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7984] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8001] <... futex resumed>) = 0 [pid 7984] <... futex resumed>) = 1 [pid 8001] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 7984] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8001] <... openat resumed>) = -1 EROFS (Read-only file system) [ 114.377561][ T7990] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 114.382063][ T8000] loop4: detected capacity change from 0 to 512 [ 114.405990][ T7989] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 114.414287][ T7990] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8002] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 8001] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8002] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8001] <... futex resumed>) = 1 [pid 7984] <... futex resumed>) = 0 [pid 8002] <... futex resumed>) = 1 [pid 8001] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7983] <... futex resumed>) = 0 [pid 8002] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5000] <... openat resumed>) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7978] <... fsconfig resumed>) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x5555562025d0) = 8005 [pid 7978] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7975] exit_group(0 [pid 7998] <... futex resumed>) = ? [pid 7975] <... exit_group resumed>) = ? [pid 7998] +++ exited with 0 +++ [pid 7978] +++ exited with 0 +++ [pid 7975] +++ exited with 0 +++ ./strace-static-x86_64: Process 8005 attached [pid 8005] set_robust_list(0x5555562025e0, 24) = 0 [pid 8005] chdir("./83") = 0 [pid 8005] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8005] setpgid(0, 0) = 0 [pid 8005] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8005] write(3, "1000", 4) = 4 [pid 8005] close(3) = 0 [pid 8005] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8005] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7975, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 8005] <... futex resumed>) = 0 [pid 7989] <... fsconfig resumed>) = 0 [pid 7977] <... fsconfig resumed>) = 0 [ 114.421583][ T8000] EXT4-fs: Ignoring removed oldalloc option [ 114.423267][ T7978] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 114.449609][ T7977] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 114.455164][ T7989] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 8005] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7989] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7977] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8005] <... mmap resumed>) = 0x7f50500f1000 [pid 7989] <... futex resumed>) = 0 [pid 7977] <... futex resumed>) = 0 [pid 4999] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8005] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 7989] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7977] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8005] <... mprotect resumed>) = 0 [pid 7974] exit_group(0 [pid 4999] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8005] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7997] <... futex resumed>) = ? [pid 7977] <... futex resumed>) = ? [pid 7974] <... exit_group resumed>) = ? [pid 4999] <... openat resumed>) = 3 [pid 7997] +++ exited with 0 +++ [pid 7977] +++ exited with 0 +++ [pid 7974] +++ exited with 0 +++ [pid 4999] fstat(3, [pid 8005] <... clone resumed>, parent_tid=[8010], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8010 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8005] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] getdents64(3, [pid 8005] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 8005] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4999] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./81/binderfs") = 0 [pid 4999] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8010 attached [pid 8010] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8010] memfd_create("syzkaller", 0) = 3 [pid 8010] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 7990] <... fsconfig resumed>) = 0 [pid 8010] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 7990] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7984] exit_group(0 [pid 7983] exit_group(0 [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7974, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 8010] munmap(0x7f5047cf1000, 262144 [pid 8002] <... futex resumed>) = ? [pid 8001] <... futex resumed>) = ? [pid 7990] <... futex resumed>) = ? [pid 7989] <... futex resumed>) = ? [pid 7984] <... exit_group resumed>) = ? [pid 7983] <... exit_group resumed>) = ? [pid 4999] <... umount2 resumed>) = 0 [pid 8010] <... munmap resumed>) = 0 [pid 8002] +++ exited with 0 +++ [pid 8001] +++ exited with 0 +++ [pid 7990] +++ exited with 0 +++ [pid 7989] +++ exited with 0 +++ [pid 7984] +++ exited with 0 +++ [pid 7983] +++ exited with 0 +++ [pid 4999] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./81/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./81/file0") = 0 [pid 4999] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./81") = 0 [pid 4999] mkdir("./82", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 114.473570][ T7990] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 114.484838][ T8000] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 114.495116][ T8000] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 114.512217][ T8000] EXT4-fs (loop4): 1 truncate cleaned up [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 8011 [pid 8010] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5005] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7983, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7984, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 8010] <... openat resumed>) = 4 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8010] ioctl(4, LOOP_SET_FD, 3 [pid 5005] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8000] <... mount resumed>) = 0 [pid 5005] <... openat resumed>) = 3 [pid 8010] <... ioctl resumed>) = 0 [pid 8000] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5005] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(3, [pid 5002] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8010] close(3 [pid 8000] <... openat resumed>) = 3 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8011 attached [pid 8010] <... close resumed>) = 0 [pid 8000] chdir("./file0" [pid 5005] lstat("./81/binderfs", [pid 5002] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5005] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5001] <... openat resumed>) = 3 [pid 5002] fstat(3, [pid 5001] fstat(3, [pid 5005] unlink("./81/binderfs" [pid 8000] <... chdir resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8010] mkdir("./file0", 0777 [pid 8000] ioctl(4, LOOP_CLR_FD [pid 5005] <... unlink resumed>) = 0 [pid 5002] getdents64(3, [pid 5001] getdents64(3, [pid 5005] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5001] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 8000] <... ioctl resumed>) = 0 [pid 5002] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8000] close(4 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8011] set_robust_list(0x5555562025e0, 24 [pid 8010] <... mkdir resumed>) = 0 [pid 8000] <... close resumed>) = 0 [pid 5002] lstat("./81/binderfs", [pid 5001] lstat("./82/binderfs", [pid 8011] <... set_robust_list resumed>) = 0 [pid 8010] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8000] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8011] chdir("./82" [pid 8000] <... futex resumed>) = 1 [pid 7999] <... futex resumed>) = 0 [pid 5002] unlink("./81/binderfs" [pid 5001] unlink("./82/binderfs" [pid 8011] <... chdir resumed>) = 0 [pid 8000] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7999] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... unlink resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 8011] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8000] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5002] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8011] <... prctl resumed>) = 0 [pid 8000] fspick(AT_FDCWD, ".", 0 [pid 8011] setpgid(0, 0 [pid 8000] <... fspick resumed>) = 4 [pid 8011] <... setpgid resumed>) = 0 [pid 8000] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8011] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8000] <... futex resumed>) = 0 [pid 8011] <... openat resumed>) = 3 [pid 8000] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7999] <... futex resumed>) = 0 [pid 8011] write(3, "1000", 4) = 4 [pid 7999] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8011] close(3 [pid 7999] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8011] <... close resumed>) = 0 [pid 8011] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8011] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8011] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 7999] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8011] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7999] <... futex resumed>) = 1 [pid 8011] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8000] <... futex resumed>) = 0 [pid 7999] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8000] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8011] <... clone resumed>, parent_tid=[8012], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8012 [pid 8000] <... fsconfig resumed>) = 0 [pid 8011] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8011] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8000] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7999] <... futex resumed>) = 0 [pid 8000] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7999] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7999] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8012 attached [pid 5005] <... umount2 resumed>) = 0 [pid 8012] set_robust_list(0x7f50501119e0, 24 [ 114.518538][ T8000] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.533096][ T8010] loop1: detected capacity change from 0 to 512 [ 114.559480][ T8010] EXT4-fs: Ignoring removed oldalloc option [pid 5005] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8012] <... set_robust_list resumed>) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8012] memfd_create("syzkaller", 0 [pid 5005] lstat("./81/file0", [pid 8012] <... memfd_create resumed>) = 3 [pid 5005] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8012] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5005] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8012] <... mmap resumed>) = 0x7f5047cf1000 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8012] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5005] openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5005] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5005] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5005] close(4) = 0 [pid 5005] rmdir("./81/file0" [pid 8012] <... write resumed>) = 262144 [pid 5005] <... rmdir resumed>) = 0 [pid 5005] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5005] close(3) = 0 [pid 5005] rmdir("./81" [pid 8012] munmap(0x7f5047cf1000, 262144 [pid 5005] <... rmdir resumed>) = 0 [pid 8012] <... munmap resumed>) = 0 [pid 5005] mkdir("./82", 0777 [pid 5002] <... umount2 resumed>) = 0 [pid 5005] <... mkdir resumed>) = 0 [pid 8012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 8012] <... openat resumed>) = 4 [pid 8000] <... fsconfig resumed>) = 0 [pid 5005] <... openat resumed>) = 3 [pid 5002] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] lstat("./81/file0", [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] lstat("./82/file0", [pid 5002] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... openat resumed>) = 4 [pid 5001] openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] fstat(4, [pid 5001] <... openat resumed>) = 4 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] fstat(4, [pid 5002] getdents64(4, [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, [pid 5002] getdents64(4, [pid 5001] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] getdents64(4, [pid 5002] close(4 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5002] <... close resumed>) = 0 [pid 5001] close(4 [pid 5002] rmdir("./81/file0" [pid 5001] <... close resumed>) = 0 [pid 5005] ioctl(3, LOOP_CLR_FD [pid 5002] <... rmdir resumed>) = 0 [pid 5001] rmdir("./82/file0" [pid 8012] ioctl(4, LOOP_SET_FD, 3 [pid 8000] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] getdents64(3, [pid 5001] <... rmdir resumed>) = 0 [pid 7999] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] getdents64(3, [pid 7999] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] close(3 [pid 5001] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 7999] <... futex resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5001] close(3 [pid 7999] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] rmdir("./81" [pid 5001] <... close resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] rmdir("./82" [pid 5002] mkdir("./82", 0777 [pid 5001] <... rmdir resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5001] mkdir("./83", 0777 [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5001] <... mkdir resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5001] <... openat resumed>) = 3 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5002] close(3 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... close resumed>) = 0 [pid 5001] close(3 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... close resumed>) = 0 [pid 5005] close(3 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... clone resumed>, child_tidptr=0x5555562025d0) = 8014 [pid 5001] <... clone resumed>, child_tidptr=0x5555562025d0) = 8015 ./strace-static-x86_64: Process 8014 attached [pid 8014] set_robust_list(0x5555562025e0, 24) = 0 ./strace-static-x86_64: Process 8015 attached [pid 8015] set_robust_list(0x5555562025e0, 24 [pid 8014] chdir("./82" [pid 8015] <... set_robust_list resumed>) = 0 [pid 8014] <... chdir resumed>) = 0 [pid 8015] chdir("./83" [pid 8014] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8014] setpgid(0, 0) = 0 [pid 8014] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8015] <... chdir resumed>) = 0 [pid 8015] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8015] setpgid(0, 0) = 0 [pid 8014] <... openat resumed>) = 3 [pid 8015] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8014] write(3, "1000", 4) = 4 [pid 8014] close(3) = 0 [pid 8014] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8015] write(3, "1000", 4 [pid 8000] <... futex resumed>) = 1 [pid 7999] <... futex resumed>) = 0 [pid 8000] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 7999] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=37000000} [pid 8000] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8000] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7999] <... futex resumed>) = 0 [pid 5005] <... close resumed>) = 0 [pid 8015] <... write resumed>) = 4 [ 114.581604][ T8000] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 114.621828][ T8012] loop0: detected capacity change from 0 to 512 [pid 8000] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 7999] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8015] close(3 [pid 8014] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7999] <... futex resumed>) = 0 [pid 8015] <... close resumed>) = 0 [pid 8014] <... futex resumed>) = 0 [pid 7999] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8015] symlink("/dev/binderfs", "./binderfs" [pid 8014] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8015] <... symlink resumed>) = 0 [pid 8014] <... mmap resumed>) = 0x7f50500f1000 [pid 8015] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8014] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8015] <... futex resumed>) = 0 [pid 8014] <... mprotect resumed>) = 0 [pid 8015] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8014] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5005] <... clone resumed>, child_tidptr=0x5555562025d0) = 8017 [pid 8015] <... mmap resumed>) = 0x7f50500f1000 [pid 8015] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8014] <... clone resumed>, parent_tid=[8018], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8018 ./strace-static-x86_64: Process 8017 attached [pid 8015] <... mprotect resumed>) = 0 [pid 8014] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8018 attached [pid 8017] set_robust_list(0x5555562025e0, 24 [pid 8015] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8014] <... futex resumed>) = 0 [pid 8012] <... ioctl resumed>) = 0 [pid 8018] set_robust_list(0x7f50501119e0, 24 [pid 8017] <... set_robust_list resumed>) = 0 [pid 8012] close(3) = 0 [pid 8012] mkdir("./file0", 0777) = 0 [pid 8012] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8018] <... set_robust_list resumed>) = 0 [pid 8017] chdir("./82" [pid 8015] <... clone resumed>, parent_tid=[8019], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8019 [pid 8014] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8019 attached [pid 8019] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8019] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 114.638046][ T8000] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 114.649015][ T8010] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 114.667358][ T8000] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 114.672794][ T8012] EXT4-fs: Ignoring removed oldalloc option [pid 8018] memfd_create("syzkaller", 0) = 3 [pid 8018] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 8018] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8017] <... chdir resumed>) = 0 [pid 8015] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8019] <... futex resumed>) = 0 [pid 8017] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8015] <... futex resumed>) = 1 [pid 8019] memfd_create("syzkaller", 0 [pid 8017] <... prctl resumed>) = 0 [pid 8018] <... write resumed>) = 262144 [pid 8018] munmap(0x7f5047cf1000, 262144) = 0 [pid 8018] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 8018] ioctl(4, LOOP_SET_FD, 3 [pid 8015] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8019] <... memfd_create resumed>) = 3 [pid 8017] setpgid(0, 0 [pid 8019] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8017] <... setpgid resumed>) = 0 [pid 8010] <... mount resumed>) = 0 [pid 7999] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8019] <... mmap resumed>) = 0x7f5047cf1000 [pid 8017] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7999] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8019] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8017] <... openat resumed>) = 3 [pid 7999] <... futex resumed>) = 0 [pid 8017] write(3, "1000", 4 [pid 7999] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8017] <... write resumed>) = 4 [pid 7999] <... mmap resumed>) = 0x7f5047d10000 [pid 8017] close(3 [pid 7999] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8017] <... close resumed>) = 0 [pid 7999] <... mprotect resumed>) = 0 [pid 8017] symlink("/dev/binderfs", "./binderfs" [pid 7999] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 8021 attached [pid 8018] <... ioctl resumed>) = 0 [pid 8017] <... symlink resumed>) = 0 [pid 8010] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8018] close(3 [pid 8010] <... openat resumed>) = 3 [pid 8018] <... close resumed>) = 0 [pid 8010] chdir("./file0" [pid 8018] mkdir("./file0", 0777 [pid 8010] <... chdir resumed>) = 0 [pid 8018] <... mkdir resumed>) = 0 [pid 8010] ioctl(4, LOOP_CLR_FD [pid 8018] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8010] <... ioctl resumed>) = 0 [ 114.676576][ T8010] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 114.699649][ T8010] EXT4-fs (loop1): 1 truncate cleaned up [ 114.705673][ T8010] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.707784][ T8018] loop3: detected capacity change from 0 to 512 [ 114.726123][ T8000] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 8019] <... write resumed>) = 262144 [pid 8017] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8010] close(4 [pid 7999] <... clone resumed>, parent_tid=[8021], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8021 [pid 8019] munmap(0x7f5047cf1000, 262144 [pid 8017] <... futex resumed>) = 0 [pid 7999] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8019] <... munmap resumed>) = 0 [pid 8017] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7999] <... futex resumed>) = 0 [pid 8019] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8017] <... mmap resumed>) = 0x7f50500f1000 [pid 7999] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8019] <... openat resumed>) = 4 [pid 8017] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8019] ioctl(4, LOOP_SET_FD, 3 [pid 8017] <... mprotect resumed>) = 0 [pid 8017] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8010] <... close resumed>) = 0 [pid 8017] <... clone resumed>, parent_tid=[8023], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8023 [pid 8017] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8017] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8023 attached [pid 8021] set_robust_list(0x7f5047d309e0, 24 [pid 8019] <... ioctl resumed>) = 0 [pid 8010] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8000] <... fsconfig resumed>) = 0 [pid 8021] <... set_robust_list resumed>) = 0 [pid 8019] close(3 [pid 8010] <... futex resumed>) = 1 [pid 8005] <... futex resumed>) = 0 [pid 8000] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8021] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8019] <... close resumed>) = 0 [pid 8010] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8005] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8000] <... futex resumed>) = 0 [pid 8019] mkdir("./file0", 0777 [pid 8010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8005] <... futex resumed>) = 0 [pid 8000] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8019] <... mkdir resumed>) = 0 [pid 8010] fspick(AT_FDCWD, ".", 0 [pid 8005] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8019] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8010] <... fspick resumed>) = 4 [pid 8023] set_robust_list(0x7f50501119e0, 24 [pid 8021] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8010] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8021] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8010] <... futex resumed>) = 1 [pid 8005] <... futex resumed>) = 0 [pid 8021] <... futex resumed>) = 1 [pid 8010] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8005] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8021] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8005] <... futex resumed>) = 0 [pid 8010] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8005] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8010] <... fsconfig resumed>) = 0 [pid 8010] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8005] <... futex resumed>) = 0 [pid 8010] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8005] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8005] <... futex resumed>) = 0 [pid 8010] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8005] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8023] <... set_robust_list resumed>) = 0 [pid 7999] <... futex resumed>) = 0 [ 114.729490][ T8018] EXT4-fs: Ignoring removed oldalloc option [ 114.741037][ T8019] loop2: detected capacity change from 0 to 512 [ 114.757645][ T8012] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 114.765094][ T8019] EXT4-fs: Ignoring removed oldalloc option [ 114.767864][ T8012] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 8023] memfd_create("syzkaller", 0 [pid 7999] exit_group(0 [pid 8021] <... futex resumed>) = ? [pid 7999] <... exit_group resumed>) = ? [pid 8021] +++ exited with 0 +++ [pid 8000] <... futex resumed>) = ? [pid 8000] +++ exited with 0 +++ [pid 7999] +++ exited with 0 +++ [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7999, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5004] restart_syscall(<... resuming interrupted clone ...> [pid 8023] <... memfd_create resumed>) = 3 [pid 5004] <... restart_syscall resumed>) = 0 [pid 8023] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5004] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8023] <... mmap resumed>) = 0x7f5047cf1000 [pid 5004] <... openat resumed>) = 3 [pid 5004] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5004] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5004] unlink("./83/binderfs" [pid 8023] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5004] <... unlink resumed>) = 0 [pid 5004] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8023] <... write resumed>) = 262144 [pid 8010] <... fsconfig resumed>) = 0 [pid 8023] munmap(0x7f5047cf1000, 262144 [pid 8010] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8023] <... munmap resumed>) = 0 [pid 8010] <... futex resumed>) = 1 [pid 8005] <... futex resumed>) = 0 [pid 8023] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 8010] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8005] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8023] <... openat resumed>) = 4 [pid 8010] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8005] <... futex resumed>) = 0 [pid 8023] ioctl(4, LOOP_SET_FD, 3 [pid 8010] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8005] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8023] <... ioctl resumed>) = 0 [pid 8010] <... futex resumed>) = 0 [pid 8005] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8023] close(3 [pid 8010] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 114.788011][ T8010] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 114.806614][ T8012] EXT4-fs (loop0): 1 truncate cleaned up [ 114.812370][ T8023] loop5: detected capacity change from 0 to 512 [ 114.814236][ T8010] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [pid 8005] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8023] <... close resumed>) = 0 [pid 8012] <... mount resumed>) = 0 [pid 8005] <... futex resumed>) = 0 [pid 8023] mkdir("./file0", 0777 [pid 8012] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8005] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8023] <... mkdir resumed>) = 0 [pid 8012] <... openat resumed>) = 3 [pid 8023] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8012] chdir("./file0") = 0 [pid 8012] ioctl(4, LOOP_CLR_FD) = 0 [ 114.828953][ T8012] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.829471][ T8019] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 114.849636][ T8018] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 114.849732][ T8010] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 114.862284][ T8018] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 114.870517][ T8023] EXT4-fs: Ignoring removed oldalloc option [pid 8012] close(4) = 0 [pid 8012] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8011] <... futex resumed>) = 0 [pid 8012] fspick(AT_FDCWD, ".", 0 [pid 8011] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8012] <... fspick resumed>) = 4 [pid 8011] <... futex resumed>) = 0 [pid 8012] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8011] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8012] <... futex resumed>) = 0 [pid 8011] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8012] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8011] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8012] <... fsconfig resumed>) = 0 [pid 8011] <... futex resumed>) = 0 [pid 8012] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8011] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8012] <... futex resumed>) = 0 [pid 8011] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8012] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8011] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8012] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8011] <... futex resumed>) = 0 [pid 8012] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8011] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8005] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8018] <... mount resumed>) = 0 [pid 8018] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8018] chdir("./file0") = 0 [pid 8018] ioctl(4, LOOP_CLR_FD) = 0 [pid 8018] close(4) = 0 [pid 8018] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8018] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8010] <... fsconfig resumed>) = 0 [ 114.882072][ T8019] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 114.906617][ T8018] EXT4-fs (loop3): 1 truncate cleaned up [ 114.908922][ T8010] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 114.913501][ T8018] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 8010] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8014] <... futex resumed>) = 0 [pid 8005] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8010] <... futex resumed>) = 0 [pid 8010] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8014] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8010] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8005] <... futex resumed>) = 0 [pid 8011] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8011] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8018] <... futex resumed>) = 0 [pid 8014] <... futex resumed>) = 1 [pid 8011] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8010] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8005] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8018] fspick(AT_FDCWD, ".", 0 [pid 8014] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8010] <... futex resumed>) = 0 [pid 8005] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8018] <... fspick resumed>) = 4 [pid 8011] <... mmap resumed>) = 0x7f5047d10000 [pid 8010] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8005] exit_group(0 [pid 8019] <... mount resumed>) = 0 [pid 8018] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8011] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8010] <... futex resumed>) = ? [pid 8005] <... exit_group resumed>) = ? [pid 8011] <... mprotect resumed>) = 0 [pid 8011] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8031], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8031 [pid 8011] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8018] <... futex resumed>) = 1 [pid 8014] <... futex resumed>) = 0 [pid 8011] <... futex resumed>) = 0 [pid 8011] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8019] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8010] +++ exited with 0 +++ [pid 8005] +++ exited with 0 +++ [pid 8014] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8018] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8014] <... futex resumed>) = 0 [pid 5004] <... umount2 resumed>) = 0 [pid 5004] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./83/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5004] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5004] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5004] close(4) = 0 [pid 5004] rmdir("./83/file0") = 0 [pid 5004] getdents64(3, [pid 8014] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8018] <... fsconfig resumed>) = 0 [pid 5004] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8005, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 8018] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] close(3 [pid 5000] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8018] <... futex resumed>) = 1 [pid 8014] <... futex resumed>) = 0 [pid 5004] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8018] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8014] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] rmdir("./83" [pid 5000] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8018] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8014] <... futex resumed>) = 0 [pid 5004] <... rmdir resumed>) = 0 [pid 8018] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8014] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] mkdir("./84", 0777 [pid 5000] <... openat resumed>) = 3 [pid 5004] <... mkdir resumed>) = 0 [pid 8019] <... openat resumed>) = 3 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] fstat(3, [pid 8019] chdir("./file0" [pid 5004] <... openat resumed>) = 3 [pid 8019] <... chdir resumed>) = 0 [pid 5004] ioctl(3, LOOP_CLR_FD [pid 8019] ioctl(4, LOOP_CLR_FD [pid 5004] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8019] <... ioctl resumed>) = 0 [pid 5004] close(3 [pid 8019] close(4 [pid 5004] <... close resumed>) = 0 [pid 8019] <... close resumed>) = 0 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 114.929607][ T8019] EXT4-fs (loop2): 1 truncate cleaned up [ 114.942736][ T8019] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.959202][ T8012] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 8019] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5004] <... clone resumed>, child_tidptr=0x5555562025d0) = 8033 [pid 8019] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8015] <... futex resumed>) = 0 [pid 8015] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8015] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8019] <... futex resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8019] fspick(AT_FDCWD, ".", 0) = 4 [pid 8019] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8015] <... futex resumed>) = 0 [pid 8019] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8015] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8019] <... fsconfig resumed>) = 0 [pid 8015] <... futex resumed>) = 0 [pid 8019] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8015] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8019] <... futex resumed>) = 0 [pid 8015] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8019] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8015] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5000] getdents64(3, [pid 8015] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 8011] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8011] futex(0x7f50501ea7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8011] <... futex resumed>) = 0 [pid 8011] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8033 attached ./strace-static-x86_64: Process 8031 attached [pid 8011] <... mmap resumed>) = 0x7f5047cef000 [pid 5000] lstat("./83/binderfs", [pid 8011] mprotect(0x7f5047cf0000, 131072, PROT_READ|PROT_WRITE [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8033] set_robust_list(0x5555562025e0, 24 [pid 8031] set_robust_list(0x7f5047d309e0, 24 [pid 5000] unlink("./83/binderfs" [pid 8033] <... set_robust_list resumed>) = 0 [pid 8031] <... set_robust_list resumed>) = 0 [pid 8011] <... mprotect resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 5000] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8011] clone(child_stack=0x7f5047d0f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8033] chdir("./84" [ 114.987508][ T8018] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 115.004263][ T8019] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 115.015627][ T8023] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8031] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8033] <... chdir resumed>) = 0 [pid 8031] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8014] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8011] <... clone resumed>, parent_tid=[8034], tls=0x7f5047d0f700, child_tidptr=0x7f5047d0f9d0) = 8034 [pid 8011] futex(0x7f50501ea7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8011] futex(0x7f50501ea7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8012] <... fsconfig resumed>) = 0 [pid 8012] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8012] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 8034 attached [pid 8034] set_robust_list(0x7f5047d0f9e0, 24) = 0 [pid 8014] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8033] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8014] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8033] <... prctl resumed>) = 0 [pid 8031] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8033] setpgid(0, 0 [pid 8031] <... futex resumed>) = 0 [pid 8014] <... mmap resumed>) = 0x7f5047d10000 [pid 8033] <... setpgid resumed>) = 0 [pid 8031] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8014] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8014] <... mprotect resumed>) = 0 [pid 8033] <... openat resumed>) = 3 [pid 8018] <... fsconfig resumed>) = 0 [pid 8014] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8033] write(3, "1000", 4 [pid 8018] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8033] <... write resumed>) = 4 [pid 8018] <... futex resumed>) = 0 [pid 8033] close(3 [pid 8018] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8033] <... close resumed>) = 0 [pid 8014] <... clone resumed>, parent_tid=[8035], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8035 [pid 8033] symlink("/dev/binderfs", "./binderfs" [pid 8014] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8033] <... symlink resumed>) = 0 [pid 8034] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8033] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8014] <... futex resumed>) = 0 [pid 8014] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8033] <... futex resumed>) = 0 [pid 8033] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8015] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8015] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8015] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 8015] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8015] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8036], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8036 [pid 8015] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8015] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8033] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 8036 attached ./strace-static-x86_64: Process 8035 attached ) = 0 [pid 8019] <... fsconfig resumed>) = 0 [pid 8019] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8019] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8036] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8036] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 8036] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8015] <... futex resumed>) = 0 [pid 8036] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8015] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8019] <... futex resumed>) = 0 [pid 8015] <... futex resumed>) = 1 [pid 8019] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8015] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8035] set_robust_list(0x7f5047d309e0, 24 [pid 8033] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8023] <... mount resumed>) = 0 [pid 8035] <... set_robust_list resumed>) = 0 [pid 8035] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8033] <... clone resumed>, parent_tid=[8037], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8037 [pid 8035] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [ 115.036232][ T8023] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 115.058883][ T8034] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 115.059572][ T8023] EXT4-fs (loop5): 1 truncate cleaned up [ 115.075420][ T8023] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 8033] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8035] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8033] <... futex resumed>) = 0 [pid 8035] <... futex resumed>) = 1 [pid 8033] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8014] <... futex resumed>) = 0 [pid 8035] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8014] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8018] <... futex resumed>) = 0 [pid 8014] <... futex resumed>) = 1 [pid 8018] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8014] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8011] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5000] <... umount2 resumed>) = 0 [pid 8011] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8023] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8023] chdir("./file0") = 0 [pid 8023] ioctl(4, LOOP_CLR_FD) = 0 [pid 8023] close(4 [pid 8015] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8012] <... futex resumed>) = 0 [pid 8011] <... futex resumed>) = 1 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8015] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8012] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8011] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] lstat("./83/file0", [pid 8015] <... futex resumed>) = 1 [pid 8036] <... futex resumed>) = 0 [pid 8036] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8023] <... close resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8023] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8015] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8036] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 5000] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8036] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8023] <... futex resumed>) = 1 [pid 8017] <... futex resumed>) = 0 [pid 8036] <... futex resumed>) = 1 [pid 8023] fspick(AT_FDCWD, ".", 0 [pid 8017] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8012] <... openat resumed>) = 5 [pid 8015] <... futex resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 8037 attached [pid 8036] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8023] <... fspick resumed>) = 4 [pid 8017] <... futex resumed>) = 0 [pid 8012] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... openat resumed>) = 4 [pid 8037] set_robust_list(0x7f50501119e0, 24 [pid 8023] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 115.079370][ T8019] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 115.092904][ T8018] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 115.099147][ T8034] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 115.114453][ T8018] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 115.115129][ T8019] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8017] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8012] <... futex resumed>) = 1 [pid 8011] <... futex resumed>) = 0 [pid 5000] fstat(4, [pid 8037] <... set_robust_list resumed>) = 0 [pid 8023] <... futex resumed>) = 0 [pid 8017] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8012] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8037] memfd_create("syzkaller", 0 [pid 8023] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8017] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8023] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8017] <... futex resumed>) = 0 [pid 5000] getdents64(4, [pid 8023] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8017] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8023] <... fsconfig resumed>) = 0 [pid 8023] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8017] <... futex resumed>) = 0 [pid 8023] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8017] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8023] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8017] <... futex resumed>) = 0 [pid 8023] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8017] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8037] <... memfd_create resumed>) = 3 [pid 5000] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8037] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8034] <... fsconfig resumed>) = 0 [pid 5000] getdents64(4, [pid 8037] <... mmap resumed>) = 0x7f5047cf1000 [pid 8034] futex(0x7f50501ea7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8037] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8034] <... futex resumed>) = 0 [pid 5000] close(4 [pid 8037] <... write resumed>) = 262144 [pid 8034] futex(0x7f50501ea7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8011] exit_group(0 [pid 5000] <... close resumed>) = 0 [pid 8037] munmap(0x7f5047cf1000, 262144 [pid 8034] <... futex resumed>) = ? [pid 8012] <... futex resumed>) = ? [pid 8011] <... exit_group resumed>) = ? [pid 5000] rmdir("./83/file0" [pid 8037] <... munmap resumed>) = 0 [pid 8034] +++ exited with 0 +++ [pid 8012] +++ exited with 0 +++ [pid 5000] <... rmdir resumed>) = 0 [pid 8037] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] getdents64(3, [pid 8037] <... openat resumed>) = 4 [pid 5000] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8037] ioctl(4, LOOP_SET_FD, 3 [pid 5000] close(3 [pid 8031] <... futex resumed>) = ? [pid 8019] <... fsconfig resumed>) = 0 [pid 8014] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8031] +++ exited with 0 +++ [pid 8019] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8014] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8011] +++ exited with 0 +++ [pid 8035] <... futex resumed>) = 0 [pid 8019] <... futex resumed>) = 0 [pid 8015] exit_group(0 [pid 8014] <... futex resumed>) = 1 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8011, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 8035] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8015] <... exit_group resumed>) = ? [pid 8014] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8037] <... ioctl resumed>) = 0 [pid 8036] <... futex resumed>) = ? [pid 8035] <... openat resumed>) = 5 [pid 8019] +++ exited with 0 +++ [pid 5000] <... close resumed>) = 0 [pid 8035] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8014] <... futex resumed>) = 0 [pid 4999] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8036] +++ exited with 0 +++ [pid 8035] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8015] +++ exited with 0 +++ [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8015, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5000] rmdir("./83" [pid 4999] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] lstat("./82/binderfs", [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 115.146402][ T8034] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 115.158937][ T8019] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 115.165741][ T8037] loop4: detected capacity change from 0 to 512 [ 115.181307][ T8023] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 5001] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] unlink("./82/binderfs" [pid 5001] <... openat resumed>) = 3 [pid 4999] <... unlink resumed>) = 0 [pid 5001] fstat(3, [pid 4999] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./83/binderfs") = 0 [pid 5001] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8037] close(3 [pid 5000] <... rmdir resumed>) = 0 [pid 8037] <... close resumed>) = 0 [pid 8037] mkdir("./file0", 0777 [pid 5000] mkdir("./84", 0777 [pid 8023] <... fsconfig resumed>) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 8017] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8017] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5000] <... openat resumed>) = 3 [pid 8017] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8037] <... mkdir resumed>) = 0 [pid 8023] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8017] <... mmap resumed>) = 0x7f5047d10000 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 8037] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8023] <... futex resumed>) = 0 [pid 8017] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8023] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8017] <... mprotect resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8017] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8041], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8041 [pid 8017] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8017] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8041 attached [pid 8041] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8041] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 8018] <... fsconfig resumed>) = 0 [pid 5000] close(3 [pid 4999] <... umount2 resumed>) = 0 [pid 8041] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8017] <... futex resumed>) = 0 [pid 8041] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8017] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8023] <... futex resumed>) = 0 [pid 8017] <... futex resumed>) = 1 [ 115.181456][ T8018] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 115.211412][ T8037] EXT4-fs: Ignoring removed oldalloc option [ 115.231080][ T8037] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8023] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8017] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... close resumed>) = 0 [pid 4999] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./83/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] lstat("./82/file0", [pid 5000] <... clone resumed>, child_tidptr=0x5555562025d0) = 8044 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8018] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8018] <... futex resumed>) = 0 [pid 8014] exit_group(0 [pid 8035] <... futex resumed>) = ? [pid 8014] <... exit_group resumed>) = ? [pid 5001] getdents64(4, [pid 8035] +++ exited with 0 +++ [pid 5001] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] close(4) = 0 [pid 5001] rmdir("./83/file0") = 0 [pid 5001] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./83") = 0 [pid 5001] mkdir("./84", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8044 attached ./strace-static-x86_64: Process 8045 attached [pid 8044] set_robust_list(0x5555562025e0, 24 [pid 8018] +++ exited with 0 +++ [pid 8014] +++ exited with 0 +++ [pid 4999] openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8045] set_robust_list(0x5555562025e0, 24 [pid 8037] <... mount resumed>) = 0 [pid 8045] <... set_robust_list resumed>) = 0 [pid 8045] chdir("./84" [pid 8037] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8045] <... chdir resumed>) = 0 [pid 8045] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8037] <... openat resumed>) = 3 [pid 8045] <... prctl resumed>) = 0 [pid 8045] setpgid(0, 0 [pid 8037] chdir("./file0" [pid 8045] <... setpgid resumed>) = 0 [pid 8045] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8037] <... chdir resumed>) = 0 [pid 8045] <... openat resumed>) = 3 [pid 8045] write(3, "1000", 4 [pid 8037] ioctl(4, LOOP_CLR_FD [pid 8045] <... write resumed>) = 4 [pid 8045] close(3 [pid 8037] <... ioctl resumed>) = 0 [pid 8045] <... close resumed>) = 0 [pid 8045] symlink("/dev/binderfs", "./binderfs" [pid 8037] close(4 [pid 8045] <... symlink resumed>) = 0 [pid 8045] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8037] <... close resumed>) = 0 [pid 8017] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] <... openat resumed>) = 4 [pid 8045] <... futex resumed>) = 0 [pid 8044] <... set_robust_list resumed>) = 0 [pid 8037] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8017] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8014, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5001] <... clone resumed>, child_tidptr=0x5555562025d0) = 8045 [pid 4999] fstat(4, [pid 8045] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8041] <... futex resumed>) = 0 [pid 8037] <... futex resumed>) = 1 [pid 8033] <... futex resumed>) = 0 [pid 8017] <... futex resumed>) = 1 [pid 5002] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8045] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8044] chdir("./84" [pid 8045] <... mprotect resumed>) = 0 [pid 8041] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8037] fspick(AT_FDCWD, ".", 0 [pid 8033] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8017] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] getdents64(4, [pid 8045] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8044] <... chdir resumed>) = 0 [pid 8037] <... fspick resumed>) = 4 [pid 8033] <... futex resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8037] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8045] <... clone resumed>, parent_tid=[8046], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8046 [pid 8037] <... futex resumed>) = 0 [pid 8033] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8045] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8037] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5002] <... openat resumed>) = 3 [pid 4999] getdents64(4, [pid 8045] <... futex resumed>) = 0 [pid 8044] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8041] <... openat resumed>) = 5 [pid 8033] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5002] fstat(3, [pid 4999] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8045] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8044] <... prctl resumed>) = 0 [pid 8041] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8033] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] close(4./strace-static-x86_64: Process 8046 attached [pid 8044] setpgid(0, 0 [pid 8041] <... futex resumed>) = 1 [pid 8041] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8033] <... futex resumed>) = 1 [pid 8044] <... setpgid resumed>) = 0 [pid 8017] <... futex resumed>) = 0 [pid 5002] getdents64(3, [pid 4999] <... close resumed>) = 0 [pid 8033] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8046] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8044] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] rmdir("./82/file0" [pid 8046] memfd_create("syzkaller", 0 [pid 8044] <... openat resumed>) = 3 [pid 8037] <... futex resumed>) = 0 [pid 8037] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 8037] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8037] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... rmdir resumed>) = 0 [pid 8046] <... memfd_create resumed>) = 3 [pid 8044] write(3, "1000", 4 [pid 8033] <... futex resumed>) = 0 [ 115.236443][ T8023] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 115.241418][ T8037] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 115.266848][ T8037] EXT4-fs (loop4): 1 truncate cleaned up [ 115.272980][ T8037] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.287800][ T8023] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 5002] lstat("./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] getdents64(3, [pid 5002] unlink("./82/binderfs") = 0 [pid 5002] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8046] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 8046] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 8046] munmap(0x7f5047cf1000, 262144) = 0 [pid 8046] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8046] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8044] <... write resumed>) = 4 [pid 8033] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8023] <... fsconfig resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8046] close(3 [pid 8044] close(3 [pid 8046] <... close resumed>) = 0 [pid 8046] mkdir("./file0", 0777 [pid 8033] <... futex resumed>) = 1 [pid 4999] close(3 [pid 8044] <... close resumed>) = 0 [pid 8037] <... futex resumed>) = 0 [pid 8044] symlink("/dev/binderfs", "./binderfs" [pid 8037] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8033] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... close resumed>) = 0 [pid 8046] <... mkdir resumed>) = 0 [pid 8044] <... symlink resumed>) = 0 [pid 4999] rmdir("./82" [pid 8046] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8044] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8023] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8017] exit_group(0 [pid 8044] <... futex resumed>) = 0 [pid 8041] <... futex resumed>) = ? [pid 8023] <... futex resumed>) = ? [pid 8017] <... exit_group resumed>) = ? [pid 4999] <... rmdir resumed>) = 0 [pid 8044] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8041] +++ exited with 0 +++ [pid 8023] +++ exited with 0 +++ [pid 8017] +++ exited with 0 +++ [pid 4999] mkdir("./83", 0777 [pid 8044] <... mmap resumed>) = 0x7f50500f1000 [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8017, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 4999] <... mkdir resumed>) = 0 [pid 8044] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8044] <... mprotect resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 8044] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 8044] <... clone resumed>, parent_tid=[8048], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8048 [pid 4999] close(3./strace-static-x86_64: Process 8048 attached [pid 8044] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... close resumed>) = 0 [pid 8048] set_robust_list(0x7f50501119e0, 24 [pid 8044] <... futex resumed>) = 0 [pid 8037] <... fsconfig resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8048] <... set_robust_list resumed>) = 0 [pid 8044] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8037] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8048] memfd_create("syzkaller", 0 [pid 8037] <... futex resumed>) = 1 [pid 8033] <... futex resumed>) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8048] <... memfd_create resumed>) = 3 [pid 8037] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8033] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... umount2 resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x5555562025d0) = 8049 [pid 8048] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8037] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8033] <... futex resumed>) = 0 [pid 8048] <... mmap resumed>) = 0x7f5047cf1000 [pid 8037] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8033] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8048] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8037] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 5005] <... openat resumed>) = 3 [pid 5002] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] fstat(3, [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8049 attached [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] lstat("./82/file0", [pid 8049] set_robust_list(0x5555562025e0, 24 [pid 8037] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] getdents64(3, [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8049] <... set_robust_list resumed>) = 0 [pid 8037] <... futex resumed>) = 1 [pid 8033] <... futex resumed>) = 0 [pid 5005] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8049] chdir("./83" [pid 8037] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8033] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8049] <... chdir resumed>) = 0 [pid 8037] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8033] <... futex resumed>) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8049] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8033] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 115.319132][ T8023] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 115.329331][ T8046] loop2: detected capacity change from 0 to 512 [ 115.342013][ T8037] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 115.342472][ T8046] EXT4-fs: Ignoring removed oldalloc option [pid 5005] lstat("./82/binderfs", [pid 5002] <... openat resumed>) = 4 [pid 8049] <... prctl resumed>) = 0 [pid 8037] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5005] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] fstat(4, [pid 8049] setpgid(0, 0 [pid 5005] unlink("./82/binderfs" [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8049] <... setpgid resumed>) = 0 [pid 5005] <... unlink resumed>) = 0 [pid 5002] getdents64(4, [pid 8049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5005] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8049] <... openat resumed>) = 3 [pid 5002] getdents64(4, [pid 8049] write(3, "1000", 4 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8049] <... write resumed>) = 4 [pid 5002] close(4 [pid 8049] close(3 [pid 5002] <... close resumed>) = 0 [pid 8049] <... close resumed>) = 0 [pid 5002] rmdir("./82/file0" [pid 8049] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... rmdir resumed>) = 0 [pid 8049] <... symlink resumed>) = 0 [pid 5002] getdents64(3, [pid 8049] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8049] <... futex resumed>) = 0 [pid 5002] close(3 [pid 8049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5002] <... close resumed>) = 0 [pid 8049] <... mmap resumed>) = 0x7f50500f1000 [pid 5002] rmdir("./82" [pid 8049] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 5002] <... rmdir resumed>) = 0 [pid 8049] <... mprotect resumed>) = 0 [pid 5002] mkdir("./83", 0777 [pid 8049] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5002] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8049] <... clone resumed>, parent_tid=[8052], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8052 [pid 5002] <... openat resumed>) = 3 [pid 8049] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 8049] <... futex resumed>) = 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8049] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 8053 ./strace-static-x86_64: Process 8053 attached [pid 8053] set_robust_list(0x5555562025e0, 24) = 0 [pid 8053] chdir("./83") = 0 [pid 8053] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8053] setpgid(0, 0) = 0 [pid 8053] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8053] write(3, "1000", 4) = 4 [pid 8053] close(3) = 0 [pid 8053] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8053] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8052 attached ) = 0 [pid 8053] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8052] set_robust_list(0x7f50501119e0, 24 [pid 8053] <... mmap resumed>) = 0x7f50500f1000 [pid 8052] <... set_robust_list resumed>) = 0 [pid 8053] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8052] memfd_create("syzkaller", 0 [pid 8053] <... mprotect resumed>) = 0 [pid 8053] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8052] <... memfd_create resumed>) = 3 [pid 8052] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8048] <... write resumed>) = 262144 [pid 8053] <... clone resumed>, parent_tid=[8054], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8054 [pid 8052] <... mmap resumed>) = 0x7f5047cf1000 [pid 8053] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8053] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8052] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 8052] munmap(0x7f5047cf1000, 262144) = 0 [pid 8052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8052] ioctl(4, LOOP_SET_FD, 3 [pid 8048] munmap(0x7f5047cf1000, 262144 [pid 5005] <... umount2 resumed>) = 0 [pid 5005] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8052] <... ioctl resumed>) = 0 [pid 8052] close(3 [pid 8048] <... munmap resumed>) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8052] <... close resumed>) = 0 [pid 8052] mkdir("./file0", 0777 [pid 5005] lstat("./82/file0", [pid 8048] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5005] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8048] <... openat resumed>) = 4 [pid 5005] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8048] ioctl(4, LOOP_SET_FD, 3 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8052] <... mkdir resumed>) = 0 [ 115.385668][ T8037] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 115.396175][ T8046] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 115.416680][ T8052] loop0: detected capacity change from 0 to 512 [ 115.427264][ T8048] loop1: detected capacity change from 0 to 512 [pid 8052] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8048] <... ioctl resumed>) = 0 [pid 5005] <... openat resumed>) = 4 ./strace-static-x86_64: Process 8054 attached [pid 8033] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5005] fstat(4, [pid 8033] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8033] <... futex resumed>) = 0 [pid 8033] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8054] set_robust_list(0x7f50501119e0, 24 [pid 8033] <... mmap resumed>) = 0x7f5047d10000 [pid 5005] getdents64(4, [pid 8033] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5005] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8033] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5005] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5005] close(4 [pid 8033] <... clone resumed>, parent_tid=[8055], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8055 [pid 5005] <... close resumed>) = 0 [pid 5005] rmdir("./82/file0" [pid 8033] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8033] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... rmdir resumed>) = 0 [pid 5005] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5005] close(3) = 0 [pid 5005] rmdir("./82") = 0 [pid 5005] mkdir("./83", 0777 [pid 8054] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 8055 attached [pid 8048] close(3 [pid 5005] <... mkdir resumed>) = 0 [pid 8055] set_robust_list(0x7f5047d309e0, 24 [pid 8054] memfd_create("syzkaller", 0 [pid 8048] <... close resumed>) = 0 [pid 8055] <... set_robust_list resumed>) = 0 [pid 8054] <... memfd_create resumed>) = 3 [pid 8048] mkdir("./file0", 0777 [pid 8055] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8054] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8048] <... mkdir resumed>) = 0 [pid 8054] <... mmap resumed>) = 0x7f5047cf1000 [pid 8048] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8055] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 8055] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... openat resumed>) = 3 [pid 8055] <... futex resumed>) = 1 [pid 8033] <... futex resumed>) = 0 [pid 5005] ioctl(3, LOOP_CLR_FD [pid 8055] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5005] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8054] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5005] close(3) = 0 [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 8059 [ 115.428923][ T8052] EXT4-fs: Ignoring removed oldalloc option [ 115.447902][ T8037] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 115.457190][ T8046] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 115.460288][ T8048] EXT4-fs: Ignoring removed oldalloc option [pid 8054] <... write resumed>) = 262144 [pid 8054] munmap(0x7f5047cf1000, 262144) = 0 [pid 8054] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 8054] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 8059 attached [pid 8046] <... mount resumed>) = 0 [pid 8046] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8046] chdir("./file0") = 0 [pid 8046] ioctl(4, LOOP_CLR_FD) = 0 [pid 8046] close(4) = 0 [pid 8046] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8045] <... futex resumed>) = 0 [ 115.486488][ T8046] EXT4-fs (loop2): 1 truncate cleaned up [ 115.494823][ T8037] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 115.507644][ T8046] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.508173][ T8054] loop3: detected capacity change from 0 to 512 [pid 8046] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8045] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8037] <... fsconfig resumed>) = 0 [pid 8037] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8037] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8054] <... ioctl resumed>) = 0 [pid 8054] close(3) = 0 [pid 8054] mkdir("./file0", 0777) = 0 [pid 8054] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8046] <... futex resumed>) = 0 [pid 8033] exit_group(0 [pid 8059] set_robust_list(0x5555562025e0, 24) = 0 [pid 8059] chdir("./83") = 0 [pid 8059] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8059] setpgid(0, 0) = 0 [pid 8059] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8059] write(3, "1000", 4) = 4 [pid 8059] close(3) = 0 [pid 8059] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8059] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8059] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8059] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8059] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8062], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8062 [pid 8046] fspick(AT_FDCWD, ".", 0 [pid 8033] <... exit_group resumed>) = ? [pid 8037] <... futex resumed>) = ? [pid 8055] <... futex resumed>) = ? [pid 8046] <... fspick resumed>) = 4 [pid 8055] +++ exited with 0 +++ [pid 8037] +++ exited with 0 +++ [pid 8059] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8059] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8062 attached [pid 8062] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8062] memfd_create("syzkaller", 0) = 3 [pid 8062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8033] +++ exited with 0 +++ [pid 8046] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8033, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 8046] <... futex resumed>) = 0 [pid 5004] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5004] fstat(3, [pid 8046] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5004] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5004] unlink("./84/binderfs") = 0 [pid 5004] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8045] <... futex resumed>) = 1 [pid 8062] <... mmap resumed>) = 0x7f5047cf1000 [pid 8045] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 8045] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8046] <... futex resumed>) = 0 [pid 8045] <... futex resumed>) = 1 [pid 8046] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 8046] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8046] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8062] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8045] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 8062] <... write resumed>) = 262144 [pid 8062] munmap(0x7f5047cf1000, 262144) = 0 [pid 8062] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 115.537832][ T8052] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 115.544734][ T8054] EXT4-fs: Ignoring removed oldalloc option [ 115.546265][ T8048] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 115.570298][ T8052] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 8062] ioctl(4, LOOP_SET_FD, 3 [pid 8045] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8062] <... ioctl resumed>) = 0 [pid 8062] close(3) = 0 [pid 8062] mkdir("./file0", 0777) = 0 [pid 8062] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8046] <... futex resumed>) = 0 [pid 8045] <... futex resumed>) = 1 [pid 8046] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 115.576931][ T8062] loop5: detected capacity change from 0 to 512 [ 115.588638][ T8054] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 115.596331][ T8062] EXT4-fs: Ignoring removed oldalloc option [ 115.604496][ T8048] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 115.627855][ T8052] EXT4-fs (loop0): 1 truncate cleaned up [pid 8045] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8052] <... mount resumed>) = 0 [pid 8052] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8045] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8045] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8045] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 8045] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8045] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8065], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8065 [pid 8045] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8045] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8052] <... openat resumed>) = 3 [pid 8052] chdir("./file0") = 0 [pid 8052] ioctl(4, LOOP_CLR_FD) = 0 [pid 8052] close(4) = 0 [pid 8052] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8052] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8049] <... futex resumed>) = 0 [pid 8049] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8052] <... futex resumed>) = 0 [pid 8049] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8046] <... fsconfig resumed>) = 0 [pid 8046] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8046] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8052] fspick(AT_FDCWD, ".", 0) = 4 [pid 8052] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 115.633646][ T8054] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 115.633804][ T8046] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 115.660013][ T8052] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.660181][ T8048] EXT4-fs (loop1): 1 truncate cleaned up [ 115.681517][ T8054] EXT4-fs (loop3): 1 truncate cleaned up [pid 8052] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8049] <... futex resumed>) = 0 [pid 5004] <... umount2 resumed>) = 0 [pid 8049] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8049] <... futex resumed>) = 0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8049] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] lstat("./84/file0", ./strace-static-x86_64: Process 8065 attached [pid 8052] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8052] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 8052] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8052] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8065] set_robust_list(0x7f5047d309e0, 24 [pid 8049] <... futex resumed>) = 0 [pid 5004] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8049] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8065] <... set_robust_list resumed>) = 0 [pid 5004] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8065] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8049] <... futex resumed>) = 1 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8065] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8049] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] openat(AT_FDCWD, "./84/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8065] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8052] <... futex resumed>) = 0 [pid 8045] <... futex resumed>) = 0 [pid 5004] <... openat resumed>) = 4 [pid 8065] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5004] fstat(4, [pid 8052] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8045] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(4, [pid 8046] <... futex resumed>) = 0 [pid 8045] <... futex resumed>) = 1 [pid 5004] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8054] <... mount resumed>) = 0 [pid 8048] <... mount resumed>) = 0 [pid 8046] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5004] getdents64(4, [pid 8048] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5004] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8048] <... openat resumed>) = 3 [pid 5004] close(4 [pid 8048] chdir("./file0" [pid 5004] <... close resumed>) = 0 [pid 8048] <... chdir resumed>) = 0 [pid 5004] rmdir("./84/file0" [pid 8048] ioctl(4, LOOP_CLR_FD [pid 5004] <... rmdir resumed>) = 0 [pid 8048] <... ioctl resumed>) = 0 [pid 5004] getdents64(3, [pid 8048] close(4 [pid 5004] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8048] <... close resumed>) = 0 [pid 5004] close(3 [pid 8048] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... close resumed>) = 0 [pid 8048] <... futex resumed>) = 1 [pid 8044] <... futex resumed>) = 0 [pid 5004] rmdir("./84" [pid 8048] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8044] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... rmdir resumed>) = 0 [pid 8048] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8044] <... futex resumed>) = 0 [pid 5004] mkdir("./85", 0777 [pid 8048] fspick(AT_FDCWD, ".", 0 [pid 8044] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... mkdir resumed>) = 0 [pid 8048] <... fspick resumed>) = 4 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8054] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8048] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... openat resumed>) = 3 [pid 8054] <... openat resumed>) = 3 [pid 8048] <... futex resumed>) = 1 [pid 8044] <... futex resumed>) = 0 [pid 5004] ioctl(3, LOOP_CLR_FD [pid 8054] chdir("./file0" [pid 8048] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8044] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8054] <... chdir resumed>) = 0 [pid 8048] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8044] <... futex resumed>) = 0 [pid 5004] close(3 [pid 8054] ioctl(4, LOOP_CLR_FD [pid 8048] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8045] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8044] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... close resumed>) = 0 [pid 8054] <... ioctl resumed>) = 0 [pid 8048] <... fsconfig resumed>) = 0 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8054] close(4 [pid 8048] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8054] <... close resumed>) = 0 [pid 8048] <... futex resumed>) = 1 [pid 8044] <... futex resumed>) = 0 [pid 5004] <... clone resumed>, child_tidptr=0x5555562025d0) = 8067 [pid 8054] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8048] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8044] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8054] <... futex resumed>) = 1 [pid 8053] <... futex resumed>) = 0 [pid 8048] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8044] <... futex resumed>) = 0 [pid 8054] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 115.692521][ T8048] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.704677][ T8054] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.722788][ T8052] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 115.733275][ T8046] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [pid 8053] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8048] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8044] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8053] <... futex resumed>) = 0 [pid 8054] fspick(AT_FDCWD, ".", 0 [pid 8053] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8054] <... fspick resumed>) = 4 [pid 8054] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8053] <... futex resumed>) = 0 [pid 8054] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8053] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8053] <... futex resumed>) = 0 [pid 8054] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8053] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8054] <... fsconfig resumed>) = 0 [pid 8054] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8067 attached ) = 1 [pid 8053] <... futex resumed>) = 0 [pid 8067] set_robust_list(0x5555562025e0, 24 [pid 8054] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8053] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8049] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8067] <... set_robust_list resumed>) = 0 [pid 8054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8053] <... futex resumed>) = 0 [pid 8049] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8067] chdir("./85" [pid 8054] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8053] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8049] <... futex resumed>) = 0 [pid 8067] <... chdir resumed>) = 0 [pid 8049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8067] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8049] <... mmap resumed>) = 0x7f5047d10000 [pid 8067] <... prctl resumed>) = 0 [pid 8049] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8067] setpgid(0, 0 [pid 8049] <... mprotect resumed>) = 0 [pid 8067] <... setpgid resumed>) = 0 [pid 8049] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8049] <... clone resumed>, parent_tid=[8069], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8069 [pid 8067] write(3, "1000", 4 [pid 8049] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8067] <... write resumed>) = 4 [pid 8049] <... futex resumed>) = 0 [pid 8067] close(3 [pid 8049] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8067] <... close resumed>) = 0 [pid 8067] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8067] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8067] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8067] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 8069 attached [pid 8067] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8069] set_robust_list(0x7f5047d309e0, 24 [pid 8048] <... fsconfig resumed>) = 0 [pid 8069] <... set_robust_list resumed>) = 0 [pid 8067] <... clone resumed>, parent_tid=[8070], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8070 [pid 8069] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8067] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8069] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8067] <... futex resumed>) = 0 [pid 8069] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8067] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8069] <... futex resumed>) = 1 [pid 8049] <... futex resumed>) = 0 [pid 8069] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8049] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8069] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8049] <... futex resumed>) = 0 [pid 8069] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8049] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8070 attached [pid 8070] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8070] memfd_create("syzkaller", 0) = 3 [pid 8070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 8054] <... fsconfig resumed>) = 0 [pid 8048] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8045] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8048] <... futex resumed>) = 1 [pid 8045] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [ 115.752692][ T8048] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 115.769911][ T8046] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 115.780801][ T8062] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 115.789711][ T8054] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 8065] <... futex resumed>) = 0 [pid 8048] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8045] <... futex resumed>) = 1 [pid 8065] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8045] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8070] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8065] <... openat resumed>) = 5 [pid 8054] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8052] <... fsconfig resumed>) = 0 [pid 8044] <... futex resumed>) = 0 [pid 8053] <... futex resumed>) = 0 [pid 8053] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8053] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8054] <... futex resumed>) = 1 [pid 8054] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 8054] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8053] <... futex resumed>) = 0 [pid 8053] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8053] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8070] <... write resumed>) = 262144 [pid 8054] <... futex resumed>) = 1 [pid 8054] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8065] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8052] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8049] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8044] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8065] <... futex resumed>) = 1 [pid 8052] <... futex resumed>) = 0 [pid 8049] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8048] <... futex resumed>) = 0 [pid 8045] <... futex resumed>) = 0 [pid 8044] <... futex resumed>) = 1 [pid 8065] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8052] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8049] <... futex resumed>) = 0 [ 115.800936][ T8069] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 115.808837][ T8062] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 115.815131][ T8054] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 115.826687][ T8046] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 8048] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8044] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8070] munmap(0x7f5047cf1000, 262144 [pid 8052] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 8049] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8048] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8046] <... fsconfig resumed>) = 0 [pid 8046] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8048] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8046] <... futex resumed>) = 0 [pid 8045] exit_group(0 [pid 8046] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8048] <... futex resumed>) = 1 [pid 8044] <... futex resumed>) = 0 [pid 8048] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8046] <... futex resumed>) = ? [pid 8045] <... exit_group resumed>) = ? [pid 8044] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8070] <... munmap resumed>) = 0 [pid 8046] +++ exited with 0 +++ [pid 8044] <... futex resumed>) = 0 [pid 8070] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8070] ioctl(4, LOOP_SET_FD, 3 [pid 8053] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8044] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8070] <... ioctl resumed>) = 0 [pid 8053] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8070] close(3) = 0 [pid 8053] <... futex resumed>) = 0 [pid 8070] mkdir("./file0", 0777 [pid 8053] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8070] <... mkdir resumed>) = 0 [pid 8053] <... mmap resumed>) = 0x7f5047d10000 [pid 8053] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8053] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8070] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8065] <... futex resumed>) = ? [pid 8052] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8052] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 8073 attached [pid 8073] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8073] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8053] <... clone resumed>, parent_tid=[8073], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8073 [pid 8053] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8073] <... futex resumed>) = 0 [pid 8073] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8053] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8049] <... futex resumed>) = 0 [ 115.834379][ T8069] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 115.859839][ T8048] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 115.861618][ T8070] loop4: detected capacity change from 0 to 512 [ 115.871600][ T8054] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 115.882719][ T8070] EXT4-fs: Ignoring removed oldalloc option [ 115.884587][ T8062] EXT4-fs (loop5): 1 truncate cleaned up [pid 8065] +++ exited with 0 +++ [pid 8062] <... mount resumed>) = 0 [pid 8045] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8045, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5001] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./84/binderfs") = 0 [pid 5001] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8062] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8062] chdir("./file0") = 0 [pid 8062] ioctl(4, LOOP_CLR_FD) = 0 [pid 8062] close(4) = 0 [pid 8062] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8059] <... futex resumed>) = 0 [pid 8059] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8062] <... futex resumed>) = 1 [pid 8059] <... futex resumed>) = 0 [pid 8062] fspick(AT_FDCWD, ".", 0 [pid 8059] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8062] <... fspick resumed>) = 4 [pid 8062] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8059] <... futex resumed>) = 0 [pid 8062] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8059] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8062] <... fsconfig resumed>) = 0 [pid 8059] <... futex resumed>) = 0 [pid 8062] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8059] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8062] <... futex resumed>) = 0 [pid 8059] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8062] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 115.897025][ T8062] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.909886][ T8048] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 115.916029][ T8069] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 8059] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8044] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8073] <... openat resumed>) = 5 [pid 8059] <... futex resumed>) = 0 [pid 8053] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8059] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8069] <... fsconfig resumed>) = 0 [pid 8069] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8069] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8044] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8044] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 8044] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8049] exit_group(0 [pid 8044] <... mprotect resumed>) = 0 [pid 8052] <... futex resumed>) = ? [pid 8049] <... exit_group resumed>) = ? [pid 8044] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8052] +++ exited with 0 +++ [pid 8044] <... clone resumed>, parent_tid=[8075], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8075 [pid 8044] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8044] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8069] <... futex resumed>) = ? [pid 8073] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8069] +++ exited with 0 +++ [pid 8049] +++ exited with 0 +++ [pid 8073] <... futex resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8049, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 8073] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 8075 attached [pid 8054] <... fsconfig resumed>) = 0 [pid 8075] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8054] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8053] exit_group(0 [pid 8073] <... futex resumed>) = ? [pid 8053] <... exit_group resumed>) = ? [pid 8073] +++ exited with 0 +++ [pid 8048] <... fsconfig resumed>) = 0 [pid 8048] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8048] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8075] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8054] <... futex resumed>) = ? [pid 8054] +++ exited with 0 +++ [pid 8053] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8053, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8075] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 5002] getdents64(3, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8075] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8075] <... futex resumed>) = 1 [pid 8044] <... futex resumed>) = 0 [pid 8075] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8044] exit_group(0 [pid 5002] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8075] <... futex resumed>) = ? [pid 8044] <... exit_group resumed>) = ? [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8075] +++ exited with 0 +++ [pid 5002] lstat("./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./83/binderfs") = 0 [pid 5002] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8048] <... futex resumed>) = ? [pid 8059] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] <... openat resumed>) = 3 [pid 8059] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8059] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 4999] fstat(3, [pid 8059] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8059] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8079], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8079 [pid 8059] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8059] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8048] +++ exited with 0 +++ [pid 8044] +++ exited with 0 +++ [pid 5001] <... umount2 resumed>) = 0 [pid 8062] <... fsconfig resumed>) = 0 [pid 8062] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8062] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8044, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 4999] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5000] <... restart_syscall resumed>) = 0 [pid 5000] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 115.945497][ T8054] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 115.958868][ T8048] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 115.959542][ T8070] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 115.983574][ T8062] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 5001] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... openat resumed>) = 3 [pid 4999] lstat("./83/binderfs", [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8079 attached [pid 5001] lstat("./84/file0", [pid 5000] fstat(3, [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] unlink("./83/binderfs" [pid 5000] getdents64(3, [pid 4999] <... unlink resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8079] set_robust_list(0x7f5047d309e0, 24 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] lstat("./84/binderfs", [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./84/binderfs") = 0 [pid 5000] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] openat(AT_FDCWD, "./84/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8079] <... set_robust_list resumed>) = 0 [pid 8079] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 8079] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8059] <... futex resumed>) = 0 [pid 8079] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8059] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] fstat(4, [pid 8062] <... futex resumed>) = 0 [pid 8059] <... futex resumed>) = 1 [pid 8062] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8059] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./84/file0") = 0 [pid 5001] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./84") = 0 [ 116.009928][ T8070] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 116.031260][ T8062] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 116.033969][ T8070] EXT4-fs (loop4): 1 truncate cleaned up [ 116.047625][ T8062] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 5001] mkdir("./85", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8070] <... mount resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 8070] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4999] <... umount2 resumed>) = 0 [pid 8070] <... openat resumed>) = 3 [pid 5002] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] close(3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8059] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5002] lstat("./83/file0", [pid 5001] <... close resumed>) = 0 [pid 4999] lstat("./83/file0", [pid 8059] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8079] <... futex resumed>) = 0 [pid 8059] <... futex resumed>) = 1 [pid 8079] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8059] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8079] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8079] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8059] <... futex resumed>) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x5555562025d0) = 8081 [pid 8079] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8070] chdir("./file0" [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8070] <... chdir resumed>) = 0 [pid 5002] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8070] ioctl(4, LOOP_CLR_FD [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8070] <... ioctl resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8070] close(4 [pid 5002] <... openat resumed>) = 4 [pid 4999] <... openat resumed>) = 4 ./strace-static-x86_64: Process 8081 attached [pid 8070] <... close resumed>) = 0 [pid 5002] fstat(4, [pid 4999] fstat(4, [pid 8070] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8070] <... futex resumed>) = 1 [pid 8067] <... futex resumed>) = 0 [pid 5002] getdents64(4, [pid 4999] getdents64(4, [pid 8070] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8067] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8067] <... futex resumed>) = 0 [pid 5002] getdents64(4, [pid 4999] getdents64(4, [pid 8070] fspick(AT_FDCWD, ".", 0 [pid 8067] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 4999] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8070] <... fspick resumed>) = 4 [pid 5002] close(4 [pid 4999] close(4 [pid 8070] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 8070] <... futex resumed>) = 1 [pid 8067] <... futex resumed>) = 0 [pid 5002] rmdir("./83/file0" [pid 4999] rmdir("./83/file0" [pid 8070] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8067] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... rmdir resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 8070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8067] <... futex resumed>) = 0 [pid 5002] getdents64(3, [pid 4999] getdents64(3, [pid 8081] set_robust_list(0x5555562025e0, 24 [pid 8070] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8067] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 4999] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8081] <... set_robust_list resumed>) = 0 [pid 8070] <... fsconfig resumed>) = 0 [pid 5002] close(3 [pid 4999] close(3 [pid 8081] chdir("./85" [pid 8070] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 8081] <... chdir resumed>) = 0 [pid 8070] <... futex resumed>) = 1 [pid 8067] <... futex resumed>) = 0 [pid 5002] rmdir("./83" [pid 4999] rmdir("./83" [pid 8081] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8070] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8067] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... rmdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 8081] <... prctl resumed>) = 0 [pid 8070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8067] <... futex resumed>) = 0 [pid 5002] mkdir("./84", 0777 [pid 4999] mkdir("./84", 0777 [pid 8081] setpgid(0, 0 [pid 8070] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8067] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... mkdir resumed>) = 0 [pid 5000] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5002] <... openat resumed>) = 3 [pid 4999] <... openat resumed>) = 3 [pid 8081] <... setpgid resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 4999] close(3 [pid 5002] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... clone resumed>, child_tidptr=0x5555562025d0) = 8082 [pid 4999] <... clone resumed>, child_tidptr=0x5555562025d0) = 8083 [pid 8081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 8082 attached [ 116.057333][ T8070] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.090299][ T8062] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 8082] set_robust_list(0x5555562025e0, 24./strace-static-x86_64: Process 8083 attached [pid 8083] set_robust_list(0x5555562025e0, 24 [pid 8082] <... set_robust_list resumed>) = 0 [pid 8082] chdir("./84" [pid 8083] <... set_robust_list resumed>) = 0 [pid 8083] chdir("./84" [pid 8082] <... chdir resumed>) = 0 [pid 8082] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8082] setpgid(0, 0 [pid 8083] <... chdir resumed>) = 0 [pid 8083] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8082] <... setpgid resumed>) = 0 [pid 8083] <... prctl resumed>) = 0 [pid 8082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8083] setpgid(0, 0 [pid 8082] <... openat resumed>) = 3 [pid 8083] <... setpgid resumed>) = 0 [pid 8083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8082] write(3, "1000", 4 [pid 8083] write(3, "1000", 4 [pid 8082] <... write resumed>) = 4 [pid 8083] <... write resumed>) = 4 [pid 8082] close(3 [pid 8083] close(3 [pid 8082] <... close resumed>) = 0 [pid 8081] <... openat resumed>) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8083] <... close resumed>) = 0 [pid 8082] symlink("/dev/binderfs", "./binderfs" [pid 8081] write(3, "1000", 4 [pid 8083] symlink("/dev/binderfs", "./binderfs" [pid 8082] <... symlink resumed>) = 0 [pid 8081] <... write resumed>) = 4 [pid 5000] lstat("./84/file0", [pid 8083] <... symlink resumed>) = 0 [pid 8082] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8081] close(3 [pid 8083] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8082] <... futex resumed>) = 0 [pid 8081] <... close resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8083] <... futex resumed>) = 0 [pid 8082] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8081] symlink("/dev/binderfs", "./binderfs" [pid 5000] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8083] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8082] <... mmap resumed>) = 0x7f50500f1000 [pid 8083] <... mmap resumed>) = 0x7f50500f1000 [pid 8082] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8081] <... symlink resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8083] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8082] <... mprotect resumed>) = 0 [pid 8081] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] openat(AT_FDCWD, "./84/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8083] <... mprotect resumed>) = 0 [pid 8082] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8081] <... futex resumed>) = 0 [pid 8062] <... fsconfig resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 8083] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8081] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8062] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] fstat(4, [pid 8082] <... clone resumed>, parent_tid=[8084], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8084 [pid 8081] <... mmap resumed>) = 0x7f50500f1000 [pid 8062] <... futex resumed>) = 0 [pid 8083] <... clone resumed>, parent_tid=[8085], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8085 [pid 8082] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8081] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8062] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8083] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8082] <... futex resumed>) = 0 [pid 8081] <... mprotect resumed>) = 0 [pid 8059] exit_group(0 [pid 8083] <... futex resumed>) = 0 [pid 8082] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8081] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8079] <... futex resumed>) = ? [pid 8070] <... fsconfig resumed>) = 0 [pid 8062] <... futex resumed>) = ? [pid 8059] <... exit_group resumed>) = ? [pid 5000] getdents64(4, [pid 8083] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8079] +++ exited with 0 +++ [pid 8070] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8062] +++ exited with 0 +++ [pid 8059] +++ exited with 0 +++ [pid 8081] <... clone resumed>, parent_tid=[8086], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8086 [pid 5000] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 8085 attached [pid 8081] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8059, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5000] getdents64(4, ./strace-static-x86_64: Process 8084 attached [pid 8085] set_robust_list(0x7f50501119e0, 24 [pid 8081] <... futex resumed>) = 0 [pid 5005] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8085] <... set_robust_list resumed>) = 0 [pid 8084] set_robust_list(0x7f50501119e0, 24 [pid 8081] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8070] <... futex resumed>) = 1 [pid 8067] <... futex resumed>) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] close(4 [pid 8085] memfd_create("syzkaller", 0 [pid 8084] <... set_robust_list resumed>) = 0 [pid 8070] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8067] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... close resumed>) = 0 [pid 8085] <... memfd_create resumed>) = 3 [pid 8084] memfd_create("syzkaller", 0 [pid 8070] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8067] <... futex resumed>) = 0 [pid 5005] <... openat resumed>) = 3 [pid 5000] rmdir("./84/file0" [pid 8085] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8084] <... memfd_create resumed>) = 3 [pid 8070] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8067] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] fstat(3, [pid 8085] <... mmap resumed>) = 0x7f5047cf1000 [pid 8084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8070] <... futex resumed>) = 0 [pid 8067] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 8085] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8084] <... mmap resumed>) = 0x7f5047cf1000 [pid 8070] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8067] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] getdents64(3, [pid 5000] getdents64(3, ./strace-static-x86_64: Process 8086 attached [pid 8085] <... write resumed>) = 262144 [pid 8084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8067] <... futex resumed>) = 0 [pid 5005] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5000] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8086] set_robust_list(0x7f50501119e0, 24 [pid 8085] munmap(0x7f5047cf1000, 262144 [pid 8084] <... write resumed>) = 262144 [pid 8070] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8067] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 116.133310][ T8070] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 5005] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] close(3 [pid 8086] <... set_robust_list resumed>) = 0 [pid 8085] <... munmap resumed>) = 0 [pid 8084] munmap(0x7f5047cf1000, 262144 [pid 8085] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8084] <... munmap resumed>) = 0 [pid 8085] <... openat resumed>) = 4 [pid 8084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8085] ioctl(4, LOOP_SET_FD, 3 [pid 8084] <... openat resumed>) = 4 [pid 8086] memfd_create("syzkaller", 0 [pid 8084] ioctl(4, LOOP_SET_FD, 3 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... close resumed>) = 0 [pid 8086] <... memfd_create resumed>) = 3 [pid 8084] <... ioctl resumed>) = 0 [pid 5005] lstat("./83/binderfs", [pid 5000] rmdir("./84" [pid 8086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5005] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8084] close(3 [pid 5005] unlink("./83/binderfs" [pid 5000] <... rmdir resumed>) = 0 [pid 8086] <... mmap resumed>) = 0x7f5047cf1000 [pid 5005] <... unlink resumed>) = 0 [pid 5000] mkdir("./85", 0777 [pid 8084] <... close resumed>) = 0 [pid 8084] mkdir("./file0", 0777 [pid 8086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5005] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... mkdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8084] <... mkdir resumed>) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x5555562025d0) = 8087 [pid 8086] <... write resumed>) = 262144 [pid 8084] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8086] munmap(0x7f5047cf1000, 262144./strace-static-x86_64: Process 8087 attached [pid 8087] set_robust_list(0x5555562025e0, 24) = 0 [pid 8087] chdir("./85") = 0 [pid 8087] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8087] setpgid(0, 0) = 0 [pid 8087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8087] write(3, "1000", 4) = 4 [pid 5005] <... umount2 resumed>) = 0 [pid 5005] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] lstat("./83/file0", [pid 8086] <... munmap resumed>) = 0 [pid 8086] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5005] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8086] <... openat resumed>) = 4 [pid 5005] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8086] ioctl(4, LOOP_SET_FD, 3 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 116.182728][ T8070] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 116.186483][ T8085] loop0: detected capacity change from 0 to 512 [ 116.199739][ T8084] loop3: detected capacity change from 0 to 512 [ 116.217754][ T8084] EXT4-fs: Ignoring removed oldalloc option [pid 8087] close(3) = 0 [pid 8087] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8087] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8087] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8087] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8087] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8088], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8088 [pid 8087] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8087] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8085] <... ioctl resumed>) = 0 [pid 8085] close(3 [pid 8067] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8085] <... close resumed>) = 0 [pid 5005] <... openat resumed>) = 4 [pid 8085] mkdir("./file0", 0777 [pid 8067] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] fstat(4, [pid 8085] <... mkdir resumed>) = 0 [pid 8067] <... futex resumed>) = 0 [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8085] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8067] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5005] getdents64(4, [pid 8086] <... ioctl resumed>) = 0 [pid 8067] <... mmap resumed>) = 0x7f5047d10000 [pid 5005] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 8088 attached [pid 8088] set_robust_list(0x7f50501119e0, 24 [pid 8086] close(3 [pid 8067] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5005] getdents64(4, [pid 8088] <... set_robust_list resumed>) = 0 [pid 8067] <... mprotect resumed>) = 0 [pid 5005] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8088] memfd_create("syzkaller", 0 [pid 8086] <... close resumed>) = 0 [pid 8067] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5005] close(4 [pid 8088] <... memfd_create resumed>) = 3 [pid 8086] mkdir("./file0", 0777 [pid 5005] <... close resumed>) = 0 [pid 8088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8067] <... clone resumed>, parent_tid=[8090], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8090 [pid 5005] rmdir("./83/file0" [pid 8088] <... mmap resumed>) = 0x7f5047cf1000 [pid 8086] <... mkdir resumed>) = 0 [pid 8067] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 8090 attached [pid 8088] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8086] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8067] <... futex resumed>) = 0 [pid 5005] getdents64(3, [pid 8088] <... write resumed>) = 262144 [pid 8067] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8088] munmap(0x7f5047cf1000, 262144) = 0 [pid 8088] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 116.234371][ T8086] loop2: detected capacity change from 0 to 512 [ 116.246153][ T8085] EXT4-fs: Ignoring removed oldalloc option [ 116.252122][ T8070] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 116.260559][ T8070] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 8088] ioctl(4, LOOP_SET_FD, 3 [pid 8090] set_robust_list(0x7f5047d309e0, 24 [pid 8070] <... fsconfig resumed>) = 0 [pid 5005] close(3 [pid 8090] <... set_robust_list resumed>) = 0 [pid 8070] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... close resumed>) = 0 [pid 8090] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8070] <... futex resumed>) = 0 [pid 5005] rmdir("./83" [pid 8090] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8070] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5005] <... rmdir resumed>) = 0 [pid 8090] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] mkdir("./84", 0777 [pid 8090] <... futex resumed>) = 1 [pid 8067] <... futex resumed>) = 0 [pid 5005] <... mkdir resumed>) = 0 [pid 8090] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8067] exit_group(0 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 8090] <... futex resumed>) = ? [pid 8088] <... ioctl resumed>) = 0 [pid 8070] <... futex resumed>) = ? [pid 8067] <... exit_group resumed>) = ? [pid 5005] <... openat resumed>) = 3 [pid 8090] +++ exited with 0 +++ [pid 8088] close(3 [pid 8070] +++ exited with 0 +++ [pid 8088] <... close resumed>) = 0 [pid 8088] mkdir("./file0", 0777) = 0 [pid 8067] +++ exited with 0 +++ [pid 5005] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5005] close(3 [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8067, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [ 116.280297][ T8086] EXT4-fs: Ignoring removed oldalloc option [ 116.285462][ T8088] loop1: detected capacity change from 0 to 512 [ 116.298681][ T8084] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 116.309060][ T8086] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 116.309864][ T8084] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 8088] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5005] <... close resumed>) = 0 [pid 5004] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 8097 attached [pid 8097] set_robust_list(0x5555562025e0, 24) = 0 [pid 8097] chdir("./84") = 0 [pid 8097] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8097] setpgid(0, 0) = 0 [pid 8097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8097] write(3, "1000", 4) = 4 [pid 8097] close(3) = 0 [pid 8097] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8097] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8097] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8097] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8097] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5005] <... clone resumed>, child_tidptr=0x5555562025d0) = 8097 [pid 8086] <... mount resumed>) = 0 [pid 5004] <... openat resumed>) = 3 [pid 8086] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5004] fstat(3, [pid 8086] <... openat resumed>) = 3 [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8086] chdir("./file0" [ 116.318894][ T8086] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 116.335610][ T8088] EXT4-fs: Ignoring removed oldalloc option [ 116.354335][ T8086] EXT4-fs (loop2): 1 truncate cleaned up [ 116.355722][ T8085] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 116.361371][ T8086] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 5004] getdents64(3, [pid 8097] <... clone resumed>, parent_tid=[8098], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8098 [pid 8097] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8097] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8098 attached [pid 8098] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8086] <... chdir resumed>) = 0 [pid 5004] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 8086] ioctl(4, LOOP_CLR_FD [pid 5004] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8086] <... ioctl resumed>) = 0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8086] close(4 [pid 5004] lstat("./85/binderfs", [pid 8098] memfd_create("syzkaller", 0 [pid 8086] <... close resumed>) = 0 [pid 5004] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8098] <... memfd_create resumed>) = 3 [pid 8086] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] unlink("./85/binderfs") = 0 [pid 8086] <... futex resumed>) = 1 [pid 8081] <... futex resumed>) = 0 [pid 8098] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8081] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8086] fspick(AT_FDCWD, ".", 0 [pid 8098] <... mmap resumed>) = 0x7f5047cf1000 [pid 8086] <... fspick resumed>) = 4 [pid 8084] <... mount resumed>) = 0 [pid 8081] <... futex resumed>) = 0 [pid 5004] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8098] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8086] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8081] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8098] <... write resumed>) = 262144 [pid 8086] <... futex resumed>) = 0 [pid 8081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8098] munmap(0x7f5047cf1000, 262144 [pid 8086] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8081] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8084] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8086] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8081] <... futex resumed>) = 0 [pid 8086] <... fsconfig resumed>) = 0 [pid 8081] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8086] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8084] <... openat resumed>) = 3 [pid 8084] chdir("./file0") = 0 [pid 8084] ioctl(4, LOOP_CLR_FD) = 0 [pid 8084] close(4) = 0 [pid 8084] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8081] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8098] <... munmap resumed>) = 0 [pid 8086] <... futex resumed>) = 0 [pid 8084] <... futex resumed>) = 1 [pid 8082] <... futex resumed>) = 0 [pid 8081] <... futex resumed>) = 0 [pid 5004] <... umount2 resumed>) = 0 [pid 8098] openat(AT_FDCWD, "/dev/loop5", O_RDWR [ 116.385209][ T8084] EXT4-fs (loop3): 1 truncate cleaned up [ 116.392578][ T8084] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.407352][ T8085] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 8086] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8082] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8081] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8084] fspick(AT_FDCWD, ".", 0 [pid 5004] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8098] <... openat resumed>) = 4 [pid 8085] <... mount resumed>) = 0 [pid 8082] <... futex resumed>) = 0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 116.435406][ T8085] EXT4-fs (loop0): 1 truncate cleaned up [ 116.436252][ T8086] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 116.441411][ T8085] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.465042][ T8088] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 116.470805][ T8098] loop5: detected capacity change from 0 to 512 [pid 8098] ioctl(4, LOOP_SET_FD, 3 [pid 5004] lstat("./85/file0", [pid 8086] <... fsconfig resumed>) = 0 [pid 8085] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8084] <... fspick resumed>) = 4 [pid 8082] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./85/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5004] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5004] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5004] close(4) = 0 [pid 5004] rmdir("./85/file0") = 0 [pid 5004] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5004] close(3) = 0 [pid 5004] rmdir("./85") = 0 [pid 5004] mkdir("./86", 0777) = 0 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 8098] <... ioctl resumed>) = 0 [pid 5004] ioctl(3, LOOP_CLR_FD [pid 8098] close(3 [pid 8086] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8085] <... openat resumed>) = 3 [pid 8084] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8082] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5004] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8098] <... close resumed>) = 0 [pid 5004] close(3 [pid 8082] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8086] <... futex resumed>) = 1 [pid 8085] chdir("./file0" [pid 8084] <... futex resumed>) = 0 [pid 8081] <... futex resumed>) = 0 [pid 8098] mkdir("./file0", 0777 [pid 8086] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8085] <... chdir resumed>) = 0 [pid 8084] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8082] <... futex resumed>) = 0 [pid 8081] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... close resumed>) = 0 [pid 8098] <... mkdir resumed>) = 0 [pid 8081] <... futex resumed>) = 0 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8098] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8081] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8101 attached [pid 8088] <... mount resumed>) = 0 [pid 8086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8085] ioctl(4, LOOP_CLR_FD [pid 8084] <... fsconfig resumed>) = 0 [pid 8082] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8101] set_robust_list(0x5555562025e0, 24 [pid 8088] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8086] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8085] <... ioctl resumed>) = 0 [pid 8084] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8082] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5004] <... clone resumed>, child_tidptr=0x5555562025d0) = 8101 [pid 8101] <... set_robust_list resumed>) = 0 [pid 8088] <... openat resumed>) = 3 [pid 8086] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8085] close(4 [pid 8084] <... futex resumed>) = 0 [pid 8082] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8088] chdir("./file0" [pid 8086] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8085] <... close resumed>) = 0 [pid 8088] <... chdir resumed>) = 0 [pid 8086] <... futex resumed>) = 1 [pid 8085] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8088] ioctl(4, LOOP_CLR_FD [pid 8086] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8085] <... futex resumed>) = 1 [pid 8083] <... futex resumed>) = 0 [pid 8088] <... ioctl resumed>) = 0 [pid 8085] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8083] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8088] close(4 [pid 8085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8083] <... futex resumed>) = 0 [pid 8088] <... close resumed>) = 0 [pid 8085] fspick(AT_FDCWD, ".", 0 [pid 8083] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8088] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8085] <... fspick resumed>) = 4 [pid 8088] <... futex resumed>) = 1 [pid 8087] <... futex resumed>) = 0 [pid 8085] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8088] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8087] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8085] <... futex resumed>) = 1 [pid 8083] <... futex resumed>) = 0 [pid 8088] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8087] <... futex resumed>) = 0 [pid 8085] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8083] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8088] fspick(AT_FDCWD, ".", 0 [pid 8087] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8083] <... futex resumed>) = 0 [pid 8088] <... fspick resumed>) = 4 [pid 8085] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8083] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8088] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8085] <... fsconfig resumed>) = 0 [pid 8088] <... futex resumed>) = 1 [pid 8087] <... futex resumed>) = 0 [pid 8085] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8088] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8087] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8085] <... futex resumed>) = 1 [pid 8083] <... futex resumed>) = 0 [pid 8088] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8087] <... futex resumed>) = 0 [pid 8085] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8083] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8088] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8087] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8083] <... futex resumed>) = 0 [pid 8088] <... fsconfig resumed>) = 0 [pid 8085] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8083] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8088] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8087] <... futex resumed>) = 0 [pid 8088] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8087] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8088] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8087] <... futex resumed>) = 0 [pid 8088] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8087] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8081] <... futex resumed>) = 0 [pid 8082] <... futex resumed>) = 0 [pid 8082] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8084] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8101] chdir("./86" [pid 8081] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8101] <... chdir resumed>) = 0 [pid 8081] <... futex resumed>) = 1 [pid 8101] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8086] <... futex resumed>) = 0 [pid 8081] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8101] <... prctl resumed>) = 0 [pid 8086] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8101] setpgid(0, 0) = 0 [ 116.480283][ T8088] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 116.498283][ T8088] EXT4-fs (loop1): 1 truncate cleaned up [ 116.504522][ T8088] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.507819][ T8098] EXT4-fs: Ignoring removed oldalloc option [pid 8101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8101] write(3, "1000", 4) = 4 [pid 8101] close(3) = 0 [pid 8101] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8101] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8101] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8101] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8101] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8103], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8103 [pid 8101] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8101] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8088] <... fsconfig resumed>) = 0 [pid 8088] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8087] <... futex resumed>) = 0 [pid 8087] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8087] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8088] <... futex resumed>) = 1 [pid 8088] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0./strace-static-x86_64: Process 8103 attached [pid 8103] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8103] memfd_create("syzkaller", 0) = 3 [pid 8103] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 8083] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8083] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8083] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 8083] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8083] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8105], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8105 [pid 8083] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8083] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8103] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8082] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8082] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 8082] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8082] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 8082] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8082] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8081] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8081] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8081] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8082] <... clone resumed>, parent_tid=[8106], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8106 [pid 8081] <... mmap resumed>) = 0x7f5047d10000 [pid 8081] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 8106 attached [pid 8082] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8103] <... write resumed>) = 262144 [pid 8081] <... mprotect resumed>) = 0 [pid 8081] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 8107 attached [pid 8106] set_robust_list(0x7f5047d309e0, 24 [pid 8103] munmap(0x7f5047cf1000, 262144 [pid 8082] <... futex resumed>) = 0 [ 116.542131][ T8088] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 116.552668][ T8086] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 116.567089][ T8085] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 116.567739][ T8084] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 8107] set_robust_list(0x7f5047d309e0, 24 [pid 8106] <... set_robust_list resumed>) = 0 [pid 8103] <... munmap resumed>) = 0 [pid 8087] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8082] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8081] <... clone resumed>, parent_tid=[8107], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8107 [pid 8107] <... set_robust_list resumed>) = 0 [pid 8106] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8103] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8088] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8087] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8081] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8105 attached [pid 8107] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8106] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8103] <... openat resumed>) = 4 [pid 8088] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8087] <... futex resumed>) = 0 [pid 8085] <... fsconfig resumed>) = 0 [pid 8081] <... futex resumed>) = 0 [pid 8106] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8105] set_robust_list(0x7f5047d309e0, 24 [pid 8103] ioctl(4, LOOP_SET_FD, 3 [pid 8085] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8107] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8106] <... futex resumed>) = 1 [pid 8105] <... set_robust_list resumed>) = 0 [pid 8088] <... futex resumed>) = 0 [pid 8087] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8085] <... futex resumed>) = 0 [pid 8084] <... fsconfig resumed>) = 0 [pid 8083] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8082] <... futex resumed>) = 0 [pid 8081] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8107] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8106] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8105] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8085] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8083] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8082] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8107] <... futex resumed>) = 0 [pid 8106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8105] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8083] <... futex resumed>) = 0 [pid 8082] <... futex resumed>) = 0 [ 116.596264][ T8086] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 116.604708][ T8098] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 116.617831][ T8098] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 116.624341][ T8103] loop4: detected capacity change from 0 to 512 [pid 8107] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [ 116.635204][ T8086] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 116.646744][ T8106] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 116.655195][ T8109] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 116.659409][ T8085] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 116.674162][ T8103] EXT4-fs: Ignoring removed oldalloc option [ 116.685535][ T8109] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8106] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8105] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8085] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8083] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8082] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8088] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8087] <... mmap resumed>) = 0x7f5047d10000 [pid 8084] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8087] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8084] <... futex resumed>) = 0 [pid 8087] <... mprotect resumed>) = 0 [pid 8084] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8087] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8109], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8109 [pid 8087] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8087] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8109 attached [pid 8109] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8109] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8105] <... futex resumed>) = 0 [pid 8103] <... ioctl resumed>) = 0 [pid 8103] close(3) = 0 [pid 8103] mkdir("./file0", 0777) = 0 [pid 8103] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8105] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8086] <... fsconfig resumed>) = 0 [pid 8086] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8087] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8086] <... futex resumed>) = 0 [pid 8087] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8088] <... futex resumed>) = 0 [pid 8087] <... futex resumed>) = 1 [pid 8086] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8083] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8082] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8083] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8082] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8105] <... futex resumed>) = 0 [pid 8088] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8087] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8084] <... futex resumed>) = 0 [pid 8083] <... futex resumed>) = 1 [pid 8082] <... futex resumed>) = 1 [pid 8105] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8084] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8083] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8082] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8084] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 8105] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 8084] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8082] <... futex resumed>) = 0 [pid 8105] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8088] <... openat resumed>) = 5 [pid 8084] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8105] <... futex resumed>) = 1 [pid 8088] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8083] <... futex resumed>) = 0 [pid 8105] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8088] <... futex resumed>) = 1 [pid 8087] <... futex resumed>) = 0 [pid 8088] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8081] exit_group(0) = ? [pid 8107] <... futex resumed>) = ? [pid 8098] <... mount resumed>) = 0 [pid 8086] <... futex resumed>) = ? [pid 8107] +++ exited with 0 +++ [pid 8086] +++ exited with 0 +++ [pid 8081] +++ exited with 0 +++ [ 116.689908][ T8103] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 116.693970][ T8098] EXT4-fs (loop5): 1 truncate cleaned up [ 116.703435][ T8106] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 116.707936][ T8085] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 116.728959][ T8098] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8081, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5001] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8098] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8098] chdir("./file0") = 0 [pid 8098] ioctl(4, LOOP_CLR_FD) = 0 [pid 8098] close(4) = 0 [pid 8098] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8098] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5001] lstat("./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./85/binderfs") = 0 [pid 5001] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8097] <... futex resumed>) = 0 [pid 8106] <... fsconfig resumed>) = 0 [pid 8106] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8106] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8097] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8098] <... futex resumed>) = 0 [pid 8097] <... futex resumed>) = 1 [pid 8082] exit_group(0 [pid 8098] fspick(AT_FDCWD, ".", 0 [pid 8097] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8084] <... futex resumed>) = ? [pid 8082] <... exit_group resumed>) = ? [pid 8098] <... fspick resumed>) = 4 [pid 8084] +++ exited with 0 +++ [pid 8098] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8097] <... futex resumed>) = 0 [pid 8098] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [ 116.733317][ T8103] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 116.761956][ T8106] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 116.775203][ T8109] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 116.786383][ T8103] EXT4-fs (loop4): 1 truncate cleaned up [pid 8097] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8098] <... fsconfig resumed>) = 0 [pid 8097] <... futex resumed>) = 0 [pid 8098] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8097] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8098] <... futex resumed>) = 0 [pid 8097] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8098] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8097] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8098] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8097] <... futex resumed>) = 0 [pid 8098] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8097] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8109] <... fsconfig resumed>) = 0 [pid 8106] <... futex resumed>) = ? [pid 8103] <... mount resumed>) = 0 [pid 8085] <... fsconfig resumed>) = 0 [pid 8106] +++ exited with 0 +++ [pid 8082] +++ exited with 0 +++ [pid 8109] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8103] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8085] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8103] <... openat resumed>) = 3 [pid 8085] <... futex resumed>) = 0 [pid 8103] chdir("./file0" [pid 8085] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8103] <... chdir resumed>) = 0 [pid 8087] exit_group(0 [pid 8083] exit_group(0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8082, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 8105] <... futex resumed>) = ? [pid 8103] ioctl(4, LOOP_CLR_FD [pid 8088] <... futex resumed>) = ? [pid 8087] <... exit_group resumed>) = ? [pid 8083] <... exit_group resumed>) = ? [pid 8103] <... ioctl resumed>) = 0 [pid 8103] close(4) = 0 [pid 8103] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8103] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./85/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./85/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8101] <... futex resumed>) = 0 [pid 8088] +++ exited with 0 +++ [pid 5001] getdents64(4, [pid 8105] +++ exited with 0 +++ [pid 8101] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, [pid 8103] <... futex resumed>) = 0 [pid 8101] <... futex resumed>) = 1 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8103] fspick(AT_FDCWD, ".", 0 [pid 8101] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] close(4) = 0 [pid 5001] rmdir("./85/file0") = 0 [pid 5001] getdents64(3, [pid 8103] <... fspick resumed>) = 4 [pid 5001] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8103] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] close(3 [pid 8103] <... futex resumed>) = 1 [pid 8101] <... futex resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... close resumed>) = 0 [pid 8103] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8101] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8085] <... futex resumed>) = ? [pid 5002] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] rmdir("./85" [pid 8103] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8101] <... futex resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5001] <... rmdir resumed>) = 0 [pid 8103] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8101] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] fstat(3, [pid 5001] mkdir("./86", 0777 [pid 8103] <... fsconfig resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 8103] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] getdents64(3, [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8103] <... futex resumed>) = 1 [pid 8101] <... futex resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5001] <... openat resumed>) = 3 [pid 8103] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8101] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] ioctl(3, LOOP_CLR_FD [pid 8103] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8101] <... futex resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8103] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8101] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] lstat("./84/binderfs", [pid 5001] close(3) = 0 [ 116.786700][ T8085] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 116.792567][ T8103] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.830772][ T8098] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8109] <... futex resumed>) = ? [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./84/binderfs" [pid 5001] <... clone resumed>, child_tidptr=0x5555562025d0) = 8115 ./strace-static-x86_64: Process 8115 attached [pid 8115] set_robust_list(0x5555562025e0, 24) = 0 [pid 8115] chdir("./86") = 0 [pid 8115] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8115] setpgid(0, 0) = 0 [pid 8115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8115] write(3, "1000", 4) = 4 [pid 8115] close(3) = 0 [pid 8115] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8115] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8115] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8115] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8115] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8116], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8116 [pid 8115] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8115] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8116 attached [pid 8116] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8116] memfd_create("syzkaller", 0) = 3 [pid 8116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 8097] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8097] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... unlink resumed>) = 0 [pid 8097] <... futex resumed>) = 0 [pid 5002] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8097] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 8097] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8097] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8116] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8097] <... clone resumed>, parent_tid=[8117], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8117 [pid 8097] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8085] +++ exited with 0 +++ [pid 8083] +++ exited with 0 +++ [pid 8097] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8083, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./84/binderfs") = 0 [pid 4999] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8117 attached [pid 8109] +++ exited with 0 +++ [pid 8087] +++ exited with 0 +++ [pid 8117] set_robust_list(0x7f5047d309e0, 24 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8087, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 8117] <... set_robust_list resumed>) = 0 [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 8117] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 5000] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8117] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8117] <... futex resumed>) = 1 [pid 8097] <... futex resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 8117] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8097] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] fstat(3, [pid 8097] <... futex resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8097] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8116] <... write resumed>) = 262144 [pid 5000] unlink("./85/binderfs") = 0 [pid 5000] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8116] munmap(0x7f5047cf1000, 262144) = 0 [ 116.858369][ T8103] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 8116] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8116] ioctl(4, LOOP_SET_FD, 3 [pid 8103] <... fsconfig resumed>) = 0 [pid 8101] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./84/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./84/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5002] close(4 [pid 8101] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 8101] <... futex resumed>) = 0 [pid 5002] rmdir("./84/file0" [pid 4999] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8101] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5002] <... rmdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8101] <... mmap resumed>) = 0x7f5047d10000 [pid 5002] getdents64(3, [pid 4999] lstat("./84/file0", [pid 8101] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8101] <... mprotect resumed>) = 0 [pid 5002] close(3 [pid 4999] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8101] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5002] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] rmdir("./84" [pid 5000] <... umount2 resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./84/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8101] <... clone resumed>, parent_tid=[8118], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8118 [pid 5002] <... rmdir resumed>) = 0 [pid 5000] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... openat resumed>) = 4 [pid 8101] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] mkdir("./85", 0777 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] fstat(4, [pid 8101] <... futex resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5000] lstat("./85/file0", [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8101] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 5002] <... openat resumed>) = 3 [pid 5000] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] getdents64(4, [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] openat(AT_FDCWD, "./85/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5002] close(3 [pid 5000] <... openat resumed>) = 4 [pid 4999] close(4./strace-static-x86_64: Process 8118 attached [pid 5002] <... close resumed>) = 0 [pid 5000] fstat(4, [pid 4999] <... close resumed>) = 0 [pid 8118] set_robust_list(0x7f5047d309e0, 24 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] rmdir("./84/file0" [pid 8118] <... set_robust_list resumed>) = 0 [pid 8103] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] getdents64(4, [pid 4999] <... rmdir resumed>) = 0 [pid 8118] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 5002] <... clone resumed>, child_tidptr=0x5555562025d0) = 8119 [pid 5000] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(3, [pid 8118] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 5000] getdents64(4, [pid 4999] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8118] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 4999] close(3 [pid 8118] <... futex resumed>) = 1 [pid 8101] <... futex resumed>) = 0 [pid 5000] close(4 [pid 4999] <... close resumed>) = 0 [pid 8118] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8101] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... close resumed>) = 0 [pid 4999] rmdir("./84" [pid 8101] <... futex resumed>) = 0 [pid 5000] rmdir("./85/file0" [pid 4999] <... rmdir resumed>) = 0 [pid 8101] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... rmdir resumed>) = 0 [pid 4999] mkdir("./85", 0777 [pid 5000] getdents64(3, [pid 4999] <... mkdir resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5000] close(3 [pid 4999] <... openat resumed>) = 3 ./strace-static-x86_64: Process 8119 attached [pid 5000] <... close resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 8119] set_robust_list(0x5555562025e0, 24 [pid 5000] rmdir("./85" [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8119] <... set_robust_list resumed>) = 0 [pid 8103] <... futex resumed>) = 1 [pid 8101] <... futex resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] close(3 [pid 8119] chdir("./85" [pid 8103] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8101] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=46000000} [pid 8098] <... fsconfig resumed>) = 0 [pid 5000] mkdir("./86", 0777 [pid 4999] <... close resumed>) = 0 [pid 8119] <... chdir resumed>) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8119] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8119] <... prctl resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 4999] <... clone resumed>, child_tidptr=0x5555562025d0) = 8120 [pid 8119] setpgid(0, 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 8119] <... setpgid resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8119] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] close(3 [pid 8119] <... openat resumed>) = 3 [pid 5000] <... close resumed>) = 0 [pid 8119] write(3, "1000", 4 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8119] <... write resumed>) = 4 [pid 8119] close(3 [pid 5000] <... clone resumed>, child_tidptr=0x5555562025d0) = 8121 [pid 8119] <... close resumed>) = 0 [pid 8119] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8119] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8119] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8119] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8119] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8122], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8122 [pid 8119] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8119] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8121 attached [pid 8121] set_robust_list(0x5555562025e0, 24 [pid 8097] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8098] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8097] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8097] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8121] <... set_robust_list resumed>) = 0 [pid 8121] chdir("./86"./strace-static-x86_64: Process 8120 attached ) = 0 [pid 8121] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8120] set_robust_list(0x5555562025e0, 24 [pid 8121] <... prctl resumed>) = 0 [pid 8120] <... set_robust_list resumed>) = 0 [pid 8098] <... futex resumed>) = 1 [pid 8097] <... futex resumed>) = 0 [pid 8121] setpgid(0, 0 [pid 8120] chdir("./85" [pid 8098] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8097] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=48000000} [pid 8121] <... setpgid resumed>) = 0 [pid 8120] <... chdir resumed>) = 0 [pid 8121] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8120] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8121] <... openat resumed>) = 3 [pid 8120] <... prctl resumed>) = 0 [pid 8121] write(3, "1000", 4 [pid 8120] setpgid(0, 0 [pid 8098] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 8121] <... write resumed>) = 4 [pid 8120] <... setpgid resumed>) = 0 [pid 8098] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8121] close(3 [pid 8120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8121] <... close resumed>) = 0 [pid 8120] <... openat resumed>) = 3 [pid 8098] <... futex resumed>) = 1 [pid 8097] <... futex resumed>) = 0 [pid 8121] symlink("/dev/binderfs", "./binderfs" [pid 8120] write(3, "1000", 4 [pid 8098] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8121] <... symlink resumed>) = 0 [pid 8120] <... write resumed>) = 4 [pid 8121] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8120] close(3 [pid 8121] <... futex resumed>) = 0 [pid 8120] <... close resumed>) = 0 [pid 8121] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8120] symlink("/dev/binderfs", "./binderfs" [pid 8121] <... mmap resumed>) = 0x7f50500f1000 [pid 8120] <... symlink resumed>) = 0 [pid 8121] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8120] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8121] <... mprotect resumed>) = 0 [pid 8120] <... futex resumed>) = 0 [pid 8121] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8120] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8121] <... clone resumed>, parent_tid=[8123], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8123 [pid 8120] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 8122 attached [pid 8121] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8120] <... mprotect resumed>) = 0 [pid 8121] <... futex resumed>) = 0 [pid 8120] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8122] set_robust_list(0x7f50501119e0, 24 [pid 8121] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8122] <... set_robust_list resumed>) = 0 [pid 8120] <... clone resumed>, parent_tid=[8124], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8124 [pid 8120] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8122] memfd_create("syzkaller", 0 [pid 8120] <... futex resumed>) = 0 [pid 8120] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8122] <... memfd_create resumed>) = 3 [pid 8122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 ./strace-static-x86_64: Process 8123 attached ./strace-static-x86_64: Process 8124 attached [pid 8123] set_robust_list(0x7f50501119e0, 24 [pid 8124] set_robust_list(0x7f50501119e0, 24 [pid 8123] <... set_robust_list resumed>) = 0 [pid 8124] <... set_robust_list resumed>) = 0 [pid 8123] memfd_create("syzkaller", 0 [pid 8124] memfd_create("syzkaller", 0 [pid 8123] <... memfd_create resumed>) = 3 [pid 8122] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8124] <... memfd_create resumed>) = 3 [pid 8123] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8123] <... mmap resumed>) = 0x7f5047cf1000 [pid 8124] <... mmap resumed>) = 0x7f5047cf1000 [pid 8123] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8122] <... write resumed>) = 262144 [ 116.905237][ T8116] loop2: detected capacity change from 0 to 512 [ 116.909397][ T8117] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 116.944504][ T8103] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [pid 8116] <... ioctl resumed>) = 0 [pid 8124] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8101] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8101] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8118] <... futex resumed>) = 0 [pid 8101] <... futex resumed>) = 1 [pid 8118] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8101] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8118] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 8118] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8123] <... write resumed>) = 262144 [pid 8118] <... futex resumed>) = 1 [pid 8101] <... futex resumed>) = 0 [pid 8123] munmap(0x7f5047cf1000, 262144 [pid 8118] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8124] <... write resumed>) = 262144 [pid 8123] <... munmap resumed>) = 0 [pid 8122] munmap(0x7f5047cf1000, 262144 [pid 8116] close(3 [pid 8122] <... munmap resumed>) = 0 [pid 8116] <... close resumed>) = 0 [pid 8122] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8116] mkdir("./file0", 0777 [pid 8122] <... openat resumed>) = 4 [pid 8116] <... mkdir resumed>) = 0 [pid 8122] ioctl(4, LOOP_SET_FD, 3 [pid 8116] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8124] munmap(0x7f5047cf1000, 262144 [pid 8123] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8124] <... munmap resumed>) = 0 [pid 8123] <... openat resumed>) = 4 [pid 8124] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8123] ioctl(4, LOOP_SET_FD, 3 [pid 8124] <... openat resumed>) = 4 [pid 8124] ioctl(4, LOOP_SET_FD, 3 [pid 8122] <... ioctl resumed>) = 0 [pid 8122] close(3 [pid 8123] <... ioctl resumed>) = 0 [pid 8122] <... close resumed>) = 0 [pid 8123] close(3 [pid 8122] mkdir("./file0", 0777 [pid 8123] <... close resumed>) = 0 [pid 8123] mkdir("./file0", 0777 [pid 8124] <... ioctl resumed>) = 0 [pid 8123] <... mkdir resumed>) = 0 [pid 8122] <... mkdir resumed>) = 0 [pid 8124] close(3 [ 116.984175][ T8117] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 116.994687][ T8103] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 116.999576][ T8122] loop3: detected capacity change from 0 to 512 [ 117.005907][ T8123] loop1: detected capacity change from 0 to 512 [ 117.009752][ T8116] EXT4-fs: Ignoring removed oldalloc option [ 117.016265][ T8124] loop0: detected capacity change from 0 to 512 [pid 8122] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8124] <... close resumed>) = 0 [pid 8123] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8103] <... fsconfig resumed>) = 0 [pid 8124] mkdir("./file0", 0777 [pid 8103] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8103] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8124] <... mkdir resumed>) = 0 [pid 8101] exit_group(0 [pid 8118] <... futex resumed>) = ? [pid 8103] <... futex resumed>) = ? [pid 8101] <... exit_group resumed>) = ? [pid 8124] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8118] +++ exited with 0 +++ [pid 8103] +++ exited with 0 +++ [pid 8101] +++ exited with 0 +++ [ 117.031301][ T8103] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 117.032874][ T8122] EXT4-fs: Ignoring removed oldalloc option [ 117.043184][ T8123] EXT4-fs: Ignoring removed oldalloc option [ 117.049946][ T8116] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 117.065710][ T8117] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8101, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 8117] <... fsconfig resumed>) = 0 [pid 8117] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8097] exit_group(0 [pid 8117] exit_group(0 [pid 5004] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8098] <... futex resumed>) = ? [pid 8097] <... exit_group resumed>) = ? [pid 8098] +++ exited with 0 +++ [pid 8117] +++ exited with 0 +++ [pid 8097] +++ exited with 0 +++ [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5004] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5004] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5004] unlink("./86/binderfs") = 0 [pid 5004] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8116] <... mount resumed>) = 0 [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8097, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5005] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5005] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5005] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] lstat("./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5005] unlink("./84/binderfs") = 0 [ 117.067819][ T8116] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 117.077004][ T8124] EXT4-fs: Ignoring removed oldalloc option [ 117.100683][ T8116] EXT4-fs (loop2): 1 truncate cleaned up [ 117.108045][ T8116] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 5005] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8116] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8116] chdir("./file0") = 0 [pid 8116] ioctl(4, LOOP_CLR_FD) = 0 [pid 8116] close(4) = 0 [pid 8116] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8115] <... futex resumed>) = 0 [pid 8115] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8115] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8116] fspick(AT_FDCWD, ".", 0) = 4 [pid 8116] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8115] <... futex resumed>) = 0 [pid 8115] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8115] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8116] <... futex resumed>) = 1 [pid 8116] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 8116] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8115] <... futex resumed>) = 0 [pid 8115] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8116] <... futex resumed>) = 1 [pid 8115] <... futex resumed>) = 0 [pid 8116] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 117.127899][ T8123] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 117.128119][ T8122] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 117.137209][ T8124] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 117.150978][ T8122] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 117.155192][ T8123] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 8115] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8116] <... fsconfig resumed>) = 0 [pid 8116] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8115] <... futex resumed>) = 0 [pid 8115] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8115] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8116] <... futex resumed>) = 1 [pid 8116] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 8116] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8115] <... futex resumed>) = 0 [pid 8115] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 117.188585][ T8116] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 117.201848][ T8122] EXT4-fs (loop3): 1 truncate cleaned up [ 117.202007][ T8124] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 117.224424][ T8123] EXT4-fs (loop1): 1 truncate cleaned up [pid 8115] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8116] <... futex resumed>) = 1 [pid 8116] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5004] <... umount2 resumed>) = 0 [pid 5004] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./86/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./86/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5004] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5004] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5004] close(4) = 0 [pid 5004] rmdir("./86/file0" [pid 5005] <... umount2 resumed>) = 0 [pid 5005] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] lstat("./84/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] openat(AT_FDCWD, "./84/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5005] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(4, [pid 8115] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8115] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8115] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5005] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5004] <... rmdir resumed>) = 0 [pid 8115] <... mmap resumed>) = 0x7f5047d10000 [pid 8115] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5005] getdents64(4, [pid 5004] getdents64(3, [pid 8115] <... mprotect resumed>) = 0 [pid 5005] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5004] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8115] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5005] close(4 [pid 5004] close(3 [pid 5005] <... close resumed>) = 0 [pid 5004] <... close resumed>) = 0 [pid 8115] <... clone resumed>, parent_tid=[8136], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8136 [pid 5005] rmdir("./84/file0" [pid 5004] rmdir("./86" [pid 8115] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... rmdir resumed>) = 0 [pid 8115] <... futex resumed>) = 0 [pid 5005] getdents64(3, [pid 5004] <... rmdir resumed>) = 0 [pid 8115] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5004] mkdir("./87", 0777 [pid 5005] close(3 [pid 5004] <... mkdir resumed>) = 0 [pid 5005] <... close resumed>) = 0 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5005] rmdir("./84" [pid 5004] <... openat resumed>) = 3 ./strace-static-x86_64: Process 8136 attached [pid 5005] <... rmdir resumed>) = 0 [pid 5004] ioctl(3, LOOP_CLR_FD [pid 8136] set_robust_list(0x7f5047d309e0, 24 [pid 5005] mkdir("./85", 0777 [pid 5004] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8136] <... set_robust_list resumed>) = 0 [pid 5005] <... mkdir resumed>) = 0 [ 117.241284][ T8122] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.255095][ T8116] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 117.268180][ T8123] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 5004] close(3 [pid 8136] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8123] <... mount resumed>) = 0 [pid 8122] <... mount resumed>) = 0 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5004] <... close resumed>) = 0 [pid 8124] <... mount resumed>) = 0 [pid 8124] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8124] chdir("./file0") = 0 [pid 8124] ioctl(4, LOOP_CLR_FD) = 0 [pid 8124] close(4) = 0 [pid 8124] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8120] <... futex resumed>) = 0 [pid 8120] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8120] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8136] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 8123] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8122] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5005] <... openat resumed>) = 3 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8124] <... futex resumed>) = 1 [pid 8124] fspick(AT_FDCWD, ".", 0) = 4 [pid 8124] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8120] <... futex resumed>) = 0 [pid 8120] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8120] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8124] <... futex resumed>) = 1 [pid 8124] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 8124] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8120] <... futex resumed>) = 0 [pid 8120] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8120] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8124] <... futex resumed>) = 1 [pid 8124] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8136] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8123] <... openat resumed>) = 3 [pid 8122] <... openat resumed>) = 3 [pid 5005] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 8137 attached [pid 8137] set_robust_list(0x5555562025e0, 24 [pid 8136] <... futex resumed>) = 1 [pid 8123] chdir("./file0" [pid 8122] chdir("./file0" [pid 8115] <... futex resumed>) = 0 [pid 5005] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5004] <... clone resumed>, child_tidptr=0x5555562025d0) = 8137 [pid 8136] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8123] <... chdir resumed>) = 0 [pid 8122] <... chdir resumed>) = 0 [ 117.319585][ T8124] EXT4-fs (loop0): 1 truncate cleaned up [ 117.325443][ T8124] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.330463][ T8116] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 5005] close(3 [pid 8123] ioctl(4, LOOP_CLR_FD [pid 8122] ioctl(4, LOOP_CLR_FD [pid 5005] <... close resumed>) = 0 [pid 8123] <... ioctl resumed>) = 0 [pid 8122] <... ioctl resumed>) = 0 [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8123] close(4 [pid 8122] close(4 [pid 8123] <... close resumed>) = 0 [pid 8122] <... close resumed>) = 0 [pid 5005] <... clone resumed>, child_tidptr=0x5555562025d0) = 8138 [pid 8123] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8122] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8123] <... futex resumed>) = 1 [pid 8122] <... futex resumed>) = 1 [pid 8123] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8122] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8137] <... set_robust_list resumed>) = 0 [pid 8137] chdir("./87") = 0 [pid 8137] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8137] setpgid(0, 0) = 0 [pid 8137] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8137] write(3, "1000", 4) = 4 [pid 8137] close(3) = 0 [pid 8137] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8121] <... futex resumed>) = 0 [pid 8119] <... futex resumed>) = 0 [pid 8137] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8121] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8119] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8137] <... futex resumed>) = 0 [pid 8137] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8123] <... futex resumed>) = 0 [pid 8122] <... futex resumed>) = 0 [pid 8121] <... futex resumed>) = 1 [pid 8119] <... futex resumed>) = 1 [pid 8137] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8123] fspick(AT_FDCWD, ".", 0 [pid 8122] fspick(AT_FDCWD, ".", 0 [pid 8121] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8119] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8137] <... mprotect resumed>) = 0 [pid 8123] <... fspick resumed>) = 4 [pid 8122] <... fspick resumed>) = 4 [pid 8137] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8123] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8122] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8138 attached [pid 8123] <... futex resumed>) = 1 [pid 8122] <... futex resumed>) = 1 [pid 8121] <... futex resumed>) = 0 [pid 8119] <... futex resumed>) = 0 [pid 8137] <... clone resumed>, parent_tid=[8140], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8140 [pid 8123] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8122] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8137] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8137] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8140 attached [pid 8140] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8121] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8119] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8138] set_robust_list(0x5555562025e0, 24 [pid 8123] <... futex resumed>) = 0 [pid 8122] <... futex resumed>) = 0 [pid 8121] <... futex resumed>) = 1 [pid 8119] <... futex resumed>) = 1 [pid 8122] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8123] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8122] <... fsconfig resumed>) = 0 [pid 8121] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8119] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8138] <... set_robust_list resumed>) = 0 [pid 8123] <... fsconfig resumed>) = 0 [pid 8122] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8119] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8122] <... futex resumed>) = 0 [pid 8122] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8138] chdir("./85" [pid 8140] memfd_create("syzkaller", 0 [pid 8123] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8140] <... memfd_create resumed>) = 3 [pid 8138] <... chdir resumed>) = 0 [pid 8123] <... futex resumed>) = 1 [pid 8121] <... futex resumed>) = 0 [pid 8119] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8138] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8123] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8122] <... futex resumed>) = 0 [pid 8121] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8119] <... futex resumed>) = 1 [pid 8140] <... mmap resumed>) = 0x7f5047cf1000 [pid 8138] <... prctl resumed>) = 0 [pid 8123] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8122] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8121] <... futex resumed>) = 0 [pid 8119] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8140] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8138] setpgid(0, 0 [pid 8124] <... fsconfig resumed>) = 0 [pid 8123] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8121] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8120] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8116] <... fsconfig resumed>) = 0 [ 117.364707][ T8124] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 117.381724][ T8116] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 8138] <... setpgid resumed>) = 0 [pid 8124] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8120] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8116] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8140] <... write resumed>) = 262144 [pid 8116] <... futex resumed>) = 0 [pid 8115] exit_group(0 [pid 8140] munmap(0x7f5047cf1000, 262144 [pid 8136] <... futex resumed>) = ? [pid 8115] <... exit_group resumed>) = ? [pid 8140] <... munmap resumed>) = 0 [pid 8136] +++ exited with 0 +++ [pid 8116] +++ exited with 0 +++ [pid 8115] +++ exited with 0 +++ [pid 8140] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8140] ioctl(4, LOOP_SET_FD, 3 [pid 8138] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8124] <... futex resumed>) = 0 [pid 8120] <... futex resumed>) = 0 [pid 8140] <... ioctl resumed>) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8115, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 8140] close(3 [pid 8138] <... openat resumed>) = 3 [pid 8124] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8120] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8140] <... close resumed>) = 0 [pid 8138] write(3, "1000", 4 [pid 8120] <... mmap resumed>) = 0x7f5047d10000 [pid 8140] mkdir("./file0", 0777 [pid 8138] <... write resumed>) = 4 [pid 8120] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5001] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8140] <... mkdir resumed>) = 0 [pid 8138] close(3 [pid 8123] <... fsconfig resumed>) = 0 [pid 8122] <... fsconfig resumed>) = 0 [pid 8120] <... mprotect resumed>) = 0 [pid 8119] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8140] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8138] <... close resumed>) = 0 [pid 8123] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8122] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8121] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8120] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8119] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8138] symlink("/dev/binderfs", "./binderfs" [pid 8123] <... futex resumed>) = 0 [pid 8122] <... futex resumed>) = 0 [pid 8121] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8119] <... futex resumed>) = 0 [pid 8123] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8122] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 5001] <... openat resumed>) = 3 [pid 8138] <... symlink resumed>) = 0 [pid 8123] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8122] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8121] <... futex resumed>) = 0 [pid 8120] <... clone resumed>, parent_tid=[8142], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8142 [pid 8119] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] fstat(3, [pid 8138] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8123] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8122] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8121] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8120] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8119] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8138] <... futex resumed>) = 0 [pid 8123] <... futex resumed>) = 0 [pid 8122] <... futex resumed>) = 0 [pid 8121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8120] <... futex resumed>) = 0 [pid 8119] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] getdents64(3, [pid 8138] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8123] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 117.418236][ T8122] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 117.427530][ T8140] loop4: detected capacity change from 0 to 512 [ 117.435694][ T8123] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 117.459355][ T8140] EXT4-fs: Ignoring removed oldalloc option [pid 8122] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8121] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8120] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8119] <... futex resumed>) = 0 ./strace-static-x86_64: Process 8142 attached [pid 8138] <... mmap resumed>) = 0x7f50500f1000 [pid 8123] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8121] <... futex resumed>) = 0 [pid 8119] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 8142] set_robust_list(0x7f5047d309e0, 24 [pid 8138] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8121] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8142] <... set_robust_list resumed>) = 0 [pid 8138] <... mprotect resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8142] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8138] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8123] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5001] lstat("./86/binderfs", [pid 8142] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8142] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8138] <... clone resumed>, parent_tid=[8144], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8144 [pid 5001] unlink("./86/binderfs" [pid 8142] <... futex resumed>) = 1 [pid 8138] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8120] <... futex resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 8142] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8138] <... futex resumed>) = 0 [pid 8120] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8138] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8124] <... futex resumed>) = 0 [pid 8120] <... futex resumed>) = 1 [pid 8124] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8120] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8144 attached [pid 8144] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8144] memfd_create("syzkaller", 0) = 3 [pid 8144] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [ 117.470718][ T8122] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 117.481387][ T8123] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 117.487690][ T8124] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 117.491819][ T8140] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 117.502587][ T8122] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8144] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8119] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8119] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8119] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 8119] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8121] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8121] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8121] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 8121] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8121] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8145], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8145 [pid 8121] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8121] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8119] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8146], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8146 [pid 8119] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8119] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8144] <... write resumed>) = 262144 [pid 8144] munmap(0x7f5047cf1000, 262144) = 0 [pid 8144] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 8144] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 8146 attached ./strace-static-x86_64: Process 8145 attached [pid 8120] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8146] set_robust_list(0x7f5047d309e0, 24 [pid 8145] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8146] <... set_robust_list resumed>) = 0 [pid 8145] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8146] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 8145] <... openat resumed>) = 5 [pid 8120] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8142] <... futex resumed>) = 0 [pid 8120] <... futex resumed>) = 1 [pid 8142] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8120] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8144] <... ioctl resumed>) = 0 [ 117.519047][ T8124] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 117.528663][ T8123] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 117.541951][ T8140] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 117.548007][ T8144] loop5: detected capacity change from 0 to 512 [pid 8144] close(3 [pid 8146] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8145] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8146] <... futex resumed>) = 1 [pid 8145] <... futex resumed>) = 1 [pid 8142] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8121] <... futex resumed>) = 0 [pid 8119] <... futex resumed>) = 0 [pid 8146] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8145] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8142] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8144] <... close resumed>) = 0 [pid 8142] <... futex resumed>) = 1 [pid 8120] <... futex resumed>) = 0 [pid 8142] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8144] mkdir("./file0", 0777 [pid 8124] <... fsconfig resumed>) = 0 [pid 8123] <... fsconfig resumed>) = 0 [pid 8122] <... fsconfig resumed>) = 0 [pid 8144] <... mkdir resumed>) = 0 [pid 8124] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8123] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8121] exit_group(0 [pid 8120] exit_group(0 [pid 8145] <... futex resumed>) = ? [pid 8144] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8124] <... futex resumed>) = ? [pid 8142] <... futex resumed>) = ? [pid 8123] <... futex resumed>) = ? [pid 8121] <... exit_group resumed>) = ? [pid 8120] <... exit_group resumed>) = ? [ 117.566423][ T8140] EXT4-fs (loop4): 1 truncate cleaned up [ 117.572998][ T8124] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 117.574177][ T8122] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 117.596457][ T8123] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 117.596939][ T8140] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 8145] +++ exited with 0 +++ [pid 8142] +++ exited with 0 +++ [pid 8140] <... mount resumed>) = 0 [pid 8124] +++ exited with 0 +++ [pid 8123] +++ exited with 0 +++ [pid 8122] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8121] +++ exited with 0 +++ [pid 8120] +++ exited with 0 +++ [pid 8119] exit_group(0 [pid 8146] <... futex resumed>) = ? [pid 8119] <... exit_group resumed>) = ? [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8121, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8120, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 8146] +++ exited with 0 +++ [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 5000] <... restart_syscall resumed>) = 0 [pid 4999] <... restart_syscall resumed>) = 0 [pid 8140] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8122] <... futex resumed>) = ? [pid 5000] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... openat resumed>) = 3 [pid 4999] <... openat resumed>) = 3 [pid 5000] fstat(3, [pid 4999] fstat(3, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 4999] getdents64(3, [pid 5000] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./86/binderfs", [pid 4999] lstat("./85/binderfs", [pid 8140] <... openat resumed>) = 3 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8140] chdir("./file0" [pid 5000] unlink("./86/binderfs" [pid 4999] unlink("./85/binderfs" [pid 8140] <... chdir resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 8140] ioctl(4, LOOP_CLR_FD [pid 5000] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8140] <... ioctl resumed>) = 0 [pid 8140] close(4 [pid 8122] +++ exited with 0 +++ [pid 8119] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8119, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./85/binderfs") = 0 [pid 5002] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8140] <... close resumed>) = 0 [pid 8140] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8137] <... futex resumed>) = 0 [pid 8140] fspick(AT_FDCWD, ".", 0 [pid 8137] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8140] <... fspick resumed>) = 4 [pid 8137] <... futex resumed>) = 0 [pid 8140] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8137] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8140] <... futex resumed>) = 0 [pid 8137] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8140] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8137] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8137] <... futex resumed>) = 0 [pid 8140] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8137] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8140] <... fsconfig resumed>) = 0 [pid 8140] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8137] <... futex resumed>) = 0 [pid 8140] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8137] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8137] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./86/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./86/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./86/file0") = 0 [pid 5001] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./86") = 0 [pid 5001] mkdir("./87", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 8151 ./strace-static-x86_64: Process 8151 attached [pid 8151] set_robust_list(0x5555562025e0, 24) = 0 [pid 8151] chdir("./87") = 0 [pid 8151] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8151] setpgid(0, 0) = 0 [pid 8151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8151] write(3, "1000", 4) = 4 [pid 8151] close(3) = 0 [pid 8151] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8151] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8151] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8151] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8151] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8153], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8153 [pid 8151] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8151] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8153 attached [pid 8153] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8153] memfd_create("syzkaller", 0) = 3 [pid 8153] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [ 117.622012][ T8144] EXT4-fs: Ignoring removed oldalloc option [pid 8153] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 8153] munmap(0x7f5047cf1000, 262144) = 0 [pid 8153] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8153] ioctl(4, LOOP_SET_FD, 3 [pid 8137] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8153] <... ioctl resumed>) = 0 [pid 8140] <... fsconfig resumed>) = 0 [pid 8137] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... umount2 resumed>) = 0 [pid 8140] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8140] <... futex resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8140] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5002] lstat("./85/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8153] close(3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8153] <... close resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./85/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8153] mkdir("./file0", 0777 [pid 5002] <... openat resumed>) = 4 [pid 8153] <... mkdir resumed>) = 0 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8153] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5002] getdents64(4, [pid 8137] <... futex resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8137] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5002] getdents64(4, [pid 8137] <... mmap resumed>) = 0x7f5047d10000 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8137] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5002] close(4 [pid 8137] <... mprotect resumed>) = 0 [pid 8137] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./85/file0") = 0 [pid 8137] <... clone resumed>, parent_tid=[8154], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8154 [pid 8137] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5002] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 8137] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] rmdir("./85") = 0 [pid 5002] mkdir("./86", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 8155 ./strace-static-x86_64: Process 8154 attached [pid 8154] set_robust_list(0x7f5047d309e0, 24 [pid 5000] <... umount2 resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./85/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "./85/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8154] <... set_robust_list resumed>) = 0 [pid 4999] getdents64(4, [pid 8154] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 4999] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8154] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [ 117.680596][ T8140] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 117.683417][ T8153] loop2: detected capacity change from 0 to 512 [ 117.704909][ T8144] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 117.716338][ T8153] EXT4-fs: Ignoring removed oldalloc option [pid 4999] close(4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... close resumed>) = 0 [pid 8154] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] rmdir("./85/file0" [pid 8154] <... futex resumed>) = 1 [pid 8137] <... futex resumed>) = 0 [pid 8137] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] lstat("./86/file0", [pid 4999] <... rmdir resumed>) = 0 [pid 8140] <... futex resumed>) = 0 [pid 8137] <... futex resumed>) = 1 [pid 4999] getdents64(3, [pid 8140] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8137] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8154] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5000] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./86/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./86/file0") = 0 [pid 5000] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./86") = 0 [pid 5000] mkdir("./87", 0777) = 0 [pid 4999] close(3 [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4999] <... close resumed>) = 0 ./strace-static-x86_64: Process 8155 attached [pid 5000] <... openat resumed>) = 3 [pid 4999] rmdir("./85" [pid 8155] set_robust_list(0x5555562025e0, 24 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] <... rmdir resumed>) = 0 [pid 8155] <... set_robust_list resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8155] chdir("./86" [pid 5000] close(3 [pid 8155] <... chdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 8155] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8155] <... prctl resumed>) = 0 [pid 8155] setpgid(0, 0 [pid 5000] <... clone resumed>, child_tidptr=0x5555562025d0) = 8156 [pid 8155] <... setpgid resumed>) = 0 [pid 8155] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8155] write(3, "1000", 4) = 4 [pid 8155] close(3) = 0 [pid 8155] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8155] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8155] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8155] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8155] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8157], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8157 [pid 8155] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8155] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4999] mkdir("./86", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 8158 ./strace-static-x86_64: Process 8156 attached [pid 8156] set_robust_list(0x5555562025e0, 24) = 0 [pid 8156] chdir("./87") = 0 [pid 8156] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8156] setpgid(0, 0) = 0 [ 117.745769][ T8140] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 117.765378][ T8144] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 117.765586][ T8140] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 117.790479][ T8144] __quota_error: 132 callbacks suppressed [pid 8156] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8156] write(3, "1000", 4) = 4 [pid 8156] close(3) = 0 [pid 8156] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8156] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8156] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8156] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8156] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8137] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8137] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8154] <... futex resumed>) = 0 [pid 8137] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8154] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 8154] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8137] <... futex resumed>) = 0 [pid 8154] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8156] <... clone resumed>, parent_tid=[8161], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8161 [pid 8156] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8156] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8161 attached [pid 8161] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8161] memfd_create("syzkaller", 0) = 3 [pid 8161] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 8161] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 8161] munmap(0x7f5047cf1000, 262144) = 0 [pid 8161] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8161] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 8158 attached ./strace-static-x86_64: Process 8157 attached [pid 8157] set_robust_list(0x7f50501119e0, 24 [pid 8158] set_robust_list(0x5555562025e0, 24 [pid 8157] <... set_robust_list resumed>) = 0 [pid 8158] <... set_robust_list resumed>) = 0 [pid 8158] chdir("./86" [pid 8157] memfd_create("syzkaller", 0 [pid 8161] <... ioctl resumed>) = 0 [pid 8161] close(3) = 0 [pid 8161] mkdir("./file0", 0777) = 0 [ 117.790494][ T8144] Quota error (device loop5): write_blk: dquota write failed [ 117.817787][ T8140] Quota error (device loop4): write_blk: dquota write failed [ 117.825029][ T8161] loop1: detected capacity change from 0 to 512 [ 117.833318][ T8153] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8161] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8158] <... chdir resumed>) = 0 [pid 8157] <... memfd_create resumed>) = 3 [pid 8158] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8157] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8158] <... prctl resumed>) = 0 [pid 8157] <... mmap resumed>) = 0x7f5047cf1000 [ 117.833993][ T8144] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 117.846557][ T8161] EXT4-fs: Ignoring removed oldalloc option [ 117.852891][ T8140] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 117.869454][ T8140] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 117.869471][ T8153] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 8158] setpgid(0, 0 [pid 8157] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8158] <... setpgid resumed>) = 0 [pid 8157] <... write resumed>) = 262144 [pid 8140] <... fsconfig resumed>) = 0 [ 117.879378][ T8140] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 117.895981][ T8144] EXT4-fs (loop5): 1 truncate cleaned up [ 117.905045][ T8140] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 117.910058][ T8153] Quota error (device loop2): write_blk: dquota write failed [ 117.920944][ T8144] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 8158] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8157] munmap(0x7f5047cf1000, 262144 [pid 8144] <... mount resumed>) = 0 [pid 8140] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8158] <... openat resumed>) = 3 [pid 8157] <... munmap resumed>) = 0 [pid 8140] <... futex resumed>) = 0 [pid 8137] exit_group(0 [pid 8158] write(3, "1000", 4 [pid 8157] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8154] <... futex resumed>) = ? [pid 8137] <... exit_group resumed>) = ? [pid 8158] <... write resumed>) = 4 [pid 8157] <... openat resumed>) = 4 [pid 8154] +++ exited with 0 +++ [pid 8140] +++ exited with 0 +++ [pid 8137] +++ exited with 0 +++ [pid 8158] close(3 [pid 8157] ioctl(4, LOOP_SET_FD, 3 [pid 8158] <... close resumed>) = 0 [pid 8144] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8137, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 8144] <... openat resumed>) = 3 [pid 8144] chdir("./file0") = 0 [pid 8144] ioctl(4, LOOP_CLR_FD) = 0 [pid 8144] close(4) = 0 [pid 8144] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8138] <... futex resumed>) = 0 [pid 8138] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8138] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8144] <... futex resumed>) = 1 [pid 8144] fspick(AT_FDCWD, ".", 0) = 4 [pid 8144] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8138] <... futex resumed>) = 0 [pid 8138] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8138] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8144] <... futex resumed>) = 1 [pid 8144] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 8144] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8138] <... futex resumed>) = 0 [pid 8138] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8138] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8144] <... futex resumed>) = 1 [pid 8144] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8157] <... ioctl resumed>) = 0 [pid 8157] close(3) = 0 [pid 8157] mkdir("./file0", 0777) = 0 [pid 8157] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5004] restart_syscall(<... resuming interrupted clone ...> [pid 8158] symlink("/dev/binderfs", "./binderfs" [pid 5004] <... restart_syscall resumed>) = 0 [pid 8158] <... symlink resumed>) = 0 [pid 8158] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5004] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8158] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8158] <... mmap resumed>) = 0x7f50500f1000 [pid 5004] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8158] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 5004] <... openat resumed>) = 3 [pid 8158] <... mprotect resumed>) = 0 [pid 5004] fstat(3, [pid 8158] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(3, [pid 8158] <... clone resumed>, parent_tid=[8165], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8165 [pid 5004] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 8158] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8158] <... futex resumed>) = 0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8158] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5004] lstat("./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5004] unlink("./87/binderfs") = 0 [pid 5004] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8165 attached [pid 8165] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8165] memfd_create("syzkaller", 0) = 3 [ 117.928610][ T8153] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 117.945152][ T8157] loop3: detected capacity change from 0 to 512 [ 117.955798][ T8161] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 117.967467][ T8153] EXT4-fs (loop2): 1 truncate cleaned up [ 117.974040][ T8157] EXT4-fs: Ignoring removed oldalloc option [ 117.980316][ T8153] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 8153] <... mount resumed>) = 0 [pid 8153] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8153] chdir("./file0") = 0 [pid 8153] ioctl(4, LOOP_CLR_FD) = 0 [pid 8153] close(4 [pid 8165] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 8153] <... close resumed>) = 0 [pid 8144] <... fsconfig resumed>) = 0 [pid 8138] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8153] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8144] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8153] <... futex resumed>) = 1 [pid 8151] <... futex resumed>) = 0 [pid 8144] <... futex resumed>) = 0 [pid 8153] fspick(AT_FDCWD, ".", 0 [pid 8151] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8144] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8153] <... fspick resumed>) = 4 [pid 8151] <... futex resumed>) = 0 [pid 8153] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8151] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8153] <... futex resumed>) = 0 [pid 8151] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8153] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8151] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8153] <... fsconfig resumed>) = 0 [pid 8151] <... futex resumed>) = 0 [pid 8153] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8151] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8153] <... futex resumed>) = 0 [pid 8151] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8153] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8151] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8153] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8151] <... futex resumed>) = 0 [pid 8153] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8151] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8165] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 8165] munmap(0x7f5047cf1000, 262144) = 0 [pid 8165] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 117.998876][ T8144] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 118.027355][ T8161] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 8138] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8144] <... futex resumed>) = 0 [pid 8138] <... futex resumed>) = 1 [pid 8144] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8138] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8144] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8144] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8138] <... futex resumed>) = 0 [pid 8144] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8138] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8144] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8138] <... futex resumed>) = 0 [pid 8144] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8138] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8165] <... openat resumed>) = 4 [pid 8165] ioctl(4, LOOP_SET_FD, 3 [pid 8153] <... fsconfig resumed>) = 0 [pid 8151] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8153] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8151] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8153] <... futex resumed>) = 0 [pid 8151] <... futex resumed>) = 0 [ 118.043627][ T8157] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 118.051970][ T8153] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 118.055806][ T8144] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 118.068907][ T8165] loop0: detected capacity change from 0 to 512 [ 118.074324][ T8144] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 118.086458][ T8161] Quota error (device loop1): write_blk: dquota write failed [pid 8151] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 8151] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8153] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8151] <... mprotect resumed>) = 0 [pid 8151] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8168], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8168 [pid 8151] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8151] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... umount2 resumed>) = 0 [pid 5004] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./87/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./87/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5004] fstat(4, [pid 8138] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8138] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8138] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8138] <... mmap resumed>) = 0x7f5047d10000 [pid 8138] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5004] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 8168 attached [pid 8168] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8168] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 5004] getdents64(4, [pid 8168] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 5004] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8168] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] close(4 [pid 8151] <... futex resumed>) = 0 [pid 8151] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8153] <... futex resumed>) = 0 [pid 8151] <... futex resumed>) = 1 [pid 8153] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8151] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8138] <... mprotect resumed>) = 0 [pid 8168] <... futex resumed>) = 1 [pid 5004] <... close resumed>) = 0 [pid 8168] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5004] rmdir("./87/file0") = 0 [pid 5004] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5004] close(3) = 0 [pid 5004] rmdir("./87") = 0 [pid 8165] <... ioctl resumed>) = 0 [pid 8165] close(3) = 0 [pid 8165] mkdir("./file0", 0777) = 0 [pid 5004] mkdir("./88", 0777) = 0 [ 118.094934][ T8161] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 118.107018][ T8157] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 118.123777][ T8161] EXT4-fs (loop1): 1 truncate cleaned up [ 118.127334][ T8153] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [pid 8165] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8138] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5004] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5004] close(3) = 0 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 8170 ./strace-static-x86_64: Process 8170 attached [pid 8170] set_robust_list(0x5555562025e0, 24) = 0 [pid 8170] chdir("./88") = 0 [pid 8170] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8170] setpgid(0, 0) = 0 [pid 8170] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8138] <... clone resumed>, parent_tid=[8169], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8169 [pid 8170] write(3, "1000", 4) = 4 [pid 8170] close(3) = 0 ./strace-static-x86_64: Process 8169 attached [pid 8170] symlink("/dev/binderfs", "./binderfs" [pid 8161] <... mount resumed>) = 0 [pid 8157] <... mount resumed>) = 0 [pid 8138] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8170] <... symlink resumed>) = 0 [pid 8169] set_robust_list(0x7f5047d309e0, 24 [pid 8161] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8157] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8151] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8138] <... futex resumed>) = 0 [pid 8151] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8168] <... futex resumed>) = 0 [pid 8151] <... futex resumed>) = 1 [pid 8168] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8151] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8170] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8169] <... set_robust_list resumed>) = 0 [pid 8161] <... openat resumed>) = 3 [pid 8157] <... openat resumed>) = 3 [pid 8144] <... fsconfig resumed>) = 0 [pid 8138] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8168] <... openat resumed>) = 5 [pid 8170] <... futex resumed>) = 0 [pid 8169] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8168] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8161] chdir("./file0" [pid 8157] chdir("./file0" [pid 8144] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8170] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8168] <... futex resumed>) = 1 [pid 8157] <... chdir resumed>) = 0 [pid 8151] <... futex resumed>) = 0 [pid 8168] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8161] <... chdir resumed>) = 0 [pid 8169] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8144] <... futex resumed>) = 0 [pid 8144] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8170] <... mmap resumed>) = 0x7f50500f1000 [pid 8169] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8161] ioctl(4, LOOP_CLR_FD [pid 8157] ioctl(4, LOOP_CLR_FD [pid 8170] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8169] <... futex resumed>) = 1 [pid 8161] <... ioctl resumed>) = 0 [pid 8157] <... ioctl resumed>) = 0 [pid 8138] <... futex resumed>) = 0 [pid 8170] <... mprotect resumed>) = 0 [pid 8169] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8161] close(4 [pid 8157] close(4 [pid 8138] exit_group(0 [pid 8170] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8169] <... futex resumed>) = ? [pid 8161] <... close resumed>) = 0 [pid 8157] <... close resumed>) = 0 [pid 8138] <... exit_group resumed>) = ? [pid 8169] +++ exited with 0 +++ [pid 8161] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8157] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8170] <... clone resumed>, parent_tid=[8174], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8174 [pid 8161] <... futex resumed>) = 1 [pid 8157] <... futex resumed>) = 1 [pid 8156] <... futex resumed>) = 0 [pid 8155] <... futex resumed>) = 0 [pid 8170] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8161] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8157] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8156] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8155] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8170] <... futex resumed>) = 0 [pid 8161] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8157] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8156] <... futex resumed>) = 0 [pid 8170] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8161] fspick(AT_FDCWD, ".", 0 [pid 8157] fspick(AT_FDCWD, ".", 0 [pid 8156] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8155] <... futex resumed>) = 0 [pid 8161] <... fspick resumed>) = 4 [pid 8157] <... fspick resumed>) = 4 [pid 8155] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8161] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8157] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8155] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 118.130543][ T8161] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.148096][ T8165] EXT4-fs: Ignoring removed oldalloc option [ 118.157812][ T8157] EXT4-fs (loop3): 1 truncate cleaned up [ 118.163842][ T8157] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.178936][ T8153] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 118.188390][ T8144] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 8161] <... futex resumed>) = 1 [pid 8157] <... futex resumed>) = 0 [pid 8156] <... futex resumed>) = 0 [pid 8155] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8161] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8156] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8155] <... futex resumed>) = 0 [pid 8144] <... futex resumed>) = ? [pid 8156] <... futex resumed>) = 0 [pid 8155] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8156] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8144] +++ exited with 0 +++ [pid 8138] +++ exited with 0 +++ ./strace-static-x86_64: Process 8174 attached [pid 8174] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8174] memfd_create("syzkaller", 0) = 3 [pid 8174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8157] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8161] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8161] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8157] <... fsconfig resumed>) = 0 [pid 8161] <... fsconfig resumed>) = 0 [pid 8157] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8153] <... fsconfig resumed>) = 0 [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8138, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 8161] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8157] <... futex resumed>) = 1 [pid 8155] <... futex resumed>) = 0 [pid 5005] restart_syscall(<... resuming interrupted clone ...> [pid 8153] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8161] <... futex resumed>) = 1 [pid 8157] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8156] <... futex resumed>) = 0 [pid 8155] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8153] <... futex resumed>) = 0 [pid 8151] exit_group(0 [pid 5005] <... restart_syscall resumed>) = 0 [pid 8168] <... futex resumed>) = ? [pid 8161] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8157] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8156] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8155] <... futex resumed>) = 0 [pid 8151] <... exit_group resumed>) = ? [pid 8168] +++ exited with 0 +++ [pid 8161] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8157] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8156] <... futex resumed>) = 0 [pid 8155] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8153] +++ exited with 0 +++ [pid 8151] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8151, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 8174] <... mmap resumed>) = 0x7f5047cf1000 [pid 8161] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8156] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8174] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8174] <... write resumed>) = 262144 [pid 8174] munmap(0x7f5047cf1000, 262144) = 0 [pid 8174] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8174] ioctl(4, LOOP_SET_FD, 3 [pid 5005] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8157] <... fsconfig resumed>) = 0 [pid 5005] <... openat resumed>) = 3 [pid 8157] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8157] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8155] <... futex resumed>) = 0 [pid 5005] fstat(3, [pid 8155] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8155] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8174] <... ioctl resumed>) = 0 [pid 8174] close(3) = 0 [pid 8174] mkdir("./file0", 0777) = 0 [ 118.213228][ T8153] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 118.233543][ T8157] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 118.238876][ T8174] loop4: detected capacity change from 0 to 512 [ 118.252078][ T8165] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8174] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8157] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8157] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 5005] getdents64(3, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8157] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8157] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5005] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 8161] <... fsconfig resumed>) = 0 [pid 8157] <... futex resumed>) = 1 [pid 8155] <... futex resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 8157] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8155] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8157] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8155] <... futex resumed>) = 0 [pid 5001] fstat(3, [pid 8155] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8161] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8156] <... futex resumed>) = 0 [pid 8156] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8156] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8161] <... futex resumed>) = 1 [pid 8161] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 8161] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8156] <... futex resumed>) = 0 [pid 8156] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8156] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8157] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8161] <... futex resumed>) = 1 [pid 8161] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5005] lstat("./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] getdents64(3, [pid 5005] unlink("./85/binderfs" [pid 5001] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5005] <... unlink resumed>) = 0 [pid 5001] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 118.260407][ T8161] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 118.266439][ T8174] EXT4-fs: Ignoring removed oldalloc option [ 118.284921][ T8165] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 118.286005][ T8161] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [pid 5001] unlink("./87/binderfs") = 0 [pid 5001] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8155] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8155] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8155] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 8156] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8156] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8155] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8156] <... futex resumed>) = 0 [pid 8155] <... mprotect resumed>) = 0 [pid 8156] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8155] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8156] <... mmap resumed>) = 0x7f5047d10000 [pid 8156] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8155] <... clone resumed>, parent_tid=[8178], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8178 [pid 8156] <... mprotect resumed>) = 0 [pid 8155] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8156] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8155] <... futex resumed>) = 0 [pid 8155] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8156] <... clone resumed>, parent_tid=[8179], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8179 [pid 8165] <... mount resumed>) = 0 [ 118.300167][ T8157] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 118.316508][ T8161] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 118.319868][ T8157] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 118.336752][ T8165] EXT4-fs (loop0): 1 truncate cleaned up [ 118.342899][ T8165] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 8156] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8156] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8165] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8165] chdir("./file0") = 0 [pid 8165] ioctl(4, LOOP_CLR_FD) = 0 ./strace-static-x86_64: Process 8178 attached ./strace-static-x86_64: Process 8179 attached [pid 8179] set_robust_list(0x7f5047d309e0, 24 [pid 8178] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8179] <... set_robust_list resumed>) = 0 [pid 8178] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8179] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8178] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8178] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8155] <... futex resumed>) = 0 [pid 8178] <... futex resumed>) = 1 [pid 8178] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8165] close(4) = 0 [pid 8157] <... fsconfig resumed>) = 0 [pid 8179] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8165] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8157] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8155] exit_group(0) = ? [pid 8179] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8178] <... futex resumed>) = ? [pid 8165] <... futex resumed>) = 1 [pid 8161] <... fsconfig resumed>) = 0 [pid 8158] <... futex resumed>) = 0 [pid 8157] <... futex resumed>) = ? [pid 8179] <... futex resumed>) = 1 [pid 8178] +++ exited with 0 +++ [pid 8165] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8161] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8158] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8156] <... futex resumed>) = 0 [pid 8156] exit_group(0) = ? [pid 8165] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8161] <... futex resumed>) = ? [pid 8158] <... futex resumed>) = 0 [pid 8157] +++ exited with 0 +++ [pid 8155] +++ exited with 0 +++ [pid 8179] +++ exited with 0 +++ [pid 8165] fspick(AT_FDCWD, ".", 0 [pid 8161] +++ exited with 0 +++ [pid 8156] +++ exited with 0 +++ [pid 8158] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8165] <... fspick resumed>) = 4 [pid 8165] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8156, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 8165] <... futex resumed>) = 1 [pid 8158] <... futex resumed>) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8155, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5000] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8165] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8158] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8165] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8158] <... futex resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8165] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8158] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 118.357157][ T8174] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 118.368029][ T8157] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 118.379321][ T8161] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 118.392693][ T8174] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 5000] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5005] <... umount2 resumed>) = 0 [pid 5005] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] lstat("./85/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] openat(AT_FDCWD, "./85/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5005] fstat(4, [pid 8165] <... fsconfig resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... openat resumed>) = 3 [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5005] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5005] close(4) = 0 [pid 5005] rmdir("./85/file0") = 0 [pid 5005] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5005] close(3) = 0 [pid 5005] rmdir("./85") = 0 [pid 5005] mkdir("./86", 0777 [pid 8165] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8158] <... futex resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5000] fstat(3, [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./87/file0", [pid 8165] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8158] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] fstat(3, [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8158] <... futex resumed>) = 0 [pid 8158] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] getdents64(3, [pid 5001] openat(AT_FDCWD, "./87/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5002] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5001] <... openat resumed>) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 118.413385][ T8174] EXT4-fs (loop4): 1 truncate cleaned up [pid 5001] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./87/file0" [pid 5005] <... mkdir resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] close(3 [pid 5005] <... openat resumed>) = 3 [pid 5001] <... close resumed>) = 0 [pid 5005] ioctl(3, LOOP_CLR_FD [pid 5001] rmdir("./87" [pid 5005] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... rmdir resumed>) = 0 [pid 5005] close(3 [pid 5001] mkdir("./88", 0777 [pid 5005] <... close resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5005] <... clone resumed>, child_tidptr=0x5555562025d0) = 8182 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 8183 ./strace-static-x86_64: Process 8183 attached [pid 8183] set_robust_list(0x5555562025e0, 24) = 0 [pid 8183] chdir("./88") = 0 ./strace-static-x86_64: Process 8182 attached [pid 8183] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8182] set_robust_list(0x5555562025e0, 24 [pid 5002] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8183] setpgid(0, 0 [pid 5002] lstat("./86/binderfs", [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] lstat("./87/binderfs", [pid 5002] unlink("./86/binderfs" [pid 8183] <... setpgid resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8183] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8182] <... set_robust_list resumed>) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 5000] unlink("./87/binderfs" [pid 8183] <... openat resumed>) = 3 [pid 8182] chdir("./86" [pid 5002] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8183] write(3, "1000", 4 [pid 8182] <... chdir resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 8183] <... write resumed>) = 4 [pid 8182] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8183] close(3 [pid 8182] <... prctl resumed>) = 0 [pid 5000] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8183] <... close resumed>) = 0 [pid 8182] setpgid(0, 0 [pid 8183] symlink("/dev/binderfs", "./binderfs" [pid 8182] <... setpgid resumed>) = 0 [pid 8183] <... symlink resumed>) = 0 [pid 8182] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8183] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8182] <... openat resumed>) = 3 [pid 8183] <... futex resumed>) = 0 [pid 8182] write(3, "1000", 4 [pid 8183] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8182] <... write resumed>) = 4 [pid 8183] <... mmap resumed>) = 0x7f50500f1000 [pid 8182] close(3 [pid 8183] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8182] <... close resumed>) = 0 [pid 8183] <... mprotect resumed>) = 0 [pid 8182] symlink("/dev/binderfs", "./binderfs" [pid 8183] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8182] <... symlink resumed>) = 0 [pid 8182] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8183] <... clone resumed>, parent_tid=[8184], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8184 [pid 8182] <... futex resumed>) = 0 [pid 8183] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8182] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8183] <... futex resumed>) = 0 [pid 8182] <... mmap resumed>) = 0x7f50500f1000 [pid 8183] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8182] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8182] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8185], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8185 [pid 8182] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8182] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8184 attached [pid 8184] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8184] memfd_create("syzkaller", 0) = 3 [pid 5000] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 8185 attached [pid 8184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8185] set_robust_list(0x7f50501119e0, 24 [pid 8184] <... mmap resumed>) = 0x7f5047cf1000 [pid 5002] <... umount2 resumed>) = 0 [pid 5000] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8185] <... set_robust_list resumed>) = 0 [pid 8158] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5002] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8185] memfd_create("syzkaller", 0 [pid 8158] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 118.439889][ T8165] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 8185] <... memfd_create resumed>) = 3 [pid 8158] <... futex resumed>) = 0 [pid 8185] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8158] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8185] <... mmap resumed>) = 0x7f5047cf1000 [pid 8158] <... mmap resumed>) = 0x7f5047d10000 [pid 8185] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8158] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8184] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8158] <... mprotect resumed>) = 0 [pid 8184] <... write resumed>) = 262144 [pid 8158] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8185] <... write resumed>) = 262144 [pid 8158] <... clone resumed>, parent_tid=[8186], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8186 [pid 8158] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8158] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8184] munmap(0x7f5047cf1000, 262144) = 0 [pid 8185] munmap(0x7f5047cf1000, 262144 [pid 5002] lstat("./86/file0", [pid 5000] lstat("./87/file0", [pid 8185] <... munmap resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8184] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5002] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 8186 attached [pid 8185] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 8184] <... openat resumed>) = 4 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8186] set_robust_list(0x7f5047d309e0, 24 [pid 8185] <... openat resumed>) = 4 [pid 8184] ioctl(4, LOOP_SET_FD, 3 [pid 5002] openat(AT_FDCWD, "./86/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8186] <... set_robust_list resumed>) = 0 [pid 8185] ioctl(4, LOOP_SET_FD, 3 [pid 8174] <... mount resumed>) = 0 [pid 8165] <... fsconfig resumed>) = 0 [pid 5002] <... openat resumed>) = 4 [pid 5000] openat(AT_FDCWD, "./87/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8184] <... ioctl resumed>) = 0 [pid 8165] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8184] close(3) = 0 [pid 8184] mkdir("./file0", 0777) = 0 [pid 5002] fstat(4, [pid 5000] <... openat resumed>) = 4 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8165] <... futex resumed>) = 0 [pid 5000] fstat(4, [pid 8165] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5002] getdents64(4, [pid 8186] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8184] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8186] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8185] <... ioctl resumed>) = 0 [pid 8174] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, [pid 8186] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8185] close(3 [pid 8174] <... openat resumed>) = 3 [pid 5002] getdents64(4, [pid 5000] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8186] <... futex resumed>) = 1 [pid 8185] <... close resumed>) = 0 [pid 8174] chdir("./file0" [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5000] getdents64(4, [pid 8186] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8185] mkdir("./file0", 0777 [pid 8174] <... chdir resumed>) = 0 [pid 5002] close(4 [pid 5000] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8185] <... mkdir resumed>) = 0 [pid 8174] ioctl(4, LOOP_CLR_FD [pid 8158] <... futex resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5000] close(4 [pid 8185] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8174] <... ioctl resumed>) = 0 [pid 8158] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8174] close(4 [pid 8158] <... futex resumed>) = 1 [pid 5002] rmdir("./86/file0" [pid 8165] <... futex resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 8174] <... close resumed>) = 0 [ 118.493593][ T8174] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.511328][ T8184] loop2: detected capacity change from 0 to 512 [ 118.513266][ T8185] loop5: detected capacity change from 0 to 512 [ 118.525649][ T8184] EXT4-fs: Ignoring removed oldalloc option [ 118.534715][ T8185] EXT4-fs: Ignoring removed oldalloc option [pid 8165] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8158] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... rmdir resumed>) = 0 [pid 5000] rmdir("./87/file0" [pid 8174] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] getdents64(3, [pid 5000] <... rmdir resumed>) = 0 [pid 8174] <... futex resumed>) = 1 [pid 8170] <... futex resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] getdents64(3, [pid 8174] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8170] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] close(3 [pid 5000] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8170] <... futex resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5000] close(3 [pid 8174] fspick(AT_FDCWD, ".", 0 [pid 8170] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] rmdir("./86" [pid 5000] <... close resumed>) = 0 [pid 8174] <... fspick resumed>) = 4 [pid 5002] <... rmdir resumed>) = 0 [pid 5000] rmdir("./87" [pid 8174] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] mkdir("./87", 0777 [pid 5000] <... rmdir resumed>) = 0 [pid 8174] <... futex resumed>) = 1 [pid 8170] <... futex resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5000] mkdir("./88", 0777 [pid 8174] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8170] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5000] <... mkdir resumed>) = 0 [pid 8174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8170] <... futex resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8174] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [ 118.543798][ T8165] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 118.555338][ T8184] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 118.566594][ T8184] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 118.568119][ T8165] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8170] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8174] <... fsconfig resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5000] <... openat resumed>) = 3 [pid 8174] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8158] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] ioctl(3, LOOP_CLR_FD [pid 8158] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8158] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8186] <... futex resumed>) = 0 [pid 8184] <... mount resumed>) = 0 [pid 8174] <... futex resumed>) = 1 [pid 8170] <... futex resumed>) = 0 [pid 5002] close(3 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8186] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8174] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8170] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... close resumed>) = 0 [pid 5000] close(3 [pid 8186] <... openat resumed>) = 5 [pid 8174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8170] <... futex resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... close resumed>) = 0 [pid 8174] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8170] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8186] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... clone resumed>, child_tidptr=0x5555562025d0) = 8191 [pid 8186] <... futex resumed>) = 1 [pid 8158] <... futex resumed>) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x5555562025d0) = 8192 [pid 8186] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8184] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8184] chdir("./file0") = 0 [pid 8184] ioctl(4, LOOP_CLR_FD) = 0 [pid 8184] close(4) = 0 [ 118.591467][ T8184] EXT4-fs (loop2): 1 truncate cleaned up [ 118.592185][ T8185] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 118.598070][ T8184] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.607782][ T8185] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 8184] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8192 attached ) = 1 [pid 8183] <... futex resumed>) = 0 [pid 8192] set_robust_list(0x5555562025e0, 24 [pid 8184] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8183] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8191 attached [pid 8192] <... set_robust_list resumed>) = 0 [pid 8184] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8183] <... futex resumed>) = 0 [pid 8192] chdir("./88" [pid 8191] set_robust_list(0x5555562025e0, 24 [pid 8184] fspick(AT_FDCWD, ".", 0 [pid 8192] <... chdir resumed>) = 0 [pid 8191] <... set_robust_list resumed>) = 0 [pid 8184] <... fspick resumed>) = 4 [pid 8192] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8191] chdir("./87" [pid 8184] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8183] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8192] <... prctl resumed>) = 0 [pid 8191] <... chdir resumed>) = 0 [pid 8184] <... futex resumed>) = 0 [pid 8192] setpgid(0, 0 [pid 8191] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8184] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8192] <... setpgid resumed>) = 0 [pid 8191] <... prctl resumed>) = 0 [pid 8192] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8191] setpgid(0, 0 [pid 8192] <... openat resumed>) = 3 [pid 8191] <... setpgid resumed>) = 0 [pid 8192] write(3, "1000", 4 [pid 8191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8192] <... write resumed>) = 4 [pid 8191] <... openat resumed>) = 3 [pid 8192] close(3 [pid 8191] write(3, "1000", 4 [pid 8183] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8192] <... close resumed>) = 0 [pid 8191] <... write resumed>) = 4 [pid 8183] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8192] symlink("/dev/binderfs", "./binderfs" [pid 8191] close(3 [pid 8184] <... futex resumed>) = 0 [pid 8183] <... futex resumed>) = 1 [pid 8192] <... symlink resumed>) = 0 [pid 8191] <... close resumed>) = 0 [pid 8184] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8183] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8170] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8192] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8191] symlink("/dev/binderfs", "./binderfs" [pid 8184] <... fsconfig resumed>) = 0 [pid 8174] <... fsconfig resumed>) = 0 [pid 8170] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8192] <... futex resumed>) = 0 [pid 8191] <... symlink resumed>) = 0 [pid 8184] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8174] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8170] <... futex resumed>) = 0 [pid 8192] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8191] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8184] <... futex resumed>) = 1 [pid 8183] <... futex resumed>) = 0 [pid 8174] <... futex resumed>) = 0 [pid 8170] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8192] <... mmap resumed>) = 0x7f50500f1000 [pid 8191] <... futex resumed>) = 0 [pid 8184] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8183] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8174] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8170] <... mmap resumed>) = 0x7f5047d10000 [pid 8192] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8191] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8184] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8183] <... futex resumed>) = 0 [pid 8170] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8192] <... mprotect resumed>) = 0 [pid 8191] <... mmap resumed>) = 0x7f50500f1000 [pid 8184] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8183] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8170] <... mprotect resumed>) = 0 [pid 8165] <... fsconfig resumed>) = 0 [pid 8192] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8191] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8170] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8191] <... mprotect resumed>) = 0 [pid 8192] <... clone resumed>, parent_tid=[8194], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8194 [pid 8191] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8170] <... clone resumed>, parent_tid=[8195], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8195 [pid 8192] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8170] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8192] <... futex resumed>) = 0 [pid 8191] <... clone resumed>, parent_tid=[8196], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8196 [pid 8170] <... futex resumed>) = 0 [pid 8192] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8191] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8170] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8191] <... futex resumed>) = 0 [pid 8165] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8191] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8165] <... futex resumed>) = 0 [pid 8158] exit_group(0 [pid 8186] <... futex resumed>) = ? [pid 8158] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 8195 attached [pid 8186] +++ exited with 0 +++ [pid 8195] set_robust_list(0x7f5047d309e0, 24./strace-static-x86_64: Process 8196 attached ) = 0 [pid 8196] set_robust_list(0x7f50501119e0, 24 [pid 8195] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8196] <... set_robust_list resumed>) = 0 [pid 8195] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 8194 attached [pid 8196] memfd_create("syzkaller", 0 [pid 8195] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8196] <... memfd_create resumed>) = 3 [pid 8195] <... futex resumed>) = 1 [pid 8194] set_robust_list(0x7f50501119e0, 24 [pid 8170] <... futex resumed>) = 0 [pid 8196] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8195] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8194] <... set_robust_list resumed>) = 0 [pid 8170] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8196] <... mmap resumed>) = 0x7f5047cf1000 [pid 8194] memfd_create("syzkaller", 0 [pid 8174] <... futex resumed>) = 0 [ 118.638260][ T8174] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 118.658019][ T8165] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 118.681700][ T8185] EXT4-fs (loop5): 1 truncate cleaned up [pid 8170] <... futex resumed>) = 1 [pid 8196] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8194] <... memfd_create resumed>) = 3 [pid 8174] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8170] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8194] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8165] +++ exited with 0 +++ [pid 8158] +++ exited with 0 +++ [pid 8196] <... write resumed>) = 262144 [pid 8194] <... mmap resumed>) = 0x7f5047cf1000 [pid 8194] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8158, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 4999] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8196] munmap(0x7f5047cf1000, 262144 [pid 4999] getdents64(3, [pid 8194] <... write resumed>) = 262144 [pid 4999] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 8196] <... munmap resumed>) = 0 [pid 8194] munmap(0x7f5047cf1000, 262144 [pid 4999] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8196] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8194] <... munmap resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8196] <... openat resumed>) = 4 [pid 8194] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4999] lstat("./86/binderfs", [pid 8196] ioctl(4, LOOP_SET_FD, 3 [pid 8194] <... openat resumed>) = 4 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8194] ioctl(4, LOOP_SET_FD, 3 [pid 8185] <... mount resumed>) = 0 [pid 4999] unlink("./86/binderfs" [pid 8196] <... ioctl resumed>) = 0 [pid 8185] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8184] <... fsconfig resumed>) = 0 [pid 8183] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8196] close(3 [pid 8185] <... openat resumed>) = 3 [pid 8184] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8183] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8196] <... close resumed>) = 0 [pid 8185] chdir("./file0" [pid 8184] <... futex resumed>) = 0 [pid 8183] <... futex resumed>) = 0 [pid 8196] mkdir("./file0", 0777 [pid 8185] <... chdir resumed>) = 0 [pid 8184] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8183] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8194] <... ioctl resumed>) = 0 [pid 8185] ioctl(4, LOOP_CLR_FD [pid 8184] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4999] <... unlink resumed>) = 0 [pid 8194] close(3 [pid 8185] <... ioctl resumed>) = 0 [pid 8184] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8194] <... close resumed>) = 0 [ 118.690430][ T8184] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 118.698130][ T8174] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 118.710871][ T8185] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.721171][ T8196] loop3: detected capacity change from 0 to 512 [ 118.724837][ T8174] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 118.730433][ T8194] loop1: detected capacity change from 0 to 512 [pid 8185] close(4 [pid 8184] <... futex resumed>) = 1 [pid 8183] <... futex resumed>) = 0 [pid 8196] <... mkdir resumed>) = 0 [pid 8194] mkdir("./file0", 0777 [pid 8185] <... close resumed>) = 0 [pid 8194] <... mkdir resumed>) = 0 [pid 8194] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8185] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8184] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8183] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8170] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8170] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8195] <... futex resumed>) = 0 [pid 8170] <... futex resumed>) = 1 [pid 8195] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8170] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8195] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8195] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8170] <... futex resumed>) = 0 [pid 8195] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8183] <... futex resumed>) = 0 [pid 8196] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8185] <... futex resumed>) = 1 [pid 8183] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8182] <... futex resumed>) = 0 [pid 8185] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8182] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8185] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8182] <... futex resumed>) = 0 [pid 8185] fspick(AT_FDCWD, ".", 0 [pid 8182] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8185] <... fspick resumed>) = 4 [pid 8185] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8182] <... futex resumed>) = 0 [pid 8185] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8182] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8185] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8182] <... futex resumed>) = 0 [pid 8185] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8182] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8185] <... fsconfig resumed>) = 0 [pid 8185] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8182] <... futex resumed>) = 0 [pid 8185] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8182] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8185] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8182] <... futex resumed>) = 0 [pid 8185] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8182] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8174] <... fsconfig resumed>) = 0 [pid 8174] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8174] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8170] exit_group(0 [pid 8195] <... futex resumed>) = ? [pid 8170] <... exit_group resumed>) = ? [pid 8195] +++ exited with 0 +++ [pid 8174] <... futex resumed>) = ? [pid 8174] +++ exited with 0 +++ [pid 8170] +++ exited with 0 +++ [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8170, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5004] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5004] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5004] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./88/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5004] unlink("./88/binderfs") = 0 [ 118.750560][ T8194] EXT4-fs: Ignoring removed oldalloc option [ 118.757368][ T8174] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 118.767967][ T8184] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 118.773261][ T8196] EXT4-fs: Ignoring removed oldalloc option [ 118.789649][ T8185] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 8185] <... fsconfig resumed>) = 0 [pid 5004] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = 0 [pid 8185] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8185] <... futex resumed>) = 1 [pid 8182] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8185] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8182] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] lstat("./86/file0", [pid 8185] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8182] <... futex resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8185] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8182] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8185] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8185] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] openat(AT_FDCWD, "./86/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8185] <... futex resumed>) = 1 [pid 8182] <... futex resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 8185] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8182] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] fstat(4, [pid 8185] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8182] <... futex resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8185] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8182] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] getdents64(4, [pid 8183] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8183] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] getdents64(4, [pid 8183] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8183] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] close(4 [pid 8183] <... mmap resumed>) = 0x7f5047d10000 [pid 4999] <... close resumed>) = 0 [pid 8183] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 4999] rmdir("./86/file0" [pid 8183] <... mprotect resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 8183] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 8183] <... clone resumed>, parent_tid=[8201], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8201 [pid 4999] close(3 [pid 8183] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... close resumed>) = 0 [pid 8183] <... futex resumed>) = 0 [pid 4999] rmdir("./86" [pid 8183] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./87", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 8202 ./strace-static-x86_64: Process 8201 attached [pid 8201] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8201] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5004] <... umount2 resumed>) = 0 [pid 5004] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./88/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 118.812276][ T8184] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 118.817477][ T8194] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 118.831569][ T8185] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [pid 5004] openat(AT_FDCWD, "./88/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5004] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5004] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5004] close(4) = 0 [pid 5004] rmdir("./88/file0") = 0 [pid 5004] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5004] close(3) = 0 [pid 5004] rmdir("./88") = 0 [pid 5004] mkdir("./89", 0777) = 0 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5004] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5004] close(3) = 0 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 8204 ./strace-static-x86_64: Process 8204 attached [pid 8204] set_robust_list(0x5555562025e0, 24) = 0 [pid 8204] chdir("./89") = 0 [pid 8204] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8204] setpgid(0, 0) = 0 [pid 8204] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8201] <... openat resumed>) = 5 [pid 8204] <... openat resumed>) = 3 [pid 8204] write(3, "1000", 4) = 4 [pid 8204] close(3) = 0 [pid 8204] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8204] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8204] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8204] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8201] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8183] <... futex resumed>) = 0 ./strace-static-x86_64: Process 8202 attached [pid 8201] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8204] <... mprotect resumed>) = 0 [pid 8182] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8204] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8202] set_robust_list(0x5555562025e0, 24 [pid 8182] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8202] <... set_robust_list resumed>) = 0 [pid 8182] <... futex resumed>) = 0 [pid 8204] <... clone resumed>, parent_tid=[8206], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8206 [pid 8202] chdir("./87" [pid 8182] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8204] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8202] <... chdir resumed>) = 0 [pid 8182] <... mmap resumed>) = 0x7f5047d10000 [pid 8204] <... futex resumed>) = 0 [pid 8202] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8182] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8204] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8202] <... prctl resumed>) = 0 [pid 8182] <... mprotect resumed>) = 0 [pid 8202] setpgid(0, 0 [pid 8182] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8202] <... setpgid resumed>) = 0 [pid 8202] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8182] <... clone resumed>, parent_tid=[8207], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8207 [pid 8202] <... openat resumed>) = 3 [pid 8182] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8202] write(3, "1000", 4 [pid 8182] <... futex resumed>) = 0 [pid 8202] <... write resumed>) = 4 [pid 8182] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8202] close(3) = 0 [pid 8202] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8202] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8202] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8202] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 8207 attached ) = 0 [pid 8184] <... fsconfig resumed>) = 0 [ 118.854904][ T8185] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 118.866480][ T8194] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 118.891725][ T8196] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 118.901243][ T8184] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 8202] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8209], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8209 [pid 8202] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8202] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8206 attached [pid 8206] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8206] memfd_create("syzkaller", 0) = 3 ./strace-static-x86_64: Process 8209 attached [pid 8206] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8209] set_robust_list(0x7f50501119e0, 24 [pid 8207] set_robust_list(0x7f5047d309e0, 24 [pid 8184] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8207] <... set_robust_list resumed>) = 0 [pid 8209] <... set_robust_list resumed>) = 0 [pid 8209] memfd_create("syzkaller", 0 [pid 8206] <... mmap resumed>) = 0x7f5047cf1000 [pid 8209] <... memfd_create resumed>) = 3 [pid 8209] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 8206] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8209] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 8207] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8184] <... futex resumed>) = 0 [pid 8184] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8183] exit_group(0 [pid 8207] <... openat resumed>) = 5 [pid 8201] <... futex resumed>) = ? [pid 8184] <... futex resumed>) = ? [pid 8183] <... exit_group resumed>) = ? [pid 8207] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8201] +++ exited with 0 +++ [pid 8207] <... futex resumed>) = 1 [pid 8182] <... futex resumed>) = 0 [pid 8207] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8206] <... write resumed>) = 262144 [pid 8184] +++ exited with 0 +++ [pid 8183] +++ exited with 0 +++ [pid 8206] munmap(0x7f5047cf1000, 262144 [pid 8209] munmap(0x7f5047cf1000, 262144) = 0 [pid 8206] <... munmap resumed>) = 0 [pid 8206] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8209] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8206] ioctl(4, LOOP_SET_FD, 3 [ 118.913695][ T8194] EXT4-fs (loop1): 1 truncate cleaned up [ 118.919907][ T8194] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.938133][ T8185] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 118.946199][ T8206] loop4: detected capacity change from 0 to 512 [pid 8209] ioctl(4, LOOP_SET_FD, 3 [pid 8194] <... mount resumed>) = 0 [pid 8185] <... fsconfig resumed>) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8183, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 8194] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8185] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8194] <... openat resumed>) = 3 [pid 8185] <... futex resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8194] chdir("./file0" [pid 8185] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5001] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8194] <... chdir resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 8194] ioctl(4, LOOP_CLR_FD [pid 5001] fstat(3, [pid 8194] <... ioctl resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8194] close(4 [pid 5001] getdents64(3, [pid 8209] <... ioctl resumed>) = 0 [pid 8206] <... ioctl resumed>) = 0 [pid 8194] <... close resumed>) = 0 [pid 8182] exit_group(0 [pid 8209] close(3 [pid 8207] <... futex resumed>) = ? [pid 8206] close(3 [pid 8194] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8185] <... futex resumed>) = ? [pid 8182] <... exit_group resumed>) = ? [pid 5001] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 8207] +++ exited with 0 +++ [pid 8194] <... futex resumed>) = 1 [pid 8209] <... close resumed>) = 0 [pid 8192] <... futex resumed>) = 0 [pid 8185] +++ exited with 0 +++ [pid 8206] <... close resumed>) = 0 [pid 5001] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8194] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8192] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8192] <... futex resumed>) = 0 [pid 5001] lstat("./88/binderfs", [pid 8194] fspick(AT_FDCWD, ".", 0 [pid 8192] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8194] <... fspick resumed>) = 4 [pid 8182] +++ exited with 0 +++ [pid 5001] unlink("./88/binderfs" [pid 8209] mkdir("./file0", 0777 [pid 8206] mkdir("./file0", 0777 [pid 8196] <... mount resumed>) = 0 [pid 8194] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8182, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5001] <... unlink resumed>) = 0 [pid 8194] <... futex resumed>) = 1 [pid 8192] <... futex resumed>) = 0 [pid 5005] restart_syscall(<... resuming interrupted clone ...> [pid 5001] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8194] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8192] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... restart_syscall resumed>) = 0 [pid 8194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8192] <... futex resumed>) = 0 [pid 8209] <... mkdir resumed>) = 0 [pid 8194] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8192] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8206] <... mkdir resumed>) = 0 [pid 8194] <... fsconfig resumed>) = 0 [pid 5005] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8194] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8194] <... futex resumed>) = 1 [pid 8192] <... futex resumed>) = 0 [pid 5005] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8194] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8192] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... openat resumed>) = 3 [pid 8194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8192] <... futex resumed>) = 0 [pid 5005] fstat(3, [pid 8194] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8192] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8209] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8206] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8196] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5005] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5005] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] lstat("./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5005] unlink("./86/binderfs") = 0 [ 118.955094][ T8196] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 118.970172][ T8209] loop0: detected capacity change from 0 to 512 [ 118.980085][ T8196] EXT4-fs (loop3): 1 truncate cleaned up [ 118.985852][ T8196] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 5005] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8194] <... fsconfig resumed>) = 0 [pid 8194] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8192] <... futex resumed>) = 0 [pid 8192] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8192] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8194] <... futex resumed>) = 1 [pid 8194] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 8196] <... openat resumed>) = 3 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./88/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./88/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8196] chdir("./file0" [pid 5001] getdents64(4, [pid 8196] <... chdir resumed>) = 0 [pid 8196] ioctl(4, LOOP_CLR_FD) = 0 [pid 8196] close(4 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8196] <... close resumed>) = 0 [pid 5001] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./88/file0") = 0 [pid 5001] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./88") = 0 [pid 5001] mkdir("./89", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 8196] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... close resumed>) = 0 [pid 8196] <... futex resumed>) = 1 [pid 8194] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8191] <... futex resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8196] fspick(AT_FDCWD, ".", 0 [pid 8194] <... futex resumed>) = 1 [pid 8192] <... futex resumed>) = 0 [pid 8191] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8196] <... fspick resumed>) = 4 [ 119.014775][ T8194] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 119.015438][ T8206] EXT4-fs: Ignoring removed oldalloc option [ 119.032659][ T8209] EXT4-fs: Ignoring removed oldalloc option [ 119.048444][ T8209] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8194] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8192] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8191] <... futex resumed>) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x5555562025d0) = 8213 [pid 8196] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8192] <... futex resumed>) = 0 [pid 8191] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... umount2 resumed>) = 0 [pid 8192] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8191] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8191] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8191] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8196] <... futex resumed>) = 1 [pid 8191] <... futex resumed>) = 0 [pid 8191] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=37000000} [pid 8196] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 8196] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8196] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8191] <... futex resumed>) = 0 [pid 8196] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8191] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8196] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8191] <... futex resumed>) = 0 [pid 8191] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8213 attached [pid 8213] set_robust_list(0x5555562025e0, 24) = 0 [pid 8213] chdir("./89") = 0 [pid 8213] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8213] setpgid(0, 0) = 0 [pid 8213] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8213] write(3, "1000", 4) = 4 [pid 8213] close(3) = 0 [ 119.073508][ T8194] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 119.074393][ T8209] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 119.101997][ T8194] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 119.106244][ T8196] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 8213] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8213] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8213] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8213] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8213] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8215], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8215 [pid 8213] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8213] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8215 attached [pid 8215] set_robust_list(0x7f50501119e0, 24) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] lstat("./86/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] openat(AT_FDCWD, "./86/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5005] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5005] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5005] close(4 [pid 8192] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5005] <... close resumed>) = 0 [pid 8192] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8192] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 8192] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8192] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8216], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8216 [pid 8192] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8192] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8215] memfd_create("syzkaller", 0) = 3 [pid 5005] rmdir("./86/file0" [pid 8215] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 5005] <... rmdir resumed>) = 0 [pid 8215] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8191] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5005] getdents64(3, [pid 8191] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8191] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 8191] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8191] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8218], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8218 [pid 8191] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8191] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5005] close(3) = 0 [pid 8215] <... write resumed>) = 262144 [pid 8215] munmap(0x7f5047cf1000, 262144) = 0 [pid 8215] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 119.122396][ T8206] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 119.134938][ T8206] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 119.152426][ T8209] EXT4-fs (loop0): 1 truncate cleaned up [ 119.159096][ T8209] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 8215] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 8218 attached [pid 5005] rmdir("./86" [pid 8215] <... ioctl resumed>) = 0 [pid 8215] close(3) = 0 [pid 8215] mkdir("./file0", 0777) = 0 [pid 8215] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"..../strace-static-x86_64: Process 8216 attached [pid 8218] set_robust_list(0x7f5047d309e0, 24 [pid 8209] <... mount resumed>) = 0 [pid 8194] <... fsconfig resumed>) = 0 [pid 5005] <... rmdir resumed>) = 0 [pid 8218] <... set_robust_list resumed>) = 0 [pid 8216] set_robust_list(0x7f5047d309e0, 24 [pid 8209] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8194] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] mkdir("./87", 0777 [pid 8218] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8216] <... set_robust_list resumed>) = 0 [pid 8209] <... openat resumed>) = 3 [pid 8194] <... futex resumed>) = 0 [pid 8192] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5005] <... mkdir resumed>) = 0 [pid 8218] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8216] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8196] <... fsconfig resumed>) = 0 [pid 8218] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8194] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8218] <... futex resumed>) = 1 [pid 8191] <... futex resumed>) = 0 [pid 8216] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8191] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8218] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8196] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8216] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8209] chdir("./file0" [pid 8191] <... futex resumed>) = 0 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 8192] exit_group(0) = ? [pid 8194] <... futex resumed>) = ? [pid 8194] +++ exited with 0 +++ [pid 8191] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8196] <... futex resumed>) = 0 [ 119.163623][ T8215] loop2: detected capacity change from 0 to 512 [ 119.173028][ T8194] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 119.182334][ T8215] EXT4-fs: Ignoring removed oldalloc option [ 119.197712][ T8218] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 119.198821][ T8206] EXT4-fs (loop4): 1 truncate cleaned up [pid 8216] <... futex resumed>) = ? [pid 8209] <... chdir resumed>) = 0 [pid 8206] <... mount resumed>) = 0 [pid 8196] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5005] <... openat resumed>) = 3 [pid 8216] +++ exited with 0 +++ [pid 8209] ioctl(4, LOOP_CLR_FD [pid 8192] +++ exited with 0 +++ [pid 5005] ioctl(3, LOOP_CLR_FD [pid 8209] <... ioctl resumed>) = 0 [pid 5005] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8209] close(4 [pid 5005] close(3 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8192, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 8209] <... close resumed>) = 0 [pid 5005] <... close resumed>) = 0 [pid 5000] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8209] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8209] <... futex resumed>) = 1 [pid 8202] <... futex resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8209] fspick(AT_FDCWD, ".", 0 [pid 8202] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... clone resumed>, child_tidptr=0x5555562025d0) = 8220 [pid 5000] <... openat resumed>) = 3 [pid 8209] <... fspick resumed>) = 4 [pid 8202] <... futex resumed>) = 0 [pid 5000] fstat(3, [pid 8209] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8202] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8209] <... futex resumed>) = 0 [pid 8202] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5000] getdents64(3, [pid 8209] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8202] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 8209] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8202] <... futex resumed>) = 0 [pid 5000] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8209] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8202] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8209] <... fsconfig resumed>) = 0 [pid 5000] lstat("./88/binderfs", [pid 8209] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8209] <... futex resumed>) = 1 [pid 8202] <... futex resumed>) = 0 [ 119.214717][ T8206] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.227719][ T8218] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 119.252608][ T8209] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 5000] unlink("./88/binderfs"./strace-static-x86_64: Process 8220 attached [pid 8209] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8206] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8202] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... unlink resumed>) = 0 [pid 8220] set_robust_list(0x5555562025e0, 24 [pid 8209] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8206] <... openat resumed>) = 3 [pid 8202] <... futex resumed>) = 0 [pid 5000] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8220] <... set_robust_list resumed>) = 0 [pid 8209] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8206] chdir("./file0" [pid 8202] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8220] chdir("./87" [pid 8206] <... chdir resumed>) = 0 [pid 8220] <... chdir resumed>) = 0 [pid 8206] ioctl(4, LOOP_CLR_FD [pid 8220] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8206] <... ioctl resumed>) = 0 [pid 8220] <... prctl resumed>) = 0 [pid 8206] close(4 [pid 8220] setpgid(0, 0 [pid 8206] <... close resumed>) = 0 [pid 8220] <... setpgid resumed>) = 0 [pid 8206] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8206] <... futex resumed>) = 1 [pid 8204] <... futex resumed>) = 0 [pid 8220] <... openat resumed>) = 3 [pid 8206] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8204] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8220] write(3, "1000", 4 [pid 8206] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8204] <... futex resumed>) = 0 [pid 8220] <... write resumed>) = 4 [pid 8206] fspick(AT_FDCWD, ".", 0 [pid 8204] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8220] close(3 [pid 8206] <... fspick resumed>) = 4 [pid 8220] <... close resumed>) = 0 [pid 8206] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8220] symlink("/dev/binderfs", "./binderfs" [pid 8206] <... futex resumed>) = 1 [pid 8204] <... futex resumed>) = 0 [pid 8220] <... symlink resumed>) = 0 [pid 8206] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8204] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8220] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8206] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8204] <... futex resumed>) = 0 [pid 8220] <... futex resumed>) = 0 [pid 8206] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8204] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8220] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8206] <... fsconfig resumed>) = 0 [pid 8220] <... mmap resumed>) = 0x7f50500f1000 [pid 8206] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8220] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8206] <... futex resumed>) = 1 [pid 8204] <... futex resumed>) = 0 [pid 8220] <... mprotect resumed>) = 0 [pid 8206] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8204] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8220] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8206] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8204] <... futex resumed>) = 0 [pid 8206] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8204] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8220] <... clone resumed>, parent_tid=[8222], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8222 [pid 8220] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8191] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8220] <... futex resumed>) = 0 [pid 8191] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8220] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8196] <... futex resumed>) = 0 [pid 8191] <... futex resumed>) = 1 [pid 8196] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8191] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8196] <... openat resumed>) = 5 [pid 8196] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8191] <... futex resumed>) = 0 [pid 8196] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 8222 attached [pid 8222] set_robust_list(0x7f50501119e0, 24 [pid 8209] <... fsconfig resumed>) = 0 [pid 8209] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8202] <... futex resumed>) = 0 [pid 8202] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8202] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8209] <... futex resumed>) = 1 [pid 8209] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 8209] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8202] <... futex resumed>) = 0 [pid 8202] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8202] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8209] <... futex resumed>) = 1 [pid 8209] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8204] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 119.268022][ T8206] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 119.286436][ T8215] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 119.290464][ T8209] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 119.297789][ T8215] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 8206] <... fsconfig resumed>) = 0 [pid 8204] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8204] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8206] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8204] <... mmap resumed>) = 0x7f5047d10000 [pid 8204] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8206] <... futex resumed>) = 0 [pid 8204] <... mprotect resumed>) = 0 [pid 8204] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8224], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8224 [pid 8204] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8204] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8222] <... set_robust_list resumed>) = 0 [pid 8222] memfd_create("syzkaller", 0 [pid 8202] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8222] <... memfd_create resumed>) = 3 [pid 8202] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 8222] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8202] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8206] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8202] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8222] <... mmap resumed>) = 0x7f5047cf1000 [pid 8202] <... futex resumed>) = 0 [pid 8202] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 8202] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 8224 attached ) = 0 [pid 8224] set_robust_list(0x7f5047d309e0, 24 [pid 8202] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8224] <... set_robust_list resumed>) = 0 [pid 8224] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8202] <... clone resumed>, parent_tid=[8225], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8225 [pid 8224] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8222] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8202] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8224] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8202] <... futex resumed>) = 0 [pid 8224] <... futex resumed>) = 1 [pid 8204] <... futex resumed>) = 0 [pid 8202] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8224] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8204] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8206] <... futex resumed>) = 0 [pid 8204] <... futex resumed>) = 1 [pid 8206] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8204] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8222] <... write resumed>) = 262144 [pid 8222] munmap(0x7f5047cf1000, 262144) = 0 [pid 8222] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 119.320417][ T8218] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 119.334635][ T8215] EXT4-fs (loop2): 1 truncate cleaned up [ 119.352972][ T8206] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 119.356610][ T8222] loop5: detected capacity change from 0 to 512 [pid 8222] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... umount2 resumed>) = 0 [pid 8218] <... fsconfig resumed>) = 0 [pid 8218] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8218] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8222] <... ioctl resumed>) = 0 [pid 8222] close(3) = 0 [pid 8191] exit_group(0 [pid 8218] <... futex resumed>) = ? [pid 8191] <... exit_group resumed>) = ? [pid 8218] +++ exited with 0 +++ [pid 8222] mkdir("./file0", 0777) = 0 [pid 8222] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"..../strace-static-x86_64: Process 8225 attached [pid 8196] <... futex resumed>) = ? [pid 5000] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8225] set_robust_list(0x7f5047d309e0, 24 [pid 8196] +++ exited with 0 +++ [pid 8191] +++ exited with 0 +++ [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8191, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5002] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./87/binderfs") = 0 [pid 8202] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5002] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8204] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8204] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8224] <... futex resumed>) = 0 [pid 8204] <... futex resumed>) = 1 [pid 8224] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8204] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8224] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 8224] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8204] <... futex resumed>) = 0 [pid 8224] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8225] <... set_robust_list resumed>) = 0 [pid 8215] <... mount resumed>) = 0 [pid 5000] lstat("./88/file0", [pid 8225] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./88/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8225] <... openat resumed>) = 5 [pid 5000] <... openat resumed>) = 4 [pid 8225] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] fstat(4, [pid 8215] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8225] <... futex resumed>) = 0 [pid 8225] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, [pid 8215] <... openat resumed>) = 3 [pid 8215] chdir("./file0" [pid 5000] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8215] <... chdir resumed>) = 0 [pid 5000] getdents64(4, [pid 8215] ioctl(4, LOOP_CLR_FD [pid 8209] <... fsconfig resumed>) = 0 [pid 8209] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8202] exit_group(0 [pid 8225] <... futex resumed>) = ? [pid 8202] <... exit_group resumed>) = ? [pid 8225] +++ exited with 0 +++ [pid 8209] <... futex resumed>) = ? [pid 5000] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8215] <... ioctl resumed>) = 0 [pid 8215] close(4 [pid 5000] close(4 [pid 8215] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 8215] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] rmdir("./88/file0" [pid 8215] <... futex resumed>) = 1 [pid 5000] <... rmdir resumed>) = 0 [pid 8215] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8213] <... futex resumed>) = 0 [pid 5000] getdents64(3, [pid 8213] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8215] <... futex resumed>) = 0 [pid 8215] fspick(AT_FDCWD, ".", 0 [pid 8213] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8215] <... fspick resumed>) = 4 [pid 5000] close(3 [pid 8215] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... close resumed>) = 0 [pid 8215] <... futex resumed>) = 1 [pid 8213] <... futex resumed>) = 0 [pid 5000] rmdir("./88" [pid 8215] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8213] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8215] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8213] <... futex resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 8215] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8213] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] mkdir("./89", 0777 [pid 8215] <... fsconfig resumed>) = 0 [pid 8215] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... mkdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 8215] <... futex resumed>) = 1 [pid 8213] <... futex resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8215] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8213] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8215] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8213] <... futex resumed>) = 0 [ 119.365955][ T8215] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.374308][ T8222] EXT4-fs: Ignoring removed oldalloc option [ 119.388009][ T8209] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 119.390574][ T8206] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 119.414361][ T8209] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 5002] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... openat resumed>) = 3 [pid 8215] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8213] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8209] +++ exited with 0 +++ [pid 8202] +++ exited with 0 +++ [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8202, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4999] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] <... openat resumed>) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./87/binderfs") = 0 [pid 4999] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] lstat("./87/file0", [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8206] <... fsconfig resumed>) = 0 [pid 8206] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8204] exit_group(0 [pid 8224] <... futex resumed>) = ? [pid 8204] <... exit_group resumed>) = ? [pid 8224] +++ exited with 0 +++ [pid 8206] +++ exited with 0 +++ [pid 8204] +++ exited with 0 +++ [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8204, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5004] restart_syscall(<... resuming interrupted clone ...> [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] close(3 [pid 5004] <... restart_syscall resumed>) = 0 [pid 5004] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5004] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5004] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5004] unlink("./89/binderfs") = 0 [ 119.450995][ T8206] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 119.465380][ T8222] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 119.477480][ T8222] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 5004] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... close resumed>) = 0 [pid 5002] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./87/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] <... clone resumed>, child_tidptr=0x5555562025d0) = 8230 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, ./strace-static-x86_64: Process 8230 attached [pid 8230] set_robust_list(0x5555562025e0, 24 [pid 8213] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8213] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] getdents64(4, [pid 8213] <... futex resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8213] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5002] close(4 [pid 8213] <... mmap resumed>) = 0x7f5047d10000 [pid 8213] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5002] <... close resumed>) = 0 [pid 8213] <... mprotect resumed>) = 0 [pid 5002] rmdir("./87/file0" [pid 8213] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5002] <... rmdir resumed>) = 0 [pid 8213] <... clone resumed>, parent_tid=[8231], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8231 [pid 5002] getdents64(3, [pid 8213] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8213] <... futex resumed>) = 0 [pid 5002] close(3 [pid 8213] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 8215] <... fsconfig resumed>) = 0 [pid 5002] rmdir("./87" [pid 4999] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... rmdir resumed>) = 0 [pid 5002] mkdir("./88", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 8232 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./87/file0", [pid 8215] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8215] <... futex resumed>) = 0 [pid 8215] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8230] <... set_robust_list resumed>) = 0 [pid 8230] chdir("./89") = 0 [pid 8230] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8230] setpgid(0, 0) = 0 [pid 8230] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 8232 attached ./strace-static-x86_64: Process 8231 attached ) = 3 [pid 8222] <... mount resumed>) = 0 [pid 5004] <... umount2 resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8232] set_robust_list(0x5555562025e0, 24 [pid 8231] set_robust_list(0x7f5047d309e0, 24 [pid 8230] write(3, "1000", 4 [pid 8222] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5004] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "./87/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8232] <... set_robust_list resumed>) = 0 [pid 8231] <... set_robust_list resumed>) = 0 [pid 8230] <... write resumed>) = 4 [pid 8222] <... openat resumed>) = 3 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8232] chdir("./88" [pid 8231] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8230] close(3 [pid 8222] chdir("./file0" [pid 5004] lstat("./89/file0", [pid 4999] <... openat resumed>) = 4 [pid 8232] <... chdir resumed>) = 0 [pid 8231] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8230] <... close resumed>) = 0 [pid 8222] <... chdir resumed>) = 0 [pid 5004] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] fstat(4, [pid 8232] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8231] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8230] symlink("/dev/binderfs", "./binderfs" [pid 8222] ioctl(4, LOOP_CLR_FD [pid 5004] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8232] <... prctl resumed>) = 0 [pid 8231] <... futex resumed>) = 1 [pid 8213] <... futex resumed>) = 0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8230] <... symlink resumed>) = 0 [pid 8232] setpgid(0, 0 [pid 8231] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8222] <... ioctl resumed>) = 0 [pid 8230] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8213] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] openat(AT_FDCWD, "./89/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] getdents64(4, [pid 8232] <... setpgid resumed>) = 0 [pid 8230] <... futex resumed>) = 0 [pid 8222] close(4 [pid 8215] <... futex resumed>) = 0 [pid 8213] <... futex resumed>) = 1 [pid 5004] <... openat resumed>) = 4 [ 119.493332][ T8215] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 119.515124][ T8222] EXT4-fs (loop5): 1 truncate cleaned up [ 119.525564][ T8222] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 8232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8230] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8222] <... close resumed>) = 0 [pid 8215] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8213] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] fstat(4, [pid 4999] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8232] <... openat resumed>) = 3 [pid 8230] <... mmap resumed>) = 0x7f50500f1000 [pid 8222] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5004] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5004] close(4) = 0 [pid 5004] rmdir("./89/file0" [pid 8232] write(3, "1000", 4 [pid 8230] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8222] <... futex resumed>) = 1 [pid 5004] <... rmdir resumed>) = 0 [pid 4999] getdents64(4, [pid 8232] <... write resumed>) = 4 [pid 8230] <... mprotect resumed>) = 0 [pid 8220] <... futex resumed>) = 0 [pid 5004] getdents64(3, [pid 8232] close(3 [pid 8230] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8222] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8220] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 4999] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8232] <... close resumed>) = 0 [pid 8222] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8220] <... futex resumed>) = 0 [pid 5004] close(3 [pid 4999] close(4 [pid 8232] symlink("/dev/binderfs", "./binderfs" [pid 8230] <... clone resumed>, parent_tid=[8233], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8233 [pid 8222] fspick(AT_FDCWD, ".", 0 [pid 8220] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... close resumed>) = 0 [pid 8232] <... symlink resumed>) = 0 [pid 8230] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8222] <... fspick resumed>) = 4 [pid 5004] rmdir("./89" [pid 4999] <... close resumed>) = 0 [pid 8232] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8230] <... futex resumed>) = 0 [pid 8222] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 8233 attached [pid 8232] <... futex resumed>) = 0 [pid 8230] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8222] <... futex resumed>) = 1 [pid 8220] <... futex resumed>) = 0 [pid 5004] mkdir("./90", 0777 [pid 4999] rmdir("./87/file0" [pid 8233] set_robust_list(0x7f50501119e0, 24 [pid 8232] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8222] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8220] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... mkdir resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 8233] <... set_robust_list resumed>) = 0 [pid 8232] <... mmap resumed>) = 0x7f50500f1000 [pid 8222] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8220] <... futex resumed>) = 0 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4999] getdents64(3, [pid 8233] memfd_create("syzkaller", 0 [pid 8232] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8222] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8220] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... openat resumed>) = 3 [pid 4999] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8233] <... memfd_create resumed>) = 3 [pid 8232] <... mprotect resumed>) = 0 [pid 8222] <... fsconfig resumed>) = 0 [pid 5004] ioctl(3, LOOP_CLR_FD [pid 4999] close(3 [ 119.550324][ T8215] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 119.584017][ T8215] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8232] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8222] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... close resumed>) = 0 ./strace-static-x86_64: Process 8235 attached [pid 8233] <... mmap resumed>) = 0x7f5047cf1000 [pid 8222] <... futex resumed>) = 1 [pid 8220] <... futex resumed>) = 0 [pid 8215] <... fsconfig resumed>) = 0 [pid 8213] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5004] close(3 [pid 4999] rmdir("./87" [pid 8235] set_robust_list(0x7f50501119e0, 24 [pid 8232] <... clone resumed>, parent_tid=[8235], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8235 [pid 8213] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... close resumed>) = 0 [pid 8235] <... set_robust_list resumed>) = 0 [pid 8233] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8232] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8231] <... futex resumed>) = 0 [pid 8222] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8220] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8213] <... futex resumed>) = 1 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8235] memfd_create("syzkaller", 0 [pid 8232] <... futex resumed>) = 0 [pid 8231] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8213] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8235] <... memfd_create resumed>) = 3 [pid 8232] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8231] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8222] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8220] <... futex resumed>) = 0 [pid 8215] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... clone resumed>, child_tidptr=0x5555562025d0) = 8236 [pid 4999] <... rmdir resumed>) = 0 [pid 8235] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8233] <... write resumed>) = 262144 [pid 8231] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8222] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8220] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8215] <... futex resumed>) = 0 [pid 4999] mkdir("./88", 0777./strace-static-x86_64: Process 8236 attached [pid 8235] <... mmap resumed>) = 0x7f5047cf1000 [pid 8233] munmap(0x7f5047cf1000, 262144 [pid 8231] <... futex resumed>) = 1 [pid 8215] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8213] <... futex resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 8236] set_robust_list(0x5555562025e0, 24 [pid 8233] <... munmap resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8236] <... set_robust_list resumed>) = 0 [pid 8233] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4999] <... openat resumed>) = 3 [pid 8236] chdir("./90" [pid 8233] <... openat resumed>) = 4 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 8236] <... chdir resumed>) = 0 [pid 8233] ioctl(4, LOOP_SET_FD, 3 [pid 8231] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8213] exit_group(0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8236] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8235] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8231] <... futex resumed>) = ? [pid 8222] <... fsconfig resumed>) = 0 [pid 8215] <... futex resumed>) = ? [pid 8213] <... exit_group resumed>) = ? [pid 4999] close(3 [pid 8236] <... prctl resumed>) = 0 [pid 8235] <... write resumed>) = 262144 [pid 8233] <... ioctl resumed>) = 0 [pid 8231] +++ exited with 0 +++ [pid 8222] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8215] +++ exited with 0 +++ [pid 8213] +++ exited with 0 +++ [pid 4999] <... close resumed>) = 0 [pid 8235] munmap(0x7f5047cf1000, 262144 [pid 8222] <... futex resumed>) = 1 [pid 8220] <... futex resumed>) = 0 [pid 8236] setpgid(0, 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8213, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8236] <... setpgid resumed>) = 0 [pid 8235] <... munmap resumed>) = 0 [pid 8222] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8220] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8235] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8222] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8235] <... openat resumed>) = 4 [pid 8222] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 119.608262][ T8215] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 119.634622][ T8222] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 119.646597][ T8233] loop1: detected capacity change from 0 to 512 [pid 8235] ioctl(4, LOOP_SET_FD, 3 [pid 8236] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8233] close(3 [pid 8222] <... futex resumed>) = 0 [pid 8220] <... futex resumed>) = 0 [pid 8222] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8220] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8236] <... openat resumed>) = 3 [pid 8220] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] <... clone resumed>, child_tidptr=0x5555562025d0) = 8237 [pid 8236] write(3, "1000", 4 [pid 8220] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8236] <... write resumed>) = 4 [pid 8233] <... close resumed>) = 0 [pid 8222] <... futex resumed>) = 0 [pid 8220] <... futex resumed>) = 1 [pid 5001] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8237 attached [pid 8236] close(3 [pid 8235] <... ioctl resumed>) = 0 [pid 8222] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8220] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8236] <... close resumed>) = 0 [pid 8233] mkdir("./file0", 0777 [pid 5001] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8236] symlink("/dev/binderfs", "./binderfs" [pid 8233] <... mkdir resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 8236] <... symlink resumed>) = 0 [pid 8233] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5001] fstat(3, [pid 8237] set_robust_list(0x5555562025e0, 24 [pid 8236] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8235] close(3 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8236] <... futex resumed>) = 0 [pid 5001] getdents64(3, [pid 8236] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5001] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 8236] <... mmap resumed>) = 0x7f50500f1000 [pid 5001] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8236] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8236] <... mprotect resumed>) = 0 [pid 5001] lstat("./89/binderfs", [pid 8236] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 8238 attached [pid 8237] <... set_robust_list resumed>) = 0 [pid 8235] <... close resumed>) = 0 [pid 5001] unlink("./89/binderfs" [pid 8238] set_robust_list(0x7f50501119e0, 24 [pid 8237] chdir("./88" [pid 8236] <... clone resumed>, parent_tid=[8238], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8238 [pid 8235] mkdir("./file0", 0777 [pid 5001] <... unlink resumed>) = 0 [pid 8236] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8236] <... futex resumed>) = 0 [pid 8236] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8238] <... set_robust_list resumed>) = 0 [pid 8238] memfd_create("syzkaller", 0) = 3 [pid 8238] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 8238] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 8237] <... chdir resumed>) = 0 [pid 8238] munmap(0x7f5047cf1000, 262144) = 0 [pid 8237] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8235] <... mkdir resumed>) = 0 [pid 8238] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8237] <... prctl resumed>) = 0 [pid 8235] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8238] <... openat resumed>) = 4 [ 119.660985][ T8235] loop3: detected capacity change from 0 to 512 [ 119.670687][ T8222] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 119.680970][ T8233] EXT4-fs: Ignoring removed oldalloc option [ 119.681747][ T8222] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 119.699231][ T8222] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 8237] setpgid(0, 0 [pid 8238] ioctl(4, LOOP_SET_FD, 3 [pid 8237] <... setpgid resumed>) = 0 [pid 8222] <... fsconfig resumed>) = 0 [pid 8220] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8220] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8220] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 8220] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8220] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8242], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8242 [pid 8220] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8220] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8238] <... ioctl resumed>) = 0 [pid 8238] close(3 [pid 8237] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8237] write(3, "1000", 4) = 4 [pid 8238] <... close resumed>) = 0 [pid 8238] mkdir("./file0", 0777) = 0 [pid 8238] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"..../strace-static-x86_64: Process 8242 attached [pid 8237] close(3 [pid 8222] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8242] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8242] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8237] <... close resumed>) = 0 [pid 8237] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8237] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8237] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8237] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8237] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8243], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8243 [pid 8237] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8237] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8222] <... futex resumed>) = 0 [ 119.712821][ T8235] EXT4-fs: Ignoring removed oldalloc option [ 119.713777][ T8238] loop4: detected capacity change from 0 to 512 [ 119.735673][ T8233] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 119.740433][ T8238] EXT4-fs: Ignoring removed oldalloc option [pid 8222] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 8243 attached [pid 8242] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 5001] <... umount2 resumed>) = 0 [pid 8242] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8242] <... futex resumed>) = 1 [pid 8220] <... futex resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8242] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8220] exit_group(0 [pid 5001] lstat("./89/file0", [pid 8242] <... futex resumed>) = ? [pid 8222] <... futex resumed>) = ? [pid 8220] <... exit_group resumed>) = ? [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8242] +++ exited with 0 +++ [pid 8222] +++ exited with 0 +++ [pid 8220] +++ exited with 0 +++ [pid 5001] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8220, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./89/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5005] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] fstat(4, [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] getdents64(4, [pid 8243] set_robust_list(0x7f50501119e0, 24 [pid 5005] <... openat resumed>) = 3 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8243] <... set_robust_list resumed>) = 0 [pid 5005] fstat(3, [pid 5001] getdents64(4, [pid 8243] memfd_create("syzkaller", 0 [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8243] <... memfd_create resumed>) = 3 [pid 5005] getdents64(3, [pid 5001] close(4 [pid 8243] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5005] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5001] <... close resumed>) = 0 [pid 8243] <... mmap resumed>) = 0x7f5047cf1000 [pid 5005] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] rmdir("./89/file0" [pid 8243] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... rmdir resumed>) = 0 [pid 5005] lstat("./87/binderfs", [pid 5001] getdents64(3, [pid 5005] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5005] unlink("./87/binderfs" [pid 5001] close(3 [pid 8243] <... write resumed>) = 262144 [pid 5005] <... unlink resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5005] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] rmdir("./89" [pid 8233] <... mount resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 8233] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] mkdir("./90", 0777 [pid 8243] munmap(0x7f5047cf1000, 262144 [pid 8233] <... openat resumed>) = 3 [pid 5001] <... mkdir resumed>) = 0 [pid 8233] chdir("./file0" [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8233] <... chdir resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 8233] ioctl(4, LOOP_CLR_FD [pid 5001] ioctl(3, LOOP_CLR_FD [pid 8233] <... ioctl resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8233] close(4 [pid 5001] close(3 [pid 8233] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 8233] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 119.747534][ T8233] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 119.773652][ T8233] EXT4-fs (loop1): 1 truncate cleaned up [ 119.786652][ T8233] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 8233] <... futex resumed>) = 1 [pid 8230] <... futex resumed>) = 0 [pid 8233] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8230] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... clone resumed>, child_tidptr=0x5555562025d0) = 8247 [pid 8233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8230] <... futex resumed>) = 0 [pid 8233] fspick(AT_FDCWD, ".", 0 [pid 8230] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8233] <... fspick resumed>) = 4 [pid 8233] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8230] <... futex resumed>) = 0 [pid 8233] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8230] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8230] <... futex resumed>) = 0 [pid 8233] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8230] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8233] <... fsconfig resumed>) = 0 [pid 8233] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8230] <... futex resumed>) = 0 [pid 8233] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8230] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8230] <... futex resumed>) = 0 [pid 8233] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8230] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8247 attached [pid 8243] <... munmap resumed>) = 0 [pid 8247] set_robust_list(0x5555562025e0, 24 [pid 8243] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8247] <... set_robust_list resumed>) = 0 [pid 8243] <... openat resumed>) = 4 [pid 8247] chdir("./90" [pid 8243] ioctl(4, LOOP_SET_FD, 3 [pid 8247] <... chdir resumed>) = 0 [pid 8247] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8247] setpgid(0, 0) = 0 [pid 8247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8247] write(3, "1000", 4) = 4 [pid 8247] close(3) = 0 [pid 8247] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8247] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8247] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8247] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8247] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8249], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8249 [pid 8247] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8247] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5005] <... umount2 resumed>) = 0 [ 119.808903][ T8235] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 119.829944][ T8233] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 119.841179][ T8238] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] ./strace-static-x86_64: Process 8249 attached [pid 5005] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8249] set_robust_list(0x7f50501119e0, 24 [pid 8243] <... ioctl resumed>) = 0 [pid 8249] <... set_robust_list resumed>) = 0 [pid 5005] lstat("./87/file0", [pid 8249] memfd_create("syzkaller", 0 [pid 5005] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8230] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8249] <... memfd_create resumed>) = 3 [pid 8230] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8249] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8230] <... futex resumed>) = 0 [pid 5005] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8243] close(3 [pid 8230] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8249] <... mmap resumed>) = 0x7f5047cf1000 [pid 8243] <... close resumed>) = 0 [pid 8230] <... mmap resumed>) = 0x7f5047d10000 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8249] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8230] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5005] openat(AT_FDCWD, "./87/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8249] <... write resumed>) = 262144 [pid 8230] <... mprotect resumed>) = 0 [pid 5005] <... openat resumed>) = 4 [pid 8230] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5005] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8230] <... clone resumed>, parent_tid=[8250], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8250 [pid 5005] getdents64(4, [pid 8230] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8249] munmap(0x7f5047cf1000, 262144 [pid 8230] <... futex resumed>) = 0 [pid 5005] getdents64(4, [pid 8249] <... munmap resumed>) = 0 [pid 8230] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5005] close(4 [pid 8249] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5005] <... close resumed>) = 0 [pid 8249] <... openat resumed>) = 4 [pid 5005] rmdir("./87/file0" [pid 8249] ioctl(4, LOOP_SET_FD, 3 [pid 5005] <... rmdir resumed>) = 0 [pid 8243] mkdir("./file0", 0777 [pid 5005] getdents64(3, [pid 8243] <... mkdir resumed>) = 0 [ 119.852117][ T8235] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 119.868074][ T8243] loop0: detected capacity change from 0 to 512 [ 119.880641][ T8238] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 119.896536][ T8235] EXT4-fs (loop3): 1 truncate cleaned up [ 119.900973][ T8249] loop2: detected capacity change from 0 to 512 [pid 8243] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"..../strace-static-x86_64: Process 8250 attached [pid 8249] <... ioctl resumed>) = 0 [pid 8235] <... mount resumed>) = 0 [pid 8233] <... fsconfig resumed>) = 0 [pid 5005] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8250] set_robust_list(0x7f5047d309e0, 24 [pid 8249] close(3 [pid 8233] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] close(3 [pid 8250] <... set_robust_list resumed>) = 0 [pid 8249] <... close resumed>) = 0 [pid 8233] <... futex resumed>) = 0 [pid 5005] <... close resumed>) = 0 [pid 8250] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8249] mkdir("./file0", 0777 [pid 8233] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5005] rmdir("./87" [pid 8250] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8249] <... mkdir resumed>) = 0 [pid 8235] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5005] <... rmdir resumed>) = 0 [pid 8250] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8249] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8235] <... openat resumed>) = 3 [pid 5005] mkdir("./88", 0777 [pid 8250] <... futex resumed>) = 1 [pid 8238] <... mount resumed>) = 0 [pid 8230] <... futex resumed>) = 0 [pid 8238] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8238] chdir("./file0") = 0 [pid 8238] ioctl(4, LOOP_CLR_FD) = 0 [pid 8238] close(4 [pid 8250] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8238] <... close resumed>) = 0 [pid 8235] chdir("./file0" [pid 8230] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... mkdir resumed>) = 0 [pid 8238] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8235] <... chdir resumed>) = 0 [pid 8233] <... futex resumed>) = 0 [pid 8230] <... futex resumed>) = 1 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 8238] <... futex resumed>) = 1 [pid 8236] <... futex resumed>) = 0 [pid 8235] ioctl(4, LOOP_CLR_FD [pid 8233] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8230] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... openat resumed>) = 3 [pid 8236] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5005] close(3) = 0 [ 119.904281][ T8243] EXT4-fs: Ignoring removed oldalloc option [ 119.910037][ T8235] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.930070][ T8238] EXT4-fs (loop4): 1 truncate cleaned up [ 119.935939][ T8238] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.940457][ T8249] EXT4-fs: Ignoring removed oldalloc option [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 8253 [pid 8236] <... futex resumed>) = 0 [pid 8236] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8238] fspick(AT_FDCWD, ".", 0 [pid 8235] <... ioctl resumed>) = 0 [pid 8235] close(4) = 0 [pid 8235] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8232] <... futex resumed>) = 0 [pid 8235] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8232] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8235] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8232] <... futex resumed>) = 0 [pid 8235] fspick(AT_FDCWD, ".", 0 [pid 8232] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8235] <... fspick resumed>) = 4 [pid 8235] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8232] <... futex resumed>) = 0 [pid 8235] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8232] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8235] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8232] <... futex resumed>) = 0 [pid 8235] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8232] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8235] <... fsconfig resumed>) = 0 [pid 8235] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8232] <... futex resumed>) = 0 [pid 8235] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8232] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8235] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8232] <... futex resumed>) = 0 [pid 8235] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8232] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8253 attached [pid 8253] set_robust_list(0x5555562025e0, 24) = 0 [pid 8238] <... fspick resumed>) = 4 [pid 8238] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8236] <... futex resumed>) = 0 [pid 8236] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8236] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8238] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8253] chdir("./88") = 0 [pid 8238] <... fsconfig resumed>) = 0 [pid 8253] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8238] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8253] <... prctl resumed>) = 0 [pid 8238] <... futex resumed>) = 1 [pid 8236] <... futex resumed>) = 0 [ 119.961355][ T8233] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 119.972096][ T8243] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 119.987307][ T8233] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8253] setpgid(0, 0 [pid 8238] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8236] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8238] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8236] <... futex resumed>) = 0 [pid 8238] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8236] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8253] <... setpgid resumed>) = 0 [pid 8230] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8253] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8230] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8253] <... openat resumed>) = 3 [pid 8250] <... futex resumed>) = 0 [pid 8230] <... futex resumed>) = 1 [pid 8253] write(3, "1000", 4 [pid 8250] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8230] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8253] <... write resumed>) = 4 [pid 8253] close(3) = 0 [pid 8253] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8253] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8253] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8253] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8253] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 8256 attached [pid 8232] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8232] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8232] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [ 120.004097][ T8243] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 120.022206][ T8249] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 120.030893][ T8238] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 120.032022][ T8235] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 8232] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8232] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8256] set_robust_list(0x7f50501119e0, 24 [pid 8253] <... clone resumed>, parent_tid=[8256], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8256 [pid 8236] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8235] <... fsconfig resumed>) = 0 [pid 8236] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8232] <... clone resumed>, parent_tid=[8257], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8257 [pid 8236] <... futex resumed>) = 0 [pid 8232] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8236] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8232] <... futex resumed>) = 0 [pid 8236] <... mmap resumed>) = 0x7f5047d10000 [pid 8232] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8236] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8236] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8259], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8259 [pid 8236] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8236] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8257 attached [pid 8257] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8257] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 8257] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8232] <... futex resumed>) = 0 [pid 8232] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8232] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8257] <... futex resumed>) = 1 [ 120.050127][ T8249] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 120.067350][ T8243] EXT4-fs (loop0): 1 truncate cleaned up [ 120.071426][ T8233] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 120.073589][ T8243] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.086336][ T8257] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 120.107357][ T8249] EXT4-fs (loop2): 1 truncate cleaned up [pid 8257] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0./strace-static-x86_64: Process 8259 attached [pid 8256] <... set_robust_list resumed>) = 0 [pid 8253] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8250] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8243] <... mount resumed>) = 0 [pid 8235] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8233] <... fsconfig resumed>) = 0 [pid 8230] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8259] set_robust_list(0x7f5047d309e0, 24 [pid 8256] memfd_create("syzkaller", 0 [pid 8253] <... futex resumed>) = 0 [pid 8250] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8243] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8238] <... fsconfig resumed>) = 0 [pid 8235] <... futex resumed>) = 0 [pid 8259] <... set_robust_list resumed>) = 0 [pid 8256] <... memfd_create resumed>) = 3 [pid 8253] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8250] <... futex resumed>) = 0 [pid 8243] <... openat resumed>) = 3 [pid 8238] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8235] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8259] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8256] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8250] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8243] chdir("./file0" [pid 8238] <... futex resumed>) = 0 [pid 8233] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8259] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8256] <... mmap resumed>) = 0x7f5047cf1000 [pid 8243] <... chdir resumed>) = 0 [pid 8238] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8233] <... futex resumed>) = 0 [pid 8259] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8256] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8243] ioctl(4, LOOP_CLR_FD [pid 8236] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8233] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8230] exit_group(0 [pid 8259] <... futex resumed>) = 0 [pid 8256] <... write resumed>) = 262144 [pid 8250] <... futex resumed>) = ? [pid 8249] <... mount resumed>) = 0 [pid 8243] <... ioctl resumed>) = 0 [pid 8233] <... futex resumed>) = ? [pid 8230] <... exit_group resumed>) = ? [pid 8259] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8256] munmap(0x7f5047cf1000, 262144 [pid 8250] +++ exited with 0 +++ [pid 8243] close(4 [pid 8233] +++ exited with 0 +++ [pid 8230] +++ exited with 0 +++ [pid 8256] <... munmap resumed>) = 0 [pid 8249] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8243] <... close resumed>) = 0 [pid 8236] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8232] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8230, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 8256] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 8249] <... openat resumed>) = 3 [pid 8243] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8238] <... futex resumed>) = 0 [pid 8236] <... futex resumed>) = 1 [pid 8232] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8256] <... openat resumed>) = 4 [ 120.113121][ T8249] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.127082][ T8257] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 120.139964][ T8238] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 120.142909][ T8256] loop5: detected capacity change from 0 to 512 [pid 8249] chdir("./file0" [pid 8243] <... futex resumed>) = 1 [pid 8238] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8237] <... futex resumed>) = 0 [pid 8236] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8235] <... futex resumed>) = 0 [pid 8232] <... futex resumed>) = 1 [pid 8256] ioctl(4, LOOP_SET_FD, 3 [pid 8249] <... chdir resumed>) = 0 [pid 8243] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8237] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8249] ioctl(4, LOOP_CLR_FD [pid 8243] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8237] <... futex resumed>) = 0 [pid 8235] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8232] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8243] fspick(AT_FDCWD, ".", 0 [pid 8237] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8256] <... ioctl resumed>) = 0 [pid 8243] <... fspick resumed>) = 4 [pid 5000] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8256] close(3 [pid 8243] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8256] <... close resumed>) = 0 [pid 8243] <... futex resumed>) = 1 [pid 8237] <... futex resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8256] mkdir("./file0", 0777 [pid 8243] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8237] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... openat resumed>) = 3 [pid 8256] <... mkdir resumed>) = 0 [pid 8243] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8237] <... futex resumed>) = 0 [pid 5000] fstat(3, [pid 8256] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8243] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8237] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8249] <... ioctl resumed>) = 0 [pid 8243] <... fsconfig resumed>) = 0 [pid 8235] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8249] close(4 [pid 8235] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8249] <... close resumed>) = 0 [pid 8243] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8235] <... futex resumed>) = 1 [pid 8232] <... futex resumed>) = 0 [pid 5000] getdents64(3, [pid 8249] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8235] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8249] <... futex resumed>) = 1 [pid 8247] <... futex resumed>) = 0 [pid 8249] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8247] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8249] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8247] <... futex resumed>) = 0 [pid 8249] fspick(AT_FDCWD, ".", 0 [pid 8247] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8243] <... futex resumed>) = 1 [pid 8237] <... futex resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 8257] <... fsconfig resumed>) = 0 [pid 8249] <... fspick resumed>) = 4 [pid 8243] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8237] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8257] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8249] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8243] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8237] <... futex resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8257] <... futex resumed>) = 0 [pid 8249] <... futex resumed>) = 1 [pid 8247] <... futex resumed>) = 0 [pid 8243] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8237] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] lstat("./89/binderfs", [pid 8257] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8249] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8247] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8232] exit_group(0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8257] <... futex resumed>) = ? [pid 8249] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8247] <... futex resumed>) = 0 [pid 8235] <... futex resumed>) = ? [pid 8232] <... exit_group resumed>) = ? [pid 5000] unlink("./89/binderfs" [pid 8249] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8247] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8235] +++ exited with 0 +++ [pid 5000] <... unlink resumed>) = 0 [pid 5000] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8249] <... fsconfig resumed>) = 0 [pid 8236] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8257] +++ exited with 0 +++ [pid 8232] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8232, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 8249] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8236] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8259] <... futex resumed>) = 0 [pid 8249] <... futex resumed>) = 1 [pid 8247] <... futex resumed>) = 0 [pid 8236] <... futex resumed>) = 1 [pid 5002] lstat("./88/binderfs", [pid 8259] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8249] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8247] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8236] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./88/binderfs") = 0 [pid 5002] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8247] <... futex resumed>) = 0 [pid 8247] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8259] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8243] <... fsconfig resumed>) = 0 [pid 8238] <... fsconfig resumed>) = 0 [ 120.156245][ T8257] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 120.160573][ T8256] EXT4-fs: Ignoring removed oldalloc option [ 120.173789][ T8238] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 120.188522][ T8243] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 120.199805][ T8238] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 8243] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8237] <... futex resumed>) = 0 [pid 8243] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8237] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8243] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8237] <... futex resumed>) = 0 [pid 8243] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8237] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8243] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8243] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8237] <... futex resumed>) = 0 [pid 8243] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8237] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8243] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8237] <... futex resumed>) = 0 [pid 8243] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8237] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8259] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8238] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8259] <... futex resumed>) = 1 [pid 8238] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8236] <... futex resumed>) = 0 [pid 8259] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8236] exit_group(0) = ? [pid 8238] <... futex resumed>) = ? [pid 8259] <... futex resumed>) = ? [pid 8238] +++ exited with 0 +++ [pid 8259] +++ exited with 0 +++ [pid 8236] +++ exited with 0 +++ [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8236, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5004] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5004] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5004] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./90/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 120.218272][ T8256] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 120.227326][ T8243] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 120.238207][ T8249] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 120.251773][ T8243] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 5004] unlink("./90/binderfs") = 0 [pid 5004] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8249] <... fsconfig resumed>) = 0 [pid 8249] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8249] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8247] <... futex resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./89/file0", [pid 8247] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./89/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8247] <... futex resumed>) = 1 [pid 8247] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... openat resumed>) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./89/file0") = 0 [pid 5000] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./89") = 0 [pid 5000] mkdir("./90", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8237] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5000] <... openat resumed>) = 3 [pid 8237] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 8237] <... futex resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8237] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5000] close(3 [pid 8237] <... mmap resumed>) = 0x7f5047d10000 [pid 5002] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... close resumed>) = 0 [pid 8237] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8237] <... mprotect resumed>) = 0 [pid 5002] lstat("./88/file0", [pid 8237] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x5555562025d0) = 8265 [pid 8249] <... futex resumed>) = 0 [pid 5002] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8249] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8237] <... clone resumed>, parent_tid=[8266], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8266 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8249] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8237] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] openat(AT_FDCWD, "./88/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8249] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8237] <... futex resumed>) = 0 [pid 5002] <... openat resumed>) = 4 [pid 8249] <... futex resumed>) = 1 [pid 8237] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] fstat(4, [pid 8249] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8247] <... futex resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 120.261529][ T8256] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 120.282520][ T8256] EXT4-fs (loop5): 1 truncate cleaned up [ 120.300773][ T8256] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 8247] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] getdents64(4, [pid 8249] <... futex resumed>) = 0 [pid 8247] <... futex resumed>) = 1 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8249] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5002] getdents64(4, ./strace-static-x86_64: Process 8266 attached ./strace-static-x86_64: Process 8265 attached [pid 8256] <... mount resumed>) = 0 [pid 8247] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8243] <... fsconfig resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8266] set_robust_list(0x7f5047d309e0, 24 [pid 8265] set_robust_list(0x5555562025e0, 24 [pid 8256] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] close(4 [pid 8256] <... openat resumed>) = 3 [pid 5002] <... close resumed>) = 0 [pid 8256] chdir("./file0" [pid 8243] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] rmdir("./88/file0" [pid 8265] <... set_robust_list resumed>) = 0 [pid 8256] <... chdir resumed>) = 0 [pid 8243] <... futex resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 8256] ioctl(4, LOOP_CLR_FD [pid 5002] getdents64(3, [pid 8256] <... ioctl resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8256] close(4 [pid 5004] <... umount2 resumed>) = 0 [pid 5002] close(3 [pid 8256] <... close resumed>) = 0 [pid 8243] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5002] <... close resumed>) = 0 [pid 8256] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] rmdir("./88" [pid 8265] chdir("./90" [pid 8256] <... futex resumed>) = 1 [pid 8253] <... futex resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 8256] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8253] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] mkdir("./89", 0777 [pid 8256] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8253] <... futex resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 8256] fspick(AT_FDCWD, ".", 0 [pid 8253] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8256] <... fspick resumed>) = 4 [pid 5002] <... openat resumed>) = 3 [pid 8256] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 8256] <... futex resumed>) = 1 [pid 8253] <... futex resumed>) = 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8256] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8253] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] close(3 [pid 8256] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8253] <... futex resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 8256] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8253] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8256] <... fsconfig resumed>) = 0 [pid 8256] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... clone resumed>, child_tidptr=0x5555562025d0) = 8267 [pid 8256] <... futex resumed>) = 1 [pid 8253] <... futex resumed>) = 0 [pid 8256] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8253] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8256] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8253] <... futex resumed>) = 0 [pid 8256] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8253] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8266] <... set_robust_list resumed>) = 0 [pid 8265] <... chdir resumed>) = 0 [pid 5004] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8266] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8265] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8265] <... prctl resumed>) = 0 [pid 5004] lstat("./90/file0", [pid 8266] <... openat resumed>) = -1 ENOSPC (No space left on device) [ 120.322931][ T8243] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 120.323568][ T8249] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 120.355881][ T8256] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 8266] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8265] setpgid(0, 0 [pid 5004] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8237] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8237] exit_group(0) = ? ./strace-static-x86_64: Process 8267 attached [pid 8267] set_robust_list(0x5555562025e0, 24) = 0 [pid 8267] chdir("./89") = 0 [pid 8267] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8267] setpgid(0, 0) = 0 [pid 8267] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8267] write(3, "1000", 4) = 4 [pid 8266] <... futex resumed>) = ? [pid 8265] <... setpgid resumed>) = 0 [pid 8243] <... futex resumed>) = ? [pid 5004] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8266] +++ exited with 0 +++ [pid 8265] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8243] +++ exited with 0 +++ [pid 8237] +++ exited with 0 +++ [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8265] <... openat resumed>) = 3 [pid 5004] openat(AT_FDCWD, "./90/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8237, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 8267] close(3 [pid 8265] write(3, "1000", 4 [pid 8256] <... fsconfig resumed>) = 0 [pid 5004] <... openat resumed>) = 4 [pid 8265] <... write resumed>) = 4 [pid 5004] fstat(4, [pid 8265] close(3 [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8265] <... close resumed>) = 0 [pid 5004] getdents64(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8267] <... close resumed>) = 0 [pid 8265] symlink("/dev/binderfs", "./binderfs" [pid 8256] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8267] symlink("/dev/binderfs", "./binderfs" [pid 8265] <... symlink resumed>) = 0 [pid 8256] <... futex resumed>) = 1 [pid 8253] <... futex resumed>) = 0 [pid 8247] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5004] getdents64(4, [pid 4999] <... openat resumed>) = 3 [pid 8267] <... symlink resumed>) = 0 [pid 8265] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8256] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8253] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8247] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 4999] fstat(3, [pid 8267] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8265] <... futex resumed>) = 0 [pid 8256] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8253] <... futex resumed>) = 0 [pid 8247] <... futex resumed>) = 0 [pid 5004] close(4 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8267] <... futex resumed>) = 0 [pid 8265] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8256] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8253] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8247] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5004] <... close resumed>) = 0 [pid 4999] getdents64(3, [pid 8267] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8265] <... mmap resumed>) = 0x7f50500f1000 [pid 8256] <... futex resumed>) = 0 [pid 8253] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8247] <... mmap resumed>) = 0x7f5047d10000 [ 120.369741][ T8249] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 5004] rmdir("./90/file0" [pid 4999] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 8267] <... mmap resumed>) = 0x7f50500f1000 [pid 8265] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8256] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8253] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8247] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8267] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8256] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8253] <... futex resumed>) = 0 [pid 5004] <... rmdir resumed>) = 0 [pid 4999] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8267] <... mprotect resumed>) = 0 [pid 8265] <... mprotect resumed>) = 0 [pid 8256] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8253] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8247] <... mprotect resumed>) = 0 [pid 8267] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8265] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8249] <... fsconfig resumed>) = 0 [pid 8247] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5004] getdents64(3, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8249] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 4999] lstat("./88/binderfs", [pid 8265] <... clone resumed>, parent_tid=[8269], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8269 [pid 8249] <... futex resumed>) = 0 [pid 8247] <... clone resumed>, parent_tid=[8270], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8270 [pid 5004] close(3 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8265] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8249] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8247] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... close resumed>) = 0 [pid 4999] unlink("./88/binderfs" [pid 8265] <... futex resumed>) = 0 [pid 8247] <... futex resumed>) = 0 [pid 5004] rmdir("./90" [pid 4999] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 8270 attached ./strace-static-x86_64: Process 8269 attached ./strace-static-x86_64: Process 8271 attached [pid 8265] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8247] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... rmdir resumed>) = 0 [pid 4999] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] mkdir("./91", 0777) = 0 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5004] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5004] close(3) = 0 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 8272 ./strace-static-x86_64: Process 8272 attached [pid 8272] set_robust_list(0x5555562025e0, 24) = 0 [pid 8272] chdir("./91" [pid 8270] set_robust_list(0x7f5047d309e0, 24 [pid 8269] set_robust_list(0x7f50501119e0, 24 [pid 8267] <... clone resumed>, parent_tid=[8271], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8271 [pid 8272] <... chdir resumed>) = 0 [pid 8272] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8272] setpgid(0, 0) = 0 [pid 8271] set_robust_list(0x7f50501119e0, 24 [pid 8270] <... set_robust_list resumed>) = 0 [pid 8269] <... set_robust_list resumed>) = 0 [pid 8267] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8272] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8272] write(3, "1000", 4) = 4 [pid 8272] close(3) = 0 [pid 8272] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8272] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8272] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8271] <... set_robust_list resumed>) = 0 [pid 8270] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8269] memfd_create("syzkaller", 0 [pid 8267] <... futex resumed>) = 0 [pid 8272] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8271] memfd_create("syzkaller", 0 [pid 8269] <... memfd_create resumed>) = 3 [pid 8267] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8271] <... memfd_create resumed>) = 3 [pid 8269] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8271] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8270] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8269] <... mmap resumed>) = 0x7f5047cf1000 [pid 8272] <... mprotect resumed>) = 0 [pid 8271] <... mmap resumed>) = 0x7f5047cf1000 [pid 8270] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8272] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8269] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8270] <... futex resumed>) = 1 [pid 8247] <... futex resumed>) = 0 [pid 8272] <... clone resumed>, parent_tid=[8274], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8274 [pid 8272] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8272] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8271] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8247] exit_group(0 [pid 8271] <... write resumed>) = 262144 [pid 8270] syscall_0x40000(0, 0xe7, 0x3c, 0x7fff7ed22a80, 0xffffffffffffffb8, 0 [pid 4999] <... umount2 resumed>) = 0 [pid 8270] +++ exited with 0 +++ [pid 8249] <... futex resumed>) = ? [pid 8247] <... exit_group resumed>) = ? [pid 4999] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8249] +++ exited with 0 +++ [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./88/file0", [pid 8247] +++ exited with 0 +++ [ 120.404556][ T8249] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 120.404892][ T8256] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 120.426071][ T8256] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8271] munmap(0x7f5047cf1000, 262144 [pid 8269] <... write resumed>) = 262144 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8247, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 4999] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8271] <... munmap resumed>) = 0 [pid 8269] munmap(0x7f5047cf1000, 262144 [pid 5001] <... restart_syscall resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./88/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8271] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] <... openat resumed>) = 4 [pid 8271] <... openat resumed>) = 4 [pid 8269] <... munmap resumed>) = 0 [pid 8253] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] fstat(4, ./strace-static-x86_64: Process 8274 attached [pid 8271] ioctl(4, LOOP_SET_FD, 3 [pid 8269] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8253] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8274] set_robust_list(0x7f50501119e0, 24 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] getdents64(4, [pid 8274] <... set_robust_list resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8274] memfd_create("syzkaller", 0 [pid 5001] <... openat resumed>) = 3 [pid 4999] getdents64(4, [pid 8274] <... memfd_create resumed>) = 3 [pid 5001] fstat(3, [pid 4999] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8274] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] close(4 [pid 8274] <... mmap resumed>) = 0x7f5047cf1000 [pid 5001] getdents64(3, [pid 4999] <... close resumed>) = 0 [pid 8274] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5001] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] rmdir("./88/file0" [pid 5001] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... rmdir resumed>) = 0 [pid 8271] <... ioctl resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] getdents64(3, [pid 8269] <... openat resumed>) = 4 [pid 8253] <... futex resumed>) = 0 [pid 5001] lstat("./90/binderfs", [pid 4999] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8271] close(3 [pid 8269] ioctl(4, LOOP_SET_FD, 3 [pid 8256] <... fsconfig resumed>) = 0 [pid 8253] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] close(3 [pid 8274] <... write resumed>) = 262144 [pid 8271] <... close resumed>) = 0 [pid 5001] unlink("./90/binderfs" [pid 4999] <... close resumed>) = 0 [pid 8274] munmap(0x7f5047cf1000, 262144 [pid 5001] <... unlink resumed>) = 0 [pid 4999] rmdir("./88" [pid 8274] <... munmap resumed>) = 0 [pid 5001] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... rmdir resumed>) = 0 [pid 8274] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4999] mkdir("./89", 0777 [pid 8274] <... openat resumed>) = 4 [pid 4999] <... mkdir resumed>) = 0 [pid 8274] ioctl(4, LOOP_SET_FD, 3 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8271] mkdir("./file0", 0777 [pid 8269] <... ioctl resumed>) = 0 [pid 8256] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8253] <... mmap resumed>) = 0x7f5047d10000 [pid 4999] <... openat resumed>) = 3 [pid 8271] <... mkdir resumed>) = 0 [pid 8269] close(3 [pid 8256] <... futex resumed>) = 0 [pid 8253] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8271] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8269] <... close resumed>) = 0 [pid 8256] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8253] <... mprotect resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 8275 ./strace-static-x86_64: Process 8275 attached [pid 8275] set_robust_list(0x5555562025e0, 24) = 0 [pid 8275] chdir("./89") = 0 [pid 8275] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8253] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8275] <... prctl resumed>) = 0 [pid 8275] setpgid(0, 0) = 0 [pid 8275] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8275] write(3, "1000", 4) = 4 [pid 8275] close(3) = 0 [pid 8275] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8275] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8275] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8275] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8275] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8276], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8276 [ 120.462361][ T8256] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 120.478126][ T8271] loop3: detected capacity change from 0 to 512 [ 120.487092][ T8269] loop1: detected capacity change from 0 to 512 [ 120.492899][ T8274] loop4: detected capacity change from 0 to 512 [ 120.496473][ T8271] EXT4-fs: Ignoring removed oldalloc option [pid 8275] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 8277 attached ./strace-static-x86_64: Process 8276 attached [pid 8274] <... ioctl resumed>) = 0 [pid 8269] mkdir("./file0", 0777 [pid 5001] <... umount2 resumed>) = 0 [pid 8277] set_robust_list(0x7f5047d309e0, 24 [pid 8253] <... clone resumed>, parent_tid=[8277], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8277 [pid 5001] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8277] <... set_robust_list resumed>) = 0 [pid 8253] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8277] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8253] <... futex resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8277] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8276] set_robust_list(0x7f50501119e0, 24 [pid 8275] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8274] close(3 [pid 8269] <... mkdir resumed>) = 0 [pid 8253] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] lstat("./90/file0", [pid 8277] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8253] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8277] <... futex resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8277] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8253] exit_group(0 [pid 5001] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8277] <... futex resumed>) = ? [pid 8253] <... exit_group resumed>) = ? [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8277] +++ exited with 0 +++ [pid 8276] <... set_robust_list resumed>) = 0 [pid 8274] <... close resumed>) = 0 [pid 8269] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8256] <... futex resumed>) = ? [pid 8276] memfd_create("syzkaller", 0 [pid 8274] mkdir("./file0", 0777 [pid 8256] +++ exited with 0 +++ [pid 8253] +++ exited with 0 +++ [pid 5001] openat(AT_FDCWD, "./90/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8276] <... memfd_create resumed>) = 3 [pid 8274] <... mkdir resumed>) = 0 [pid 8276] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8274] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8276] <... mmap resumed>) = 0x7f5047cf1000 [pid 5001] <... openat resumed>) = 4 [pid 8276] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [ 120.528069][ T8271] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 120.540547][ T8271] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 120.542606][ T8269] EXT4-fs: Ignoring removed oldalloc option [ 120.562014][ T8271] EXT4-fs (loop3): 1 truncate cleaned up [ 120.565511][ T8274] EXT4-fs: Ignoring removed oldalloc option [pid 8276] munmap(0x7f5047cf1000, 262144) = 0 [pid 8276] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8276] ioctl(4, LOOP_SET_FD, 3 [pid 8271] <... mount resumed>) = 0 [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8253, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5001] fstat(4, [pid 8271] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5005] restart_syscall(<... resuming interrupted clone ...> [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8276] <... ioctl resumed>) = 0 [pid 8271] <... openat resumed>) = 3 [pid 5005] <... restart_syscall resumed>) = 0 [pid 5001] getdents64(4, [pid 8276] close(3 [pid 8271] chdir("./file0" [pid 5001] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8276] <... close resumed>) = 0 [pid 8271] <... chdir resumed>) = 0 [pid 5001] getdents64(4, [pid 8276] mkdir("./file0", 0777 [pid 8271] ioctl(4, LOOP_CLR_FD [pid 5005] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8271] <... ioctl resumed>) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] close(4 [pid 8276] <... mkdir resumed>) = 0 [pid 8271] close(4 [pid 5005] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... close resumed>) = 0 [pid 8276] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8271] <... close resumed>) = 0 [pid 8271] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... openat resumed>) = 3 [pid 5001] rmdir("./90/file0" [pid 8271] <... futex resumed>) = 1 [pid 8267] <... futex resumed>) = 0 [pid 5005] fstat(3, [pid 5001] <... rmdir resumed>) = 0 [pid 8271] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8267] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, [pid 8271] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8267] <... futex resumed>) = 0 [ 120.568869][ T8271] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.581521][ T8276] loop0: detected capacity change from 0 to 512 [ 120.607528][ T8276] EXT4-fs: Ignoring removed oldalloc option [ 120.618198][ T8269] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8271] fspick(AT_FDCWD, ".", 0 [pid 8267] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] getdents64(3, [pid 5001] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8271] <... fspick resumed>) = 4 [pid 5005] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5001] close(3 [pid 8271] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... close resumed>) = 0 [pid 8271] <... futex resumed>) = 1 [pid 8267] <... futex resumed>) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] rmdir("./90" [pid 8271] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8267] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] lstat("./88/binderfs", [pid 5001] <... rmdir resumed>) = 0 [pid 8271] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8267] <... futex resumed>) = 0 [pid 5005] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] mkdir("./91", 0777 [pid 8271] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8267] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] unlink("./88/binderfs" [pid 5001] <... mkdir resumed>) = 0 [pid 8271] <... fsconfig resumed>) = 0 [pid 5005] <... unlink resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8271] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... openat resumed>) = 3 [pid 8271] <... futex resumed>) = 1 [pid 8267] <... futex resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 8271] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8267] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8271] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8267] <... futex resumed>) = 0 [pid 5001] close(3 [pid 8271] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8267] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] <... close resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 8285 ./strace-static-x86_64: Process 8285 attached [pid 8285] set_robust_list(0x5555562025e0, 24) = 0 [pid 8285] chdir("./91") = 0 [pid 8285] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8285] setpgid(0, 0) = 0 [pid 8285] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 120.619579][ T8274] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 120.638316][ T8269] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 120.639635][ T8274] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 8285] write(3, "1000", 4) = 4 [pid 8285] close(3) = 0 [pid 8267] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5005] <... umount2 resumed>) = 0 [ 120.676441][ T8269] EXT4-fs (loop1): 1 truncate cleaned up [ 120.683991][ T8276] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 120.684295][ T8271] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 120.694095][ T8274] EXT4-fs (loop4): 1 truncate cleaned up [ 120.710363][ T8269] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 8285] symlink("/dev/binderfs", "./binderfs" [pid 8267] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8269] <... mount resumed>) = 0 [pid 8285] <... symlink resumed>) = 0 [pid 8269] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8267] <... futex resumed>) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8267] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8285] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8269] <... openat resumed>) = 3 [pid 8269] chdir("./file0") = 0 [pid 8269] ioctl(4, LOOP_CLR_FD) = 0 [pid 8269] close(4) = 0 [pid 8269] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8265] <... futex resumed>) = 0 [pid 8265] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8265] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8269] <... futex resumed>) = 1 [pid 8269] fspick(AT_FDCWD, ".", 0) = 4 [pid 8269] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8265] <... futex resumed>) = 0 [pid 8265] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8265] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8269] <... futex resumed>) = 1 [pid 8269] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 8269] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8265] <... futex resumed>) = 0 [pid 8265] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8265] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8269] <... futex resumed>) = 1 [pid 8269] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8274] <... mount resumed>) = 0 [pid 8274] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8274] chdir("./file0" [pid 8271] <... fsconfig resumed>) = 0 [pid 8267] <... mmap resumed>) = 0x7f5047d10000 [pid 5005] lstat("./88/file0", [pid 8285] <... futex resumed>) = 0 [pid 8271] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8267] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5005] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8285] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8271] <... futex resumed>) = 0 [pid 8267] <... mprotect resumed>) = 0 [pid 5005] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8285] <... mmap resumed>) = 0x7f50500f1000 [pid 8271] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8267] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8285] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 5005] openat(AT_FDCWD, "./88/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8285] <... mprotect resumed>) = 0 [pid 8267] <... clone resumed>, parent_tid=[8287], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8287 [pid 5005] <... openat resumed>) = 4 ./strace-static-x86_64: Process 8287 attached [pid 8285] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8274] <... chdir resumed>) = 0 [pid 8267] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] fstat(4, [pid 8287] set_robust_list(0x7f5047d309e0, 24 [pid 8274] ioctl(4, LOOP_CLR_FD [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8267] <... futex resumed>) = 0 [pid 8267] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] getdents64(4, [pid 8285] <... clone resumed>, parent_tid=[8288], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8288 [pid 8274] <... ioctl resumed>) = 0 [pid 8285] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8285] <... futex resumed>) = 0 [ 120.722569][ T8274] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.736986][ T8276] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 8274] close(4./strace-static-x86_64: Process 8288 attached [pid 8285] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5005] getdents64(4, [pid 8274] <... close resumed>) = 0 [pid 8274] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8274] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8287] <... set_robust_list resumed>) = 0 [pid 8287] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 8287] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8287] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5005] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8272] <... futex resumed>) = 0 [pid 8267] <... futex resumed>) = 0 [pid 5005] close(4 [pid 8267] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8272] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... close resumed>) = 0 [pid 8272] <... futex resumed>) = 1 [pid 8267] <... futex resumed>) = 1 [pid 8271] <... futex resumed>) = 0 [pid 8272] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8271] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8267] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] rmdir("./88/file0" [pid 8288] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8288] memfd_create("syzkaller", 0) = 3 [pid 8288] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 8288] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 8288] munmap(0x7f5047cf1000, 262144) = 0 [pid 8288] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8288] ioctl(4, LOOP_SET_FD, 3 [pid 8274] <... futex resumed>) = 0 [pid 5005] <... rmdir resumed>) = 0 [pid 8288] <... ioctl resumed>) = 0 [pid 8288] close(3) = 0 [pid 8288] mkdir("./file0", 0777) = 0 [pid 8288] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8274] fspick(AT_FDCWD, ".", 0 [pid 8265] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5005] getdents64(3, [pid 8276] <... mount resumed>) = 0 [pid 8276] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8276] chdir("./file0") = 0 [pid 8276] ioctl(4, LOOP_CLR_FD) = 0 [ 120.770943][ T8276] EXT4-fs (loop0): 1 truncate cleaned up [ 120.778714][ T8271] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 120.788284][ T8288] loop2: detected capacity change from 0 to 512 [ 120.789400][ T8276] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.796622][ T8288] EXT4-fs: Ignoring removed oldalloc option [ 120.808260][ T8271] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8276] close(4 [pid 8274] <... fspick resumed>) = 4 [pid 8265] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8276] <... close resumed>) = 0 [pid 8276] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8276] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8275] <... futex resumed>) = 0 [pid 8272] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8275] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8274] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8272] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8265] <... futex resumed>) = 0 [pid 5005] close(3 [pid 8276] <... futex resumed>) = 0 [pid 8275] <... futex resumed>) = 1 [pid 8274] <... futex resumed>) = 0 [pid 8272] <... futex resumed>) = 0 [pid 8265] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5005] <... close resumed>) = 0 [pid 8276] fspick(AT_FDCWD, ".", 0 [pid 8275] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8274] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8272] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8265] <... mmap resumed>) = 0x7f5047d10000 [pid 5005] rmdir("./88" [pid 8276] <... fspick resumed>) = 4 [pid 5005] <... rmdir resumed>) = 0 [pid 8272] <... mmap resumed>) = 0x7f5047d10000 [pid 8276] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8275] <... futex resumed>) = 0 [pid 8265] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8276] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8275] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8272] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5005] mkdir("./89", 0777 [pid 8276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8275] <... futex resumed>) = 0 [pid 8265] <... mprotect resumed>) = 0 [pid 8276] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8275] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8272] <... mprotect resumed>) = 0 [pid 8276] <... fsconfig resumed>) = 0 [pid 8272] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5005] <... mkdir resumed>) = 0 [pid 8265] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8276] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8275] <... futex resumed>) = 0 [pid 8272] <... clone resumed>, parent_tid=[8291], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8291 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR./strace-static-x86_64: Process 8291 attached [pid 8276] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8275] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8269] <... fsconfig resumed>) = 0 [pid 8272] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8267] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8265] <... clone resumed>, parent_tid=[8292], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8292 [pid 5005] <... openat resumed>) = 3 [pid 8291] set_robust_list(0x7f5047d309e0, 24 [pid 8276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8275] <... futex resumed>) = 0 [pid 8272] <... futex resumed>) = 0 [pid 8269] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8267] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8265] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] ioctl(3, LOOP_CLR_FD [pid 8291] <... set_robust_list resumed>) = 0 [pid 8287] <... futex resumed>) = 0 [pid 8276] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8275] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8272] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8269] <... futex resumed>) = 0 [pid 8267] <... futex resumed>) = 1 [pid 8265] <... futex resumed>) = 0 [pid 8287] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 8287] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8287] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 8292 attached [pid 8292] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8292] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 8291] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8269] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8267] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8265] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8291] <... fsconfig resumed>) = 0 [pid 8267] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5005] close(3 [pid 8291] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... close resumed>) = 0 [pid 8291] <... futex resumed>) = 1 [pid 8272] <... futex resumed>) = 0 [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8291] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8272] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8274] <... futex resumed>) = 0 [pid 8272] <... futex resumed>) = 1 [pid 5005] <... clone resumed>, child_tidptr=0x5555562025d0) = 8294 [pid 8274] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8272] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8294 attached [pid 8294] set_robust_list(0x5555562025e0, 24) = 0 [pid 8294] chdir("./89") = 0 [pid 8294] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8294] setpgid(0, 0) = 0 [pid 8294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 120.821625][ T8269] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 120.847762][ T8288] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8294] write(3, "1000", 4) = 4 [pid 8294] close(3) = 0 [pid 8294] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8294] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8294] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8294] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8294] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8295], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8295 [pid 8294] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8294] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8295 attached [pid 8295] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8295] memfd_create("syzkaller", 0) = 3 [pid 8295] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 8292] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8265] <... futex resumed>) = 0 [pid 8292] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8265] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8269] <... futex resumed>) = 0 [pid 8265] <... futex resumed>) = 1 [pid 8269] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8265] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8295] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8275] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8275] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8275] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 8275] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8295] <... write resumed>) = 262144 [pid 8275] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8295] munmap(0x7f5047cf1000, 262144) = 0 [pid 8275] <... clone resumed>, parent_tid=[8296], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8296 [pid 8275] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8295] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 8275] <... futex resumed>) = 0 [pid 8295] <... openat resumed>) = 4 [pid 8275] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8295] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 8296 attached [pid 8272] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8271] <... fsconfig resumed>) = 0 [pid 8296] set_robust_list(0x7f5047d309e0, 24 [pid 8271] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8296] <... set_robust_list resumed>) = 0 [pid 8271] <... futex resumed>) = 0 [pid 8296] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [ 120.866508][ T8271] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 120.880074][ T8269] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 120.881366][ T8288] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 120.902207][ T8295] loop5: detected capacity change from 0 to 512 [ 120.910835][ T8269] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8271] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8296] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8296] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8296] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8275] <... futex resumed>) = 0 [pid 8272] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8295] <... ioctl resumed>) = 0 [pid 8275] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8272] <... futex resumed>) = 1 [pid 8291] <... futex resumed>) = 0 [pid 8265] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8295] close(3) = 0 [pid 8291] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8288] <... mount resumed>) = 0 [pid 8265] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8295] mkdir("./file0", 0777 [pid 8291] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8288] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8265] <... futex resumed>) = 1 [pid 8292] <... futex resumed>) = 0 [pid 8296] <... futex resumed>) = 0 [pid 8295] <... mkdir resumed>) = 0 [pid 8292] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8291] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8288] <... openat resumed>) = 3 [pid 8275] <... futex resumed>) = 1 [pid 8272] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8265] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8291] <... futex resumed>) = 0 [pid 8274] <... fsconfig resumed>) = 0 [pid 8296] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8295] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8291] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8288] chdir("./file0" [pid 8276] <... fsconfig resumed>) = 0 [pid 8275] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8274] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8272] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 120.911996][ T8288] EXT4-fs (loop2): 1 truncate cleaned up [ 120.925652][ T8288] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.927567][ T8276] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 120.938105][ T8274] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 120.963058][ T8296] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 8272] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8267] exit_group(0 [pid 8287] <... futex resumed>) = ? [pid 8272] <... futex resumed>) = 0 [pid 8271] <... futex resumed>) = ? [pid 8267] <... exit_group resumed>) = ? [pid 8287] +++ exited with 0 +++ [pid 8272] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8271] +++ exited with 0 +++ [pid 8267] +++ exited with 0 +++ [pid 8292] <... openat resumed>) = 5 [pid 8288] <... chdir resumed>) = 0 [pid 8276] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8274] <... futex resumed>) = 0 [pid 8292] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8288] ioctl(4, LOOP_CLR_FD [pid 8276] <... futex resumed>) = 0 [pid 8274] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8267, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./89/binderfs") = 0 [pid 5002] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8292] <... futex resumed>) = 1 [pid 8265] <... futex resumed>) = 0 [pid 8292] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8288] <... ioctl resumed>) = 0 [pid 8276] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8269] <... fsconfig resumed>) = 0 [pid 8288] close(4 [pid 8269] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8288] <... close resumed>) = 0 [pid 8269] <... futex resumed>) = 0 [pid 8288] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8269] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8265] exit_group(0 [pid 8292] <... futex resumed>) = ? [pid 8288] <... futex resumed>) = 1 [pid 8285] <... futex resumed>) = 0 [pid 8269] <... futex resumed>) = ? [pid 8265] <... exit_group resumed>) = ? [pid 8292] +++ exited with 0 +++ [pid 8288] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8285] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8269] +++ exited with 0 +++ [pid 8265] +++ exited with 0 +++ [pid 8288] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8285] <... futex resumed>) = 0 [pid 8288] fspick(AT_FDCWD, ".", 0 [pid 8285] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8265, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 8288] <... fspick resumed>) = 4 [pid 5000] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8288] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8288] <... futex resumed>) = 1 [pid 8285] <... futex resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8288] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8285] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... openat resumed>) = 3 [pid 8288] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8285] <... futex resumed>) = 0 [pid 8275] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5002] <... umount2 resumed>) = 0 [pid 8275] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8288] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8285] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8276] <... futex resumed>) = 0 [pid 8275] <... futex resumed>) = 1 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] fstat(3, [pid 8288] <... fsconfig resumed>) = 0 [pid 8276] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8275] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8272] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5002] lstat("./89/file0", [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8288] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8276] <... openat resumed>) = 5 [pid 8272] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8291] <... futex resumed>) = 0 [pid 8288] <... futex resumed>) = 1 [pid 8285] <... futex resumed>) = 0 [pid 8276] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8272] <... futex resumed>) = 1 [pid 5002] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] getdents64(3, [pid 8291] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8288] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8285] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8276] <... futex resumed>) = 1 [pid 8275] <... futex resumed>) = 0 [ 120.963150][ T8295] EXT4-fs: Ignoring removed oldalloc option [ 120.980500][ T8269] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 120.991128][ T8274] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 120.999089][ T8296] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 121.009672][ T8274] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8272] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 8291] <... openat resumed>) = 5 [pid 8288] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8285] <... futex resumed>) = 0 [pid 8276] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5000] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8288] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8285] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./90/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./90/binderfs") = 0 [pid 5000] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8291] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8274] <... fsconfig resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./89/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8291] <... futex resumed>) = 1 [pid 8274] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8272] <... futex resumed>) = 0 [pid 8291] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8274] <... futex resumed>) = 0 [pid 8272] exit_group(0 [pid 5002] <... openat resumed>) = 4 [pid 8274] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8291] <... futex resumed>) = ? [pid 8274] <... futex resumed>) = ? [pid 8272] <... exit_group resumed>) = ? [pid 8291] +++ exited with 0 +++ [pid 8274] +++ exited with 0 +++ [pid 8272] +++ exited with 0 +++ [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8272, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5004] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5004] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5004] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./91/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5004] unlink("./91/binderfs") = 0 [pid 5004] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 121.038912][ T8274] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 121.053118][ T8288] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 121.064877][ T8295] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 121.079051][ T8296] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 5002] getdents64(4, [pid 8296] <... fsconfig resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8296] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8288] <... fsconfig resumed>) = 0 [pid 8285] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8275] exit_group(0 [pid 5002] getdents64(4, [pid 8288] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8285] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8275] <... exit_group resumed>) = ? [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 8296] +++ exited with 0 +++ [pid 8288] <... futex resumed>) = 0 [pid 5002] close(4 [pid 5000] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8288] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5002] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] rmdir("./89/file0" [pid 5000] lstat("./90/file0", [pid 5002] <... rmdir resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 5000] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] close(3 [pid 5000] openat(AT_FDCWD, "./90/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... close resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 5002] rmdir("./89" [pid 5000] fstat(4, [pid 5002] <... rmdir resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] mkdir("./90", 0777 [pid 5000] getdents64(4, [pid 5002] <... mkdir resumed>) = 0 [pid 5000] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5000] getdents64(4, [pid 5002] <... openat resumed>) = 3 [pid 5000] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5000] close(4 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... close resumed>) = 0 [pid 5002] close(3 [pid 5000] rmdir("./90/file0" [pid 5002] <... close resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] getdents64(3, [pid 8285] <... futex resumed>) = 0 [pid 8276] <... futex resumed>) = ? [pid 5004] <... umount2 resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8285] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5004] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... clone resumed>, child_tidptr=0x5555562025d0) = 8302 [pid 5000] close(3 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... close resumed>) = 0 [pid 5004] lstat("./91/file0", [pid 5000] rmdir("./90" [pid 5004] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5004] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] mkdir("./91", 0777 [pid 8285] <... mmap resumed>) = 0x7f5047d10000 [pid 5004] openat(AT_FDCWD, "./91/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8285] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5004] <... openat resumed>) = 4 [ 121.081952][ T8295] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 121.128740][ T8295] EXT4-fs (loop5): 1 truncate cleaned up [pid 5000] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 8302 attached [pid 8285] <... mprotect resumed>) = 0 [pid 8276] +++ exited with 0 +++ [pid 8275] +++ exited with 0 +++ [pid 5004] fstat(4, [pid 8302] set_robust_list(0x5555562025e0, 24 [pid 8285] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8302] <... set_robust_list resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8275, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- ./strace-static-x86_64: Process 8303 attached [pid 8302] chdir("./90" [pid 8295] <... mount resumed>) = 0 [pid 8285] <... clone resumed>, parent_tid=[8303], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8303 [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4999] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8303] set_robust_list(0x7f5047d309e0, 24 [pid 8302] <... chdir resumed>) = 0 [pid 8295] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8285] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] getdents64(4, [pid 5000] <... openat resumed>) = 3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8303] <... set_robust_list resumed>) = 0 [pid 8302] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8295] <... openat resumed>) = 3 [pid 8285] <... futex resumed>) = 0 [pid 5004] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8303] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8302] <... prctl resumed>) = 0 [pid 8295] chdir("./file0" [pid 8285] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] getdents64(4, [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8303] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8302] setpgid(0, 0 [pid 8295] <... chdir resumed>) = 0 [pid 5004] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5000] close(3 [pid 4999] <... openat resumed>) = 3 [pid 8303] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8302] <... setpgid resumed>) = 0 [pid 8295] ioctl(4, LOOP_CLR_FD [pid 5004] close(4 [pid 5000] <... close resumed>) = 0 [pid 4999] fstat(3, [pid 8303] <... futex resumed>) = 1 [pid 8295] <... ioctl resumed>) = 0 [pid 8285] <... futex resumed>) = 0 [pid 5004] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8303] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8302] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8295] close(4 [pid 8285] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] rmdir("./91/file0" [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8302] <... openat resumed>) = 3 [pid 8295] <... close resumed>) = 0 [pid 8288] <... futex resumed>) = 0 [pid 8285] <... futex resumed>) = 1 [pid 5004] <... rmdir resumed>) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x5555562025d0) = 8304 [pid 4999] getdents64(3, [pid 8302] write(3, "1000", 4 [pid 8295] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8288] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8285] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] getdents64(3, [pid 8302] <... write resumed>) = 4 [pid 8295] <... futex resumed>) = 1 [pid 8294] <... futex resumed>) = 0 [pid 5004] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 4999] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 8302] close(3 [pid 8295] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8294] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] close(3 [pid 8302] <... close resumed>) = 0 [pid 8295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8294] <... futex resumed>) = 0 [ 121.134686][ T8295] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.163390][ T8288] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [pid 5004] <... close resumed>) = 0 [pid 4999] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8302] symlink("/dev/binderfs", "./binderfs" [pid 8295] fspick(AT_FDCWD, ".", 0 [pid 8294] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] rmdir("./91" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8302] <... symlink resumed>) = 0 [pid 8295] <... fspick resumed>) = 4 [pid 5004] <... rmdir resumed>) = 0 [pid 8302] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8295] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] mkdir("./92", 0777 [pid 4999] lstat("./89/binderfs", ./strace-static-x86_64: Process 8304 attached [pid 8302] <... futex resumed>) = 0 [pid 8295] <... futex resumed>) = 1 [pid 8294] <... futex resumed>) = 0 [pid 5004] <... mkdir resumed>) = 0 [pid 8304] set_robust_list(0x5555562025e0, 24 [pid 8302] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8295] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8294] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8304] <... set_robust_list resumed>) = 0 [pid 8302] <... mmap resumed>) = 0x7f50500f1000 [pid 8295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8294] <... futex resumed>) = 0 [pid 5004] <... openat resumed>) = 3 [pid 8304] chdir("./91" [pid 8302] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8295] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8294] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] ioctl(3, LOOP_CLR_FD [pid 4999] unlink("./89/binderfs" [pid 8304] <... chdir resumed>) = 0 [pid 8302] <... mprotect resumed>) = 0 [pid 8295] <... fsconfig resumed>) = 0 [pid 5004] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8295] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] close(3 [pid 8295] <... futex resumed>) = 1 [pid 8294] <... futex resumed>) = 0 [pid 8302] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5004] <... close resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 8304] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8295] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8294] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8304] <... prctl resumed>) = 0 [pid 8295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8294] <... futex resumed>) = 0 [pid 4999] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8304] setpgid(0, 0 [pid 8302] <... clone resumed>, parent_tid=[8305], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8305 [pid 8295] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8294] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... clone resumed>, child_tidptr=0x5555562025d0) = 8306 [pid 8304] <... setpgid resumed>) = 0 [pid 8302] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 8305 attached [pid 8302] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8305] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8305] memfd_create("syzkaller", 0) = 3 [pid 8305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 8305] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144./strace-static-x86_64: Process 8306 attached [pid 8306] set_robust_list(0x5555562025e0, 24) = 0 [pid 8306] chdir("./92") = 0 [pid 8306] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8306] setpgid(0, 0) = 0 [pid 8306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8306] write(3, "1000", 4) = 4 [pid 8306] close(3) = 0 [pid 8306] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8306] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8306] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8305] <... write resumed>) = 262144 [pid 8306] <... mmap resumed>) = 0x7f50500f1000 [pid 8306] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8306] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8304] <... openat resumed>) = 3 [pid 8306] <... clone resumed>, parent_tid=[8307], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8307 [pid 8304] write(3, "1000", 4 [pid 8306] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8305] munmap(0x7f5047cf1000, 262144 [pid 8304] <... write resumed>) = 4 [pid 8306] <... futex resumed>) = 0 [pid 8304] close(3 [pid 8285] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8306] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8304] <... close resumed>) = 0 [pid 8285] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8305] <... munmap resumed>) = 0 [pid 8304] symlink("/dev/binderfs", "./binderfs" [pid 8303] <... futex resumed>) = 0 [pid 8285] <... futex resumed>) = 1 [pid 8305] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8303] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8285] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8305] <... openat resumed>) = 4 [pid 8304] <... symlink resumed>) = 0 [ 121.186002][ T8288] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8305] ioctl(4, LOOP_SET_FD, 3 [pid 8304] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8303] <... openat resumed>) = 5 [pid 8304] <... futex resumed>) = 0 [pid 8303] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8304] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8303] <... futex resumed>) = 1 [pid 8285] <... futex resumed>) = 0 [pid 8304] <... mmap resumed>) = 0x7f50500f1000 [pid 8303] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 8307 attached [pid 8304] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8307] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8304] <... mprotect resumed>) = 0 [pid 8307] memfd_create("syzkaller", 0 [pid 8304] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8307] <... memfd_create resumed>) = 3 [pid 8307] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 8304] <... clone resumed>, parent_tid=[8309], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8309 [pid 8304] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8307] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 8307] munmap(0x7f5047cf1000, 262144) = 0 [pid 8307] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8307] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 8309 attached [pid 8304] <... futex resumed>) = 0 [pid 8309] set_robust_list(0x7f50501119e0, 24 [pid 8304] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8305] <... ioctl resumed>) = 0 [pid 8305] close(3) = 0 [pid 8305] mkdir("./file0", 0777) = 0 [pid 8305] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8309] <... set_robust_list resumed>) = 0 [pid 8294] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8288] <... fsconfig resumed>) = 0 [pid 8309] memfd_create("syzkaller", 0 [pid 8307] <... ioctl resumed>) = 0 [pid 8295] <... fsconfig resumed>) = 0 [pid 8294] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8288] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8309] <... memfd_create resumed>) = 3 [pid 8307] close(3 [pid 8295] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8294] <... futex resumed>) = 0 [pid 8288] <... futex resumed>) = 0 [pid 8294] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8294] <... mmap resumed>) = 0x7f5047d10000 [pid 8288] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8309] <... mmap resumed>) = 0x7f5047cf1000 [pid 8294] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8309] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8307] <... close resumed>) = 0 [pid 8295] <... futex resumed>) = 0 [pid 8294] <... mprotect resumed>) = 0 [pid 8285] exit_group(0 [pid 4999] <... umount2 resumed>) = 0 [pid 8294] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8294] <... clone resumed>, parent_tid=[8310], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8310 [pid 8294] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8294] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8285] <... exit_group resumed>) = ? [pid 8303] <... futex resumed>) = ? [pid 8288] <... futex resumed>) = ? [pid 8303] +++ exited with 0 +++ [pid 8288] +++ exited with 0 +++ [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./89/file0", [pid 8285] +++ exited with 0 +++ [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8295] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./89/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 4999] close(4 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8285, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 4999] <... close resumed>) = 0 [pid 8309] <... write resumed>) = 262144 [pid 8307] mkdir("./file0", 0777 [pid 4999] rmdir("./89/file0" [pid 8309] munmap(0x7f5047cf1000, 262144 [pid 8307] <... mkdir resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [ 121.230559][ T8305] loop3: detected capacity change from 0 to 512 [ 121.240518][ T8288] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 121.246768][ T8307] loop4: detected capacity change from 0 to 512 [ 121.259234][ T8295] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 121.261736][ T8305] EXT4-fs: Ignoring removed oldalloc option [pid 8307] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5001] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(3, ./strace-static-x86_64: Process 8310 attached [pid 8309] <... munmap resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8310] set_robust_list(0x7f5047d309e0, 24 [pid 8309] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5001] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8310] <... set_robust_list resumed>) = 0 [pid 8309] <... openat resumed>) = 4 [pid 5001] <... openat resumed>) = 3 [pid 8310] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8309] ioctl(4, LOOP_SET_FD, 3 [pid 5001] fstat(3, [pid 8310] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4999] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./89") = 0 [pid 4999] mkdir("./90", 0777 [pid 8310] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8309] <... ioctl resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8310] <... futex resumed>) = 1 [pid 8309] close(3 [pid 5001] getdents64(3, [pid 4999] <... mkdir resumed>) = 0 [pid 8310] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8309] <... close resumed>) = 0 [pid 8294] <... futex resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 8309] mkdir("./file0", 0777 [pid 8294] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8309] <... mkdir resumed>) = 0 [pid 8295] <... futex resumed>) = 0 [pid 8294] <... futex resumed>) = 1 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8309] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8295] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8294] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] lstat("./91/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5001] unlink("./91/binderfs") = 0 [pid 5001] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [ 121.298977][ T8307] EXT4-fs: Ignoring removed oldalloc option [ 121.303552][ T8309] loop1: detected capacity change from 0 to 512 [ 121.314775][ T8309] EXT4-fs: Ignoring removed oldalloc option [ 121.315704][ T8307] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 121.323948][ T8305] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 121.329455][ T8295] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 8315 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./91/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./91/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./91/file0") = 0 [pid 5001] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./91") = 0 [pid 5001] mkdir("./92", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 8317 ./strace-static-x86_64: Process 8315 attached [pid 8315] set_robust_list(0x5555562025e0, 24) = 0 [pid 8315] chdir("./90"./strace-static-x86_64: Process 8317 attached ) = 0 [pid 8317] set_robust_list(0x5555562025e0, 24 [pid 8315] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8315] setpgid(0, 0 [pid 8317] <... set_robust_list resumed>) = 0 [pid 8317] chdir("./92" [pid 8315] <... setpgid resumed>) = 0 [pid 8315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8317] <... chdir resumed>) = 0 [pid 8315] <... openat resumed>) = 3 [pid 8317] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8315] write(3, "1000", 4 [pid 8317] <... prctl resumed>) = 0 [pid 8315] <... write resumed>) = 4 [pid 8317] setpgid(0, 0 [pid 8315] close(3 [pid 8294] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8317] <... setpgid resumed>) = 0 [pid 8315] <... close resumed>) = 0 [pid 8294] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 121.355881][ T8295] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 121.374025][ T8307] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 121.390230][ T8295] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 8315] symlink("/dev/binderfs", "./binderfs" [pid 8294] <... futex resumed>) = 1 [pid 8317] <... openat resumed>) = 3 [pid 8310] <... futex resumed>) = 0 [pid 8310] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 ENOSPC (No space left on device) [pid 8310] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8310] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8317] write(3, "1000", 4 [pid 8315] <... symlink resumed>) = 0 [pid 8294] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8317] <... write resumed>) = 4 [pid 8315] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8294] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8317] close(3 [pid 8315] <... futex resumed>) = 0 [pid 8317] <... close resumed>) = 0 [pid 8315] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8317] symlink("/dev/binderfs", "./binderfs" [pid 8315] <... mmap resumed>) = 0x7f50500f1000 [pid 8295] <... fsconfig resumed>) = 0 [pid 8317] <... symlink resumed>) = 0 [pid 8315] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8317] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8315] <... mprotect resumed>) = 0 [pid 8317] <... futex resumed>) = 0 [pid 8317] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8315] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8295] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8317] <... mmap resumed>) = 0x7f50500f1000 [pid 8295] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8317] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8294] exit_group(0 [pid 8317] <... mprotect resumed>) = 0 [pid 8310] <... futex resumed>) = ? [pid 8294] <... exit_group resumed>) = ? [pid 8317] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8295] <... futex resumed>) = ? [pid 8310] +++ exited with 0 +++ ./strace-static-x86_64: Process 8321 attached ./strace-static-x86_64: Process 8320 attached [pid 8315] <... clone resumed>, parent_tid=[8320], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8320 [pid 8295] +++ exited with 0 +++ [pid 8294] +++ exited with 0 +++ [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8294, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5005] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5005] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5005] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] lstat("./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5005] unlink("./89/binderfs") = 0 [ 121.401398][ T8305] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 121.404105][ T8309] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 121.432058][ T8307] EXT4-fs (loop4): 1 truncate cleaned up [ 121.438080][ T8309] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 5005] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8321] set_robust_list(0x7f50501119e0, 24 [pid 8320] set_robust_list(0x7f50501119e0, 24 [pid 8317] <... clone resumed>, parent_tid=[8321], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8321 [pid 8315] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8321] <... set_robust_list resumed>) = 0 [pid 8320] <... set_robust_list resumed>) = 0 [pid 8317] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8315] <... futex resumed>) = 0 [pid 8317] <... futex resumed>) = 0 [pid 8315] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8321] memfd_create("syzkaller", 0 [pid 8317] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8320] memfd_create("syzkaller", 0) = 3 [pid 8320] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 8320] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8321] <... memfd_create resumed>) = 3 [pid 8321] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 8321] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8309] <... mount resumed>) = 0 [pid 8320] <... write resumed>) = 262144 [pid 8321] <... write resumed>) = 262144 [pid 8320] munmap(0x7f5047cf1000, 262144 [pid 8321] munmap(0x7f5047cf1000, 262144 [pid 8309] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8321] <... munmap resumed>) = 0 [pid 8320] <... munmap resumed>) = 0 [pid 8320] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8309] <... openat resumed>) = 3 [pid 8321] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8309] chdir("./file0" [pid 8307] <... mount resumed>) = 0 [pid 8321] <... openat resumed>) = 4 [pid 8320] <... openat resumed>) = 4 [pid 8309] <... chdir resumed>) = 0 [pid 8307] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8320] ioctl(4, LOOP_SET_FD, 3 [ 121.452970][ T8307] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.467530][ T8309] EXT4-fs (loop1): 1 truncate cleaned up [ 121.473903][ T8309] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 8321] ioctl(4, LOOP_SET_FD, 3 [pid 8309] ioctl(4, LOOP_CLR_FD [pid 8307] <... openat resumed>) = 3 [pid 8320] <... ioctl resumed>) = 0 [pid 8320] close(3) = 0 [pid 8320] mkdir("./file0", 0777) = 0 [pid 8320] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8309] <... ioctl resumed>) = 0 [pid 8307] chdir("./file0" [pid 8321] <... ioctl resumed>) = 0 [pid 8309] close(4 [pid 8307] <... chdir resumed>) = 0 [pid 8321] close(3 [pid 8309] <... close resumed>) = 0 [pid 8307] ioctl(4, LOOP_CLR_FD [pid 8321] <... close resumed>) = 0 [pid 8309] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8307] <... ioctl resumed>) = 0 [pid 8321] mkdir("./file0", 0777 [pid 8309] <... futex resumed>) = 1 [pid 8307] close(4 [pid 8304] <... futex resumed>) = 0 [pid 5005] <... umount2 resumed>) = 0 [pid 8304] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8321] <... mkdir resumed>) = 0 [pid 8309] fspick(AT_FDCWD, ".", 0 [pid 8307] <... close resumed>) = 0 [pid 8304] <... futex resumed>) = 0 [pid 8321] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8309] <... fspick resumed>) = 4 [pid 8307] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 121.504567][ T8320] loop0: detected capacity change from 0 to 512 [ 121.506265][ T8321] loop2: detected capacity change from 0 to 512 [ 121.520046][ T8320] EXT4-fs: Ignoring removed oldalloc option [ 121.530084][ T8305] EXT4-fs (loop3): 1 truncate cleaned up [ 121.536641][ T8305] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 8304] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8309] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8307] <... futex resumed>) = 1 [pid 8306] <... futex resumed>) = 0 [pid 8309] <... futex resumed>) = 1 [pid 8307] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8306] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8304] <... futex resumed>) = 0 [pid 8309] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8307] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8306] <... futex resumed>) = 0 [pid 8305] <... mount resumed>) = 0 [pid 8304] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8309] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8307] fspick(AT_FDCWD, ".", 0 [pid 8306] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8305] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8304] <... futex resumed>) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8309] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8307] <... fspick resumed>) = 4 [pid 8309] <... fsconfig resumed>) = 0 [pid 8307] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8305] <... openat resumed>) = 3 [pid 8304] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] lstat("./89/file0", [pid 8309] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8307] <... futex resumed>) = 1 [pid 8306] <... futex resumed>) = 0 [pid 8305] chdir("./file0" [pid 8304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5005] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8309] <... futex resumed>) = 0 [pid 8307] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8306] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8305] <... chdir resumed>) = 0 [pid 8304] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8309] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8307] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8306] <... futex resumed>) = 0 [pid 8305] ioctl(4, LOOP_CLR_FD [pid 8304] <... futex resumed>) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8307] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8306] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8305] <... ioctl resumed>) = 0 [pid 8304] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] openat(AT_FDCWD, "./89/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8307] <... fsconfig resumed>) = 0 [pid 8305] close(4 [pid 5005] <... openat resumed>) = 4 [pid 8307] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8305] <... close resumed>) = 0 [pid 5005] fstat(4, [pid 8307] <... futex resumed>) = 1 [pid 8306] <... futex resumed>) = 0 [pid 8305] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8306] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8307] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8306] <... futex resumed>) = 0 [pid 8305] <... futex resumed>) = 1 [pid 8302] <... futex resumed>) = 0 [pid 5005] getdents64(4, [pid 8302] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 121.557511][ T8321] EXT4-fs: Ignoring removed oldalloc option [ 121.585589][ T8309] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 8302] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8309] <... fsconfig resumed>) = 0 [pid 8306] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8305] fspick(AT_FDCWD, ".", 0 [pid 5005] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8309] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8305] <... fspick resumed>) = 4 [pid 5005] getdents64(4, [pid 8309] <... futex resumed>) = 1 [pid 8305] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8304] <... futex resumed>) = 0 [pid 5005] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8309] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8305] <... futex resumed>) = 1 [pid 8304] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] close(4 [pid 8309] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8305] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8304] <... futex resumed>) = 0 [pid 5005] <... close resumed>) = 0 [pid 8309] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8304] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] rmdir("./89/file0" [pid 8309] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 5005] <... rmdir resumed>) = 0 [pid 8309] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] getdents64(3, [pid 8309] <... futex resumed>) = 1 [pid 8304] <... futex resumed>) = 0 [pid 5005] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8309] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8304] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] close(3 [pid 8309] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8304] <... futex resumed>) = 0 [pid 5005] <... close resumed>) = 0 [pid 8309] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8304] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] rmdir("./89" [pid 8302] <... futex resumed>) = 0 [pid 5005] <... rmdir resumed>) = 0 [pid 5005] mkdir("./90", 0777) = 0 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5005] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5005] close(3 [pid 8302] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... close resumed>) = 0 [pid 8302] <... futex resumed>) = 1 [ 121.601722][ T8321] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 121.612434][ T8307] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 121.618530][ T8309] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 121.628927][ T8320] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8302] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8305] <... futex resumed>) = 0 [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8305] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 5005] <... clone resumed>, child_tidptr=0x5555562025d0) = 8326 [pid 8305] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8302] <... futex resumed>) = 0 [pid 8305] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 8302] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8305] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8302] <... futex resumed>) = 0 [pid 8302] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8326 attached [pid 8326] set_robust_list(0x5555562025e0, 24) = 0 [pid 8326] chdir("./90") = 0 [pid 8326] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8326] setpgid(0, 0) = 0 [pid 8326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8306] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8306] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8304] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8326] <... openat resumed>) = 3 [pid 8326] write(3, "1000", 4) = 4 [pid 8326] close(3) = 0 [pid 8326] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8326] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8326] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8326] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8306] <... futex resumed>) = 0 [pid 8326] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8306] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8304] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8306] <... mmap resumed>) = 0x7f5047d10000 [pid 8304] <... futex resumed>) = 0 [pid 8326] <... clone resumed>, parent_tid=[8327], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8327 [pid 8326] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8326] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8327 attached [pid 8327] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8327] memfd_create("syzkaller", 0) = 3 [ 121.643910][ T8321] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 121.663058][ T8321] EXT4-fs (loop2): 1 truncate cleaned up [ 121.669484][ T8305] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 121.669956][ T8321] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.692512][ T8309] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8327] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 8307] <... fsconfig resumed>) = 0 [pid 8306] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8304] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8302] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8321] <... mount resumed>) = 0 [pid 8307] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8306] <... mprotect resumed>) = 0 [pid 8302] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8321] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8307] <... futex resumed>) = 0 [pid 8306] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8304] <... mmap resumed>) = 0x7f5047d10000 [pid 8302] <... futex resumed>) = 0 [pid 8321] <... openat resumed>) = 3 [pid 8307] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8302] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 8302] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8302] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8328], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8328 [pid 8302] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8302] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8321] chdir("./file0" [pid 8304] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8321] <... chdir resumed>) = 0 [pid 8306] <... clone resumed>, parent_tid=[8329], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8329 ./strace-static-x86_64: Process 8329 attached ./strace-static-x86_64: Process 8328 attached [pid 8327] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8321] ioctl(4, LOOP_CLR_FD [pid 8306] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8304] <... mprotect resumed>) = 0 [pid 8327] <... write resumed>) = 262144 [pid 8327] munmap(0x7f5047cf1000, 262144) = 0 [pid 8327] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 8327] ioctl(4, LOOP_SET_FD, 3 [pid 8329] set_robust_list(0x7f5047d309e0, 24 [pid 8328] set_robust_list(0x7f5047d309e0, 24 [pid 8321] <... ioctl resumed>) = 0 [pid 8320] <... mount resumed>) = 0 [pid 8306] <... futex resumed>) = 0 [pid 8304] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8329] <... set_robust_list resumed>) = 0 [pid 8328] <... set_robust_list resumed>) = 0 [pid 8321] close(4 [pid 8306] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8329] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8328] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8321] <... close resumed>) = 0 [pid 8305] <... fsconfig resumed>) = 0 [pid 8304] <... clone resumed>, parent_tid=[8331], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8331 [pid 8305] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8305] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8320] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8320] chdir("./file0") = 0 [pid 8320] ioctl(4, LOOP_CLR_FD) = 0 [pid 8320] close(4) = 0 [pid 8320] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8320] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 8331 attached [pid 8331] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8331] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8327] <... ioctl resumed>) = 0 [pid 8327] close(3) = 0 [pid 8327] mkdir("./file0", 0777) = 0 [ 121.702174][ T8320] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 121.721400][ T8320] EXT4-fs (loop0): 1 truncate cleaned up [ 121.730760][ T8320] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.739011][ T8327] loop5: detected capacity change from 0 to 512 [pid 8327] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8329] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8328] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8321] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8315] <... futex resumed>) = 0 [pid 8304] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8329] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8328] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8321] <... futex resumed>) = 1 [pid 8315] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8304] <... futex resumed>) = 1 [pid 8329] <... futex resumed>) = 1 [pid 8328] <... futex resumed>) = 1 [pid 8321] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8315] <... futex resumed>) = 1 [pid 8306] <... futex resumed>) = 0 [pid 8304] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8329] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8328] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8315] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8306] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8331] <... futex resumed>) = 0 [pid 8320] <... futex resumed>) = 0 [pid 8317] <... futex resumed>) = 0 [pid 8309] <... fsconfig resumed>) = 0 [pid 8307] <... futex resumed>) = 0 [pid 8306] <... futex resumed>) = 1 [pid 8302] <... futex resumed>) = 0 [pid 8309] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8306] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8309] <... futex resumed>) = 0 [pid 8309] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8331] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8320] fspick(AT_FDCWD, ".", 0 [pid 8317] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8307] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8302] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8320] <... fspick resumed>) = 4 [pid 8321] <... futex resumed>) = 0 [pid 8317] <... futex resumed>) = 1 [pid 8305] <... futex resumed>) = 0 [pid 8302] <... futex resumed>) = 1 [pid 8331] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8321] fspick(AT_FDCWD, ".", 0 [pid 8320] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8317] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8305] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8302] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8331] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8321] <... fspick resumed>) = 4 [pid 8320] <... futex resumed>) = 1 [pid 8315] <... futex resumed>) = 0 [pid 8321] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8315] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8321] <... futex resumed>) = 1 [pid 8315] <... futex resumed>) = 0 [pid 8321] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8315] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8317] <... futex resumed>) = 0 [pid 8320] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8317] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8331] <... futex resumed>) = 1 [pid 8304] <... futex resumed>) = 0 [pid 8331] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8321] <... futex resumed>) = 0 [pid 8320] <... fsconfig resumed>) = 0 [pid 8317] <... futex resumed>) = 1 [pid 8304] exit_group(0 [pid 8321] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8309] <... futex resumed>) = ? [pid 8304] <... exit_group resumed>) = ? [pid 8321] <... fsconfig resumed>) = 0 [pid 8309] +++ exited with 0 +++ [pid 8321] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8321] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8331] <... futex resumed>) = ? [pid 8320] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 121.750860][ T8309] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 121.759003][ T8327] EXT4-fs: Ignoring removed oldalloc option [ 121.775160][ T8307] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 121.786994][ T8305] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 121.798751][ T8307] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8317] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8331] +++ exited with 0 +++ [pid 8320] <... futex resumed>) = 1 [pid 8317] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8304] +++ exited with 0 +++ [pid 8320] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8317] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8304, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 8317] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, [pid 8321] <... futex resumed>) = 0 [pid 8315] <... futex resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8321] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8315] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] getdents64(3, [pid 8320] <... futex resumed>) = 0 [pid 8315] <... futex resumed>) = 1 [pid 5000] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 8320] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8315] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./91/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./91/binderfs") = 0 [pid 5000] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8321] <... fsconfig resumed>) = 0 [pid 8320] <... fsconfig resumed>) = 0 [pid 8306] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8321] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8320] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8306] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8321] <... futex resumed>) = 1 [pid 8306] <... futex resumed>) = 1 [pid 8329] <... futex resumed>) = 0 [pid 8321] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8329] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8306] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8315] <... futex resumed>) = 0 [pid 8320] <... futex resumed>) = 1 [pid 8320] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8317] <... futex resumed>) = 0 [pid 8315] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8329] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8317] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8315] <... futex resumed>) = 0 [pid 8329] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [ 121.800163][ T8305] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 121.820718][ T8321] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 121.825997][ T8320] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 121.846419][ T8327] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8315] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8329] <... futex resumed>) = 1 [pid 8321] <... futex resumed>) = 0 [pid 8317] <... futex resumed>) = 1 [pid 8306] <... futex resumed>) = 0 [pid 8329] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8320] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8320] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8315] <... futex resumed>) = 0 [pid 8315] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8315] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8320] <... futex resumed>) = 1 [pid 8320] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8321] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8317] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8302] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8321] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8321] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8317] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8302] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8321] <... futex resumed>) = 0 [pid 8321] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8307] <... fsconfig resumed>) = 0 [pid 8307] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8306] exit_group(0 [pid 8329] <... futex resumed>) = ? [pid 8306] <... exit_group resumed>) = ? [pid 8329] +++ exited with 0 +++ [pid 8328] <... futex resumed>) = 0 [pid 8317] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8302] <... futex resumed>) = 1 [pid 8328] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8302] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8307] <... futex resumed>) = ? [pid 8307] +++ exited with 0 +++ [pid 8306] +++ exited with 0 +++ [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8306, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5004] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5004] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5004] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8328] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8321] <... futex resumed>) = 0 [pid 8317] <... futex resumed>) = 1 [pid 8315] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8305] <... fsconfig resumed>) = 0 [pid 5004] getdents64(3, [pid 8328] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [ 121.847821][ T8320] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 121.855362][ T8307] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 121.877552][ T8320] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 121.887355][ T8305] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 8321] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8317] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8315] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 8328] <... futex resumed>) = 1 [pid 8315] <... futex resumed>) = 0 [pid 8302] <... futex resumed>) = 0 [pid 5004] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8315] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8315] <... mmap resumed>) = 0x7f5047d10000 [pid 5004] lstat("./92/binderfs", [pid 8315] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5004] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8315] <... mprotect resumed>) = 0 [pid 8305] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] unlink("./92/binderfs" [pid 8315] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8305] <... futex resumed>) = 0 [pid 5004] <... unlink resumed>) = 0 [pid 8305] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5004] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8336 attached [pid 8328] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8315] <... clone resumed>, parent_tid=[8336], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8336 [pid 8302] exit_group(0 [pid 8336] set_robust_list(0x7f5047d309e0, 24 [pid 8328] <... futex resumed>) = ? [pid 8315] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8305] <... futex resumed>) = ? [pid 8302] <... exit_group resumed>) = ? [pid 8336] <... set_robust_list resumed>) = 0 [pid 8315] <... futex resumed>) = 0 [pid 8305] +++ exited with 0 +++ [pid 8336] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8315] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8328] +++ exited with 0 +++ [pid 8336] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8336] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8315] <... futex resumed>) = 0 [ 121.903433][ T8321] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 121.911108][ T8327] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 121.930138][ T8327] EXT4-fs (loop5): 1 truncate cleaned up [ 121.938307][ T8321] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 121.943535][ T8327] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 8336] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8302] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8302, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5002] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, [pid 8317] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8317] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] getdents64(3, [pid 8317] <... futex resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 8317] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5002] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8317] <... mmap resumed>) = 0x7f5047d10000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8317] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5002] lstat("./90/binderfs", [pid 8317] <... mprotect resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8317] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5002] unlink("./90/binderfs") = 0 [pid 8317] <... clone resumed>, parent_tid=[8338], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8338 [pid 8317] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8317] <... futex resumed>) = 0 [pid 8317] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8320] <... fsconfig resumed>) = 0 [pid 8320] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 8338 attached [pid 8320] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8315] exit_group(0 [pid 8327] <... mount resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 8338] set_robust_list(0x7f5047d309e0, 24 [pid 8336] <... futex resumed>) = ? [pid 8320] <... futex resumed>) = ? [pid 8315] <... exit_group resumed>) = ? [pid 8336] +++ exited with 0 +++ [pid 8320] +++ exited with 0 +++ [pid 8315] +++ exited with 0 +++ [pid 5000] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8315, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 8338] <... set_robust_list resumed>) = 0 [pid 8338] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4999] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8327] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8327] <... openat resumed>) = 3 [pid 4999] lstat("./90/binderfs", [pid 8327] chdir("./file0") = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8327] ioctl(4, LOOP_CLR_FD) = 0 [pid 4999] unlink("./90/binderfs" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8338] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8327] close(4 [pid 5000] lstat("./91/file0", [pid 4999] <... unlink resumed>) = 0 [pid 8338] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8327] <... close resumed>) = 0 [pid 8338] <... futex resumed>) = 1 [pid 8327] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8317] <... futex resumed>) = 0 [pid 4999] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8338] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8327] <... futex resumed>) = 1 [pid 8327] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8321] <... fsconfig resumed>) = 0 [pid 8326] <... futex resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8326] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8327] <... futex resumed>) = 0 [pid 8326] <... futex resumed>) = 1 [pid 5000] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] <... umount2 resumed>) = 0 [pid 8327] fspick(AT_FDCWD, ".", 0 [pid 8326] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8327] <... fspick resumed>) = 4 [pid 5004] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8327] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8327] <... futex resumed>) = 1 [pid 8326] <... futex resumed>) = 0 [pid 5004] lstat("./92/file0", [pid 5000] openat(AT_FDCWD, "./91/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8327] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8326] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8327] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8326] <... futex resumed>) = 0 [pid 5004] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8326] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8327] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5000] <... openat resumed>) = 4 [pid 5004] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8327] <... fsconfig resumed>) = 0 [pid 5000] fstat(4, [pid 8327] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8327] <... futex resumed>) = 1 [pid 8326] <... futex resumed>) = 0 [pid 5004] openat(AT_FDCWD, "./92/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] getdents64(4, [pid 8327] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8326] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8327] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8326] <... futex resumed>) = 0 [pid 8327] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8326] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... openat resumed>) = 4 [pid 5000] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5004] fstat(4, [pid 5000] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] close(4 [pid 5004] getdents64(4, [pid 5000] <... close resumed>) = 0 [pid 5000] rmdir("./91/file0" [pid 5004] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5004] getdents64(4, [pid 5000] <... rmdir resumed>) = 0 [pid 5004] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5000] getdents64(3, [pid 5004] close(4) = 0 [pid 5000] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5004] rmdir("./92/file0" [pid 5000] close(3 [pid 8321] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... rmdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 8321] <... futex resumed>) = 0 [ 121.946672][ T8320] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 121.992769][ T8321] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 8317] exit_group(0 [pid 8338] <... futex resumed>) = ? [pid 8317] <... exit_group resumed>) = ? [pid 5002] <... umount2 resumed>) = 0 [pid 8338] +++ exited with 0 +++ [pid 8327] <... fsconfig resumed>) = 0 [pid 5004] getdents64(3, [pid 5002] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] rmdir("./91" [pid 8327] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8321] +++ exited with 0 +++ [pid 8317] +++ exited with 0 +++ [pid 5004] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... rmdir resumed>) = 0 [pid 8327] <... futex resumed>) = 1 [pid 8326] <... futex resumed>) = 0 [pid 5004] close(3 [pid 5002] lstat("./90/file0", [pid 5000] mkdir("./92", 0777 [pid 8327] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8326] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... close resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 8327] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8326] <... futex resumed>) = 0 [pid 5004] rmdir("./92" [pid 5002] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8327] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8326] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... rmdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... openat resumed>) = 3 [pid 8327] <... futex resumed>) = 0 [pid 8326] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5004] mkdir("./93", 0777 [pid 5002] openat(AT_FDCWD, "./90/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] ioctl(3, LOOP_CLR_FD [pid 8327] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8326] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... mkdir resumed>) = 0 [pid 5002] <... openat resumed>) = 4 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8326] <... futex resumed>) = 0 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5002] fstat(4, [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8317, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5000] close(3 [pid 8326] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... openat resumed>) = 3 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... close resumed>) = 0 [pid 5004] ioctl(3, LOOP_CLR_FD [pid 5002] getdents64(4, [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5004] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5004] close(3 [pid 5002] getdents64(4, [pid 5000] <... clone resumed>, child_tidptr=0x5555562025d0) = 8340 [pid 5004] <... close resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] close(4) = 0 [pid 5001] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] <... clone resumed>, child_tidptr=0x5555562025d0) = 8341 [pid 5002] rmdir("./90/file0") = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5002] close(3 [pid 5001] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./90" [pid 5001] <... openat resumed>) = 3 ./strace-static-x86_64: Process 8341 attached [pid 5002] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 8340 attached [ 122.030491][ T8327] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 122.063484][ T8327] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [pid 5002] mkdir("./91", 0777 [pid 5001] fstat(3, [pid 8341] set_robust_list(0x5555562025e0, 24 [pid 8340] set_robust_list(0x5555562025e0, 24 [pid 5002] <... mkdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 8340] <... set_robust_list resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8340] chdir("./92" [pid 5002] <... openat resumed>) = 3 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8340] <... chdir resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 4999] lstat("./90/file0", [pid 8340] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8340] <... prctl resumed>) = 0 [pid 5002] close(3 [pid 4999] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8340] setpgid(0, 0 [pid 5002] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8340] <... setpgid resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] openat(AT_FDCWD, "./90/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8341] <... set_robust_list resumed>) = 0 [pid 8340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] getdents64(3, [pid 4999] <... openat resumed>) = 4 [pid 8341] chdir("./93" [pid 8340] <... openat resumed>) = 3 [pid 5002] <... clone resumed>, child_tidptr=0x5555562025d0) = 8342 [pid 4999] fstat(4, [pid 8340] write(3, "1000", 4 [pid 5001] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8341] <... chdir resumed>) = 0 [pid 8340] <... write resumed>) = 4 [pid 4999] getdents64(4, [pid 8340] close(3 [pid 4999] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8340] <... close resumed>) = 0 [pid 4999] getdents64(4, [pid 8341] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8340] symlink("/dev/binderfs", "./binderfs" [pid 5001] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8341] <... prctl resumed>) = 0 [pid 8340] <... symlink resumed>) = 0 [pid 4999] close(4 [pid 8340] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... close resumed>) = 0 [pid 8341] setpgid(0, 0 [pid 8340] <... futex resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] rmdir("./90/file0"./strace-static-x86_64: Process 8342 attached [pid 8341] <... setpgid resumed>) = 0 [pid 8340] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5001] lstat("./92/binderfs", [pid 4999] <... rmdir resumed>) = 0 [pid 8342] set_robust_list(0x5555562025e0, 24 [pid 8341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8340] <... mmap resumed>) = 0x7f50500f1000 [pid 4999] getdents64(3, [pid 8342] <... set_robust_list resumed>) = 0 [pid 8340] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 4999] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8342] chdir("./91" [pid 8341] <... openat resumed>) = 3 [pid 8340] <... mprotect resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] close(3 [pid 8342] <... chdir resumed>) = 0 [pid 8340] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] <... close resumed>) = 0 [pid 8342] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8341] write(3, "1000", 4 [pid 5001] unlink("./92/binderfs" [pid 4999] rmdir("./90" [pid 8342] <... prctl resumed>) = 0 [pid 8340] <... clone resumed>, parent_tid=[8344], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8344 [pid 4999] <... rmdir resumed>) = 0 [pid 8341] <... write resumed>) = 4 [pid 5001] <... unlink resumed>) = 0 [pid 8342] setpgid(0, 0 [pid 8340] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] mkdir("./91", 0777 [pid 8342] <... setpgid resumed>) = 0 [pid 8341] close(3 [pid 8340] <... futex resumed>) = 0 [pid 5001] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... mkdir resumed>) = 0 [pid 8342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8341] <... close resumed>) = 0 [pid 8340] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8342] <... openat resumed>) = 3 [pid 8341] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... openat resumed>) = 3 [pid 8342] write(3, "1000", 4 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 8342] <... write resumed>) = 4 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8342] close(3 [pid 4999] close(3 [pid 8342] <... close resumed>) = 0 [pid 8341] <... symlink resumed>) = 0 [pid 4999] <... close resumed>) = 0 ./strace-static-x86_64: Process 8344 attached [pid 8342] symlink("/dev/binderfs", "./binderfs" [pid 8341] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8344] set_robust_list(0x7f50501119e0, 24 [pid 8342] <... symlink resumed>) = 0 [pid 8344] <... set_robust_list resumed>) = 0 [pid 8342] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... clone resumed>, child_tidptr=0x5555562025d0) = 8345 [pid 8344] memfd_create("syzkaller", 0 [pid 8342] <... futex resumed>) = 0 [pid 8344] <... memfd_create resumed>) = 3 [pid 8342] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8342] <... mmap resumed>) = 0x7f50500f1000 [pid 8344] <... mmap resumed>) = 0x7f5047cf1000 [pid 8342] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8344] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8342] <... mprotect resumed>) = 0 [pid 8342] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8346], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8346 [pid 8342] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8326] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8342] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8326] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8326] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 8341] <... futex resumed>) = 0 [pid 8326] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8326] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 8345 attached [pid 8344] <... write resumed>) = 262144 [pid 8341] <... mmap resumed>) = 0x7f50500f1000 [pid 8326] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8345] set_robust_list(0x5555562025e0, 24) = 0 [pid 8344] munmap(0x7f5047cf1000, 262144 [pid 8341] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8326] <... clone resumed>, parent_tid=[8347], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8347 [pid 8345] chdir("./91" [pid 8344] <... munmap resumed>) = 0 [pid 8341] <... mprotect resumed>) = 0 [pid 8326] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8345] <... chdir resumed>) = 0 [pid 8344] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8326] <... futex resumed>) = 0 [pid 8345] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8344] <... openat resumed>) = 4 [pid 8326] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8345] <... prctl resumed>) = 0 [ 122.085842][ T8327] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 122.118198][ T8327] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 8344] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 8346 attached [pid 8345] setpgid(0, 0 [pid 8341] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8345] <... setpgid resumed>) = 0 [pid 8345] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8346] set_robust_list(0x7f50501119e0, 24 [pid 8345] <... openat resumed>) = 3 ./strace-static-x86_64: Process 8347 attached [pid 8345] write(3, "1000", 4 [pid 8347] set_robust_list(0x7f5047d309e0, 24 [pid 8345] <... write resumed>) = 4 [pid 8347] <... set_robust_list resumed>) = 0 [pid 8345] close(3 [pid 8347] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8345] <... close resumed>) = 0 [pid 8347] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8346] <... set_robust_list resumed>) = 0 [pid 8345] symlink("/dev/binderfs", "./binderfs" [pid 8341] <... clone resumed>, parent_tid=[8348], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8348 [pid 5001] <... umount2 resumed>) = 0 [pid 8347] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8345] <... symlink resumed>) = 0 [pid 8341] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8347] <... futex resumed>) = 1 [pid 8345] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8341] <... futex resumed>) = 0 [pid 8326] <... futex resumed>) = 0 [pid 8347] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8345] <... futex resumed>) = 0 [pid 8341] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5001] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8348 attached [pid 8346] memfd_create("syzkaller", 0 [pid 8345] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8348] set_robust_list(0x7f50501119e0, 24 [pid 8345] <... mmap resumed>) = 0x7f50500f1000 [pid 8348] <... set_robust_list resumed>) = 0 [pid 8345] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8348] memfd_create("syzkaller", 0 [pid 8346] <... memfd_create resumed>) = 3 [pid 8345] <... mprotect resumed>) = 0 [pid 8327] <... fsconfig resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8348] <... memfd_create resumed>) = 3 [pid 8345] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8348] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8346] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] lstat("./92/file0", [pid 8348] <... mmap resumed>) = 0x7f5047cf1000 [pid 8346] <... mmap resumed>) = 0x7f5047cf1000 [pid 8345] <... clone resumed>, parent_tid=[8349], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8349 [pid 8348] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8345] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8346] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8345] <... futex resumed>) = 0 [pid 8345] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5001] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8348] <... write resumed>) = 262144 [pid 5001] openat(AT_FDCWD, "./92/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 ./strace-static-x86_64: Process 8349 attached [pid 5001] fstat(4, [pid 8349] set_robust_list(0x7f50501119e0, 24 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8349] <... set_robust_list resumed>) = 0 [pid 8348] munmap(0x7f5047cf1000, 262144 [pid 5001] getdents64(4, [pid 8349] memfd_create("syzkaller", 0 [pid 8344] <... ioctl resumed>) = 0 [pid 8346] <... write resumed>) = 262144 [pid 8327] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8349] <... memfd_create resumed>) = 3 [pid 8348] <... munmap resumed>) = 0 [pid 8344] close(3 [pid 8326] exit_group(0 [pid 8349] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8348] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8347] <... futex resumed>) = ? [pid 8344] <... close resumed>) = 0 [pid 8326] <... exit_group resumed>) = ? [pid 8349] <... mmap resumed>) = 0x7f5047cf1000 [pid 8348] <... openat resumed>) = 4 [pid 8347] +++ exited with 0 +++ [pid 8346] munmap(0x7f5047cf1000, 262144 [pid 8344] mkdir("./file0", 0777 [pid 8327] <... futex resumed>) = ? [pid 5001] getdents64(4, [pid 8349] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8348] ioctl(4, LOOP_SET_FD, 3 [pid 8346] <... munmap resumed>) = 0 [pid 8344] <... mkdir resumed>) = 0 [pid 8327] +++ exited with 0 +++ [pid 8326] +++ exited with 0 +++ [pid 5001] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8346] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8344] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5001] close(4 [pid 8346] <... openat resumed>) = 4 [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8326, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5001] <... close resumed>) = 0 [ 122.136256][ T8344] loop1: detected capacity change from 0 to 512 [ 122.176173][ T8348] loop4: detected capacity change from 0 to 512 [pid 8346] ioctl(4, LOOP_SET_FD, 3 [pid 5005] restart_syscall(<... resuming interrupted clone ...> [pid 5001] rmdir("./92/file0" [pid 8349] <... write resumed>) = 262144 [pid 8348] <... ioctl resumed>) = 0 [pid 8346] <... ioctl resumed>) = 0 [pid 5005] <... restart_syscall resumed>) = 0 [pid 8349] munmap(0x7f5047cf1000, 262144 [pid 8348] close(3 [pid 5001] <... rmdir resumed>) = 0 [pid 8349] <... munmap resumed>) = 0 [pid 8348] <... close resumed>) = 0 [pid 8346] close(3 [pid 8349] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8348] mkdir("./file0", 0777 [pid 8349] <... openat resumed>) = 4 [pid 8346] <... close resumed>) = 0 [pid 5001] getdents64(3, [pid 8349] ioctl(4, LOOP_SET_FD, 3 [pid 8348] <... mkdir resumed>) = 0 [pid 8346] mkdir("./file0", 0777 [pid 5005] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8346] <... mkdir resumed>) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] close(3 [pid 8346] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5005] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... close resumed>) = 0 [pid 8349] <... ioctl resumed>) = 0 [pid 8348] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8349] close(3 [pid 5005] <... openat resumed>) = 3 [pid 5001] rmdir("./92" [pid 5005] fstat(3, [pid 5001] <... rmdir resumed>) = 0 [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] mkdir("./93", 0777 [pid 5005] getdents64(3, [pid 8349] <... close resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 5005] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5005] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... openat resumed>) = 3 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5005] lstat("./90/binderfs", [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5005] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] close(3 [pid 8349] mkdir("./file0", 0777 [pid 5005] unlink("./90/binderfs" [pid 5001] <... close resumed>) = 0 [pid 8349] <... mkdir resumed>) = 0 [pid 5005] <... unlink resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8354 attached [pid 8349] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [ 122.183789][ T8344] EXT4-fs: Ignoring removed oldalloc option [ 122.185925][ T8346] loop3: detected capacity change from 0 to 512 [ 122.202671][ T8349] loop0: detected capacity change from 0 to 512 [ 122.207344][ T8346] EXT4-fs: Ignoring removed oldalloc option [ 122.216349][ T8348] EXT4-fs: Ignoring removed oldalloc option [ 122.223152][ T8344] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 5005] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8354] set_robust_list(0x5555562025e0, 24 [pid 5001] <... clone resumed>, child_tidptr=0x5555562025d0) = 8354 [pid 8354] <... set_robust_list resumed>) = 0 [pid 8354] chdir("./93") = 0 [pid 8354] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8354] setpgid(0, 0) = 0 [pid 8354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8354] write(3, "1000", 4) = 4 [pid 8354] close(3) = 0 [pid 8354] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8354] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8354] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8354] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8354] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8355], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8355 [pid 8354] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8354] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8355 attached [pid 8355] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8355] memfd_create("syzkaller", 0) = 3 [pid 8355] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 8355] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 8355] munmap(0x7f5047cf1000, 262144) = 0 [pid 8355] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 122.239868][ T8349] EXT4-fs: Ignoring removed oldalloc option [ 122.248252][ T8346] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 122.257348][ T8344] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 122.259153][ T8346] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 8355] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8355] close(3) = 0 [pid 8355] mkdir("./file0", 0777) = 0 [pid 8355] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5005] <... umount2 resumed>) = 0 [pid 5005] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] lstat("./90/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] openat(AT_FDCWD, "./90/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5005] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [ 122.286001][ T8355] loop2: detected capacity change from 0 to 512 [ 122.297966][ T8355] EXT4-fs: Ignoring removed oldalloc option [ 122.299203][ T8344] EXT4-fs (loop1): 1 truncate cleaned up [ 122.310611][ T8348] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 122.321153][ T8344] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 8344] <... mount resumed>) = 0 [pid 5005] getdents64(4, [pid 8344] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5005] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5005] close(4) = 0 [pid 5005] rmdir("./90/file0") = 0 [pid 5005] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5005] close(3) = 0 [pid 5005] rmdir("./90") = 0 [pid 5005] mkdir("./91", 0777 [pid 8344] <... openat resumed>) = 3 [pid 8344] chdir("./file0" [pid 5005] <... mkdir resumed>) = 0 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5005] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5005] close(3) = 0 [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8348] <... mount resumed>) = 0 [pid 8344] <... chdir resumed>) = 0 [pid 5005] <... clone resumed>, child_tidptr=0x5555562025d0) = 8361 ./strace-static-x86_64: Process 8361 attached [pid 8361] set_robust_list(0x5555562025e0, 24) = 0 [ 122.335930][ T8346] EXT4-fs (loop3): 1 truncate cleaned up [ 122.336680][ T8348] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 122.342550][ T8349] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 122.365431][ T8348] EXT4-fs (loop4): 1 truncate cleaned up [ 122.371578][ T8348] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 8361] chdir("./91") = 0 [pid 8361] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8361] setpgid(0, 0) = 0 [pid 8361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8361] write(3, "1000", 4) = 4 [pid 8361] close(3) = 0 [pid 8348] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8346] <... mount resumed>) = 0 [pid 8344] ioctl(4, LOOP_CLR_FD [pid 8348] <... openat resumed>) = 3 [pid 8346] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8344] <... ioctl resumed>) = 0 [pid 8348] chdir("./file0" [pid 8346] <... openat resumed>) = 3 [pid 8344] close(4 [pid 8348] <... chdir resumed>) = 0 [pid 8346] chdir("./file0" [pid 8344] <... close resumed>) = 0 [pid 8361] symlink("/dev/binderfs", "./binderfs" [pid 8348] ioctl(4, LOOP_CLR_FD [pid 8346] <... chdir resumed>) = 0 [pid 8344] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8361] <... symlink resumed>) = 0 [pid 8348] <... ioctl resumed>) = 0 [pid 8346] ioctl(4, LOOP_CLR_FD [pid 8344] <... futex resumed>) = 1 [pid 8340] <... futex resumed>) = 0 [pid 8361] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8361] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8361] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8361] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8363], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8363 [pid 8361] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8361] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8348] close(4 [pid 8346] <... ioctl resumed>) = 0 [pid 8344] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8340] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8348] <... close resumed>) = 0 [pid 8346] close(4 [pid 8344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8340] <... futex resumed>) = 0 [pid 8348] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8346] <... close resumed>) = 0 [pid 8344] fspick(AT_FDCWD, ".", 0 [pid 8340] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8348] <... futex resumed>) = 1 [pid 8346] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8344] <... fspick resumed>) = 4 [pid 8341] <... futex resumed>) = 0 [pid 8348] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8346] <... futex resumed>) = 1 [pid 8344] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8342] <... futex resumed>) = 0 [ 122.384493][ T8346] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.401256][ T8355] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 122.406546][ T8349] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 8341] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8363 attached [pid 8348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8346] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8344] <... futex resumed>) = 1 [pid 8342] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8341] <... futex resumed>) = 0 [pid 8340] <... futex resumed>) = 0 [pid 8363] set_robust_list(0x7f50501119e0, 24 [pid 8348] fspick(AT_FDCWD, ".", 0 [pid 8346] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8344] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8342] <... futex resumed>) = 0 [pid 8341] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8349] <... mount resumed>) = 0 [pid 8340] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8348] <... fspick resumed>) = 4 [pid 8346] fspick(AT_FDCWD, ".", 0 [pid 8344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8342] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8340] <... futex resumed>) = 0 [pid 8348] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8346] <... fspick resumed>) = 4 [pid 8344] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8340] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8348] <... futex resumed>) = 0 [pid 8346] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8344] <... fsconfig resumed>) = 0 [pid 8348] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8346] <... futex resumed>) = 1 [pid 8344] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8342] <... futex resumed>) = 0 [pid 8346] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8344] <... futex resumed>) = 1 [pid 8342] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8340] <... futex resumed>) = 0 [pid 8346] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8344] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8342] <... futex resumed>) = 0 [pid 8340] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8346] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8342] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8340] <... futex resumed>) = 0 [pid 8346] <... fsconfig resumed>) = 0 [pid 8344] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8340] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8346] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8342] <... futex resumed>) = 0 [pid 8346] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8342] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8363] <... set_robust_list resumed>) = 0 [pid 8346] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8342] <... futex resumed>) = 0 [pid 8341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 122.432425][ T8355] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 122.448862][ T8349] EXT4-fs (loop0): 1 truncate cleaned up [ 122.454584][ T8349] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.455017][ T8355] EXT4-fs (loop2): 1 truncate cleaned up [ 122.473616][ T8355] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 8346] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8342] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8363] memfd_create("syzkaller", 0 [pid 8355] <... mount resumed>) = 0 [pid 8349] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8341] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8363] <... memfd_create resumed>) = 3 [pid 8355] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8349] <... openat resumed>) = 3 [pid 8348] <... futex resumed>) = 0 [pid 8341] <... futex resumed>) = 1 [pid 8363] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8355] <... openat resumed>) = 3 [pid 8349] chdir("./file0" [pid 8341] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8363] <... mmap resumed>) = 0x7f5047cf1000 [pid 8355] chdir("./file0" [pid 8349] <... chdir resumed>) = 0 [pid 8363] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8355] <... chdir resumed>) = 0 [pid 8349] ioctl(4, LOOP_CLR_FD [pid 8363] <... write resumed>) = 262144 [pid 8355] ioctl(4, LOOP_CLR_FD [pid 8349] <... ioctl resumed>) = 0 [pid 8363] munmap(0x7f5047cf1000, 262144 [pid 8355] <... ioctl resumed>) = 0 [pid 8349] close(4 [pid 8363] <... munmap resumed>) = 0 [pid 8355] close(4 [pid 8349] <... close resumed>) = 0 [pid 8363] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 8355] <... close resumed>) = 0 [pid 8349] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8363] <... openat resumed>) = 4 [pid 8355] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8349] <... futex resumed>) = 1 [pid 8363] ioctl(4, LOOP_SET_FD, 3 [pid 8355] <... futex resumed>) = 1 [pid 8354] <... futex resumed>) = 0 [pid 8349] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8363] <... ioctl resumed>) = 0 [pid 8355] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8354] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8348] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8345] <... futex resumed>) = 0 [pid 8344] <... fsconfig resumed>) = 0 [pid 8363] close(3 [pid 8355] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8354] <... futex resumed>) = 0 [pid 8363] <... close resumed>) = 0 [pid 8355] fspick(AT_FDCWD, ".", 0 [pid 8354] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8344] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8363] mkdir("./file0", 0777 [pid 8355] <... fspick resumed>) = 4 [pid 8363] <... mkdir resumed>) = 0 [pid 8355] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8344] <... futex resumed>) = 1 [pid 8363] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8355] <... futex resumed>) = 1 [pid 8354] <... futex resumed>) = 0 [pid 8355] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8354] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [ 122.490205][ T8344] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 122.496202][ T8363] loop5: detected capacity change from 0 to 512 [ 122.508020][ T8346] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 122.517776][ T8363] EXT4-fs: Ignoring removed oldalloc option [pid 8348] <... fsconfig resumed>) = 0 [pid 8345] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8344] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8340] <... futex resumed>) = 0 [pid 8355] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8354] <... futex resumed>) = 0 [pid 8349] <... futex resumed>) = 0 [pid 8348] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8345] <... futex resumed>) = 1 [pid 8340] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8355] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8354] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8349] fspick(AT_FDCWD, ".", 0 [pid 8348] <... futex resumed>) = 1 [pid 8345] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8341] <... futex resumed>) = 0 [pid 8340] <... futex resumed>) = 1 [pid 8355] <... fsconfig resumed>) = 0 [pid 8349] <... fspick resumed>) = 4 [pid 8348] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8341] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8340] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8355] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8349] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8341] <... futex resumed>) = 0 [pid 8355] <... futex resumed>) = 1 [pid 8354] <... futex resumed>) = 0 [pid 8349] <... futex resumed>) = 1 [pid 8348] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8345] <... futex resumed>) = 0 [pid 8341] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8355] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8354] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8349] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8355] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8354] <... futex resumed>) = 0 [pid 8345] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8355] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8354] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8349] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8346] <... fsconfig resumed>) = 0 [pid 8345] <... futex resumed>) = 0 [pid 8345] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8346] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8342] <... futex resumed>) = 0 [pid 8346] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8342] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8349] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8342] <... futex resumed>) = 0 [pid 8346] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8342] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8349] <... fsconfig resumed>) = 0 [pid 8346] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8349] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8346] <... futex resumed>) = 1 [pid 8346] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8342] <... futex resumed>) = 0 [pid 8342] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8346] <... futex resumed>) = 0 [pid 8342] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8346] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8349] <... futex resumed>) = 1 [pid 8344] <... futex resumed>) = 0 [pid 8344] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 8344] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8344] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8355] <... fsconfig resumed>) = 0 [pid 8355] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8354] <... futex resumed>) = 0 [pid 8354] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8354] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8355] <... futex resumed>) = 1 [pid 8355] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 8355] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8354] <... futex resumed>) = 0 [pid 8354] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8354] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8355] <... futex resumed>) = 1 [pid 8355] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8345] <... futex resumed>) = 0 [pid 8340] <... futex resumed>) = 0 [pid 8345] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8340] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8345] <... futex resumed>) = 0 [pid 8349] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8344] <... futex resumed>) = 0 [pid 8345] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8340] <... futex resumed>) = 1 [pid 8344] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 122.531734][ T8355] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 122.543730][ T8346] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 122.554156][ T8344] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 122.554280][ T8355] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 122.574226][ T8348] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 8340] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8348] <... fsconfig resumed>) = 0 [pid 8342] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8341] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8342] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8341] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8342] <... futex resumed>) = 0 [pid 8341] <... futex resumed>) = 0 [pid 8342] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8342] <... mmap resumed>) = 0x7f5047d10000 [pid 8341] <... mmap resumed>) = 0x7f5047d10000 [pid 8342] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8341] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8342] <... mprotect resumed>) = 0 [pid 8341] <... mprotect resumed>) = 0 [pid 8342] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8341] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8342] <... clone resumed>, parent_tid=[8364], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8364 [pid 8341] <... clone resumed>, parent_tid=[8365], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8365 [pid 8342] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8341] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8342] <... futex resumed>) = 0 [pid 8341] <... futex resumed>) = 0 [pid 8342] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8341] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8364 attached [pid 8364] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8364] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EROFS (Read-only file system) [pid 8364] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8342] <... futex resumed>) = 0 [pid 8364] <... futex resumed>) = 1 [pid 8354] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8345] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8340] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8345] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8340] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8345] <... futex resumed>) = 0 [pid 8340] <... futex resumed>) = 0 [pid 8345] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8340] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8345] <... mmap resumed>) = 0x7f5047d10000 [pid 8340] <... mmap resumed>) = 0x7f5047d10000 [pid 8345] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8340] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8345] <... mprotect resumed>) = 0 [pid 8340] <... mprotect resumed>) = 0 [pid 8345] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8340] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8345] <... clone resumed>, parent_tid=[8366], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8366 [pid 8340] <... clone resumed>, parent_tid=[8367], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8367 [pid 8345] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8340] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8345] <... futex resumed>) = 0 [pid 8340] <... futex resumed>) = 0 [pid 8345] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8340] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8364] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 8367 attached [pid 8367] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8367] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8354] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8354] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8348] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8366 attached [pid 8366] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8354] <... mmap resumed>) = 0x7f5047d10000 [pid 8348] <... futex resumed>) = 0 [pid 8367] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 8366] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8354] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8367] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8366] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8367] <... futex resumed>) = 1 [pid 8366] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8340] <... futex resumed>) = 0 [pid 8367] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8366] <... futex resumed>) = 1 [pid 8354] <... mprotect resumed>) = 0 [pid 8345] <... futex resumed>) = 0 [pid 8348] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8366] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8345] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8366] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8354] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8345] <... futex resumed>) = 0 [pid 8366] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8345] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8365 attached [pid 8354] <... clone resumed>, parent_tid=[8370], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8370 [ 122.578895][ T8344] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 122.593160][ T8346] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 122.603393][ T8349] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 122.603490][ T8355] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 122.628886][ T8363] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8365] set_robust_list(0x7f5047d309e0, 24 [pid 8354] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8349] <... fsconfig resumed>) = 0 [pid 8349] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8349] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8341] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 8370 attached [pid 8341] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8370] set_robust_list(0x7f5047d309e0, 24 [pid 8348] <... futex resumed>) = 0 [pid 8341] <... futex resumed>) = 1 [pid 8370] <... set_robust_list resumed>) = 0 [pid 8348] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8341] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8370] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EROFS (Read-only file system) [pid 8370] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8370] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8354] <... futex resumed>) = 1 [pid 8370] <... futex resumed>) = 0 [pid 8365] <... set_robust_list resumed>) = 0 [pid 8345] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8345] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8345] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8354] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8370] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8365] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 8354] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8349] <... futex resumed>) = 0 [pid 8365] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [ 122.628915][ T8366] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 122.639391][ T8363] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 122.649791][ T8348] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 122.671658][ T8366] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 122.672335][ T8348] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8349] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8365] <... futex resumed>) = 0 [pid 8365] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8349] <... openat resumed>) = 5 [pid 8349] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8345] <... futex resumed>) = 0 [pid 8349] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8346] <... fsconfig resumed>) = 0 [pid 8344] <... fsconfig resumed>) = 0 [ 122.690541][ T8346] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 122.694685][ T8363] EXT4-fs (loop5): 1 truncate cleaned up [ 122.701623][ T8344] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 122.708527][ T8363] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.718782][ T8355] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 8363] <... mount resumed>) = 0 [pid 8355] <... fsconfig resumed>) = 0 [pid 8346] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8344] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8341] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8340] exit_group(0 [pid 8355] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8346] <... futex resumed>) = 0 [pid 8344] <... futex resumed>) = ? [pid 8340] <... exit_group resumed>) = ? [pid 8355] <... futex resumed>) = 0 [pid 8346] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8344] +++ exited with 0 +++ [pid 8355] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8354] exit_group(0 [pid 8342] exit_group(0 [pid 8355] <... futex resumed>) = ? [pid 8354] <... exit_group resumed>) = ? [pid 8346] <... futex resumed>) = ? [pid 8342] <... exit_group resumed>) = ? [pid 8355] +++ exited with 0 +++ [pid 8346] +++ exited with 0 +++ [pid 8363] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8363] chdir("./file0") = 0 [pid 8363] ioctl(4, LOOP_CLR_FD) = 0 [pid 8363] close(4 [pid 8370] <... futex resumed>) = ? [pid 8367] <... futex resumed>) = ? [pid 8364] <... futex resumed>) = ? [pid 8363] <... close resumed>) = 0 [pid 8348] <... fsconfig resumed>) = 0 [pid 8341] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8370] +++ exited with 0 +++ [pid 8367] +++ exited with 0 +++ [pid 8365] <... futex resumed>) = 0 [pid 8364] +++ exited with 0 +++ [pid 8363] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8354] +++ exited with 0 +++ [pid 8342] +++ exited with 0 +++ [pid 8341] <... futex resumed>) = 1 [pid 8340] +++ exited with 0 +++ [pid 8365] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8363] <... futex resumed>) = 1 [pid 8361] <... futex resumed>) = 0 [pid 8341] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8365] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8363] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8361] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8342, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8354, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8340, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 8365] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8363] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8361] <... futex resumed>) = 0 [pid 8348] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8365] <... futex resumed>) = 1 [pid 8363] fspick(AT_FDCWD, ".", 0 [pid 8361] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8348] <... futex resumed>) = 0 [pid 8341] <... futex resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8365] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8363] <... fspick resumed>) = 4 [pid 8348] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8341] exit_group(0 [pid 5002] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8365] <... futex resumed>) = ? [pid 8363] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8348] <... futex resumed>) = ? [pid 8341] <... exit_group resumed>) = ? [pid 5002] <... openat resumed>) = 3 [pid 5001] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 3 [pid 8366] <... fsconfig resumed>) = 0 [pid 8365] +++ exited with 0 +++ [pid 8363] <... futex resumed>) = 1 [pid 8361] <... futex resumed>) = 0 [pid 8348] +++ exited with 0 +++ [pid 8366] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8341] +++ exited with 0 +++ [pid 8366] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8341, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 8363] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8361] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] fstat(3, [pid 5001] fstat(3, [pid 5000] fstat(3, [pid 8363] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8361] <... futex resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8363] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8361] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] getdents64(3, [pid 5001] getdents64(3, [pid 8363] <... fsconfig resumed>) = 0 [pid 8345] exit_group(0 [pid 5000] getdents64(3, [pid 8363] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8349] <... futex resumed>) = ? [pid 8345] <... exit_group resumed>) = ? [pid 5002] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5001] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 8363] <... futex resumed>) = 1 [pid 8361] <... futex resumed>) = 0 [pid 8349] +++ exited with 0 +++ [pid 5002] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 8366] <... futex resumed>) = ? [pid 8366] +++ exited with 0 +++ [pid 8345] +++ exited with 0 +++ [pid 8363] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8361] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8363] <... futex resumed>) = 0 [pid 8361] <... futex resumed>) = 1 [pid 8363] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8361] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8345, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./92/binderfs", [pid 4999] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] lstat("./91/binderfs", [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5004] <... openat resumed>) = 3 [pid 5002] unlink("./91/binderfs" [pid 5001] lstat("./93/binderfs", [pid 5000] unlink("./92/binderfs" [pid 4999] <... openat resumed>) = 3 [ 122.731367][ T8348] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 122.755526][ T8366] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 5004] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5004] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./93/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5004] unlink("./93/binderfs") = 0 [pid 5004] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... unlink resumed>) = 0 [pid 5002] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./93/binderfs" [pid 5000] <... unlink resumed>) = 0 [pid 4999] fstat(3, [pid 5001] <... unlink resumed>) = 0 [pid 5001] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./91/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8363] <... fsconfig resumed>) = 0 [pid 4999] unlink("./91/binderfs" [pid 8363] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... unlink resumed>) = 0 [pid 8361] <... futex resumed>) = 0 [pid 4999] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8363] <... futex resumed>) = 1 [pid 8361] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8363] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8361] <... futex resumed>) = 0 [pid 8363] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8361] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8363] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8361] <... futex resumed>) = 0 [pid 8363] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8361] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8361] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./92/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./91/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] openat(AT_FDCWD, "./92/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5004] <... umount2 resumed>) = 0 [pid 5002] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] fstat(4, [pid 4999] lstat("./91/file0", [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8361] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5004] lstat("./93/file0", [pid 5001] lstat("./93/file0", [pid 5000] getdents64(4, [pid 4999] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8361] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] openat(AT_FDCWD, "./91/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8361] <... futex resumed>) = 0 [pid 5004] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... openat resumed>) = 4 [pid 5001] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] getdents64(4, [pid 4999] openat(AT_FDCWD, "./91/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8361] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 4999] <... openat resumed>) = 4 [pid 8361] <... mmap resumed>) = 0x7f5047d10000 [pid 5004] openat(AT_FDCWD, "./93/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] fstat(4, [pid 5001] openat(AT_FDCWD, "./93/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] close(4 [pid 4999] fstat(4, [pid 8361] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5004] <... openat resumed>) = 4 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... openat resumed>) = 4 [pid 5000] <... close resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8361] <... mprotect resumed>) = 0 [pid 5004] fstat(4, [pid 5002] getdents64(4, [ 122.787566][ T8363] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 122.807135][ T8363] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 122.821561][ T8363] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 5001] fstat(4, [pid 5000] rmdir("./92/file0" [pid 4999] getdents64(4, [pid 8361] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5004] getdents64(4, [pid 5002] getdents64(4, [pid 5001] getdents64(4, [pid 5000] getdents64(3, [pid 4999] getdents64(4, [pid 8361] <... clone resumed>, parent_tid=[8377], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8377 [pid 5004] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5000] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 4999] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8361] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] getdents64(4, [pid 5001] getdents64(4, [pid 5000] close(3 [pid 4999] close(4 [pid 8361] <... futex resumed>) = 0 [pid 5004] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5002] close(4 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 8361] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] close(4 [pid 5002] <... close resumed>) = 0 [pid 5001] close(4 [pid 5000] rmdir("./92" [pid 4999] rmdir("./91/file0"./strace-static-x86_64: Process 8377 attached [pid 5004] <... close resumed>) = 0 [pid 5002] rmdir("./91/file0" [pid 5001] <... close resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 8377] set_robust_list(0x7f5047d309e0, 24 [pid 5004] rmdir("./93/file0" [pid 5001] rmdir("./93/file0" [pid 5000] mkdir("./93", 0777 [pid 4999] getdents64(3, [pid 5004] <... rmdir resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5004] getdents64(3, [pid 5001] getdents64(3, [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4999] close(3 [pid 5004] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] <... openat resumed>) = 3 [pid 4999] <... close resumed>) = 0 [pid 5004] close(3 [pid 5001] close(3 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] rmdir("./91" [pid 5004] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... rmdir resumed>) = 0 [pid 5004] rmdir("./93" [pid 5001] rmdir("./93" [pid 5000] close(3 [pid 4999] mkdir("./92", 0777 [pid 5004] <... rmdir resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5004] mkdir("./94", 0777 [pid 5001] mkdir("./94", 0777 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5004] <... mkdir resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 5002] getdents64(3, [pid 4999] <... openat resumed>) = 3 [pid 8377] <... set_robust_list resumed>) = 0 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5000] <... clone resumed>, child_tidptr=0x5555562025d0) = 8378 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 8377] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5004] <... openat resumed>) = 3 [pid 5002] close(3 [pid 5001] <... openat resumed>) = 3 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5004] ioctl(3, LOOP_CLR_FD [pid 5002] <... close resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4999] close(3 [pid 5004] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... close resumed>) = 0 [pid 5004] close(3 [pid 5001] close(3 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5004] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... clone resumed>, child_tidptr=0x5555562025d0) = 8379 [pid 5004] <... clone resumed>, child_tidptr=0x5555562025d0) = 8380 [pid 5001] <... clone resumed>, child_tidptr=0x5555562025d0) = 8381 ./strace-static-x86_64: Process 8378 attached [pid 8378] set_robust_list(0x5555562025e0, 24) = 0 [pid 8378] chdir("./93") = 0 [pid 8378] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 8379 attached ) = 0 ./strace-static-x86_64: Process 8380 attached [pid 8379] set_robust_list(0x5555562025e0, 24 [pid 8378] setpgid(0, 0 [pid 8380] set_robust_list(0x5555562025e0, 24 [pid 8379] <... set_robust_list resumed>) = 0 [pid 8378] <... setpgid resumed>) = 0 [pid 8380] <... set_robust_list resumed>) = 0 [pid 8379] chdir("./92" [pid 8378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8380] chdir("./94" [pid 8379] <... chdir resumed>) = 0 [pid 8378] <... openat resumed>) = 3 [pid 5002] rmdir("./91" [pid 8380] <... chdir resumed>) = 0 [pid 8379] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8378] write(3, "1000", 4./strace-static-x86_64: Process 8381 attached [pid 8380] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8379] <... prctl resumed>) = 0 [pid 8378] <... write resumed>) = 4 [pid 5002] <... rmdir resumed>) = 0 [pid 8381] set_robust_list(0x5555562025e0, 24 [pid 8380] <... prctl resumed>) = 0 [pid 8379] setpgid(0, 0 [pid 8378] close(3 [pid 5002] mkdir("./92", 0777 [pid 8381] <... set_robust_list resumed>) = 0 [pid 8380] setpgid(0, 0 [pid 8379] <... setpgid resumed>) = 0 [pid 8378] <... close resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 8381] chdir("./94" [pid 8380] <... setpgid resumed>) = 0 [pid 8379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8378] symlink("/dev/binderfs", "./binderfs" [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8381] <... chdir resumed>) = 0 [pid 8380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8379] <... openat resumed>) = 3 [pid 8378] <... symlink resumed>) = 0 [pid 8380] <... openat resumed>) = 3 [pid 8379] write(3, "1000", 4 [pid 8378] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8380] write(3, "1000", 4 [pid 8379] <... write resumed>) = 4 [pid 8378] <... futex resumed>) = 0 [pid 8381] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8380] <... write resumed>) = 4 [pid 8379] close(3 [pid 8378] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5002] <... openat resumed>) = 3 [pid 8381] <... prctl resumed>) = 0 [pid 8380] close(3 [pid 8379] <... close resumed>) = 0 [pid 8378] <... mmap resumed>) = 0x7f50500f1000 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 8381] setpgid(0, 0 [pid 8380] <... close resumed>) = 0 [pid 8379] symlink("/dev/binderfs", "./binderfs" [pid 8378] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8381] <... setpgid resumed>) = 0 [pid 8380] symlink("/dev/binderfs", "./binderfs" [pid 8379] <... symlink resumed>) = 0 [pid 8378] <... mprotect resumed>) = 0 [pid 8363] <... fsconfig resumed>) = 0 [pid 8361] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5002] close(3 [pid 8381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8380] <... symlink resumed>) = 0 [pid 8379] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8378] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8363] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... close resumed>) = 0 [pid 8381] <... openat resumed>) = 3 [pid 8380] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8379] <... futex resumed>) = 0 [pid 8363] <... futex resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8381] write(3, "1000", 4 [pid 8380] <... futex resumed>) = 0 [ 122.881678][ T8363] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 122.895733][ T8377] __quota_error: 160 callbacks suppressed [ 122.895750][ T8377] Quota error (device loop5): write_blk: dquota write failed [pid 8379] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8378] <... clone resumed>, parent_tid=[8382], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8382 [pid 8380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8379] <... mmap resumed>) = 0x7f50500f1000 [pid 8378] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8380] <... mmap resumed>) = 0x7f50500f1000 [pid 8379] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8378] <... futex resumed>) = 0 [pid 8380] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8379] <... mprotect resumed>) = 0 [pid 8378] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8380] <... mprotect resumed>) = 0 [pid 8379] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8380] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8379] <... clone resumed>, parent_tid=[8383], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8383 [pid 8380] <... clone resumed>, parent_tid=[8384], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8384 [pid 8379] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8380] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8379] <... futex resumed>) = 0 [pid 8380] <... futex resumed>) = 0 [pid 8379] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8380] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8382 attached [pid 8382] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8363] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8382] memfd_create("syzkaller", 0 [pid 8381] <... write resumed>) = 4 [pid 8382] <... memfd_create resumed>) = 3 [pid 8381] close(3 [pid 5002] <... clone resumed>, child_tidptr=0x5555562025d0) = 8385 [pid 8382] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8381] <... close resumed>) = 0 ./strace-static-x86_64: Process 8385 attached ./strace-static-x86_64: Process 8383 attached [pid 8382] <... mmap resumed>) = 0x7f5047cf1000 [pid 8381] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 8384 attached [pid 8385] set_robust_list(0x5555562025e0, 24 [pid 8383] set_robust_list(0x7f50501119e0, 24 [pid 8382] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8381] <... symlink resumed>) = 0 [pid 8385] <... set_robust_list resumed>) = 0 [pid 8384] set_robust_list(0x7f50501119e0, 24 [pid 8383] <... set_robust_list resumed>) = 0 [pid 8381] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8385] chdir("./92" [pid 8384] <... set_robust_list resumed>) = 0 [pid 8383] memfd_create("syzkaller", 0 [pid 8381] <... futex resumed>) = 0 [pid 8385] <... chdir resumed>) = 0 [pid 8384] memfd_create("syzkaller", 0 [pid 8383] <... memfd_create resumed>) = 3 [pid 8382] <... write resumed>) = 262144 [pid 8381] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8385] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8384] <... memfd_create resumed>) = 3 [pid 8383] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8381] <... mmap resumed>) = 0x7f50500f1000 [pid 8385] <... prctl resumed>) = 0 [pid 8384] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8383] <... mmap resumed>) = 0x7f5047cf1000 [pid 8382] munmap(0x7f5047cf1000, 262144 [pid 8381] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8385] setpgid(0, 0 [pid 8384] <... mmap resumed>) = 0x7f5047cf1000 [pid 8383] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8381] <... mprotect resumed>) = 0 [pid 8377] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8385] <... setpgid resumed>) = 0 [pid 8384] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8383] <... write resumed>) = 262144 [pid 8382] <... munmap resumed>) = 0 [pid 8381] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8377] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8383] munmap(0x7f5047cf1000, 262144 [pid 8382] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8383] <... munmap resumed>) = 0 [pid 8382] <... openat resumed>) = 4 [pid 8383] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8382] ioctl(4, LOOP_SET_FD, 3 [pid 8385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8384] <... write resumed>) = 262144 [pid 8383] <... openat resumed>) = 4 [pid 8377] <... futex resumed>) = 0 [pid 8385] <... openat resumed>) = 3 [pid 8384] munmap(0x7f5047cf1000, 262144 [pid 8383] ioctl(4, LOOP_SET_FD, 3 [pid 8381] <... clone resumed>, parent_tid=[8386], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8386 [pid 8377] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8361] exit_group(0 [pid 8385] write(3, "1000", 4) = 4 [pid 8384] <... munmap resumed>) = 0 [pid 8381] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8377] <... futex resumed>) = ? [pid 8363] <... futex resumed>) = ? [pid 8361] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 8386 attached [pid 8386] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8386] memfd_create("syzkaller", 0) = 3 [pid 8386] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8385] close(3 [pid 8384] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8381] <... futex resumed>) = 0 [pid 8377] +++ exited with 0 +++ [pid 8363] +++ exited with 0 +++ [pid 8386] <... mmap resumed>) = 0x7f5047cf1000 [pid 8385] <... close resumed>) = 0 [pid 8384] <... openat resumed>) = 4 [pid 8381] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8361] +++ exited with 0 +++ [pid 8385] symlink("/dev/binderfs", "./binderfs" [pid 8384] ioctl(4, LOOP_SET_FD, 3 [pid 8383] <... ioctl resumed>) = 0 [pid 8382] <... ioctl resumed>) = 0 [pid 8386] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8385] <... symlink resumed>) = 0 [ 122.931687][ T8377] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 122.963768][ T8382] loop1: detected capacity change from 0 to 512 [ 122.973867][ T8383] loop0: detected capacity change from 0 to 512 [pid 8383] close(3) = 0 [pid 8383] mkdir("./file0", 0777) = 0 [pid 8383] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8386] <... write resumed>) = 262144 [pid 8385] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8384] <... ioctl resumed>) = 0 [pid 8382] close(3 [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8361, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 8386] munmap(0x7f5047cf1000, 262144 [pid 8385] <... futex resumed>) = 0 [pid 8384] close(3 [pid 8382] <... close resumed>) = 0 [pid 5005] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8386] <... munmap resumed>) = 0 [pid 8385] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8384] <... close resumed>) = 0 [pid 8382] mkdir("./file0", 0777 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8386] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8385] <... mmap resumed>) = 0x7f50500f1000 [pid 8384] mkdir("./file0", 0777 [pid 8382] <... mkdir resumed>) = 0 [pid 5005] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8386] <... openat resumed>) = 4 [pid 8385] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8384] <... mkdir resumed>) = 0 [pid 8382] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5005] <... openat resumed>) = 3 [pid 8386] ioctl(4, LOOP_SET_FD, 3 [pid 8385] <... mprotect resumed>) = 0 [pid 8384] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8385] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5005] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8385] <... clone resumed>, parent_tid=[8387], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8387 [pid 5005] getdents64(3, [pid 8385] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5005] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 8387 attached [pid 8386] <... ioctl resumed>) = 0 [pid 8385] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5005] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8387] set_robust_list(0x7f50501119e0, 24 [pid 8386] close(3 [pid 8387] <... set_robust_list resumed>) = 0 [pid 8386] <... close resumed>) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8387] memfd_create("syzkaller", 0 [pid 8386] mkdir("./file0", 0777 [pid 5005] lstat("./91/binderfs", [pid 8387] <... memfd_create resumed>) = 3 [pid 5005] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8386] <... mkdir resumed>) = 0 [pid 8387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8386] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5005] unlink("./91/binderfs" [pid 8387] <... mmap resumed>) = 0x7f5047cf1000 [pid 5005] <... unlink resumed>) = 0 [pid 8387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5005] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8387] <... write resumed>) = 262144 [ 122.988834][ T8384] loop4: detected capacity change from 0 to 512 [ 122.992744][ T8383] EXT4-fs: Ignoring removed oldalloc option [ 123.001666][ T8382] EXT4-fs: Ignoring removed oldalloc option [ 123.003763][ T8384] EXT4-fs: Ignoring removed oldalloc option [ 123.014730][ T8386] loop2: detected capacity change from 0 to 512 [ 123.028033][ T8386] EXT4-fs: Ignoring removed oldalloc option [pid 8387] munmap(0x7f5047cf1000, 262144) = 0 [pid 8387] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 8387] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8387] close(3) = 0 [pid 8387] mkdir("./file0", 0777) = 0 [ 123.029528][ T8384] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 123.041153][ T8387] loop3: detected capacity change from 0 to 512 [ 123.048593][ T8382] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 123.052459][ T8387] EXT4-fs: Ignoring removed oldalloc option [ 123.061720][ T8383] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 123.063206][ T8384] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 123.080201][ T8383] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 123.085654][ T8384] Quota error (device loop4): write_blk: dquota write failed [ 123.108441][ T8383] Quota error (device loop0): write_blk: dquota write failed [ 123.109088][ T8384] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 123.115886][ T8383] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [pid 8387] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5005] <... umount2 resumed>) = 0 [pid 8384] <... mount resumed>) = 0 [pid 8384] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8384] chdir("./file0") = 0 [pid 8384] ioctl(4, LOOP_CLR_FD) = 0 [pid 8384] close(4) = 0 [pid 8384] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8380] <... futex resumed>) = 0 [pid 8380] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8380] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8384] <... futex resumed>) = 1 [pid 8384] fspick(AT_FDCWD, ".", 0) = 4 [pid 8384] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8380] <... futex resumed>) = 0 [pid 8380] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8380] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8384] <... futex resumed>) = 1 [pid 8384] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 8384] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8380] <... futex resumed>) = 0 [pid 8380] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8380] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8384] <... futex resumed>) = 1 [pid 8384] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5005] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] lstat("./91/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] openat(AT_FDCWD, "./91/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5005] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5005] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5005] close(4) = 0 [pid 5005] rmdir("./91/file0") = 0 [pid 5005] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5005] close(3) = 0 [pid 5005] rmdir("./91") = 0 [ 123.137121][ T8382] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 123.152256][ T8386] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 123.153448][ T8384] EXT4-fs (loop4): 1 truncate cleaned up [ 123.167504][ T8384] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.179205][ T8382] Quota error (device loop1): write_blk: dquota write failed [pid 5005] mkdir("./92", 0777) = 0 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5005] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5005] close(3) = 0 [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 8398 ./strace-static-x86_64: Process 8398 attached [pid 8398] set_robust_list(0x5555562025e0, 24) = 0 [pid 8398] chdir("./92") = 0 [pid 8398] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8398] setpgid(0, 0) = 0 [pid 8398] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8398] write(3, "1000", 4) = 4 [pid 8398] close(3) = 0 [pid 8398] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8398] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8398] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8398] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8398] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8380] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8380] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 8380] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8380] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8399], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8399 [pid 8380] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8380] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8398] <... clone resumed>, parent_tid=[8400], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8400 [pid 8398] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 123.196924][ T8384] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 123.208673][ T8386] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 123.208714][ T8383] EXT4-fs (loop0): 1 truncate cleaned up [pid 8398] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8380] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 8400 attached ./strace-static-x86_64: Process 8399 attached [pid 8384] <... fsconfig resumed>) = 0 [pid 8380] futex(0x7f50501ea7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8400] set_robust_list(0x7f50501119e0, 24 [pid 8399] set_robust_list(0x7f5047d309e0, 24 [pid 8384] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8400] <... set_robust_list resumed>) = 0 [pid 8399] <... set_robust_list resumed>) = 0 [pid 8399] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8384] <... futex resumed>) = 0 [pid 8399] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8400] memfd_create("syzkaller", 0 [pid 8399] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8384] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8380] <... futex resumed>) = 0 [pid 8400] <... memfd_create resumed>) = 3 [pid 8399] <... futex resumed>) = 0 [pid 8380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047cef000 [pid 8380] mprotect(0x7f5047cf0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8380] clone(child_stack=0x7f5047d0f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8400] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8399] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8400] <... mmap resumed>) = 0x7f5047cf1000 [pid 8380] <... clone resumed>, parent_tid=[8401], tls=0x7f5047d0f700, child_tidptr=0x7f5047d0f9d0) = 8401 [ 123.241093][ T8382] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 123.241814][ T8387] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 123.251245][ T8386] Quota error (device loop2): write_blk: dquota write failed [ 123.268210][ T8386] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 123.281737][ T8382] EXT4-fs (loop1): 1 truncate cleaned up [pid 8380] futex(0x7f50501ea7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8400] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8380] <... futex resumed>) = 0 [pid 8380] futex(0x7f50501ea7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8401 attached [pid 8401] set_robust_list(0x7f5047d0f9e0, 24) = 0 [ 123.308073][ T8383] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.310066][ T8386] EXT4-fs (loop2): 1 truncate cleaned up [ 123.325018][ T8401] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 123.330909][ T8382] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 8401] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8400] <... write resumed>) = 262144 [pid 8383] <... mount resumed>) = 0 [pid 8382] <... mount resumed>) = 0 [pid 8400] munmap(0x7f5047cf1000, 262144 [pid 8386] <... mount resumed>) = 0 [pid 8383] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8382] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8380] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8400] <... munmap resumed>) = 0 [pid 8383] <... openat resumed>) = 3 [pid 8382] <... openat resumed>) = 3 [pid 8380] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8400] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 8384] <... futex resumed>) = 0 [pid 8383] chdir("./file0" [pid 8382] chdir("./file0" [pid 8380] <... futex resumed>) = 1 [pid 8400] <... openat resumed>) = 4 [pid 8384] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8383] <... chdir resumed>) = 0 [pid 8382] <... chdir resumed>) = 0 [pid 8380] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8400] ioctl(4, LOOP_SET_FD, 3 [pid 8384] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 8383] ioctl(4, LOOP_CLR_FD [pid 8382] ioctl(4, LOOP_CLR_FD [pid 8384] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8383] <... ioctl resumed>) = 0 [pid 8382] <... ioctl resumed>) = 0 [pid 8384] <... futex resumed>) = 1 [pid 8383] close(4 [pid 8382] close(4 [pid 8380] <... futex resumed>) = 0 [pid 8384] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8383] <... close resumed>) = 0 [pid 8382] <... close resumed>) = 0 [pid 8383] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8382] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8383] <... futex resumed>) = 1 [pid 8382] <... futex resumed>) = 1 [pid 8383] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8382] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8379] <... futex resumed>) = 0 [pid 8378] <... futex resumed>) = 0 [pid 8379] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8378] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8379] <... futex resumed>) = 1 [pid 8383] <... futex resumed>) = 0 [pid 8382] <... futex resumed>) = 0 [pid 8378] <... futex resumed>) = 1 [ 123.338038][ T8387] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 123.351053][ T8386] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.366060][ T8401] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 123.382239][ T8400] loop5: detected capacity change from 0 to 512 [ 123.393176][ T8387] EXT4-fs (loop3): 1 truncate cleaned up [pid 8383] fspick(AT_FDCWD, ".", 0 [pid 8382] fspick(AT_FDCWD, ".", 0 [pid 8379] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8378] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8386] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8386] chdir("./file0") = 0 [pid 8386] ioctl(4, LOOP_CLR_FD) = 0 [pid 8386] close(4) = 0 [pid 8386] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8383] <... fspick resumed>) = 4 [pid 8381] <... futex resumed>) = 0 [pid 8386] fspick(AT_FDCWD, ".", 0 [pid 8383] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8382] <... fspick resumed>) = 4 [pid 8381] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8386] <... fspick resumed>) = 4 [pid 8383] <... futex resumed>) = 1 [pid 8382] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8381] <... futex resumed>) = 0 [pid 8379] <... futex resumed>) = 0 [pid 8386] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8381] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8383] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8379] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8382] <... futex resumed>) = 1 [pid 8386] <... futex resumed>) = 0 [pid 8381] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8378] <... futex resumed>) = 0 [pid 8386] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8381] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8383] <... fsconfig resumed>) = 0 [pid 8382] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8379] <... futex resumed>) = 0 [pid 8378] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8386] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8381] <... futex resumed>) = 0 [pid 8379] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8386] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8383] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8382] <... fsconfig resumed>) = 0 [pid 8381] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8378] <... futex resumed>) = 0 [pid 8400] <... ioctl resumed>) = 0 [pid 8386] <... fsconfig resumed>) = 0 [pid 8379] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8400] close(3 [pid 8386] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8379] <... futex resumed>) = 0 [pid 8400] <... close resumed>) = 0 [pid 8386] <... futex resumed>) = 1 [pid 8381] <... futex resumed>) = 0 [pid 8379] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8400] mkdir("./file0", 0777 [pid 8386] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8381] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8400] <... mkdir resumed>) = 0 [pid 8386] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8381] <... futex resumed>) = 0 [pid 8400] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8386] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8381] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8401] <... fsconfig resumed>) = 0 [pid 8387] <... mount resumed>) = 0 [pid 8383] <... futex resumed>) = 1 [pid 8382] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8379] <... futex resumed>) = 0 [pid 8378] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8401] futex(0x7f50501ea7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8387] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8383] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8382] <... futex resumed>) = 0 [pid 8378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8401] <... futex resumed>) = 0 [pid 8387] <... openat resumed>) = 3 [pid 8382] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8378] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8401] futex(0x7f50501ea7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8387] chdir("./file0" [pid 8382] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8378] <... futex resumed>) = 0 [pid 8387] <... chdir resumed>) = 0 [pid 8382] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8378] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8387] ioctl(4, LOOP_CLR_FD) = 0 [ 123.400799][ T8387] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.419038][ T8401] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 123.428035][ T8400] EXT4-fs: Ignoring removed oldalloc option [ 123.441356][ T8386] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 8387] close(4) = 0 [pid 8386] <... fsconfig resumed>) = 0 [pid 8379] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=23000000} [pid 8387] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8386] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8380] exit_group(0 [pid 8401] <... futex resumed>) = ? [pid 8399] <... futex resumed>) = ? [pid 8387] <... futex resumed>) = 1 [pid 8386] <... futex resumed>) = 1 [pid 8385] <... futex resumed>) = 0 [pid 8384] <... futex resumed>) = ? [pid 8381] <... futex resumed>) = 0 [pid 8380] <... exit_group resumed>) = ? [pid 8401] +++ exited with 0 +++ [pid 8399] +++ exited with 0 +++ [pid 8387] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8386] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8385] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8384] +++ exited with 0 +++ [pid 8381] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8380] +++ exited with 0 +++ [pid 8387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8386] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8385] <... futex resumed>) = 0 [pid 8381] <... futex resumed>) = 0 [pid 8387] fspick(AT_FDCWD, ".", 0 [pid 8386] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8385] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8381] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8380, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 8387] <... fspick resumed>) = 4 [pid 8386] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 5004] restart_syscall(<... resuming interrupted clone ...> [pid 8387] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8386] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... restart_syscall resumed>) = 0 [pid 8387] <... futex resumed>) = 1 [pid 8386] <... futex resumed>) = 1 [pid 8385] <... futex resumed>) = 0 [pid 8381] <... futex resumed>) = 0 [pid 8387] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8386] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8385] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8381] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8386] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8385] <... futex resumed>) = 0 [pid 8381] <... futex resumed>) = 0 [pid 5004] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8387] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8386] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8385] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8381] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8387] <... fsconfig resumed>) = 0 [pid 8383] <... fsconfig resumed>) = 0 [pid 8382] <... fsconfig resumed>) = 0 [pid 5004] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8387] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8383] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8382] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8387] <... futex resumed>) = 1 [pid 8385] <... futex resumed>) = 0 [pid 8383] <... futex resumed>) = 1 [pid 8378] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8387] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8385] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8383] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8382] <... futex resumed>) = 0 [pid 8378] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8385] <... futex resumed>) = 0 [pid 8382] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8378] <... futex resumed>) = 0 [pid 8387] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8385] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8382] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8378] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8382] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8379] <... futex resumed>) = 0 [pid 5004] <... openat resumed>) = 3 [pid 8382] <... futex resumed>) = 1 [pid 8379] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8378] <... futex resumed>) = 0 [pid 5004] fstat(3, [pid 8383] <... futex resumed>) = 0 [pid 8382] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8379] <... futex resumed>) = 1 [pid 8378] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8383] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8382] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8378] <... futex resumed>) = 0 [pid 8383] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [ 123.453792][ T8382] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 123.464215][ T8383] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 123.485495][ T8386] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 123.498477][ T8400] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8382] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8378] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8383] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8379] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8383] <... futex resumed>) = 0 [pid 8379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5004] getdents64(3, [pid 8383] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8379] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5004] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 8383] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8379] <... futex resumed>) = 0 [pid 8381] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8379] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8381] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8381] <... futex resumed>) = 0 [pid 5004] lstat("./94/binderfs", [pid 8381] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5004] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8381] <... mmap resumed>) = 0x7f5047d10000 [ 123.509489][ T8387] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 123.512045][ T8382] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 123.532647][ T8383] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 123.536170][ T8400] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 5004] unlink("./94/binderfs" [pid 8381] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5004] <... unlink resumed>) = 0 [pid 8381] <... mprotect resumed>) = 0 [pid 5004] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8381] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8405], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8405 [pid 8381] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8381] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8405 attached [pid 8405] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8405] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EROFS (Read-only file system) [pid 8405] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8381] <... futex resumed>) = 0 [pid 8405] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8387] <... fsconfig resumed>) = 0 [pid 8385] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8387] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8385] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8387] <... futex resumed>) = 0 [pid 8385] <... futex resumed>) = 0 [pid 8387] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8385] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8378] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8387] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8378] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8387] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8378] <... futex resumed>) = 0 [pid 8387] <... futex resumed>) = 1 [pid 8385] <... futex resumed>) = 0 [ 123.557223][ T8383] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 123.566795][ T8386] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 123.580552][ T8400] EXT4-fs (loop5): 1 truncate cleaned up [ 123.588377][ T8382] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 123.588661][ T8400] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 8378] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8400] <... mount resumed>) = 0 [pid 8387] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8385] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8378] <... mmap resumed>) = 0x7f5047d10000 [pid 8400] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8385] <... futex resumed>) = 0 [pid 8378] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8400] <... openat resumed>) = 3 [pid 8387] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8385] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8378] <... mprotect resumed>) = 0 [pid 8379] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8379] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8379] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 8379] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [ 123.613216][ T8387] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 123.632147][ T8387] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 123.632221][ T8382] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 123.653162][ T8386] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 8400] chdir("./file0" [pid 8379] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8378] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8400] <... chdir resumed>) = 0 [pid 5004] <... umount2 resumed>) = 0 [pid 8400] ioctl(4, LOOP_CLR_FD [pid 8378] <... clone resumed>, parent_tid=[8409], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8409 [pid 5004] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8400] <... ioctl resumed>) = 0 [pid 8378] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8400] close(4 [pid 8378] <... futex resumed>) = 0 [pid 5004] lstat("./94/file0", [pid 8400] <... close resumed>) = 0 [pid 8379] <... clone resumed>, parent_tid=[8410], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8410 [pid 8378] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8400] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8379] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8379] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8410 attached [pid 8410] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8410] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000./strace-static-x86_64: Process 8409 attached [pid 8409] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8409] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8383] <... fsconfig resumed>) = 0 [pid 8383] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8400] <... futex resumed>) = 1 [pid 8398] <... futex resumed>) = 0 [pid 8385] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5004] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8410] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8409] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8400] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8398] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8385] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8410] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8409] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8398] <... futex resumed>) = 0 [pid 8386] <... fsconfig resumed>) = 0 [pid 8385] <... futex resumed>) = 0 [pid 8383] <... futex resumed>) = 0 [pid 5004] openat(AT_FDCWD, "./94/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8400] fspick(AT_FDCWD, ".", 0 [pid 8398] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8387] <... fsconfig resumed>) = 0 [pid 8385] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8382] <... fsconfig resumed>) = 0 [pid 5004] <... openat resumed>) = 4 [pid 8400] <... fspick resumed>) = 4 [pid 8387] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8385] <... mmap resumed>) = 0x7f5047d10000 [pid 8382] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] fstat(4, [pid 8400] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8387] <... futex resumed>) = 0 [pid 8385] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8382] <... futex resumed>) = 0 [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8410] <... futex resumed>) = 1 [pid 8400] <... futex resumed>) = 1 [pid 8398] <... futex resumed>) = 0 [pid 8387] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8385] <... mprotect resumed>) = 0 [pid 8382] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8379] <... futex resumed>) = 0 [pid 5004] getdents64(4, [pid 8410] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8400] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8398] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8385] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8379] exit_group(0 [pid 5004] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8410] <... futex resumed>) = ? [pid 8400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8398] <... futex resumed>) = 0 [pid 8379] <... exit_group resumed>) = ? [pid 5004] getdents64(4, [pid 8400] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8398] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8385] <... clone resumed>, parent_tid=[8412], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8412 [pid 5004] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8400] <... fsconfig resumed>) = 0 [pid 8385] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] close(4 [pid 8410] +++ exited with 0 +++ [pid 8400] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8385] <... futex resumed>) = 0 [pid 5004] <... close resumed>) = 0 [pid 8400] <... futex resumed>) = 1 [pid 8398] <... futex resumed>) = 0 [pid 8385] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] rmdir("./94/file0" [pid 8400] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8398] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... rmdir resumed>) = 0 [pid 8400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8398] <... futex resumed>) = 0 [pid 5004] getdents64(3, [pid 8409] <... futex resumed>) = 1 [ 123.663900][ T8383] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 123.664113][ T8387] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 8400] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8398] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8378] <... futex resumed>) = 0 [pid 5004] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8409] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8386] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8381] exit_group(0 [pid 8378] exit_group(0 [pid 5004] close(3./strace-static-x86_64: Process 8412 attached [pid 8409] <... futex resumed>) = ? [pid 8405] <... futex resumed>) = ? [pid 8386] <... futex resumed>) = ? [pid 8383] +++ exited with 0 +++ [pid 8382] <... futex resumed>) = ? [pid 8381] <... exit_group resumed>) = ? [pid 8379] +++ exited with 0 +++ [pid 8378] <... exit_group resumed>) = ? [pid 5004] <... close resumed>) = 0 [pid 8412] set_robust_list(0x7f5047d309e0, 24 [pid 8409] +++ exited with 0 +++ [pid 8405] +++ exited with 0 +++ [pid 8400] <... fsconfig resumed>) = 0 [pid 8386] +++ exited with 0 +++ [pid 8382] +++ exited with 0 +++ [pid 8381] +++ exited with 0 +++ [pid 8378] +++ exited with 0 +++ [pid 5004] rmdir("./94" [pid 8412] <... set_robust_list resumed>) = 0 [pid 8412] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5004] <... rmdir resumed>) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8381, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8378, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 8400] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8379, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 8412] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 5004] mkdir("./95", 0777 [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 8412] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8400] <... futex resumed>) = 1 [pid 8398] <... futex resumed>) = 0 [pid 5004] <... mkdir resumed>) = 0 [pid 5001] <... restart_syscall resumed>) = 0 [pid 5000] <... restart_syscall resumed>) = 0 [pid 4999] <... restart_syscall resumed>) = 0 [pid 8412] <... futex resumed>) = 1 [pid 8400] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8398] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8385] <... futex resumed>) = 0 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8412] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8400] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8398] <... futex resumed>) = 0 [pid 8385] exit_group(0 [pid 5004] <... openat resumed>) = 3 [pid 8412] <... futex resumed>) = ? [pid 8400] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8398] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8387] <... futex resumed>) = ? [pid 8385] <... exit_group resumed>) = ? [pid 5004] ioctl(3, LOOP_CLR_FD [pid 5001] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8400] <... futex resumed>) = 0 [pid 8398] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8387] +++ exited with 0 +++ [pid 5004] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8400] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8398] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] close(3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8398] <... futex resumed>) = 0 [pid 5004] <... close resumed>) = 0 [pid 8400] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8398] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8412] +++ exited with 0 +++ [pid 8385] +++ exited with 0 +++ [pid 5001] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] <... clone resumed>, child_tidptr=0x5555562025d0) = 8413 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8385, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5001] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 3 [pid 4999] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] fstat(3, [pid 5000] fstat(3, [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... openat resumed>) = 3 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] fstat(3, [pid 5001] getdents64(3, [pid 5002] <... openat resumed>) = 3 [pid 5000] getdents64(3, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5000] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 8413 attached [pid 5002] fstat(3, [pid 5001] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(3, [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5002] getdents64(3, [pid 5001] lstat("./94/binderfs", [pid 5000] lstat("./93/binderfs", [pid 4999] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] unlink("./94/binderfs" [pid 5000] unlink("./93/binderfs" [pid 4999] lstat("./92/binderfs", [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... unlink resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] lstat("./92/binderfs", [pid 5001] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] unlink("./92/binderfs" [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 5002] unlink("./92/binderfs" [pid 4999] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... unlink resumed>) = 0 [pid 5002] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8413] set_robust_list(0x5555562025e0, 24) = 0 [pid 8413] chdir("./95") = 0 [pid 8413] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8413] setpgid(0, 0) = 0 [pid 8413] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8413] write(3, "1000", 4) = 4 [pid 8413] close(3) = 0 [pid 8413] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8413] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8413] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8413] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8413] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8414], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8414 [pid 8413] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8413] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8414 attached [pid 8414] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8414] memfd_create("syzkaller", 0) = 3 [pid 8414] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 8414] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 8414] munmap(0x7f5047cf1000, 262144) = 0 [pid 8414] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 123.707949][ T8400] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 123.727824][ T8400] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 123.740519][ T8400] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8414] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8414] close(3) = 0 [pid 8414] mkdir("./file0", 0777) = 0 [pid 8414] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5002] <... umount2 resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5002] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./92/file0", [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] lstat("./94/file0", [pid 5000] <... umount2 resumed>) = 0 [pid 5002] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] openat(AT_FDCWD, "./92/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8398] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8398] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... openat resumed>) = 4 [pid 5000] lstat("./93/file0", [pid 8398] <... futex resumed>) = 0 [pid 8398] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5002] fstat(4, [pid 5001] openat(AT_FDCWD, "./94/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8398] <... mmap resumed>) = 0x7f5047d10000 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8398] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5002] getdents64(4, [pid 5001] <... openat resumed>) = 4 [pid 5000] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8398] <... mprotect resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8398] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5002] getdents64(4, [pid 5001] fstat(4, [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] openat(AT_FDCWD, "./93/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... umount2 resumed>) = 0 [pid 8398] <... clone resumed>, parent_tid=[8417], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8417 [pid 5002] close(4 [pid 5001] getdents64(4, [pid 5000] <... openat resumed>) = 4 [pid 4999] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8398] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... close resumed>) = 0 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5000] fstat(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8398] <... futex resumed>) = 0 [pid 5002] rmdir("./92/file0" [pid 5001] getdents64(4, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] lstat("./92/file0", [pid 8398] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... rmdir resumed>) = 0 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5000] getdents64(4, [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 5001] close(4 [pid 5000] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] <... close resumed>) = 0 [pid 5000] getdents64(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] close(3 [pid 5001] rmdir("./94/file0" [pid 5000] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 4999] openat(AT_FDCWD, "./92/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... close resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] close(4 [pid 4999] <... openat resumed>) = 4 [pid 5002] rmdir("./92" [pid 5001] getdents64(3, [pid 5000] <... close resumed>) = 0 [pid 4999] fstat(4, [pid 5002] <... rmdir resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] rmdir("./93/file0" [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] mkdir("./93", 0777 [pid 5001] close(3 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] getdents64(4, [pid 5000] getdents64(3, [pid 4999] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 8417 attached [pid 5002] <... mkdir resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 4999] getdents64(4, [pid 8417] set_robust_list(0x7f5047d309e0, 24 [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5001] rmdir("./94" [pid 5000] close(3 [pid 4999] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8417] <... set_robust_list resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5000] <... close resumed>) = 0 [pid 4999] close(4 [pid 8417] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5001] <... rmdir resumed>) = 0 [ 123.763130][ T8414] loop4: detected capacity change from 0 to 512 [ 123.776056][ T8414] EXT4-fs: Ignoring removed oldalloc option [pid 5000] rmdir("./93" [pid 4999] <... close resumed>) = 0 [pid 8417] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 5000] <... rmdir resumed>) = 0 [pid 4999] rmdir("./92/file0" [pid 8417] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] mkdir("./94", 0777 [pid 4999] <... rmdir resumed>) = 0 [pid 8417] <... futex resumed>) = 1 [pid 5000] <... mkdir resumed>) = 0 [pid 4999] getdents64(3, [pid 8417] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4999] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] <... openat resumed>) = 3 [pid 4999] close(3 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] <... close resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] rmdir("./92" [pid 5000] close(3 [pid 4999] <... rmdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] mkdir("./93", 0777 [pid 8398] <... futex resumed>) = 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] mkdir("./95", 0777 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... mkdir resumed>) = 0 [pid 5002] close(3 [pid 5001] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5002] <... close resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5000] <... clone resumed>, child_tidptr=0x5555562025d0) = 8419 [pid 4999] <... openat resumed>) = 3 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 5002] <... clone resumed>, child_tidptr=0x5555562025d0) = 8420 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4999] <... close resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8419 attached [pid 5001] close(3 [pid 8419] set_robust_list(0x5555562025e0, 24 [pid 4999] <... clone resumed>, child_tidptr=0x5555562025d0) = 8421 [pid 8419] <... set_robust_list resumed>) = 0 [pid 8419] chdir("./94") = 0 [pid 8419] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8419] setpgid(0, 0) = 0 [pid 8419] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8419] write(3, "1000", 4) = 4 [pid 8419] close(3) = 0 [pid 8419] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8419] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8421 attached ) = 0 [pid 8421] set_robust_list(0x5555562025e0, 24 [pid 8419] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8421] <... set_robust_list resumed>) = 0 [pid 8419] <... mmap resumed>) = 0x7f50500f1000 [pid 8421] chdir("./93" [pid 8419] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8421] <... chdir resumed>) = 0 [pid 8419] <... mprotect resumed>) = 0 [pid 8421] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8419] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8421] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 8420 attached [pid 8421] setpgid(0, 0 [pid 8419] <... clone resumed>, parent_tid=[8422], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8422 [pid 8400] <... fsconfig resumed>) = 0 [pid 5001] <... close resumed>) = 0 ./strace-static-x86_64: Process 8422 attached [pid 8421] <... setpgid resumed>) = 0 [pid 8420] set_robust_list(0x5555562025e0, 24 [pid 8419] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8400] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8421] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8420] <... set_robust_list resumed>) = 0 [pid 8419] <... futex resumed>) = 0 [pid 8400] <... futex resumed>) = 0 [pid 8420] chdir("./93" [pid 8419] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8400] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8398] exit_group(0 [pid 5001] <... clone resumed>, child_tidptr=0x5555562025d0) = 8423 [pid 8421] <... openat resumed>) = 3 [pid 8420] <... chdir resumed>) = 0 [pid 8417] <... futex resumed>) = ? [pid 8400] <... futex resumed>) = ? [pid 8398] <... exit_group resumed>) = ? [ 123.818110][ T8400] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 123.840187][ T8414] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8421] write(3, "1000", 4 [pid 8420] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8417] +++ exited with 0 +++ [pid 8400] +++ exited with 0 +++ [pid 8398] +++ exited with 0 +++ [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8398, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5005] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 8423 attached [pid 8423] set_robust_list(0x5555562025e0, 24) = 0 [pid 5005] <... restart_syscall resumed>) = 0 [pid 5005] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8423] chdir("./95" [pid 5005] <... openat resumed>) = 3 [pid 8423] <... chdir resumed>) = 0 [pid 5005] fstat(3, [pid 8423] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8423] <... prctl resumed>) = 0 [pid 5005] getdents64(3, [pid 8423] setpgid(0, 0 [pid 5005] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 8423] <... setpgid resumed>) = 0 [pid 5005] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8423] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8423] <... openat resumed>) = 3 [pid 5005] lstat("./92/binderfs", [pid 8423] write(3, "1000", 4 [pid 5005] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8423] <... write resumed>) = 4 [pid 5005] unlink("./92/binderfs" [pid 8423] close(3 [pid 5005] <... unlink resumed>) = 0 [pid 8423] <... close resumed>) = 0 [pid 5005] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8423] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8423] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8423] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8423] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8423] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8424], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8424 [pid 8423] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8423] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8424 attached [pid 8424] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8424] memfd_create("syzkaller", 0) = 3 [pid 8424] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 8424] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8422] set_robust_list(0x7f50501119e0, 24 [pid 8421] <... write resumed>) = 4 [pid 8420] <... prctl resumed>) = 0 [pid 8422] <... set_robust_list resumed>) = 0 [pid 8421] close(3 [pid 8420] setpgid(0, 0 [pid 8422] memfd_create("syzkaller", 0 [pid 8421] <... close resumed>) = 0 [pid 8420] <... setpgid resumed>) = 0 [pid 8422] <... memfd_create resumed>) = 3 [pid 8421] symlink("/dev/binderfs", "./binderfs" [pid 8420] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8422] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8421] <... symlink resumed>) = 0 [pid 8420] <... openat resumed>) = 3 [pid 8422] <... mmap resumed>) = 0x7f5047cf1000 [pid 8421] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8420] write(3, "1000", 4 [pid 8422] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8421] <... futex resumed>) = 0 [pid 8420] <... write resumed>) = 4 [pid 8422] <... write resumed>) = 262144 [pid 8421] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8420] close(3 [pid 8424] <... write resumed>) = 262144 [pid 8422] munmap(0x7f5047cf1000, 262144 [pid 8421] <... mmap resumed>) = 0x7f50500f1000 [pid 8420] <... close resumed>) = 0 [pid 8424] munmap(0x7f5047cf1000, 262144 [pid 8421] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8420] symlink("/dev/binderfs", "./binderfs" [pid 8424] <... munmap resumed>) = 0 [pid 8421] <... mprotect resumed>) = 0 [pid 8420] <... symlink resumed>) = 0 [pid 8424] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8421] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8420] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 123.856332][ T8414] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 8424] ioctl(4, LOOP_SET_FD, 3 [pid 8422] <... munmap resumed>) = 0 [pid 8420] <... futex resumed>) = 0 [pid 8422] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8421] <... clone resumed>, parent_tid=[8425], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8425 [pid 8420] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8422] <... openat resumed>) = 4 [pid 8421] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8420] <... mmap resumed>) = 0x7f50500f1000 [pid 8422] ioctl(4, LOOP_SET_FD, 3 [pid 8421] <... futex resumed>) = 0 [pid 8420] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8424] <... ioctl resumed>) = 0 [pid 8421] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8420] <... mprotect resumed>) = 0 [pid 8420] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8426], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8426 [pid 8420] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8420] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8424] close(3 [pid 5005] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 8425 attached [pid 5005] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8425] set_robust_list(0x7f50501119e0, 24 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8425] <... set_robust_list resumed>) = 0 [pid 5005] lstat("./92/file0", ./strace-static-x86_64: Process 8426 attached [pid 8425] memfd_create("syzkaller", 0 [pid 5005] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8426] set_robust_list(0x7f50501119e0, 24 [pid 8425] <... memfd_create resumed>) = 3 [pid 5005] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8426] <... set_robust_list resumed>) = 0 [pid 8425] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8426] memfd_create("syzkaller", 0 [pid 8425] <... mmap resumed>) = 0x7f5047cf1000 [pid 5005] openat(AT_FDCWD, "./92/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8426] <... memfd_create resumed>) = 3 [pid 8425] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5005] <... openat resumed>) = 4 [pid 8426] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5005] fstat(4, [pid 8426] <... mmap resumed>) = 0x7f5047cf1000 [pid 8424] <... close resumed>) = 0 [pid 8422] <... ioctl resumed>) = 0 [pid 8414] <... mount resumed>) = 0 [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8422] close(3 [pid 8414] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8422] <... close resumed>) = 0 [pid 8414] <... openat resumed>) = 3 [pid 8422] mkdir("./file0", 0777 [pid 8414] chdir("./file0" [pid 8422] <... mkdir resumed>) = 0 [pid 8414] <... chdir resumed>) = 0 [pid 8422] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [ 123.905687][ T8424] loop2: detected capacity change from 0 to 512 [ 123.911069][ T8422] loop1: detected capacity change from 0 to 512 [ 123.912543][ T8414] EXT4-fs (loop4): 1 truncate cleaned up [ 123.925009][ T8414] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.940201][ T8422] EXT4-fs: Ignoring removed oldalloc option [ 123.950057][ T8424] EXT4-fs: Ignoring removed oldalloc option [pid 8414] ioctl(4, LOOP_CLR_FD [pid 8424] mkdir("./file0", 0777 [pid 8414] <... ioctl resumed>) = 0 [pid 5005] getdents64(4, [pid 8414] close(4) = 0 [pid 8414] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8413] <... futex resumed>) = 0 [pid 8414] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8413] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8424] <... mkdir resumed>) = 0 [pid 8414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8413] <... futex resumed>) = 0 [pid 8414] fspick(AT_FDCWD, ".", 0 [pid 8413] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8424] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8414] <... fspick resumed>) = 4 [pid 8414] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8413] <... futex resumed>) = 0 [pid 8414] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8413] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8413] <... futex resumed>) = 0 [pid 8414] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8413] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8414] <... fsconfig resumed>) = 0 [pid 8414] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8413] <... futex resumed>) = 0 [pid 8414] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8413] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8413] <... futex resumed>) = 0 [pid 8414] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8413] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8425] <... write resumed>) = 262144 [pid 8425] munmap(0x7f5047cf1000, 262144) = 0 [pid 8425] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8425] ioctl(4, LOOP_SET_FD, 3 [pid 8426] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 8426] munmap(0x7f5047cf1000, 262144) = 0 [pid 8426] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 8426] ioctl(4, LOOP_SET_FD, 3 [pid 8425] <... ioctl resumed>) = 0 [pid 5005] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5005] close(4) = 0 [pid 5005] rmdir("./92/file0" [pid 8425] close(3) = 0 [pid 8425] mkdir("./file0", 0777 [pid 5005] <... rmdir resumed>) = 0 [pid 8425] <... mkdir resumed>) = 0 [pid 5005] getdents64(3, [pid 8426] <... ioctl resumed>) = 0 [pid 8426] close(3) = 0 [pid 8426] mkdir("./file0", 0777) = 0 [pid 8426] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8425] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5005] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8413] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8413] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8413] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 8413] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8413] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8430], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8430 [pid 8413] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8413] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8430 attached [pid 8430] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8430] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 8430] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8413] <... futex resumed>) = 0 [pid 8413] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8413] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8430] <... futex resumed>) = 1 [ 123.957737][ T8425] loop0: detected capacity change from 0 to 512 [ 123.970290][ T8422] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 123.977130][ T8426] loop3: detected capacity change from 0 to 512 [ 123.978634][ T8414] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 123.991795][ T8426] EXT4-fs: Ignoring removed oldalloc option [pid 8430] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5005] close(3) = 0 [pid 5005] rmdir("./92") = 0 [pid 5005] mkdir("./93", 0777) = 0 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5005] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5005] close(3 [pid 8414] <... fsconfig resumed>) = 0 [pid 5005] <... close resumed>) = 0 [pid 8414] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8414] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 8432 ./strace-static-x86_64: Process 8432 attached [pid 8432] set_robust_list(0x5555562025e0, 24) = 0 [pid 8432] chdir("./93") = 0 [pid 8432] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8432] setpgid(0, 0) = 0 [pid 8432] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8432] write(3, "1000", 4) = 4 [pid 8432] close(3) = 0 [pid 8432] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8432] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8432] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8432] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8432] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8433], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8433 [pid 8432] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8432] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8433 attached [ 123.999100][ T8422] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 124.016043][ T8425] EXT4-fs: Ignoring removed oldalloc option [ 124.024462][ T8430] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 124.046980][ T8422] EXT4-fs (loop1): 1 truncate cleaned up [pid 8433] set_robust_list(0x7f50501119e0, 24 [pid 8413] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8433] <... set_robust_list resumed>) = 0 [pid 8433] memfd_create("syzkaller", 0) = 3 [pid 8433] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 8433] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8422] <... mount resumed>) = 0 [pid 8413] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8422] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8414] <... futex resumed>) = 0 [pid 8413] <... futex resumed>) = 1 [pid 8414] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8413] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8422] <... openat resumed>) = 3 [pid 8422] chdir("./file0" [pid 8414] <... openat resumed>) = 5 [pid 8414] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8422] <... chdir resumed>) = 0 [pid 8414] <... futex resumed>) = 1 [pid 8413] <... futex resumed>) = 0 [pid 8414] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8422] ioctl(4, LOOP_CLR_FD) = 0 [pid 8422] close(4) = 0 [pid 8433] <... write resumed>) = 262144 [pid 8433] munmap(0x7f5047cf1000, 262144) = 0 [pid 8433] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 8422] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8419] <... futex resumed>) = 0 [pid 8422] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8419] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8422] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8419] <... futex resumed>) = 0 [pid 8422] fspick(AT_FDCWD, ".", 0 [pid 8419] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8422] <... fspick resumed>) = 4 [pid 8422] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8419] <... futex resumed>) = 0 [pid 8422] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8419] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8422] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8419] <... futex resumed>) = 0 [pid 8422] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8419] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8422] <... fsconfig resumed>) = 0 [pid 8422] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8419] <... futex resumed>) = 0 [pid 8422] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8419] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8422] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8419] <... futex resumed>) = 0 [pid 8422] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 124.053282][ T8422] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.053818][ T8424] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 124.066149][ T8430] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 124.090585][ T8425] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 124.100396][ T8426] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8419] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8433] <... openat resumed>) = 4 [pid 8433] ioctl(4, LOOP_SET_FD, 3) = 0 [ 124.106461][ T8433] loop5: detected capacity change from 0 to 512 [ 124.111181][ T8422] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 124.117108][ T8425] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 8433] close(3 [pid 8422] <... fsconfig resumed>) = 0 [pid 8433] <... close resumed>) = 0 [pid 8422] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8433] mkdir("./file0", 0777 [pid 8422] <... futex resumed>) = 1 [pid 8433] <... mkdir resumed>) = 0 [pid 8422] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8433] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8419] <... futex resumed>) = 0 [pid 8419] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8422] <... futex resumed>) = 0 [pid 8419] <... futex resumed>) = 1 [pid 8430] <... fsconfig resumed>) = 0 [pid 8430] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8430] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8413] exit_group(0 [pid 8430] <... futex resumed>) = ? [pid 8414] <... futex resumed>) = ? [pid 8413] <... exit_group resumed>) = ? [pid 8430] +++ exited with 0 +++ [pid 8414] +++ exited with 0 +++ [pid 8413] +++ exited with 0 +++ [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8413, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5004] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8422] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8419] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8422] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [ 124.147355][ T8424] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 124.147994][ T8433] EXT4-fs: Ignoring removed oldalloc option [ 124.162053][ T8426] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 124.175476][ T8430] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 124.193281][ T8425] EXT4-fs (loop0): 1 truncate cleaned up [pid 8422] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5004] <... openat resumed>) = 3 [pid 5004] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5004] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./95/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5004] unlink("./95/binderfs") = 0 [pid 5004] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8425] <... mount resumed>) = 0 [pid 8422] <... futex resumed>) = 0 [pid 8419] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8425] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8422] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8419] <... futex resumed>) = 0 [pid 8424] <... mount resumed>) = 0 [pid 8424] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8424] chdir("./file0") = 0 [pid 8424] ioctl(4, LOOP_CLR_FD) = 0 [pid 8424] close(4 [pid 8425] <... openat resumed>) = 3 [pid 8424] <... close resumed>) = 0 [pid 8424] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8423] <... futex resumed>) = 0 [pid 8423] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8423] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8424] <... futex resumed>) = 1 [pid 8424] fspick(AT_FDCWD, ".", 0) = 4 [pid 8424] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8419] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8425] chdir("./file0" [pid 8423] <... futex resumed>) = 0 [pid 8423] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8425] <... chdir resumed>) = 0 [pid 8425] ioctl(4, LOOP_CLR_FD [pid 8423] <... futex resumed>) = 0 [ 124.199707][ T8425] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.203758][ T8424] EXT4-fs (loop2): 1 truncate cleaned up [ 124.212694][ T8426] EXT4-fs (loop3): 1 truncate cleaned up [ 124.219951][ T8424] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.225736][ T8426] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.248825][ T8422] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [pid 8425] <... ioctl resumed>) = 0 [pid 8423] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8424] <... futex resumed>) = 1 [pid 8424] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 8424] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8423] <... futex resumed>) = 0 [pid 8423] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8423] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8424] <... futex resumed>) = 1 [pid 8424] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8426] <... mount resumed>) = 0 [pid 8426] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8426] chdir("./file0") = 0 [pid 8426] ioctl(4, LOOP_CLR_FD) = 0 [pid 8426] close(4 [pid 8425] close(4) = 0 [pid 8425] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8421] <... futex resumed>) = 0 [pid 8425] fspick(AT_FDCWD, ".", 0 [pid 8421] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8425] <... fspick resumed>) = 4 [pid 8421] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8425] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8426] <... close resumed>) = 0 [pid 8426] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8420] <... futex resumed>) = 0 [pid 8420] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8425] <... futex resumed>) = 0 [pid 8421] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8420] <... futex resumed>) = 0 [pid 8425] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8421] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8420] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8426] <... futex resumed>) = 1 [pid 8426] fspick(AT_FDCWD, ".", 0) = 4 [pid 8426] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8420] <... futex resumed>) = 0 [pid 8420] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8420] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8426] <... futex resumed>) = 1 [pid 8426] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 8426] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8420] <... futex resumed>) = 0 [pid 8420] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8420] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8426] <... futex resumed>) = 1 [pid 8426] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8421] <... futex resumed>) = 0 [pid 8425] <... fsconfig resumed>) = 0 [pid 8425] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8421] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8425] <... futex resumed>) = 0 [pid 8421] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8419] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8425] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8421] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8419] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8423] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8423] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8423] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8425] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8423] <... mmap resumed>) = 0x7f5047d10000 [pid 8421] <... futex resumed>) = 0 [pid 8419] <... futex resumed>) = 0 [pid 5004] <... umount2 resumed>) = 0 [pid 8423] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8421] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8419] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8423] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8419] <... mmap resumed>) = 0x7f5047d10000 [ 124.260627][ T8422] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 124.273116][ T8433] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 124.287759][ T8424] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 124.290173][ T8426] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 8423] <... clone resumed>, parent_tid=[8441], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8441 [pid 8419] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5004] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8423] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8423] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8441 attached [pid 8419] <... mprotect resumed>) = 0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8441] set_robust_list(0x7f5047d309e0, 24 [pid 8424] <... fsconfig resumed>) = 0 [pid 8419] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5004] lstat("./95/file0", [pid 8441] <... set_robust_list resumed>) = 0 [pid 8424] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8441] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8424] <... futex resumed>) = 0 [pid 8419] <... clone resumed>, parent_tid=[8442], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8442 [pid 8441] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8424] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5004] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 8442 attached [pid 8441] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8426] <... fsconfig resumed>) = 0 [pid 8425] <... fsconfig resumed>) = 0 [pid 8420] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8419] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8441] <... futex resumed>) = 1 [pid 8423] <... futex resumed>) = 0 [pid 8420] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8419] <... futex resumed>) = 0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8441] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8423] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8420] <... futex resumed>) = 0 [pid 8419] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] openat(AT_FDCWD, "./95/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8424] <... futex resumed>) = 0 [pid 8423] <... futex resumed>) = 1 [pid 8420] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5004] <... openat resumed>) = 4 [pid 8425] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8424] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8423] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8420] <... mmap resumed>) = 0x7f5047d10000 [pid 5004] fstat(4, [pid 8426] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8425] <... futex resumed>) = 1 [pid 8421] <... futex resumed>) = 0 [pid 8420] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8426] <... futex resumed>) = 0 [pid 8425] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8420] <... mprotect resumed>) = 0 [pid 5004] getdents64(4, [pid 8426] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8420] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5004] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5004] getdents64(4, [pid 8420] <... clone resumed>, parent_tid=[8444], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8444 [ 124.314938][ T8425] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 124.329495][ T8433] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 124.343526][ T8424] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 124.354325][ T8433] EXT4-fs (loop5): 1 truncate cleaned up [pid 5004] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8421] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8420] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8421] <... futex resumed>) = 1 [pid 8421] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] close(4 [pid 8420] <... futex resumed>) = 0 [pid 8420] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... close resumed>) = 0 [pid 8425] <... futex resumed>) = 0 [pid 5004] rmdir("./95/file0"./strace-static-x86_64: Process 8444 attached [pid 8442] set_robust_list(0x7f5047d309e0, 24 [pid 8433] <... mount resumed>) = 0 [pid 8425] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 5004] <... rmdir resumed>) = 0 [pid 8444] set_robust_list(0x7f5047d309e0, 24 [pid 8433] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5004] getdents64(3, [pid 8444] <... set_robust_list resumed>) = 0 [pid 8442] <... set_robust_list resumed>) = 0 [pid 8433] <... openat resumed>) = 3 [pid 5004] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8444] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8442] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8433] chdir("./file0" [pid 5004] close(3 [pid 8444] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8433] <... chdir resumed>) = 0 [pid 5004] <... close resumed>) = 0 [pid 8444] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8433] ioctl(4, LOOP_CLR_FD [pid 5004] rmdir("./95" [pid 8444] <... futex resumed>) = 1 [pid 8442] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8433] <... ioctl resumed>) = 0 [pid 8425] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8420] <... futex resumed>) = 0 [pid 8419] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5004] <... rmdir resumed>) = 0 [pid 8444] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8442] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8433] close(4 [pid 8420] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] mkdir("./96", 0777 [pid 8442] <... futex resumed>) = 0 [pid 8433] <... close resumed>) = 0 [pid 8426] <... futex resumed>) = 0 [pid 8425] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8422] <... fsconfig resumed>) = 0 [pid 8420] <... futex resumed>) = 1 [pid 5004] <... mkdir resumed>) = 0 [pid 8442] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8433] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8426] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8425] <... futex resumed>) = 1 [pid 8422] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8421] <... futex resumed>) = 0 [pid 8420] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8419] exit_group(0 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8433] <... futex resumed>) = 1 [pid 8432] <... futex resumed>) = 0 [pid 8421] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 124.361924][ T8433] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.362090][ T8422] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 124.385085][ T8424] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 124.398441][ T8426] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [pid 8421] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8442] <... futex resumed>) = ? [pid 8433] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8432] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8425] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8423] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8422] <... futex resumed>) = ? [pid 8419] <... exit_group resumed>) = ? [pid 5004] <... openat resumed>) = 3 [pid 8442] +++ exited with 0 +++ [pid 8433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8432] <... futex resumed>) = 0 [pid 8433] fspick(AT_FDCWD, ".", 0 [pid 8432] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8423] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8422] +++ exited with 0 +++ [pid 8419] +++ exited with 0 +++ [pid 5004] ioctl(3, LOOP_CLR_FD [pid 8424] <... fsconfig resumed>) = 0 [pid 8424] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8424] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8433] <... fspick resumed>) = 4 [pid 8433] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8433] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8432] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8432] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8433] <... futex resumed>) = 0 [pid 8432] <... futex resumed>) = 1 [pid 8433] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8432] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8433] <... fsconfig resumed>) = 0 [pid 8433] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8432] <... futex resumed>) = 0 [pid 8433] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8432] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8432] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8423] <... futex resumed>) = 1 [pid 5004] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8419, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 8441] <... futex resumed>) = 0 [pid 8441] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 124.410882][ T8426] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 124.411674][ T8425] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 124.426259][ T8424] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 124.434595][ T8425] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 124.450492][ T8426] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 8423] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8441] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 5004] close(3 [pid 8441] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... close resumed>) = 0 [pid 5000] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8441] <... futex resumed>) = 1 [pid 8423] <... futex resumed>) = 0 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8441] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8423] exit_group(0 [pid 5000] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8441] <... futex resumed>) = ? [pid 8423] <... exit_group resumed>) = ? [pid 5004] <... clone resumed>, child_tidptr=0x5555562025d0) = 8447 [pid 5000] <... openat resumed>) = 3 [pid 8441] +++ exited with 0 +++ [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8420] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5000] lstat("./94/binderfs", [pid 8420] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8444] <... futex resumed>) = 0 [pid 8420] <... futex resumed>) = 1 [pid 5000] unlink("./94/binderfs" [pid 8444] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8420] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... unlink resumed>) = 0 [pid 5000] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8426] <... fsconfig resumed>) = 0 [pid 8426] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8426] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 8447 attached [pid 8444] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8424] <... futex resumed>) = ? [pid 8421] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8421] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8421] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 8421] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8447] set_robust_list(0x5555562025e0, 24 [pid 8444] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8433] <... fsconfig resumed>) = 0 [pid 8421] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8444] <... futex resumed>) = 1 [pid 8420] <... futex resumed>) = 0 [pid 8444] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8420] exit_group(0 [pid 8444] <... futex resumed>) = ? [pid 8426] <... futex resumed>) = ? [pid 8421] <... clone resumed>, parent_tid=[8449], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8449 [pid 8420] <... exit_group resumed>) = ? [pid 8444] +++ exited with 0 +++ [pid 8426] +++ exited with 0 +++ [pid 8420] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8420, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 8421] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 8433] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8432] <... futex resumed>) = 0 [pid 8432] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8421] <... futex resumed>) = 0 [pid 8432] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8447] <... set_robust_list resumed>) = 0 [pid 8433] <... futex resumed>) = 1 [pid 8421] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... restart_syscall resumed>) = 0 [pid 5002] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8424] +++ exited with 0 +++ [pid 8423] +++ exited with 0 +++ [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8423, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- ./strace-static-x86_64: Process 8449 attached [pid 5002] <... openat resumed>) = 3 [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5002] fstat(3, [pid 5001] <... restart_syscall resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = 0 [pid 8433] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 5002] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8433] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8447] chdir("./96" [pid 8433] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] lstat("./93/binderfs", [pid 5001] <... openat resumed>) = 3 [pid 8447] <... chdir resumed>) = 0 [pid 8433] <... futex resumed>) = 1 [pid 8432] <... futex resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] fstat(3, [pid 8447] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8433] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8432] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] unlink("./93/binderfs" [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8447] <... prctl resumed>) = 0 [pid 8432] <... futex resumed>) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 5001] getdents64(3, [pid 8447] setpgid(0, 0 [pid 8432] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8449] set_robust_list(0x7f5047d309e0, 24 [pid 8447] <... setpgid resumed>) = 0 [pid 8425] <... fsconfig resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8449] <... set_robust_list resumed>) = 0 [ 124.464066][ T8433] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 124.486080][ T8425] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 124.489151][ T8433] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [pid 8425] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] lstat("./94/file0", [pid 8449] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8425] <... futex resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8449] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8425] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5001] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8449] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8449] <... futex resumed>) = 1 [pid 8421] <... futex resumed>) = 0 [pid 5001] lstat("./95/binderfs", [pid 5000] openat(AT_FDCWD, "./94/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8449] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8421] exit_group(0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... openat resumed>) = 4 [pid 8449] <... futex resumed>) = ? [pid 8425] <... futex resumed>) = ? [pid 8421] <... exit_group resumed>) = ? [pid 5000] fstat(4, [pid 8449] +++ exited with 0 +++ [pid 8425] +++ exited with 0 +++ [pid 8421] +++ exited with 0 +++ [pid 5001] unlink("./95/binderfs" [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./94/file0") = 0 [pid 5000] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./94" [pid 5001] <... unlink resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5001] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] mkdir("./95", 0777) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8421, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5002] <... umount2 resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 8447] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... openat resumed>) = 3 [pid 4999] <... restart_syscall resumed>) = 0 [pid 8447] <... openat resumed>) = 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8447] write(3, "1000", 4 [pid 5002] lstat("./93/file0", [pid 8447] <... write resumed>) = 4 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8447] close(3 [pid 5002] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8447] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8447] symlink("/dev/binderfs", "./binderfs" [pid 5002] openat(AT_FDCWD, "./93/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... openat resumed>) = 3 [pid 8447] <... symlink resumed>) = 0 [pid 5002] <... openat resumed>) = 4 [pid 4999] fstat(3, [pid 8447] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] fstat(4, [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8447] <... futex resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] getdents64(3, [pid 8447] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5002] getdents64(4, [pid 5000] close(3 [pid 4999] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 8447] <... mmap resumed>) = 0x7f50500f1000 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5000] <... close resumed>) = 0 [pid 4999] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8447] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 5002] getdents64(4, [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8447] <... mprotect resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 4999] lstat("./93/binderfs", [pid 8447] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5002] close(4 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... close resumed>) = 0 [pid 4999] unlink("./93/binderfs" [pid 8447] <... clone resumed>, parent_tid=[8450], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8450 [pid 5002] rmdir("./93/file0" [pid 4999] <... unlink resumed>) = 0 [pid 8447] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... rmdir resumed>) = 0 [pid 4999] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8447] <... futex resumed>) = 0 [pid 5002] getdents64(3, [pid 8447] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./93") = 0 [pid 5002] mkdir("./94", 0777 [pid 5001] <... umount2 resumed>) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x5555562025d0) = 8451 [ 124.510258][ T8433] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8432] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5002] <... mkdir resumed>) = 0 [pid 5001] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8432] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8432] <... futex resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5001] lstat("./95/file0", ./strace-static-x86_64: Process 8451 attached [pid 8432] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 8432] <... mmap resumed>) = 0x7f5047d10000 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8432] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5002] close(3 [pid 8432] <... mprotect resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 8432] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8432] <... clone resumed>, parent_tid=[8453], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8453 [pid 5002] <... clone resumed>, child_tidptr=0x5555562025d0) = 8454 ./strace-static-x86_64: Process 8450 attached [pid 8432] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8450] set_robust_list(0x7f50501119e0, 24 [pid 8432] <... futex resumed>) = 0 [pid 8450] <... set_robust_list resumed>) = 0 [pid 8432] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8450] memfd_create("syzkaller", 0) = 3 [pid 8450] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 ./strace-static-x86_64: Process 8454 attached [pid 8451] set_robust_list(0x5555562025e0, 24 [pid 8433] <... fsconfig resumed>) = 0 [pid 5001] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = 0 [pid 8454] set_robust_list(0x5555562025e0, 24 [pid 8451] <... set_robust_list resumed>) = 0 [pid 8450] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8433] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8453 attached [pid 8454] <... set_robust_list resumed>) = 0 [pid 8451] chdir("./95" [pid 8433] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8453] set_robust_list(0x7f5047d309e0, 24 [pid 4999] lstat("./93/file0", [pid 8453] <... set_robust_list resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8453] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4999] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8453] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8450] <... write resumed>) = 262144 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8453] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8450] munmap(0x7f5047cf1000, 262144 [pid 5001] openat(AT_FDCWD, "./95/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] openat(AT_FDCWD, "./93/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8454] chdir("./94" [pid 8453] <... futex resumed>) = 1 [pid 8451] <... chdir resumed>) = 0 [pid 8450] <... munmap resumed>) = 0 [pid 8432] <... futex resumed>) = 0 [pid 5001] <... openat resumed>) = 4 [pid 4999] <... openat resumed>) = 4 [pid 8454] <... chdir resumed>) = 0 [pid 8453] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8451] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8450] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8432] exit_group(0 [pid 4999] fstat(4, [pid 8454] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8453] <... futex resumed>) = ? [pid 8451] <... prctl resumed>) = 0 [pid 8450] <... openat resumed>) = 4 [pid 8432] <... exit_group resumed>) = ? [pid 5001] fstat(4, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8454] <... prctl resumed>) = 0 [pid 8453] +++ exited with 0 +++ [pid 8451] setpgid(0, 0 [pid 8450] ioctl(4, LOOP_SET_FD, 3 [pid 8433] +++ exited with 0 +++ [pid 8432] +++ exited with 0 +++ [pid 4999] getdents64(4, [pid 8454] setpgid(0, 0 [pid 8451] <... setpgid resumed>) = 0 [pid 8450] <... ioctl resumed>) = 0 [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8432, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8454] <... setpgid resumed>) = 0 [pid 8451] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8450] close(3 [pid 5001] getdents64(4, [pid 4999] getdents64(4, [pid 8454] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8450] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8451] <... openat resumed>) = 3 [pid 8450] mkdir("./file0", 0777 [pid 5005] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] close(4 [pid 8454] <... openat resumed>) = 3 [pid 8451] write(3, "1000", 4 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] getdents64(4, [pid 4999] <... close resumed>) = 0 [pid 8454] write(3, "1000", 4 [pid 8451] <... write resumed>) = 4 [pid 8450] <... mkdir resumed>) = 0 [pid 5005] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 4999] rmdir("./93/file0" [pid 8454] <... write resumed>) = 4 [pid 8451] close(3 [pid 8450] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5005] <... openat resumed>) = 3 [ 124.566645][ T8433] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 124.606678][ T8450] loop4: detected capacity change from 0 to 512 [pid 5001] close(4 [pid 4999] <... rmdir resumed>) = 0 [pid 8454] close(3 [pid 8451] <... close resumed>) = 0 [pid 5005] fstat(3, [pid 4999] getdents64(3, [pid 8454] <... close resumed>) = 0 [pid 8451] symlink("/dev/binderfs", "./binderfs" [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8454] symlink("/dev/binderfs", "./binderfs" [pid 5005] getdents64(3, [pid 4999] close(3 [pid 5005] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] <... close resumed>) = 0 [pid 8451] <... symlink resumed>) = 0 [pid 5005] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] rmdir("./95/file0" [pid 4999] rmdir("./93" [pid 8454] <... symlink resumed>) = 0 [pid 8451] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8454] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 8454] <... futex resumed>) = 0 [pid 8451] <... futex resumed>) = 0 [pid 5005] lstat("./93/binderfs", [pid 5001] getdents64(3, [pid 4999] mkdir("./94", 0777 [pid 8454] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8451] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5005] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5005] unlink("./93/binderfs" [pid 4999] <... mkdir resumed>) = 0 [pid 8454] <... mmap resumed>) = 0x7f50500f1000 [pid 8451] <... mmap resumed>) = 0x7f50500f1000 [pid 5005] <... unlink resumed>) = 0 [pid 5001] close(3 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8454] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8451] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 5005] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... close resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 8454] <... mprotect resumed>) = 0 [pid 8451] <... mprotect resumed>) = 0 [pid 5001] rmdir("./95" [pid 8454] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8451] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5001] <... rmdir resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5001] mkdir("./96", 0777 [pid 8454] <... clone resumed>, parent_tid=[8455], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8455 [pid 8451] <... clone resumed>, parent_tid=[8456], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8456 [pid 5001] <... mkdir resumed>) = 0 [pid 8454] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8451] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8454] <... futex resumed>) = 0 [pid 8451] <... futex resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 8454] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8451] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] close(3./strace-static-x86_64: Process 8456 attached ./strace-static-x86_64: Process 8455 attached ) = 0 [pid 4999] close(3 [pid 8456] set_robust_list(0x7f50501119e0, 24 [pid 8455] set_robust_list(0x7f50501119e0, 24 [pid 4999] <... close resumed>) = 0 [pid 8456] <... set_robust_list resumed>) = 0 [pid 8455] <... set_robust_list resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8456] memfd_create("syzkaller", 0 [pid 8455] memfd_create("syzkaller", 0 [pid 8456] <... memfd_create resumed>) = 3 [pid 8455] <... memfd_create resumed>) = 3 [pid 4999] <... clone resumed>, child_tidptr=0x5555562025d0) = 8457 [pid 8456] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8455] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8456] <... mmap resumed>) = 0x7f5047cf1000 [pid 8455] <... mmap resumed>) = 0x7f5047cf1000 ./strace-static-x86_64: Process 8457 attached [pid 8456] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8455] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5005] <... umount2 resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8457] set_robust_list(0x5555562025e0, 24 [pid 8456] <... write resumed>) = 262144 [pid 8455] <... write resumed>) = 262144 [pid 5005] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8457] <... set_robust_list resumed>) = 0 [pid 8456] munmap(0x7f5047cf1000, 262144 [pid 8455] munmap(0x7f5047cf1000, 262144 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8457] chdir("./94" [pid 8456] <... munmap resumed>) = 0 [pid 8455] <... munmap resumed>) = 0 [pid 5005] lstat("./93/file0", [pid 5001] <... clone resumed>, child_tidptr=0x5555562025d0) = 8459 [pid 8457] <... chdir resumed>) = 0 [pid 8456] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8455] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5005] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8457] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8456] <... openat resumed>) = 4 [pid 8455] <... openat resumed>) = 4 [pid 5005] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8457] <... prctl resumed>) = 0 [ 124.619813][ T8450] EXT4-fs: Ignoring removed oldalloc option [pid 8456] ioctl(4, LOOP_SET_FD, 3 [pid 8455] ioctl(4, LOOP_SET_FD, 3 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8459 attached [pid 8457] setpgid(0, 0 [pid 5005] openat(AT_FDCWD, "./93/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8459] set_robust_list(0x5555562025e0, 24) = 0 [pid 8459] chdir("./96") = 0 [pid 8459] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8459] setpgid(0, 0) = 0 [pid 8459] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8459] write(3, "1000", 4) = 4 [pid 8459] close(3) = 0 [pid 8459] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8459] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... openat resumed>) = 4 [pid 8457] <... setpgid resumed>) = 0 [pid 5005] fstat(4, [pid 8456] <... ioctl resumed>) = 0 [pid 8455] <... ioctl resumed>) = 0 [pid 8457] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8456] close(3 [pid 8455] close(3 [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8457] <... openat resumed>) = 3 [pid 8456] <... close resumed>) = 0 [pid 8455] <... close resumed>) = 0 [pid 5005] getdents64(4, [pid 8459] <... futex resumed>) = 0 [pid 8457] write(3, "1000", 4 [pid 8456] mkdir("./file0", 0777 [pid 5005] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8455] mkdir("./file0", 0777 [pid 8456] <... mkdir resumed>) = 0 [pid 5005] getdents64(4, [pid 8457] <... write resumed>) = 4 [pid 8456] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5005] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8457] close(3 [pid 8455] <... mkdir resumed>) = 0 [pid 8455] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5005] close(4) = 0 [pid 5005] rmdir("./93/file0") = 0 [pid 8457] <... close resumed>) = 0 [pid 8457] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5005] getdents64(3, [pid 8457] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8457] <... futex resumed>) = 0 [pid 5005] close(3 [pid 8457] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5005] <... close resumed>) = 0 [pid 8457] <... mmap resumed>) = 0x7f50500f1000 [pid 5005] rmdir("./93" [pid 8457] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 5005] <... rmdir resumed>) = 0 [pid 8457] <... mprotect resumed>) = 0 [pid 5005] mkdir("./94", 0777 [pid 8457] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5005] <... mkdir resumed>) = 0 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 8457] <... clone resumed>, parent_tid=[8461], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8461 [pid 5005] <... openat resumed>) = 3 [pid 8457] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] ioctl(3, LOOP_CLR_FD [pid 8457] <... futex resumed>) = 0 [pid 5005] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8459] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8457] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5005] close(3 [pid 8459] <... mmap resumed>) = 0x7f50500f1000 [pid 5005] <... close resumed>) = 0 [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 8462 [ 124.675880][ T8456] loop1: detected capacity change from 0 to 512 [ 124.681281][ T8450] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 124.682990][ T8455] loop3: detected capacity change from 0 to 512 [ 124.700711][ T8456] EXT4-fs: Ignoring removed oldalloc option [ 124.701743][ T8455] EXT4-fs: Ignoring removed oldalloc option ./strace-static-x86_64: Process 8462 attached ./strace-static-x86_64: Process 8461 attached [pid 8459] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8462] set_robust_list(0x5555562025e0, 24 [pid 8461] set_robust_list(0x7f50501119e0, 24 [pid 8459] <... mprotect resumed>) = 0 [pid 8462] <... set_robust_list resumed>) = 0 [pid 8461] <... set_robust_list resumed>) = 0 [pid 8459] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8462] chdir("./94" [pid 8461] memfd_create("syzkaller", 0 [pid 8462] <... chdir resumed>) = 0 [pid 8461] <... memfd_create resumed>) = 3 ./strace-static-x86_64: Process 8464 attached [pid 8464] set_robust_list(0x7f50501119e0, 24 [pid 8462] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8461] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8459] <... clone resumed>, parent_tid=[8464], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8464 [pid 8462] <... prctl resumed>) = 0 [pid 8459] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8461] <... mmap resumed>) = 0x7f5047cf1000 [pid 8462] setpgid(0, 0 [pid 8459] <... futex resumed>) = 0 [pid 8464] <... set_robust_list resumed>) = 0 [pid 8464] memfd_create("syzkaller", 0) = 3 [pid 8464] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8461] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8462] <... setpgid resumed>) = 0 [pid 8462] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8459] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8464] <... mmap resumed>) = 0x7f5047cf1000 [pid 8461] <... write resumed>) = 262144 [pid 8462] <... openat resumed>) = 3 [pid 8462] write(3, "1000", 4 [pid 8461] munmap(0x7f5047cf1000, 262144 [pid 8464] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8462] <... write resumed>) = 4 [pid 8461] <... munmap resumed>) = 0 [pid 8462] close(3) = 0 [pid 8462] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8462] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8462] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8462] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8462] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8466], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8466 [pid 8462] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8462] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8461] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8461] ioctl(4, LOOP_SET_FD, 3 [pid 8464] <... write resumed>) = 262144 [pid 8464] munmap(0x7f5047cf1000, 262144) = 0 [pid 8464] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8464] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 8466 attached ) = 0 [pid 8464] close(3) = 0 [pid 8464] mkdir("./file0", 0777) = 0 [ 124.720323][ T8450] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 124.746682][ T8455] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 124.752816][ T8461] loop0: detected capacity change from 0 to 512 [ 124.756610][ T8450] EXT4-fs (loop4): 1 truncate cleaned up [ 124.766451][ T8464] loop2: detected capacity change from 0 to 512 [pid 8464] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8466] set_robust_list(0x7f50501119e0, 24 [pid 8461] <... ioctl resumed>) = 0 [pid 8466] <... set_robust_list resumed>) = 0 [pid 8466] memfd_create("syzkaller", 0) = 3 [pid 8466] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 8466] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 8466] munmap(0x7f5047cf1000, 262144) = 0 [pid 8466] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 8466] ioctl(4, LOOP_SET_FD, 3 [pid 8461] close(3) = 0 [pid 8461] mkdir("./file0", 0777 [pid 8466] <... ioctl resumed>) = 0 [pid 8461] <... mkdir resumed>) = 0 [pid 8466] close(3 [pid 8461] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8466] <... close resumed>) = 0 [pid 8466] mkdir("./file0", 0777) = 0 [ 124.769999][ T8455] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 124.776728][ T8464] EXT4-fs: Ignoring removed oldalloc option [ 124.790075][ T8450] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.804101][ T8466] loop5: detected capacity change from 0 to 512 [ 124.815733][ T8461] EXT4-fs: Ignoring removed oldalloc option [pid 8466] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8455] <... mount resumed>) = 0 [pid 8455] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8455] chdir("./file0") = 0 [pid 8455] ioctl(4, LOOP_CLR_FD) = 0 [ 124.817369][ T8466] EXT4-fs: Ignoring removed oldalloc option [ 124.823106][ T8456] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 124.828075][ T8455] EXT4-fs (loop3): 1 truncate cleaned up [ 124.842691][ T8455] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.844710][ T8456] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 8455] close(4 [pid 8450] <... mount resumed>) = 0 [pid 8455] <... close resumed>) = 0 [pid 8450] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8450] chdir("./file0") = 0 [pid 8450] ioctl(4, LOOP_CLR_FD) = 0 [pid 8455] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8450] close(4) = 0 [pid 8450] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8447] <... futex resumed>) = 0 [pid 8450] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 8447] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8450] fspick(AT_FDCWD, ".", 0 [pid 8447] <... futex resumed>) = 0 [pid 8450] <... fspick resumed>) = 4 [pid 8447] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8450] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8447] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8450] <... futex resumed>) = 0 [pid 8447] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8450] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8447] <... futex resumed>) = 0 [pid 8450] <... fsconfig resumed>) = 0 [pid 8447] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8450] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8447] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8450] <... futex resumed>) = 0 [pid 8447] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8450] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8447] <... futex resumed>) = 0 [pid 8455] <... futex resumed>) = 1 [pid 8454] <... futex resumed>) = 0 [pid 8447] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8455] fspick(AT_FDCWD, ".", 0 [pid 8454] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8455] <... fspick resumed>) = 4 [pid 8454] <... futex resumed>) = 0 [pid 8455] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8454] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8455] <... futex resumed>) = 0 [pid 8454] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8455] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8454] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8455] <... fsconfig resumed>) = 0 [pid 8454] <... futex resumed>) = 0 [pid 8455] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8454] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8455] <... futex resumed>) = 0 [pid 8454] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8455] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8454] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8454] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8456] <... mount resumed>) = 0 [pid 8456] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8456] chdir("./file0") = 0 [pid 8456] ioctl(4, LOOP_CLR_FD) = 0 [pid 8456] close(4) = 0 [pid 8456] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8451] <... futex resumed>) = 0 [pid 8451] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8451] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8456] <... futex resumed>) = 1 [pid 8456] fspick(AT_FDCWD, ".", 0) = 4 [pid 8456] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8451] <... futex resumed>) = 0 [pid 8451] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8451] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8456] <... futex resumed>) = 1 [pid 8456] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 8456] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8451] <... futex resumed>) = 0 [pid 8451] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8451] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8456] <... futex resumed>) = 1 [pid 8456] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8450] <... fsconfig resumed>) = 0 [pid 8450] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8447] <... futex resumed>) = 0 [pid 8447] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 124.877270][ T8456] EXT4-fs (loop1): 1 truncate cleaned up [ 124.892971][ T8450] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 124.895501][ T8456] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.918014][ T8464] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8447] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8450] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 8450] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8447] <... futex resumed>) = 0 [pid 8447] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8447] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8450] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8454] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8454] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8454] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 8454] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8454] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8475], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8475 [pid 8454] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 124.929548][ T8455] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 124.930512][ T8456] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 124.942088][ T8450] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 124.966366][ T8466] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8454] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8451] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8451] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8451] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 8451] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8451] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 8476 attached [pid 8456] <... fsconfig resumed>) = 0 [pid 8476] set_robust_list(0x7f5047d309e0, 24 [pid 8456] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8451] <... clone resumed>, parent_tid=[8476], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8476 [pid 8476] <... set_robust_list resumed>) = 0 [pid 8456] <... futex resumed>) = 0 [pid 8476] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8456] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8451] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8476] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8451] <... futex resumed>) = 0 [pid 8476] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8451] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8476] <... futex resumed>) = 0 [pid 8451] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8476] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8451] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8475 attached [pid 8456] <... futex resumed>) = 0 [pid 8455] <... fsconfig resumed>) = 0 [pid 8451] <... futex resumed>) = 1 [pid 8447] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8475] set_robust_list(0x7f5047d309e0, 24 [pid 8456] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8455] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8451] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8475] <... set_robust_list resumed>) = 0 [pid 8455] <... futex resumed>) = 0 [pid 8447] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8475] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8455] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8475] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8475] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 124.983888][ T8461] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 124.992664][ T8450] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 124.993537][ T8464] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 125.005193][ T8456] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [pid 8475] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8454] <... futex resumed>) = 0 [pid 8447] <... futex resumed>) = 0 [pid 8454] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8447] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8455] <... futex resumed>) = 0 [pid 8454] <... futex resumed>) = 1 [pid 8447] <... mmap resumed>) = 0x7f5047d10000 [pid 8455] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8454] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8447] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8451] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8450] <... fsconfig resumed>) = 0 [pid 8447] <... mprotect resumed>) = 0 [pid 8447] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8451] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8450] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8476] <... futex resumed>) = 0 [pid 8451] <... futex resumed>) = 1 [pid 8450] <... futex resumed>) = 0 [pid 8447] <... clone resumed>, parent_tid=[8478], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8478 [pid 8447] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8476] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8451] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8450] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8447] <... futex resumed>) = 0 [ 125.015562][ T8466] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 125.034499][ T8456] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 125.041235][ T8461] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 125.062768][ T8450] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 125.065385][ T8455] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [pid 8447] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8478 attached [pid 8478] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8478] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 ENOSPC (No space left on device) [pid 8461] <... mount resumed>) = 0 [pid 8476] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8476] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8451] <... futex resumed>) = 0 [ 125.087687][ T8461] EXT4-fs (loop0): 1 truncate cleaned up [ 125.092283][ T8464] EXT4-fs (loop2): 1 truncate cleaned up [ 125.093966][ T8461] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.099588][ T8466] EXT4-fs (loop5): 1 truncate cleaned up [ 125.112642][ T8456] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 125.119521][ T8455] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8476] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8478] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8461] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8456] <... fsconfig resumed>) = 0 [pid 8454] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8454] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8475] <... futex resumed>) = 0 [pid 8454] <... futex resumed>) = 1 [pid 8475] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8454] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8447] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8475] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 8447] exit_group(0 [pid 8475] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8450] <... futex resumed>) = ? [pid 8447] <... exit_group resumed>) = ? [pid 8475] <... futex resumed>) = 1 [pid 8454] <... futex resumed>) = 0 [pid 8450] +++ exited with 0 +++ [pid 8475] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8478] <... futex resumed>) = ? [pid 8464] <... mount resumed>) = 0 [pid 8461] <... openat resumed>) = 3 [pid 8456] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8478] +++ exited with 0 +++ [pid 8461] chdir("./file0" [pid 8456] <... futex resumed>) = 0 [pid 8451] exit_group(0 [pid 8447] +++ exited with 0 +++ [pid 8461] <... chdir resumed>) = 0 [pid 8451] <... exit_group resumed>) = ? [pid 8461] ioctl(4, LOOP_CLR_FD [pid 8456] +++ exited with 0 +++ [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8447, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 8461] <... ioctl resumed>) = 0 [pid 5004] umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8461] close(4 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8476] <... futex resumed>) = ? [pid 8466] <... mount resumed>) = 0 [pid 8464] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8461] <... close resumed>) = 0 [pid 5004] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8476] +++ exited with 0 +++ [pid 8451] +++ exited with 0 +++ [pid 5004] <... openat resumed>) = 3 [pid 5004] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5004] umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./96/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8451, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 8466] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8464] <... openat resumed>) = 3 [pid 8461] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] unlink("./96/binderfs" [pid 8461] <... futex resumed>) = 1 [pid 8457] <... futex resumed>) = 0 [pid 5004] <... unlink resumed>) = 0 [pid 8461] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8457] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8461] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8457] <... futex resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8461] fspick(AT_FDCWD, ".", 0 [pid 8457] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8466] <... openat resumed>) = 3 [pid 8461] <... fspick resumed>) = 4 [pid 5000] <... openat resumed>) = 3 [pid 8466] chdir("./file0" [pid 8464] chdir("./file0" [pid 8461] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] fstat(3, [pid 8466] <... chdir resumed>) = 0 [pid 8464] <... chdir resumed>) = 0 [pid 8461] <... futex resumed>) = 1 [pid 8457] <... futex resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8466] ioctl(4, LOOP_CLR_FD [pid 8464] ioctl(4, LOOP_CLR_FD [pid 8461] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8457] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] getdents64(3, [pid 8466] <... ioctl resumed>) = 0 [pid 8464] <... ioctl resumed>) = 0 [pid 8461] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8457] <... futex resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 8466] close(4 [pid 8464] close(4 [pid 8461] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8457] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8466] <... close resumed>) = 0 [pid 8464] <... close resumed>) = 0 [pid 8461] <... fsconfig resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 125.128801][ T8464] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.141420][ T8466] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 8466] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8464] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8461] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] lstat("./95/binderfs", [pid 8466] <... futex resumed>) = 1 [pid 8464] <... futex resumed>) = 1 [pid 8462] <... futex resumed>) = 0 [pid 8461] <... futex resumed>) = 1 [pid 8459] <... futex resumed>) = 0 [pid 8457] <... futex resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8466] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8464] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8461] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8459] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8457] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] unlink("./95/binderfs" [pid 8464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8461] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8459] <... futex resumed>) = 0 [pid 8457] <... futex resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 8464] fspick(AT_FDCWD, ".", 0 [pid 8461] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8459] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8457] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8464] <... fspick resumed>) = 4 [pid 8464] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8459] <... futex resumed>) = 0 [pid 8464] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8459] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8459] <... futex resumed>) = 0 [pid 8464] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8459] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8464] <... fsconfig resumed>) = 0 [pid 8464] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8459] <... futex resumed>) = 0 [pid 8464] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8459] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8459] <... futex resumed>) = 0 [pid 8464] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8459] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8462] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8466] <... futex resumed>) = 0 [pid 8462] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8466] fspick(AT_FDCWD, ".", 0 [pid 8455] <... fsconfig resumed>) = 0 [pid 8455] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8455] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8466] <... fspick resumed>) = 4 [pid 8454] exit_group(0 [pid 8475] <... futex resumed>) = ? [pid 8455] <... futex resumed>) = ? [pid 8454] <... exit_group resumed>) = ? [pid 8475] +++ exited with 0 +++ [pid 8466] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8455] +++ exited with 0 +++ [pid 8454] +++ exited with 0 +++ [pid 8466] <... futex resumed>) = 1 [pid 8462] <... futex resumed>) = 0 [pid 8466] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8462] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8457] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8462] <... futex resumed>) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8454, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 8466] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8464] <... fsconfig resumed>) = 0 [pid 8462] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8457] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8466] <... fsconfig resumed>) = 0 [pid 8464] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8459] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5004] <... umount2 resumed>) = 0 [pid 5002] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8457] <... futex resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 8466] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8459] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8457] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5000] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8466] <... futex resumed>) = 1 [pid 8462] <... futex resumed>) = 0 [pid 8459] <... futex resumed>) = 0 [pid 8462] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8462] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8457] <... mmap resumed>) = 0x7f5047d10000 [pid 5002] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8466] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8459] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8457] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... openat resumed>) = 3 [pid 5002] fstat(3, [pid 8457] <... mprotect resumed>) = 0 [pid 8457] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8457] <... clone resumed>, parent_tid=[8481], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8481 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./95/file0", [pid 8457] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] lstat("./94/binderfs", [pid 8457] <... futex resumed>) = 0 [ 125.184249][ T8455] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 125.200871][ T8464] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 125.212591][ T8461] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 8464] <... futex resumed>) = 1 [pid 8459] <... futex resumed>) = 0 [pid 8457] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8459] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=35000000} [pid 5002] unlink("./94/binderfs" [pid 5000] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8481 attached [pid 8481] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8481] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 5002] <... unlink resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] openat(AT_FDCWD, "./95/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8481] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8481] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8457] <... futex resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 8457] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5000] fstat(4, [pid 8457] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8481] <... futex resumed>) = 1 [pid 5000] getdents64(4, [pid 8481] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5000] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./95/file0") = 0 [pid 5000] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./95") = 0 [pid 5000] mkdir("./96", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8464] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 5000] <... openat resumed>) = 3 [pid 8464] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 5000] ioctl(3, LOOP_CLR_FD [pid 8464] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8459] <... futex resumed>) = 0 [pid 8464] <... futex resumed>) = 1 [pid 5000] close(3 [pid 8459] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] lstat("./96/file0", [pid 8459] <... futex resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 8459] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8464] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8482 attached [pid 8482] set_robust_list(0x5555562025e0, 24) = 0 [pid 8482] chdir("./96" [pid 5000] <... clone resumed>, child_tidptr=0x5555562025d0) = 8482 [pid 5004] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8482] <... chdir resumed>) = 0 [pid 8482] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8482] setpgid(0, 0) = 0 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 125.250099][ T8466] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 125.270993][ T8464] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 125.283405][ T8481] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 8482] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8466] <... fsconfig resumed>) = 0 [pid 8462] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8461] <... fsconfig resumed>) = 0 [pid 5004] openat(AT_FDCWD, "./96/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8462] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8461] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8462] <... futex resumed>) = 0 [pid 8461] <... futex resumed>) = 0 [pid 8462] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8461] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8462] <... mmap resumed>) = 0x7f5047d10000 [pid 8462] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8462] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8483], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8483 [pid 8462] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8462] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8483 attached [pid 8483] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8483] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 8483] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8462] <... futex resumed>) = 0 [pid 8462] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8462] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8483] <... futex resumed>) = 1 [pid 8483] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8466] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8457] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5004] <... openat resumed>) = 4 [pid 8466] <... futex resumed>) = 0 [pid 8459] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8457] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] fstat(4, [pid 8466] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8461] <... futex resumed>) = 0 [pid 8457] <... futex resumed>) = 1 [pid 8461] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8457] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8482] write(3, "1000", 4) = 4 [pid 8482] close(3) = 0 [pid 8482] symlink("/dev/binderfs", "./binderfs" [pid 8459] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8482] <... symlink resumed>) = 0 [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8459] <... futex resumed>) = 0 [pid 8482] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] getdents64(4, [pid 8459] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8461] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 8461] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8457] <... futex resumed>) = 0 [pid 8461] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8482] <... futex resumed>) = 0 [pid 8459] <... mmap resumed>) = 0x7f5047d10000 [pid 5004] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8459] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5004] getdents64(4, [pid 8459] <... mprotect resumed>) = 0 [pid 5004] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8459] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5004] close(4 [pid 8482] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5004] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 8459] <... clone resumed>, parent_tid=[8484], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8484 [pid 5004] rmdir("./96/file0" [pid 5002] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8459] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... rmdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8459] <... futex resumed>) = 0 [pid 5004] getdents64(3, [pid 5002] lstat("./94/file0", [pid 8459] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8482] <... mmap resumed>) = 0x7f50500f1000 [pid 5004] close(3 [pid 5002] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8482] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 5004] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] rmdir("./96" [pid 5002] openat(AT_FDCWD, "./94/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8482] <... mprotect resumed>) = 0 [pid 5004] <... rmdir resumed>) = 0 [pid 5002] <... openat resumed>) = 4 [pid 5004] mkdir("./97", 0777 [pid 5002] fstat(4, [pid 5004] <... mkdir resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5002] getdents64(4, [pid 5004] <... openat resumed>) = 3 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5004] ioctl(3, LOOP_CLR_FD [ 125.290590][ T8464] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 125.300930][ T8483] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 125.301539][ T8483] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 125.324023][ T8481] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 5002] getdents64(4, [pid 5004] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5004] close(3 [pid 5002] close(4./strace-static-x86_64: Process 8484 attached [pid 8482] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8464] <... fsconfig resumed>) = 0 [pid 8462] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5004] <... close resumed>) = 0 [pid 8484] set_robust_list(0x7f5047d309e0, 24 [pid 8464] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8462] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8484] <... set_robust_list resumed>) = 0 [pid 8482] <... clone resumed>, parent_tid=[8488], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8488 [pid 8466] <... futex resumed>) = 0 [pid 8464] <... futex resumed>) = 0 [pid 8462] <... futex resumed>) = 1 [pid 8484] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8482] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8466] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8464] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8462] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8482] <... futex resumed>) = 0 [pid 8482] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5002] <... close resumed>) = 0 [pid 8484] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8466] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] rmdir("./94/file0" [pid 8484] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8466] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8484] <... futex resumed>) = 1 [pid 8466] <... futex resumed>) = 1 [pid 8462] <... futex resumed>) = 0 [pid 8459] <... futex resumed>) = 0 ./strace-static-x86_64: Process 8489 attached ./strace-static-x86_64: Process 8488 attached [pid 8484] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8483] <... fsconfig resumed>) = 0 [pid 8466] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5002] <... rmdir resumed>) = 0 [pid 8489] set_robust_list(0x5555562025e0, 24 [pid 8488] set_robust_list(0x7f50501119e0, 24 [pid 8483] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... clone resumed>, child_tidptr=0x5555562025d0) = 8489 [pid 5002] getdents64(3, [pid 8489] <... set_robust_list resumed>) = 0 [pid 8488] <... set_robust_list resumed>) = 0 [pid 8483] <... futex resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8489] chdir("./97" [pid 8488] memfd_create("syzkaller", 0 [pid 8483] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8459] exit_group(0 [pid 5002] close(3 [pid 8489] <... chdir resumed>) = 0 [pid 8488] <... memfd_create resumed>) = 3 [pid 8484] <... futex resumed>) = ? [pid 8464] <... futex resumed>) = ? [pid 8462] exit_group(0 [pid 8459] <... exit_group resumed>) = ? [pid 5002] <... close resumed>) = 0 [pid 8489] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8488] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8484] +++ exited with 0 +++ [pid 8483] <... futex resumed>) = ? [pid 8481] <... fsconfig resumed>) = 0 [pid 8466] <... futex resumed>) = ? [pid 8464] +++ exited with 0 +++ [pid 8462] <... exit_group resumed>) = ? [pid 5002] rmdir("./94" [pid 8459] +++ exited with 0 +++ [pid 8489] <... prctl resumed>) = 0 [pid 8488] <... mmap resumed>) = 0x7f5047cf1000 [pid 8483] +++ exited with 0 +++ [pid 8481] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8466] +++ exited with 0 +++ [pid 5002] <... rmdir resumed>) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8459, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 8489] setpgid(0, 0 [pid 8462] +++ exited with 0 +++ [pid 8457] exit_group(0 [pid 8461] <... futex resumed>) = ? [pid 8457] <... exit_group resumed>) = ? [pid 8488] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8461] +++ exited with 0 +++ [pid 8489] <... setpgid resumed>) = 0 [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8462, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5002] mkdir("./95", 0777 [pid 8481] <... futex resumed>) = ? [pid 8489] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8481] +++ exited with 0 +++ [pid 8457] +++ exited with 0 +++ [pid 5005] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... mkdir resumed>) = 0 [pid 8489] <... openat resumed>) = 3 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8457, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 8489] write(3, "1000", 4 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5001] umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8489] <... write resumed>) = 4 [pid 5005] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8489] close(3 [pid 5002] <... openat resumed>) = 3 [pid 8489] <... close resumed>) = 0 [pid 5005] <... openat resumed>) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5001] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8489] symlink("/dev/binderfs", "./binderfs" [pid 5005] fstat(3, [pid 5001] <... openat resumed>) = 3 [pid 8488] <... write resumed>) = 262144 [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] fstat(3, [pid 8489] <... symlink resumed>) = 0 [pid 8488] munmap(0x7f5047cf1000, 262144 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8489] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] getdents64(3, [pid 5002] close(3 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8489] <... futex resumed>) = 0 [pid 8488] <... munmap resumed>) = 0 [pid 5005] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5002] <... close resumed>) = 0 [pid 8488] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 125.344792][ T8464] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 125.356837][ T8483] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 125.380985][ T8481] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 8488] ioctl(4, LOOP_SET_FD, 3 [pid 8489] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5005] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] getdents64(3, [pid 4999] <... openat resumed>) = 3 [pid 8489] <... mmap resumed>) = 0x7f50500f1000 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] fstat(3, [pid 8489] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 5005] lstat("./94/binderfs", [pid 5002] <... clone resumed>, child_tidptr=0x5555562025d0) = 8490 [pid 5001] umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8489] <... mprotect resumed>) = 0 [pid 5005] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] getdents64(3, [pid 8489] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5005] unlink("./94/binderfs" [pid 5001] lstat("./96/binderfs", [pid 4999] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5005] <... unlink resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8489] <... clone resumed>, parent_tid=[8491], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8491 [pid 5005] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] unlink("./96/binderfs" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8489] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... unlink resumed>) = 0 [pid 4999] lstat("./94/binderfs", [pid 8489] <... futex resumed>) = 0 [pid 5001] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8489] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4999] unlink("./94/binderfs") = 0 [pid 4999] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8491 attached [pid 8491] set_robust_list(0x7f50501119e0, 24) = 0 ./strace-static-x86_64: Process 8490 attached [pid 8488] <... ioctl resumed>) = 0 [pid 8491] memfd_create("syzkaller", 0 [pid 8488] close(3) = 0 [pid 8488] mkdir("./file0", 0777 [pid 5001] <... umount2 resumed>) = 0 [pid 8488] <... mkdir resumed>) = 0 [pid 5005] <... umount2 resumed>) = 0 [pid 5001] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8490] set_robust_list(0x5555562025e0, 24 [pid 5001] lstat("./96/file0", [pid 8488] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8491] <... memfd_create resumed>) = 3 [pid 5005] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8491] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5005] lstat("./94/file0", [pid 5001] openat(AT_FDCWD, "./96/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8491] <... mmap resumed>) = 0x7f5047cf1000 [pid 8490] <... set_robust_list resumed>) = 0 [pid 5005] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... openat resumed>) = 4 [pid 4999] lstat("./94/file0", [pid 8491] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8490] chdir("./95" [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] fstat(4, [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8491] <... write resumed>) = 262144 [pid 8490] <... chdir resumed>) = 0 [pid 5005] openat(AT_FDCWD, "./94/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8491] munmap(0x7f5047cf1000, 262144 [pid 8490] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5005] <... openat resumed>) = 4 [pid 5001] getdents64(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8490] <... prctl resumed>) = 0 [pid 8490] setpgid(0, 0 [pid 5005] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8491] <... munmap resumed>) = 0 [pid 5005] getdents64(4, [pid 8490] <... setpgid resumed>) = 0 [pid 5005] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] openat(AT_FDCWD, "./94/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8490] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 125.425357][ T8488] loop1: detected capacity change from 0 to 512 [ 125.457981][ T8488] EXT4-fs: Ignoring removed oldalloc option [pid 5005] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] getdents64(4, [pid 4999] <... openat resumed>) = 4 [pid 5005] close(4) = 0 [pid 5005] rmdir("./94/file0") = 0 [pid 5005] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5005] close(3) = 0 [pid 5005] rmdir("./94") = 0 [pid 5005] mkdir("./95", 0777) = 0 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5005] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5005] close(3 [pid 8491] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8490] <... openat resumed>) = 3 [pid 5005] <... close resumed>) = 0 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 4999] fstat(4, [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 8494 [pid 8491] <... openat resumed>) = 4 [pid 8491] ioctl(4, LOOP_SET_FD, 3 [pid 8490] write(3, "1000", 4 [pid 5001] close(4 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8490] <... write resumed>) = 4 [pid 5001] <... close resumed>) = 0 [pid 4999] getdents64(4, [pid 8490] close(3 [pid 5001] rmdir("./96/file0" [pid 4999] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8490] <... close resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] getdents64(4, [pid 8490] symlink("/dev/binderfs", "./binderfs" [pid 5001] getdents64(3, [pid 4999] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 8494 attached [pid 8491] <... ioctl resumed>) = 0 [pid 8490] <... symlink resumed>) = 0 [pid 8494] set_robust_list(0x5555562025e0, 24 [pid 8491] close(3 [pid 8490] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 4999] close(4 [pid 8494] <... set_robust_list resumed>) = 0 [pid 8491] <... close resumed>) = 0 [pid 8490] <... futex resumed>) = 0 [pid 5001] close(3 [pid 4999] <... close resumed>) = 0 [pid 8490] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5001] <... close resumed>) = 0 [pid 4999] rmdir("./94/file0" [pid 8490] <... mmap resumed>) = 0x7f50500f1000 [pid 5001] rmdir("./96" [pid 4999] <... rmdir resumed>) = 0 [pid 8490] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 5001] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, [pid 8490] <... mprotect resumed>) = 0 [pid 5001] mkdir("./97", 0777 [pid 4999] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8490] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5001] <... mkdir resumed>) = 0 [pid 4999] close(3 [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] <... close resumed>) = 0 [pid 8490] <... clone resumed>, parent_tid=[8495], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8495 [pid 5001] <... openat resumed>) = 3 [pid 4999] rmdir("./94" [pid 8490] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4999] <... rmdir resumed>) = 0 [pid 8494] chdir("./95" [pid 8491] mkdir("./file0", 0777 [pid 8490] <... futex resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 125.483634][ T8488] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 125.497529][ T8488] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 125.502068][ T8491] loop4: detected capacity change from 0 to 512 [ 125.521282][ T8488] EXT4-fs (loop1): 1 truncate cleaned up [pid 4999] mkdir("./95", 0777 [pid 8494] <... chdir resumed>) = 0 [pid 8491] <... mkdir resumed>) = 0 [pid 8490] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5001] close(3 [pid 4999] <... mkdir resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5001] <... clone resumed>, child_tidptr=0x5555562025d0) = 8496 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 8497 ./strace-static-x86_64: Process 8495 attached [pid 8495] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8495] memfd_create("syzkaller", 0./strace-static-x86_64: Process 8497 attached ) = 3 [pid 8497] set_robust_list(0x5555562025e0, 24 [pid 8495] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 ./strace-static-x86_64: Process 8496 attached [pid 8497] <... set_robust_list resumed>) = 0 [pid 8495] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8494] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8491] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8488] <... mount resumed>) = 0 [pid 8497] chdir("./95" [pid 8496] set_robust_list(0x5555562025e0, 24 [pid 8495] <... write resumed>) = 262144 [pid 8494] <... prctl resumed>) = 0 [pid 8488] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8497] <... chdir resumed>) = 0 [pid 8496] <... set_robust_list resumed>) = 0 [pid 8488] <... openat resumed>) = 3 [pid 8497] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8496] chdir("./97" [pid 8488] chdir("./file0" [pid 8497] <... prctl resumed>) = 0 [pid 8496] <... chdir resumed>) = 0 [pid 8488] <... chdir resumed>) = 0 [pid 8497] setpgid(0, 0 [pid 8496] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8495] munmap(0x7f5047cf1000, 262144 [pid 8488] ioctl(4, LOOP_CLR_FD [pid 8497] <... setpgid resumed>) = 0 [pid 8496] <... prctl resumed>) = 0 [pid 8495] <... munmap resumed>) = 0 [pid 8488] <... ioctl resumed>) = 0 [pid 8497] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8496] setpgid(0, 0 [pid 8488] close(4 [pid 8497] <... openat resumed>) = 3 [pid 8496] <... setpgid resumed>) = 0 [pid 8488] <... close resumed>) = 0 [pid 8497] write(3, "1000", 4 [pid 8496] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8495] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8488] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8497] <... write resumed>) = 4 [pid 8496] <... openat resumed>) = 3 [pid 8495] <... openat resumed>) = 4 [pid 8488] <... futex resumed>) = 1 [pid 8482] <... futex resumed>) = 0 [pid 8497] close(3 [pid 8496] write(3, "1000", 4 [pid 8495] ioctl(4, LOOP_SET_FD, 3 [pid 8488] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8482] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8497] <... close resumed>) = 0 [pid 8496] <... write resumed>) = 4 [pid 8494] setpgid(0, 0 [pid 8488] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8482] <... futex resumed>) = 0 [pid 8497] symlink("/dev/binderfs", "./binderfs" [pid 8496] close(3 [pid 8488] fspick(AT_FDCWD, ".", 0 [pid 8482] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8497] <... symlink resumed>) = 0 [pid 8496] <... close resumed>) = 0 [pid 8494] <... setpgid resumed>) = 0 [pid 8488] <... fspick resumed>) = 4 [pid 8497] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8496] symlink("/dev/binderfs", "./binderfs" [pid 8488] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8497] <... futex resumed>) = 0 [pid 8496] <... symlink resumed>) = 0 [pid 8488] <... futex resumed>) = 1 [pid 8482] <... futex resumed>) = 0 [pid 8497] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8496] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8488] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8482] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8497] <... mmap resumed>) = 0x7f50500f1000 [pid 8496] <... futex resumed>) = 0 [pid 8494] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8488] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8482] <... futex resumed>) = 0 [pid 8497] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8488] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8482] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8497] <... mprotect resumed>) = 0 [pid 8496] <... mmap resumed>) = 0x7f50500f1000 [pid 8494] <... openat resumed>) = 3 [pid 8488] <... fsconfig resumed>) = 0 [pid 8497] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8496] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8494] write(3, "1000", 4 [pid 8488] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8496] <... mprotect resumed>) = 0 [pid 8494] <... write resumed>) = 4 [pid 8488] <... futex resumed>) = 1 [pid 8482] <... futex resumed>) = 0 [pid 8497] <... clone resumed>, parent_tid=[8498], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8498 [pid 8496] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8494] close(3 [pid 8488] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8482] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8497] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8494] <... close resumed>) = 0 [pid 8488] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8482] <... futex resumed>) = 0 [pid 8497] <... futex resumed>) = 0 [pid 8496] <... clone resumed>, parent_tid=[8499], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8499 [pid 8494] symlink("/dev/binderfs", "./binderfs" [pid 8488] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8482] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8497] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8496] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8496] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8494] <... symlink resumed>) = 0 [pid 8495] <... ioctl resumed>) = 0 [pid 8495] close(3) = 0 [pid 8495] mkdir("./file0", 0777) = 0 [pid 8495] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8494] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8494] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8494] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 8499 attached ./strace-static-x86_64: Process 8498 attached ) = 0 [pid 8499] set_robust_list(0x7f50501119e0, 24 [pid 8498] set_robust_list(0x7f50501119e0, 24 [pid 8488] <... fsconfig resumed>) = 0 [pid 8494] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8488] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8498] <... set_robust_list resumed>) = 0 [pid 8499] <... set_robust_list resumed>) = 0 [pid 8482] <... futex resumed>) = 0 [pid 8482] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8498] memfd_create("syzkaller", 0 [pid 8482] <... futex resumed>) = 0 [pid 8482] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8499] memfd_create("syzkaller", 0 [pid 8488] <... futex resumed>) = 1 [pid 8488] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 8488] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8482] <... futex resumed>) = 0 [pid 8482] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8482] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8488] <... futex resumed>) = 1 [ 125.528830][ T8488] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.545198][ T8491] EXT4-fs: Ignoring removed oldalloc option [ 125.550770][ T8495] loop3: detected capacity change from 0 to 512 [ 125.567254][ T8495] EXT4-fs: Ignoring removed oldalloc option [ 125.567820][ T8488] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 8488] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0./strace-static-x86_64: Process 8500 attached [pid 8499] <... memfd_create resumed>) = 3 [pid 8498] <... memfd_create resumed>) = 3 [pid 8494] <... clone resumed>, parent_tid=[8500], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8500 [pid 8499] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8498] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8494] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8499] <... mmap resumed>) = 0x7f5047cf1000 [pid 8498] <... mmap resumed>) = 0x7f5047cf1000 [pid 8494] <... futex resumed>) = 0 [pid 8499] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8498] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8494] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8499] <... write resumed>) = 262144 [pid 8498] <... write resumed>) = 262144 [pid 8499] munmap(0x7f5047cf1000, 262144 [pid 8498] munmap(0x7f5047cf1000, 262144 [pid 8499] <... munmap resumed>) = 0 [pid 8498] <... munmap resumed>) = 0 [pid 8499] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8498] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8499] <... openat resumed>) = 4 [pid 8498] <... openat resumed>) = 4 [pid 8500] set_robust_list(0x7f50501119e0, 24 [pid 8499] ioctl(4, LOOP_SET_FD, 3 [pid 8498] ioctl(4, LOOP_SET_FD, 3 [pid 8500] <... set_robust_list resumed>) = 0 [ 125.592698][ T8488] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 125.603181][ T8488] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 125.613019][ T8491] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 125.613231][ T8495] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 125.622805][ T8499] loop2: detected capacity change from 0 to 512 [ 125.629967][ T8498] loop0: detected capacity change from 0 to 512 [pid 8500] memfd_create("syzkaller", 0) = 3 [pid 8499] <... ioctl resumed>) = 0 [pid 8498] <... ioctl resumed>) = 0 [pid 8482] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8500] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8499] close(3 [pid 8498] close(3 [pid 8482] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8500] <... mmap resumed>) = 0x7f5047cf1000 [pid 8499] <... close resumed>) = 0 [pid 8498] <... close resumed>) = 0 [pid 8482] <... futex resumed>) = 0 [pid 8500] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8499] mkdir("./file0", 0777 [pid 8498] mkdir("./file0", 0777 [pid 8482] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8500] <... write resumed>) = 262144 [pid 8499] <... mkdir resumed>) = 0 [pid 8498] <... mkdir resumed>) = 0 [pid 8482] <... mmap resumed>) = 0x7f5047d10000 [pid 8499] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8498] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8482] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8500] munmap(0x7f5047cf1000, 262144) = 0 [pid 8500] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 8500] ioctl(4, LOOP_SET_FD, 3 [pid 8482] <... mprotect resumed>) = 0 [ 125.640476][ T8491] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 125.650183][ T8498] EXT4-fs: Ignoring removed oldalloc option [ 125.663002][ T8499] EXT4-fs: Ignoring removed oldalloc option [ 125.667217][ T8500] loop5: detected capacity change from 0 to 512 [ 125.677388][ T8491] EXT4-fs (loop4): 1 truncate cleaned up [ 125.677635][ T8488] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 8482] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8506], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8506 [pid 8482] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8482] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8500] <... ioctl resumed>) = 0 [pid 8500] close(3) = 0 [pid 8500] mkdir("./file0", 0777./strace-static-x86_64: Process 8506 attached ) = 0 [pid 8491] <... mount resumed>) = 0 [pid 8488] <... fsconfig resumed>) = 0 [pid 8506] set_robust_list(0x7f5047d309e0, 24 [pid 8500] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8491] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8488] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8506] <... set_robust_list resumed>) = 0 [ 125.683103][ T8491] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.705634][ T8495] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 125.724948][ T8495] EXT4-fs (loop3): 1 truncate cleaned up [ 125.727407][ T8500] EXT4-fs: Ignoring removed oldalloc option [pid 8506] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8495] <... mount resumed>) = 0 [pid 8491] <... openat resumed>) = 3 [pid 8488] <... futex resumed>) = 0 [pid 8482] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8506] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8495] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8491] chdir("./file0" [pid 8488] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8506] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8495] <... openat resumed>) = 3 [pid 8491] <... chdir resumed>) = 0 [pid 8506] <... futex resumed>) = 0 [pid 8495] chdir("./file0" [pid 8491] ioctl(4, LOOP_CLR_FD [pid 8506] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8495] <... chdir resumed>) = 0 [pid 8491] <... ioctl resumed>) = 0 [pid 8495] ioctl(4, LOOP_CLR_FD [pid 8491] close(4 [pid 8495] <... ioctl resumed>) = 0 [pid 8491] <... close resumed>) = 0 [pid 8482] exit_group(0 [pid 8506] <... futex resumed>) = ? [pid 8495] close(4 [pid 8491] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8488] <... futex resumed>) = ? [pid 8482] <... exit_group resumed>) = ? [pid 8506] +++ exited with 0 +++ [pid 8495] <... close resumed>) = 0 [pid 8491] <... futex resumed>) = 1 [pid 8488] +++ exited with 0 +++ [pid 8482] +++ exited with 0 +++ [pid 8495] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8491] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8482, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 8495] <... futex resumed>) = 1 [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 8495] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5000] <... restart_syscall resumed>) = 0 [pid 5000] umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 8490] <... futex resumed>) = 0 [pid 8489] <... futex resumed>) = 0 [pid 5000] umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8490] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8489] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8495] <... futex resumed>) = 0 [pid 8491] <... futex resumed>) = 0 [pid 8490] <... futex resumed>) = 1 [pid 8489] <... futex resumed>) = 1 [pid 5000] lstat("./96/binderfs", [pid 8495] fspick(AT_FDCWD, ".", 0 [pid 8491] fspick(AT_FDCWD, ".", 0 [pid 8490] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8489] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8495] <... fspick resumed>) = 4 [pid 8491] <... fspick resumed>) = 4 [pid 5000] unlink("./96/binderfs" [pid 8495] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8491] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... unlink resumed>) = 0 [pid 8495] <... futex resumed>) = 1 [pid 8491] <... futex resumed>) = 1 [pid 8490] <... futex resumed>) = 0 [pid 8489] <... futex resumed>) = 0 [pid 5000] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8495] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8491] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8490] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8495] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8490] <... futex resumed>) = 0 [pid 8495] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8490] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8489] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 125.731447][ T8495] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.753929][ T8498] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 125.770241][ T8500] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8489] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8495] <... fsconfig resumed>) = 0 [pid 8491] <... futex resumed>) = 0 [pid 8495] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8491] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8495] <... futex resumed>) = 1 [pid 8491] <... fsconfig resumed>) = 0 [pid 8490] <... futex resumed>) = 0 [pid 8495] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8490] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8491] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8490] <... futex resumed>) = 0 [pid 8495] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8491] <... futex resumed>) = 1 [pid 8495] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8491] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8490] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8489] <... futex resumed>) = 0 [pid 8489] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8491] <... futex resumed>) = 0 [pid 8489] <... futex resumed>) = 1 [pid 8491] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 125.780032][ T8498] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 125.795949][ T8499] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 125.806291][ T8500] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 125.827861][ T8491] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 125.831550][ T8498] EXT4-fs (loop0): 1 truncate cleaned up [pid 8489] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8498] <... mount resumed>) = 0 [pid 8490] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8498] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8498] chdir("./file0") = 0 [pid 8498] ioctl(4, LOOP_CLR_FD) = 0 [pid 8498] close(4) = 0 [pid 8498] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8490] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8489] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8498] <... futex resumed>) = 1 [pid 8498] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8497] <... futex resumed>) = 0 [pid 8490] <... futex resumed>) = 0 [pid 8489] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8497] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8490] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8489] <... futex resumed>) = 0 [pid 8497] <... futex resumed>) = 1 [pid 8498] <... futex resumed>) = 0 [pid 8497] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8490] <... mmap resumed>) = 0x7f5047d10000 [pid 8489] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8498] fspick(AT_FDCWD, ".", 0 [pid 8490] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8489] <... mmap resumed>) = 0x7f5047d10000 [pid 8495] <... fsconfig resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 8495] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8495] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5000] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 125.839306][ T8495] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 125.844487][ T8498] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.855834][ T8500] EXT4-fs (loop5): 1 truncate cleaned up [ 125.877661][ T8500] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 5000] lstat("./96/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./96/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./96/file0") = 0 [pid 5000] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./96") = 0 [pid 5000] mkdir("./97", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8489] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5000] <... openat resumed>) = 3 [pid 8490] <... mprotect resumed>) = 0 [pid 8489] <... mprotect resumed>) = 0 [pid 8490] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8489] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5000] ioctl(3, LOOP_CLR_FD [pid 8498] <... fspick resumed>) = 4 [pid 8490] <... clone resumed>, parent_tid=[8514], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8514 [pid 8489] <... clone resumed>, parent_tid=[8513], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8513 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8498] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8490] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8489] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8498] <... futex resumed>) = 1 [pid 8497] <... futex resumed>) = 0 [pid 8490] <... futex resumed>) = 0 [pid 8489] <... futex resumed>) = 0 [pid 8498] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8497] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8490] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8489] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8497] <... futex resumed>) = 0 [pid 5000] close(3 [pid 8498] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8497] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8498] <... fsconfig resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 8498] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8497] <... futex resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8498] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8497] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8497] <... futex resumed>) = 0 [pid 8491] <... fsconfig resumed>) = 0 [pid 8498] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8497] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8491] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... clone resumed>, child_tidptr=0x5555562025d0) = 8515 ./strace-static-x86_64: Process 8515 attached [pid 8491] <... futex resumed>) = 0 [pid 8491] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8515] set_robust_list(0x5555562025e0, 24) = 0 [pid 8515] chdir("./97") = 0 [pid 8515] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8515] setpgid(0, 0) = 0 [pid 8515] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8515] write(3, "1000", 4) = 4 [pid 8515] close(3) = 0 [pid 8515] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8515] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8515] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8515] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 8514 attached ./strace-static-x86_64: Process 8513 attached ) = 0 [pid 8514] set_robust_list(0x7f5047d309e0, 24 [pid 8513] set_robust_list(0x7f5047d309e0, 24 [pid 8515] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8516], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8516 [pid 8515] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8515] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8516 attached [pid 8516] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8516] memfd_create("syzkaller", 0) = 3 [pid 8516] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8514] <... set_robust_list resumed>) = 0 [pid 8513] <... set_robust_list resumed>) = 0 [pid 8514] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8513] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8514] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8513] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8514] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8513] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8516] <... mmap resumed>) = 0x7f5047cf1000 [pid 8489] <... futex resumed>) = 0 [pid 8514] <... futex resumed>) = 1 [pid 8513] <... futex resumed>) = 1 [pid 8490] <... futex resumed>) = 0 [pid 8489] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8516] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8514] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8513] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8491] <... futex resumed>) = 0 [pid 8490] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8489] <... futex resumed>) = 1 [pid 8516] <... write resumed>) = 262144 [pid 8500] <... mount resumed>) = 0 [pid 8498] <... fsconfig resumed>) = 0 [pid 8495] <... futex resumed>) = 0 [pid 8491] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8490] <... futex resumed>) = 1 [ 125.878341][ T8499] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 125.915030][ T8498] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 8489] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8516] munmap(0x7f5047cf1000, 262144 [pid 8500] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8498] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8495] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8516] <... munmap resumed>) = 0 [pid 8500] <... openat resumed>) = 3 [pid 8498] <... futex resumed>) = 1 [pid 8497] <... futex resumed>) = 0 [pid 8490] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8516] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8500] chdir("./file0" [pid 8497] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8516] <... openat resumed>) = 4 [pid 8500] <... chdir resumed>) = 0 [pid 8497] <... futex resumed>) = 0 [pid 8516] ioctl(4, LOOP_SET_FD, 3 [pid 8500] ioctl(4, LOOP_CLR_FD [pid 8497] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8500] <... ioctl resumed>) = 0 [pid 8498] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8500] close(4) = 0 [pid 8500] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8494] <... futex resumed>) = 0 [pid 8500] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8494] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8500] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8494] <... futex resumed>) = 0 [pid 8500] fspick(AT_FDCWD, ".", 0 [pid 8494] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8500] <... fspick resumed>) = 4 [pid 8500] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8494] <... futex resumed>) = 0 [pid 8500] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8498] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8494] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8500] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8494] <... futex resumed>) = 0 [pid 8516] <... ioctl resumed>) = 0 [pid 8500] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8494] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8516] close(3 [pid 8500] <... fsconfig resumed>) = 0 [pid 8516] <... close resumed>) = 0 [pid 8500] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8516] mkdir("./file0", 0777 [pid 8500] <... futex resumed>) = 1 [pid 8494] <... futex resumed>) = 0 [pid 8516] <... mkdir resumed>) = 0 [pid 8500] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8494] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8516] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8500] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 125.960371][ T8491] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 125.964538][ T8495] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 125.971182][ T8491] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 125.983687][ T8516] loop1: detected capacity change from 0 to 512 [ 125.994671][ T8499] EXT4-fs (loop2): 1 truncate cleaned up [pid 8494] <... futex resumed>) = 0 [pid 8500] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8498] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8494] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8499] <... mount resumed>) = 0 [pid 8498] <... futex resumed>) = 1 [pid 8497] <... futex resumed>) = 0 [pid 8490] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8489] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8497] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8490] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8489] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8497] <... futex resumed>) = 0 [pid 8490] <... futex resumed>) = 1 [pid 8489] <... futex resumed>) = 1 [pid 8497] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8490] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8489] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8498] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8514] <... futex resumed>) = 0 [pid 8513] <... futex resumed>) = 0 [pid 8499] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8499] chdir("./file0") = 0 [pid 8499] ioctl(4, LOOP_CLR_FD) = 0 [pid 8499] close(4) = 0 [pid 8499] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8499] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8514] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8513] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8496] <... futex resumed>) = 0 [pid 8500] <... fsconfig resumed>) = 0 [ 126.006674][ T8516] EXT4-fs: Ignoring removed oldalloc option [ 126.015855][ T8499] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.027634][ T8500] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 126.040550][ T8495] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 126.049604][ T8498] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 8496] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8500] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8499] <... futex resumed>) = 0 [pid 8496] <... futex resumed>) = 1 [pid 8500] <... futex resumed>) = 1 [pid 8499] fspick(AT_FDCWD, ".", 0 [pid 8496] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8494] <... futex resumed>) = 0 [pid 8500] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8499] <... fspick resumed>) = 4 [pid 8494] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8500] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8499] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8494] <... futex resumed>) = 0 [pid 8500] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8499] <... futex resumed>) = 1 [pid 8496] <... futex resumed>) = 0 [pid 8494] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8500] <... futex resumed>) = 0 [pid 8499] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8496] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8494] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8500] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8499] <... fsconfig resumed>) = 0 [pid 8496] <... futex resumed>) = 0 [pid 8494] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8514] <... openat resumed>) = 5 [pid 8499] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8496] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8494] <... futex resumed>) = 0 [pid 8514] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8499] <... futex resumed>) = 0 [pid 8496] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8494] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8514] <... futex resumed>) = 1 [pid 8499] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8497] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8496] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8490] <... futex resumed>) = 0 [pid 8489] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8514] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8499] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8497] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8496] <... futex resumed>) = 0 [pid 8499] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8497] <... futex resumed>) = 0 [pid 8496] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 126.067895][ T8498] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 126.073976][ T8500] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 126.086937][ T8491] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 126.100321][ T8495] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 8497] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8513] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8497] <... mmap resumed>) = 0x7f5047d10000 [pid 8495] <... fsconfig resumed>) = 0 [pid 8491] <... fsconfig resumed>) = 0 [pid 8513] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8497] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8513] <... futex resumed>) = 0 [pid 8497] <... mprotect resumed>) = 0 [pid 8513] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8497] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8522], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8522 [pid 8497] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8497] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8499] <... fsconfig resumed>) = 0 [pid 8495] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8491] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8499] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8490] exit_group(0 [pid 8489] exit_group(0 [pid 8514] <... futex resumed>) = ? [pid 8513] <... futex resumed>) = ? [pid 8499] <... futex resumed>) = 1 [pid 8496] <... futex resumed>) = 0 [pid 8490] <... exit_group resumed>) = ? [pid 8489] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 8522 attached [pid 8514] +++ exited with 0 +++ [pid 8513] +++ exited with 0 +++ [pid 8499] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8496] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8494] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8522] set_robust_list(0x7f5047d309e0, 24 [pid 8499] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8496] <... futex resumed>) = 0 [pid 8494] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8522] <... set_robust_list resumed>) = 0 [pid 8499] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8496] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8495] <... futex resumed>) = ? [pid 8494] <... futex resumed>) = 0 [pid 8491] <... futex resumed>) = ? [pid 8522] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8499] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8498] <... fsconfig resumed>) = 0 [pid 8498] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8498] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8495] +++ exited with 0 +++ [pid 8490] +++ exited with 0 +++ [pid 8494] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8522] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8499] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8494] <... mmap resumed>) = 0x7f5047d10000 [pid 8491] +++ exited with 0 +++ [pid 8489] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8490, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 8494] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8522] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8489, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5002] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8522] <... futex resumed>) = 1 [pid 8522] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8499] <... futex resumed>) = 1 [pid 8499] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8494] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8524], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8524 [pid 8494] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8494] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./95/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./95/binderfs") = 0 [pid 5002] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5004] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5004] umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./97/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5004] unlink("./97/binderfs") = 0 [pid 5004] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8497] <... futex resumed>) = 0 [pid 8497] exit_group(0 [pid 8522] <... futex resumed>) = ? [pid 8498] <... futex resumed>) = ? [pid 8497] <... exit_group resumed>) = ? [pid 8496] <... futex resumed>) = 0 [pid 8522] +++ exited with 0 +++ [pid 8498] +++ exited with 0 +++ [pid 8497] +++ exited with 0 +++ [pid 8496] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8499] <... futex resumed>) = 0 [ 126.100467][ T8499] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 126.116437][ T8500] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 126.130092][ T8516] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 126.138912][ T8498] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 126.156883][ T8500] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 8496] <... futex resumed>) = 1 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8497, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 8499] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8496] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8524 attached [pid 8500] <... fsconfig resumed>) = 0 [pid 8524] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8500] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8524] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8500] <... futex resumed>) = 0 [pid 8500] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./95/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./95/binderfs") = 0 [pid 4999] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8524] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8524] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8494] <... futex resumed>) = 0 [pid 8524] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8494] exit_group(0 [pid 8524] <... futex resumed>) = ? [pid 8500] <... futex resumed>) = ? [pid 8494] <... exit_group resumed>) = ? [pid 8524] +++ exited with 0 +++ [pid 8500] +++ exited with 0 +++ [pid 8494] +++ exited with 0 +++ [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8494, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5005] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5005] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5005] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] lstat("./95/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5005] unlink("./95/binderfs") = 0 [ 126.176552][ T8499] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 126.177802][ T8516] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 126.201776][ T8499] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 5005] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] <... umount2 resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5004] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./97/file0", [pid 5002] lstat("./95/file0", [pid 5004] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = 0 [pid 8496] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8496] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [ 126.221853][ T8516] EXT4-fs (loop1): 1 truncate cleaned up [pid 5004] openat(AT_FDCWD, "./97/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8496] <... futex resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./95/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5002] <... openat resumed>) = 4 [pid 8496] <... mmap resumed>) = 0x7f5047d10000 [pid 5002] fstat(4, [pid 8496] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8516] <... mount resumed>) = 0 [pid 8499] <... fsconfig resumed>) = 0 [pid 8496] <... mprotect resumed>) = 0 [pid 5005] <... umount2 resumed>) = 0 [pid 5004] <... openat resumed>) = 4 [pid 5002] getdents64(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8516] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8499] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8496] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5005] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] fstat(4, [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] lstat("./95/file0", ./strace-static-x86_64: Process 8526 attached [pid 8516] <... openat resumed>) = 3 [pid 8499] <... futex resumed>) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8516] chdir("./file0" [pid 8499] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8496] <... clone resumed>, parent_tid=[8526], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8526 [pid 8526] set_robust_list(0x7f5047d309e0, 24 [pid 5005] lstat("./95/file0", [pid 5004] getdents64(4, [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 4999] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8526] <... set_robust_list resumed>) = 0 [pid 8516] <... chdir resumed>) = 0 [pid 8496] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5002] close(4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8516] ioctl(4, LOOP_CLR_FD [pid 8496] <... futex resumed>) = 0 [pid 5005] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8526] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5004] getdents64(4, [pid 5002] <... close resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./95/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8516] <... ioctl resumed>) = 0 [pid 8496] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5002] rmdir("./95/file0" [pid 4999] <... openat resumed>) = 4 [pid 8526] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8516] close(4 [pid 5005] openat(AT_FDCWD, "./95/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5004] close(4 [pid 5002] <... rmdir resumed>) = 0 [pid 4999] fstat(4, [pid 5005] <... openat resumed>) = 4 [pid 5004] <... close resumed>) = 0 [pid 5002] getdents64(3, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8516] <... close resumed>) = 0 [pid 5005] fstat(4, [pid 5004] rmdir("./97/file0" [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 4999] getdents64(4, [pid 5004] <... rmdir resumed>) = 0 [pid 5002] close(3 [pid 4999] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5004] getdents64(3, [pid 5002] <... close resumed>) = 0 [pid 4999] getdents64(4, [pid 5004] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5002] rmdir("./95" [pid 4999] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5004] close(3 [pid 5002] <... rmdir resumed>) = 0 [pid 4999] close(4 [pid 5004] <... close resumed>) = 0 [pid 5002] mkdir("./96", 0777 [pid 4999] <... close resumed>) = 0 [pid 5004] rmdir("./97" [pid 5002] <... mkdir resumed>) = 0 [pid 4999] rmdir("./95/file0" [pid 5004] <... rmdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] <... rmdir resumed>) = 0 [pid 5004] mkdir("./98", 0777 [pid 5002] <... openat resumed>) = 3 [pid 4999] getdents64(3, [pid 5004] <... mkdir resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 4999] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 5004] <... openat resumed>) = 3 [pid 5002] close(3 [pid 4999] <... close resumed>) = 0 [pid 5004] ioctl(3, LOOP_CLR_FD [pid 5002] <... close resumed>) = 0 [pid 4999] rmdir("./95" [pid 5004] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... rmdir resumed>) = 0 [pid 5004] close(3 [pid 4999] mkdir("./96", 0777 [pid 5004] <... close resumed>) = 0 [pid 5002] <... clone resumed>, child_tidptr=0x5555562025d0) = 8527 [pid 4999] <... mkdir resumed>) = 0 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5004] <... clone resumed>, child_tidptr=0x5555562025d0) = 8528 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5005] getdents64(4, [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5005] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] close(3 [pid 8516] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... close resumed>) = 0 [pid 5005] getdents64(4, [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5005] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8516] <... futex resumed>) = 1 [pid 8515] <... futex resumed>) = 0 [pid 5005] close(4 [pid 4999] <... clone resumed>, child_tidptr=0x5555562025d0) = 8529 [pid 8515] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... close resumed>) = 0 [pid 8516] fspick(AT_FDCWD, ".", 0 [pid 8515] <... futex resumed>) = 0 [pid 5005] rmdir("./95/file0" [pid 8516] <... fspick resumed>) = 4 [pid 8515] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8516] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... rmdir resumed>) = 0 [pid 5005] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5005] close(3 [pid 8516] <... futex resumed>) = 1 [pid 8515] <... futex resumed>) = 0 [pid 5005] <... close resumed>) = 0 [pid 8516] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8515] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] rmdir("./95" [pid 8516] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8515] <... futex resumed>) = 0 [pid 8515] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... rmdir resumed>) = 0 [pid 8516] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5005] mkdir("./96", 0777 [pid 8516] <... fsconfig resumed>) = 0 [pid 8516] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... mkdir resumed>) = 0 [ 126.254059][ T8499] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 126.255620][ T8516] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 8516] <... futex resumed>) = 1 [pid 8515] <... futex resumed>) = 0 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 8515] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5005] <... openat resumed>) = 3 [pid 8516] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8515] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5005] close(3) = 0 [pid 8526] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8496] <... futex resumed>) = 0 [pid 8496] exit_group(0 [pid 8526] <... futex resumed>) = ? [pid 8499] <... futex resumed>) = ? [pid 8496] <... exit_group resumed>) = ? [pid 8526] +++ exited with 0 +++ [pid 8499] +++ exited with 0 +++ [pid 8496] +++ exited with 0 +++ ./strace-static-x86_64: Process 8528 attached ./strace-static-x86_64: Process 8527 attached [pid 8527] set_robust_list(0x5555562025e0, 24 [pid 8528] set_robust_list(0x5555562025e0, 24 [pid 8527] <... set_robust_list resumed>) = 0 [pid 8527] chdir("./96" [pid 8528] <... set_robust_list resumed>) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8496, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 8528] chdir("./98" [pid 8527] <... chdir resumed>) = 0 [pid 5001] umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8527] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8528] <... chdir resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8527] <... prctl resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5005] <... clone resumed>, child_tidptr=0x5555562025d0) = 8530 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8528] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8527] setpgid(0, 0 [pid 5001] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8530 attached ./strace-static-x86_64: Process 8529 attached [pid 8528] <... prctl resumed>) = 0 [pid 8527] <... setpgid resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8530] set_robust_list(0x5555562025e0, 24 [pid 8528] setpgid(0, 0 [pid 8527] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8528] <... setpgid resumed>) = 0 [pid 8527] <... openat resumed>) = 3 [pid 5001] lstat("./97/binderfs", [pid 8528] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8527] write(3, "1000", 4 [pid 8528] <... openat resumed>) = 3 [pid 8527] <... write resumed>) = 4 [pid 8528] write(3, "1000", 4 [pid 8527] close(3 [pid 8528] <... write resumed>) = 4 [pid 8527] <... close resumed>) = 0 [pid 8528] close(3 [pid 8527] symlink("/dev/binderfs", "./binderfs" [pid 8528] <... close resumed>) = 0 [pid 8527] <... symlink resumed>) = 0 [pid 8528] symlink("/dev/binderfs", "./binderfs" [pid 8527] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8528] <... symlink resumed>) = 0 [pid 8527] <... futex resumed>) = 0 [pid 8528] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8527] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8528] <... futex resumed>) = 0 [pid 8527] <... mmap resumed>) = 0x7f50500f1000 [pid 8528] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8527] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8528] <... mmap resumed>) = 0x7f50500f1000 [pid 8527] <... mprotect resumed>) = 0 [pid 8528] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8527] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8528] <... mprotect resumed>) = 0 [pid 8528] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8527] <... clone resumed>, parent_tid=[8531], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8531 [pid 8527] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8528] <... clone resumed>, parent_tid=[8532], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8532 [pid 8527] <... futex resumed>) = 0 [pid 8528] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8527] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8528] <... futex resumed>) = 0 [pid 8528] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./97/binderfs") = 0 [pid 5001] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8530] <... set_robust_list resumed>) = 0 [pid 8529] set_robust_list(0x5555562025e0, 24 [pid 8530] chdir("./96") = 0 [pid 8529] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 8532 attached ./strace-static-x86_64: Process 8531 attached [pid 8530] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8529] chdir("./96" [pid 8516] <... fsconfig resumed>) = 0 [pid 8515] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8532] set_robust_list(0x7f50501119e0, 24 [pid 8531] set_robust_list(0x7f50501119e0, 24 [pid 8530] <... prctl resumed>) = 0 [pid 8529] <... chdir resumed>) = 0 [pid 8516] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8515] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./97/file0", [pid 8532] <... set_robust_list resumed>) = 0 [pid 8531] <... set_robust_list resumed>) = 0 [pid 8530] setpgid(0, 0 [pid 8529] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8516] <... futex resumed>) = 0 [pid 8515] <... futex resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./97/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8531] memfd_create("syzkaller", 0 [pid 5001] <... openat resumed>) = 4 [pid 8532] memfd_create("syzkaller", 0 [pid 8530] <... setpgid resumed>) = 0 [pid 8529] <... prctl resumed>) = 0 [pid 8516] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8515] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] fstat(4, [pid 8531] <... memfd_create resumed>) = 3 [pid 8529] setpgid(0, 0 [pid 8516] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8530] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8532] <... memfd_create resumed>) = 3 [pid 8531] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8529] <... setpgid resumed>) = 0 [pid 8516] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] getdents64(4, [pid 8530] <... openat resumed>) = 3 [pid 8516] <... futex resumed>) = 1 [pid 8515] <... futex resumed>) = 0 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8532] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8529] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] getdents64(4, [pid 8531] <... mmap resumed>) = 0x7f5047cf1000 [pid 8516] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8515] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8532] <... mmap resumed>) = 0x7f5047cf1000 [pid 5001] close(4) = 0 [pid 5001] rmdir("./97/file0") = 0 [pid 5001] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./97") = 0 [pid 5001] mkdir("./98", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 8533 ./strace-static-x86_64: Process 8533 attached [pid 8533] set_robust_list(0x5555562025e0, 24) = 0 [pid 8533] chdir("./98") = 0 [pid 8533] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8533] setpgid(0, 0) = 0 [pid 8533] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8533] write(3, "1000", 4) = 4 [pid 8533] close(3) = 0 [pid 8533] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8515] <... futex resumed>) = 0 [pid 8529] <... openat resumed>) = 3 [pid 8533] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8533] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8533] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8532] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8530] write(3, "1000", 4 [pid 8529] write(3, "1000", 4 [pid 8515] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8533] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8534], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8534 [pid 8533] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8531] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8530] <... write resumed>) = 4 [pid 8529] <... write resumed>) = 4 [pid 8533] <... futex resumed>) = 0 [pid 8533] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8534 attached [pid 8530] close(3 [pid 8529] close(3 [pid 8530] <... close resumed>) = 0 [pid 8529] <... close resumed>) = 0 [pid 8534] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8534] memfd_create("syzkaller", 0) = 3 [pid 8534] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8530] symlink("/dev/binderfs", "./binderfs" [pid 8529] symlink("/dev/binderfs", "./binderfs" [pid 8530] <... symlink resumed>) = 0 [pid 8530] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8529] <... symlink resumed>) = 0 [pid 8529] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8530] <... futex resumed>) = 0 [pid 8530] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8529] <... futex resumed>) = 0 [pid 8534] <... mmap resumed>) = 0x7f5047cf1000 [pid 8530] <... mmap resumed>) = 0x7f50500f1000 [pid 8529] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8530] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8529] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8530] <... mprotect resumed>) = 0 [pid 8529] <... mprotect resumed>) = 0 [pid 8530] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8529] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8530] <... clone resumed>, parent_tid=[8535], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8535 [pid 8529] <... clone resumed>, parent_tid=[8536], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8536 [pid 8531] <... write resumed>) = 262144 [pid 8529] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8530] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8532] <... write resumed>) = 262144 [pid 8531] munmap(0x7f5047cf1000, 262144 [pid 8530] <... futex resumed>) = 0 [pid 8529] <... futex resumed>) = 0 [pid 8529] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8530] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8532] munmap(0x7f5047cf1000, 262144 [pid 8531] <... munmap resumed>) = 0 [pid 8534] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8532] <... munmap resumed>) = 0 [pid 8531] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8532] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8531] <... openat resumed>) = 4 ./strace-static-x86_64: Process 8535 attached [pid 8535] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8535] memfd_create("syzkaller", 0) = 3 [pid 8535] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 8532] <... openat resumed>) = 4 [ 126.338508][ T8516] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 126.372524][ T8516] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [pid 8531] ioctl(4, LOOP_SET_FD, 3 [pid 8534] <... write resumed>) = 262144 [pid 8534] munmap(0x7f5047cf1000, 262144) = 0 [pid 8534] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8534] ioctl(4, LOOP_SET_FD, 3 [pid 8532] ioctl(4, LOOP_SET_FD, 3 [pid 8535] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8534] <... ioctl resumed>) = 0 [pid 8532] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 8536 attached [pid 8535] <... write resumed>) = 262144 [pid 8532] close(3 [pid 8536] set_robust_list(0x7f50501119e0, 24 [pid 8535] munmap(0x7f5047cf1000, 262144 [pid 8534] close(3 [pid 8532] <... close resumed>) = 0 [pid 8531] <... ioctl resumed>) = 0 [pid 8536] <... set_robust_list resumed>) = 0 [pid 8532] mkdir("./file0", 0777 [pid 8536] memfd_create("syzkaller", 0 [pid 8532] <... mkdir resumed>) = 0 [pid 8536] <... memfd_create resumed>) = 3 [pid 8532] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8536] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8535] <... munmap resumed>) = 0 [pid 8534] <... close resumed>) = 0 [pid 8531] close(3 [pid 8515] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8535] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 8534] mkdir("./file0", 0777 [pid 8531] <... close resumed>) = 0 [pid 8535] <... openat resumed>) = 4 [pid 8536] <... mmap resumed>) = 0x7f5047cf1000 [pid 8535] ioctl(4, LOOP_SET_FD, 3 [pid 8534] <... mkdir resumed>) = 0 [pid 8531] mkdir("./file0", 0777 [pid 8515] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8536] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8515] <... futex resumed>) = 0 [pid 8536] <... write resumed>) = 262144 [pid 8515] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 8515] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8515] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8537], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8537 [pid 8515] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8515] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8536] munmap(0x7f5047cf1000, 262144 [pid 8534] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8531] <... mkdir resumed>) = 0 [pid 8536] <... munmap resumed>) = 0 [ 126.404682][ T8531] loop3: detected capacity change from 0 to 512 [ 126.408810][ T8534] loop2: detected capacity change from 0 to 512 [ 126.417950][ T8532] loop4: detected capacity change from 0 to 512 [ 126.427099][ T8516] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 126.433582][ T8532] EXT4-fs: Ignoring removed oldalloc option [ 126.443357][ T8535] loop5: detected capacity change from 0 to 512 [pid 8536] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8536] ioctl(4, LOOP_SET_FD, 3 [pid 8535] <... ioctl resumed>) = 0 [pid 8531] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"..../strace-static-x86_64: Process 8537 attached [pid 8537] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8537] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8536] <... ioctl resumed>) = 0 [pid 8536] close(3) = 0 [pid 8536] mkdir("./file0", 0777) = 0 [pid 8536] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8535] close(3) = 0 [pid 8535] mkdir("./file0", 0777 [pid 8537] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8535] <... mkdir resumed>) = 0 [pid 8537] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8535] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8537] <... futex resumed>) = 1 [pid 8515] <... futex resumed>) = 0 [pid 8537] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8516] <... fsconfig resumed>) = 0 [pid 8516] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8516] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8515] exit_group(0 [pid 8537] <... futex resumed>) = ? [pid 8515] <... exit_group resumed>) = ? [pid 8537] +++ exited with 0 +++ [pid 8516] <... futex resumed>) = ? [pid 8516] +++ exited with 0 +++ [pid 8515] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8515, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./97/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./97/binderfs") = 0 [ 126.451362][ T8534] EXT4-fs: Ignoring removed oldalloc option [ 126.452786][ T8536] loop0: detected capacity change from 0 to 512 [ 126.460296][ T8516] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 126.474734][ T8531] EXT4-fs: Ignoring removed oldalloc option [ 126.475274][ T8536] EXT4-fs: Ignoring removed oldalloc option [ 126.490985][ T8535] EXT4-fs: Ignoring removed oldalloc option [ 126.513628][ T8531] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 126.517340][ T8536] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 126.523320][ T8534] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 126.532628][ T8536] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 126.539601][ T8535] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 126.553719][ T8532] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 126.570419][ T8535] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 126.570856][ T8536] EXT4-fs (loop0): 1 truncate cleaned up [ 126.587900][ T8531] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 5000] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5000] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./97/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./97/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./97/file0") = 0 [pid 5000] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./97") = 0 [pid 5000] mkdir("./98", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 8549 ./strace-static-x86_64: Process 8549 attached [pid 8549] set_robust_list(0x5555562025e0, 24) = 0 [pid 8549] chdir("./98") = 0 [pid 8549] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 126.592395][ T8536] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.608325][ T8532] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 126.638096][ T8534] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 126.645391][ T8535] EXT4-fs (loop5): 1 truncate cleaned up [pid 8549] setpgid(0, 0) = 0 [pid 8549] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8549] write(3, "1000", 4) = 4 [pid 8549] close(3) = 0 [pid 8549] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8549] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8549] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8549] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8549] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8550], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8550 [pid 8549] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8549] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8536] <... mount resumed>) = 0 ./strace-static-x86_64: Process 8550 attached [pid 8550] set_robust_list(0x7f50501119e0, 24 [pid 8536] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8536] chdir("./file0") = 0 [pid 8536] ioctl(4, LOOP_CLR_FD) = 0 [pid 8536] close(4) = 0 [pid 8536] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 126.665623][ T8532] EXT4-fs (loop4): 1 truncate cleaned up [ 126.675175][ T8534] EXT4-fs (loop2): 1 truncate cleaned up [ 126.678933][ T8532] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.694530][ T8535] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 8536] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8550] <... set_robust_list resumed>) = 0 [pid 8535] <... mount resumed>) = 0 [pid 8532] <... mount resumed>) = 0 [pid 8529] <... futex resumed>) = 0 [pid 8550] memfd_create("syzkaller", 0 [pid 8529] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8550] <... memfd_create resumed>) = 3 [pid 8536] <... futex resumed>) = 0 [pid 8534] <... mount resumed>) = 0 [pid 8529] <... futex resumed>) = 1 [pid 8550] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8529] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8550] <... mmap resumed>) = 0x7f5047cf1000 [pid 8550] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8536] fspick(AT_FDCWD, ".", 0 [pid 8550] <... write resumed>) = 262144 [pid 8536] <... fspick resumed>) = 4 [pid 8535] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8534] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8532] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8536] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8532] <... openat resumed>) = 3 [pid 8536] <... futex resumed>) = 1 [pid 8536] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8532] chdir("./file0") = 0 [pid 8532] ioctl(4, LOOP_CLR_FD [pid 8550] munmap(0x7f5047cf1000, 262144 [pid 8532] <... ioctl resumed>) = 0 [pid 8532] close(4 [pid 8529] <... futex resumed>) = 0 [pid 8550] <... munmap resumed>) = 0 [pid 8532] <... close resumed>) = 0 [pid 8529] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8550] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8532] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8550] <... openat resumed>) = 4 [pid 8532] <... futex resumed>) = 1 [pid 8528] <... futex resumed>) = 0 [pid 8550] ioctl(4, LOOP_SET_FD, 3 [pid 8532] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8528] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8535] <... openat resumed>) = 3 [pid 8534] <... openat resumed>) = 3 [pid 8532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8531] <... mount resumed>) = 0 [pid 8529] <... futex resumed>) = 1 [pid 8535] chdir("./file0" [pid 8534] chdir("./file0" [pid 8529] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8535] <... chdir resumed>) = 0 [pid 8534] <... chdir resumed>) = 0 [pid 8535] ioctl(4, LOOP_CLR_FD [pid 8534] ioctl(4, LOOP_CLR_FD [pid 8535] <... ioctl resumed>) = 0 [pid 8534] <... ioctl resumed>) = 0 [pid 8535] close(4 [pid 8534] close(4 [pid 8536] <... futex resumed>) = 0 [pid 8535] <... close resumed>) = 0 [pid 8534] <... close resumed>) = 0 [pid 8532] fspick(AT_FDCWD, ".", 0 [pid 8528] <... futex resumed>) = 0 [pid 8535] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8534] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8531] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8535] <... futex resumed>) = 1 [pid 8534] <... futex resumed>) = 1 [pid 8531] <... openat resumed>) = 3 [pid 8530] <... futex resumed>) = 0 [pid 8536] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8535] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8534] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8531] chdir("./file0" [pid 8530] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8532] <... fspick resumed>) = 4 [pid 8536] <... fsconfig resumed>) = 0 [pid 8535] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8533] <... futex resumed>) = 0 [pid 8532] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8531] <... chdir resumed>) = 0 [pid 8530] <... futex resumed>) = 0 [pid 8550] <... ioctl resumed>) = 0 [pid 8528] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8535] fspick(AT_FDCWD, ".", 0 [pid 8531] ioctl(4, LOOP_CLR_FD [pid 8530] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8535] <... fspick resumed>) = 4 [pid 8531] <... ioctl resumed>) = 0 [pid 8535] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8531] close(4 [pid 8535] <... futex resumed>) = 1 [pid 8531] <... close resumed>) = 0 [pid 8530] <... futex resumed>) = 0 [pid 8535] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8531] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8530] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8535] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8531] <... futex resumed>) = 1 [pid 8530] <... futex resumed>) = 0 [pid 8535] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8531] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8530] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8535] <... fsconfig resumed>) = 0 [pid 8535] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8530] <... futex resumed>) = 0 [pid 8535] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8530] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8535] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8530] <... futex resumed>) = 0 [pid 8535] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8530] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8550] close(3 [pid 8536] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 126.698421][ T8534] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.724938][ T8531] EXT4-fs (loop3): 1 truncate cleaned up [ 126.731859][ T8531] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.741526][ T8550] loop1: detected capacity change from 0 to 512 [pid 8533] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8532] <... futex resumed>) = 0 [pid 8528] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8527] <... futex resumed>) = 0 [pid 8550] <... close resumed>) = 0 [pid 8536] <... futex resumed>) = 1 [pid 8532] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8528] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8550] mkdir("./file0", 0777 [pid 8536] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8528] <... futex resumed>) = 0 [pid 8550] <... mkdir resumed>) = 0 [pid 8532] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8528] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8550] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8532] <... fsconfig resumed>) = 0 [pid 8534] <... futex resumed>) = 0 [pid 8533] <... futex resumed>) = 1 [pid 8532] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8529] <... futex resumed>) = 0 [pid 8527] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8534] fspick(AT_FDCWD, ".", 0 [pid 8533] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8532] <... futex resumed>) = 1 [pid 8531] <... futex resumed>) = 0 [pid 8529] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8528] <... futex resumed>) = 0 [pid 8527] <... futex resumed>) = 1 [pid 8536] <... futex resumed>) = 0 [pid 8534] <... fspick resumed>) = 4 [pid 8532] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8531] fspick(AT_FDCWD, ".", 0 [pid 8529] <... futex resumed>) = 1 [pid 8528] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8527] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8536] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8535] <... fsconfig resumed>) = 0 [pid 8534] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8531] <... fspick resumed>) = 4 [pid 8529] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8528] <... futex resumed>) = 0 [pid 8535] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8534] <... futex resumed>) = 1 [pid 8533] <... futex resumed>) = 0 [pid 8532] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8531] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8528] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8535] <... futex resumed>) = 1 [pid 8534] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8533] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8531] <... futex resumed>) = 1 [pid 8530] <... futex resumed>) = 0 [pid 8527] <... futex resumed>) = 0 [pid 8535] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8534] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8533] <... futex resumed>) = 0 [pid 8531] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8530] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8527] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8535] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8534] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8533] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8531] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8530] <... futex resumed>) = 0 [pid 8527] <... futex resumed>) = 0 [pid 8535] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8534] <... fsconfig resumed>) = 0 [pid 8531] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8530] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8535] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8534] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8531] <... fsconfig resumed>) = 0 [pid 8527] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8535] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8534] <... futex resumed>) = 1 [pid 8533] <... futex resumed>) = 0 [pid 8531] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8527] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8535] <... futex resumed>) = 1 [pid 8534] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8533] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8531] <... futex resumed>) = 0 [pid 8530] <... futex resumed>) = 0 [pid 8527] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8535] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8534] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8533] <... futex resumed>) = 0 [pid 8531] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8530] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8527] <... futex resumed>) = 0 [pid 8535] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8534] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8533] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8530] <... futex resumed>) = 0 [pid 8527] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8535] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 126.768916][ T8535] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 126.777678][ T8550] EXT4-fs: Ignoring removed oldalloc option [ 126.793603][ T8536] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 126.808564][ T8532] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 8530] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8532] <... fsconfig resumed>) = 0 [pid 8532] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8528] <... futex resumed>) = 0 [pid 8528] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8528] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8532] <... futex resumed>) = 1 [pid 8532] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 8532] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8528] <... futex resumed>) = 0 [pid 8532] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8528] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8528] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8536] <... fsconfig resumed>) = 0 [pid 8536] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8536] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8534] <... fsconfig resumed>) = 0 [pid 8534] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8534] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8529] <... futex resumed>) = 0 [pid 8533] <... futex resumed>) = 0 [pid 8529] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8536] <... futex resumed>) = 0 [pid 8529] <... futex resumed>) = 1 [pid 8536] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 8536] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8536] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8529] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 8529] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8536] <... futex resumed>) = 0 [pid 8529] <... futex resumed>) = 1 [pid 8536] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 126.827474][ T8535] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 126.837592][ T8534] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 126.846243][ T8532] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 126.850422][ T8535] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 126.866117][ T8531] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 8529] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8533] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8527] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8533] <... futex resumed>) = 1 [pid 8530] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8527] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8534] <... futex resumed>) = 0 [pid 8533] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8530] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8527] <... futex resumed>) = 0 [pid 8534] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8530] <... futex resumed>) = 0 [pid 8527] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8530] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8527] <... mmap resumed>) = 0x7f5047d10000 [pid 8530] <... mmap resumed>) = 0x7f5047d10000 [pid 8527] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8530] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8527] <... mprotect resumed>) = 0 [pid 8530] <... mprotect resumed>) = 0 [pid 8527] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8530] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8527] <... clone resumed>, parent_tid=[8551], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8551 [pid 8530] <... clone resumed>, parent_tid=[8552], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8552 [pid 8527] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8530] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8527] <... futex resumed>) = 0 [pid 8530] <... futex resumed>) = 0 [pid 8527] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8530] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8531] <... fsconfig resumed>) = 0 [pid 8531] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8531] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 8552 attached [pid 8552] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8552] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8534] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8534] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8533] <... futex resumed>) = 0 [pid 8534] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8533] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8534] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8533] <... futex resumed>) = 0 [pid 8534] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8533] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8551 attached [pid 8551] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8551] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 8551] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8527] <... futex resumed>) = 0 [pid 8527] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8531] <... futex resumed>) = 0 [pid 8527] <... futex resumed>) = 1 [pid 8531] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 126.872653][ T8536] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 126.886554][ T8532] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 126.897122][ T8536] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 126.908531][ T8532] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 126.911791][ T8531] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [pid 8527] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8529] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8529] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8529] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 8529] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8529] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8557], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8557 [pid 8529] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8529] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8551] <... futex resumed>) = 1 [pid 8551] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8552] <... openat resumed>) = 5 [pid 8552] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8530] <... futex resumed>) = 0 [pid 8552] <... futex resumed>) = 1 [pid 8552] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 8557 attached [pid 8557] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8557] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 8557] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8529] <... futex resumed>) = 0 [pid 8557] <... futex resumed>) = 1 [pid 8557] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8528] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8532] <... fsconfig resumed>) = 0 [pid 8528] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8532] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8528] <... futex resumed>) = 0 [pid 8532] <... futex resumed>) = 0 [pid 8528] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8532] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8528] <... mmap resumed>) = 0x7f5047d10000 [pid 8528] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8528] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8558], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8558 [pid 8528] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 126.919134][ T8534] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 126.938889][ T8535] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 126.943674][ T8534] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 126.950961][ T8550] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 126.960306][ T8536] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 8528] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8558 attached [pid 8536] <... fsconfig resumed>) = 0 [pid 8535] <... fsconfig resumed>) = 0 [pid 8533] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8527] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8533] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8527] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8551] <... futex resumed>) = 0 [pid 8533] <... futex resumed>) = 0 [pid 8527] <... futex resumed>) = 1 [pid 8551] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8533] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8527] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8551] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 8533] <... mmap resumed>) = 0x7f5047d10000 [pid 8551] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8533] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8551] <... futex resumed>) = 1 [pid 8533] <... mprotect resumed>) = 0 [pid 8527] <... futex resumed>) = 0 [pid 8551] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8533] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8561], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8561 [pid 8533] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8533] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8561 attached [pid 8561] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8561] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 8561] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8533] <... futex resumed>) = 0 [pid 8561] <... futex resumed>) = 1 [pid 8561] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8558] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8558] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 ENOSPC (No space left on device) [pid 8558] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8528] <... futex resumed>) = 0 [pid 8558] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8528] exit_group(0 [pid 8558] <... futex resumed>) = ? [pid 8532] <... futex resumed>) = ? [pid 8528] <... exit_group resumed>) = ? [pid 8558] +++ exited with 0 +++ [pid 8532] +++ exited with 0 +++ [pid 8528] +++ exited with 0 +++ [pid 8536] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8535] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8528, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 8536] <... futex resumed>) = 0 [pid 8535] <... futex resumed>) = 0 [pid 8536] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8535] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5004] umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5004] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5004] umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./98/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5004] unlink("./98/binderfs") = 0 [pid 5004] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8530] exit_group(0 [pid 8529] exit_group(0 [pid 8557] <... futex resumed>) = ? [pid 8552] <... futex resumed>) = ? [pid 8535] <... futex resumed>) = ? [pid 8530] <... exit_group resumed>) = ? [pid 8529] <... exit_group resumed>) = ? [pid 8557] +++ exited with 0 +++ [pid 8552] +++ exited with 0 +++ [pid 8536] <... futex resumed>) = ? [pid 8535] +++ exited with 0 +++ [pid 8530] +++ exited with 0 +++ [pid 8536] +++ exited with 0 +++ [pid 8534] <... fsconfig resumed>) = 0 [pid 8529] +++ exited with 0 +++ [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8530, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8529, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5005] umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5005] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(3, [pid 4999] umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] <... umount2 resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... openat resumed>) = 3 [pid 5005] lstat("./96/binderfs", [pid 4999] fstat(3, [pid 5005] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8534] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] unlink("./96/binderfs" [pid 4999] getdents64(3, [pid 8534] <... futex resumed>) = 0 [pid 5005] <... unlink resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 8534] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5005] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./96/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./96/binderfs" [ 126.966115][ T8531] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 126.979476][ T8550] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 127.000582][ T8534] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 127.015384][ T8550] EXT4-fs (loop1): 1 truncate cleaned up [pid 8533] exit_group(0 [pid 5004] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... unlink resumed>) = 0 [pid 8561] <... futex resumed>) = ? [pid 8533] <... exit_group resumed>) = ? [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8561] +++ exited with 0 +++ [pid 5004] lstat("./98/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] openat(AT_FDCWD, "./98/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5004] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5004] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5004] close(4) = 0 [pid 5004] rmdir("./98/file0") = 0 [pid 5004] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 8550] <... mount resumed>) = 0 [pid 8534] <... futex resumed>) = ? [pid 5004] close(3 [pid 4999] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8550] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8534] +++ exited with 0 +++ [pid 8533] +++ exited with 0 +++ [pid 8550] <... openat resumed>) = 3 [pid 8550] chdir("./file0") = 0 [pid 8550] ioctl(4, LOOP_CLR_FD) = 0 [pid 8550] close(4) = 0 [pid 8550] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8549] <... futex resumed>) = 0 [pid 8550] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8549] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8550] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8549] <... futex resumed>) = 0 [pid 8550] fspick(AT_FDCWD, ".", 0 [pid 8549] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8550] <... fspick resumed>) = 4 [pid 8550] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8549] <... futex resumed>) = 0 [pid 8550] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8549] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8550] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8549] <... futex resumed>) = 0 [pid 8550] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8549] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8550] <... fsconfig resumed>) = 0 [pid 8550] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8549] <... futex resumed>) = 0 [pid 8550] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8549] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8550] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8549] <... futex resumed>) = 0 [pid 8550] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8549] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8533, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5004] <... close resumed>) = 0 [pid 5004] rmdir("./98") = 0 [pid 8531] <... fsconfig resumed>) = 0 [pid 8531] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5004] mkdir("./99", 0777 [pid 5001] openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8527] exit_group(0 [pid 8531] <... futex resumed>) = 0 [pid 8531] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8550] <... fsconfig resumed>) = 0 [pid 8550] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8549] <... futex resumed>) = 0 [pid 8549] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8549] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8550] <... futex resumed>) = 1 [pid 8551] <... futex resumed>) = ? [pid 8527] <... exit_group resumed>) = ? [pid 5001] <... openat resumed>) = 3 [pid 8551] +++ exited with 0 +++ [pid 5001] fstat(3, [pid 8531] <... futex resumed>) = ? [pid 5004] <... mkdir resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] getdents64(3, [pid 5004] <... openat resumed>) = 3 [pid 5001] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5005] <... umount2 resumed>) = 0 [pid 5004] ioctl(3, LOOP_CLR_FD [pid 5001] umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5004] close(3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] <... close resumed>) = 0 [pid 5001] lstat("./98/binderfs", [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./98/binderfs" [pid 5005] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] lstat("./96/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5004] <... clone resumed>, child_tidptr=0x5555562025d0) = 8563 [pid 5001] <... unlink resumed>) = 0 [pid 4999] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] lstat("./96/file0", [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] openat(AT_FDCWD, "./96/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5005] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(4, [pid 4999] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8531] +++ exited with 0 +++ [pid 8527] +++ exited with 0 +++ [pid 5005] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] close(4) = 0 [pid 5005] rmdir("./96/file0") = 0 [pid 4999] openat(AT_FDCWD, "./96/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8527, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5005] getdents64(3, [pid 4999] <... openat resumed>) = 4 [pid 5002] umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] close(3 [pid 5002] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5005] <... close resumed>) = 0 [pid 4999] fstat(4, [pid 5002] <... openat resumed>) = 3 [pid 5002] fstat(3, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 5002] getdents64(3, [pid 5005] rmdir("./96" [pid 5002] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5002] umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8563 attached [pid 8550] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 5005] <... rmdir resumed>) = 0 [ 127.022275][ T8550] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.049788][ T8531] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 127.064267][ T8550] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = 0 [pid 4999] getdents64(4, [pid 8563] set_robust_list(0x5555562025e0, 24 [pid 8550] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 5005] mkdir("./97", 0777 [pid 8563] <... set_robust_list resumed>) = 0 [pid 8550] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... mkdir resumed>) = 0 [pid 5002] lstat("./96/binderfs", [pid 4999] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8563] chdir("./99" [pid 8550] <... futex resumed>) = 1 [pid 8549] <... futex resumed>) = 0 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] close(4 [pid 8563] <... chdir resumed>) = 0 [pid 8550] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8549] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... openat resumed>) = 3 [pid 5002] unlink("./96/binderfs" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... close resumed>) = 0 [pid 8563] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8550] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8549] <... futex resumed>) = 0 [pid 5005] ioctl(3, LOOP_CLR_FD [pid 5002] <... unlink resumed>) = 0 [pid 5001] lstat("./98/file0", [pid 4999] rmdir("./96/file0" [pid 8563] <... prctl resumed>) = 0 [pid 8550] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8549] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8563] setpgid(0, 0 [pid 5001] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... rmdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] getdents64(3, [pid 5001] openat(AT_FDCWD, "./98/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5001] <... openat resumed>) = 4 [pid 4999] close(3 [pid 5001] fstat(4, [pid 4999] <... close resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] rmdir("./96" [pid 5001] getdents64(4, [pid 4999] <... rmdir resumed>) = 0 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] mkdir("./97", 0777 [pid 5001] getdents64(4, [pid 4999] <... mkdir resumed>) = 0 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5001] close(4 [pid 4999] <... openat resumed>) = 3 [pid 5001] <... close resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5001] rmdir("./98/file0" [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... rmdir resumed>) = 0 [pid 4999] close(3 [pid 5001] getdents64(3, [pid 4999] <... close resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8563] <... setpgid resumed>) = 0 [pid 5005] close(3 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] close(3) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x5555562025d0) = 8564 [pid 5001] rmdir("./98") = 0 [pid 5001] mkdir("./99", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 8565 ./strace-static-x86_64: Process 8564 attached [pid 8564] set_robust_list(0x5555562025e0, 24) = 0 [pid 8563] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5005] <... close resumed>) = 0 [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8563] <... openat resumed>) = 3 [pid 8564] chdir("./97" [pid 8563] write(3, "1000", 4 [pid 5005] <... clone resumed>, child_tidptr=0x5555562025d0) = 8566 ./strace-static-x86_64: Process 8565 attached [pid 8564] <... chdir resumed>) = 0 [pid 8564] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8564] setpgid(0, 0) = 0 [pid 8564] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8564] write(3, "1000", 4) = 4 [pid 8564] close(3 [pid 8565] set_robust_list(0x5555562025e0, 24 [pid 8564] <... close resumed>) = 0 [pid 8563] <... write resumed>) = 4 [pid 8564] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8564] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8564] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8564] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8565] <... set_robust_list resumed>) = 0 [pid 8564] <... mprotect resumed>) = 0 [pid 8563] close(3./strace-static-x86_64: Process 8566 attached [pid 8565] chdir("./99" [pid 8564] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8563] <... close resumed>) = 0 [pid 8566] set_robust_list(0x5555562025e0, 24 [pid 8565] <... chdir resumed>) = 0 [pid 8563] symlink("/dev/binderfs", "./binderfs" [pid 8566] <... set_robust_list resumed>) = 0 [pid 8564] <... clone resumed>, parent_tid=[8567], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8567 [pid 5002] <... umount2 resumed>) = 0 [pid 8566] chdir("./97" [pid 8565] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8564] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8563] <... symlink resumed>) = 0 [pid 5002] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8566] <... chdir resumed>) = 0 [pid 8565] <... prctl resumed>) = 0 [pid 8564] <... futex resumed>) = 0 [pid 8563] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8566] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8565] setpgid(0, 0 [pid 8564] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8563] <... futex resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8566] <... prctl resumed>) = 0 [pid 8565] <... setpgid resumed>) = 0 [pid 8563] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5002] lstat("./96/file0", [pid 8566] setpgid(0, 0 [pid 8565] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8563] <... mmap resumed>) = 0x7f50500f1000 [pid 8566] <... setpgid resumed>) = 0 [pid 8565] <... openat resumed>) = 3 [pid 8563] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 8567 attached [pid 8566] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8565] write(3, "1000", 4 [pid 8563] <... mprotect resumed>) = 0 [pid 5002] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8567] set_robust_list(0x7f50501119e0, 24 [pid 8566] <... openat resumed>) = 3 [pid 8565] <... write resumed>) = 4 [pid 8563] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8567] <... set_robust_list resumed>) = 0 [pid 8566] write(3, "1000", 4 [pid 8565] close(3 [pid 5002] openat(AT_FDCWD, "./96/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8567] memfd_create("syzkaller", 0 [pid 8566] <... write resumed>) = 4 [pid 8565] <... close resumed>) = 0 [pid 8563] <... clone resumed>, parent_tid=[8569], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8569 [ 127.136591][ T8550] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 127.148929][ T8550] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 5002] <... openat resumed>) = 4 [pid 8567] <... memfd_create resumed>) = 3 [pid 8566] close(3 [pid 8567] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8566] <... close resumed>) = 0 [pid 8567] <... mmap resumed>) = 0x7f5047cf1000 [pid 8566] symlink("/dev/binderfs", "./binderfs" [pid 8567] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8566] <... symlink resumed>) = 0 [pid 8567] <... write resumed>) = 262144 [pid 8566] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8566] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 8569 attached ) = 0x7f50500f1000 [pid 8569] set_robust_list(0x7f50501119e0, 24 [pid 8566] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8569] <... set_robust_list resumed>) = 0 [pid 8566] <... mprotect resumed>) = 0 [pid 8569] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8566] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8567] munmap(0x7f5047cf1000, 262144) = 0 [pid 8566] <... clone resumed>, parent_tid=[8570], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8570 [pid 8566] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8567] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8566] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8567] <... openat resumed>) = 4 [pid 8565] symlink("/dev/binderfs", "./binderfs" [pid 8563] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] fstat(4, [pid 8569] <... futex resumed>) = 0 [pid 8567] ioctl(4, LOOP_SET_FD, 3 [pid 8563] <... futex resumed>) = 1 ./strace-static-x86_64: Process 8570 attached [pid 8569] memfd_create("syzkaller", 0 [pid 8567] <... ioctl resumed>) = 0 [pid 8565] <... symlink resumed>) = 0 [pid 8563] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8549] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8550] <... fsconfig resumed>) = 0 [pid 8565] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8549] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] getdents64(4, [pid 8570] set_robust_list(0x7f50501119e0, 24 [pid 8565] <... futex resumed>) = 0 [pid 8550] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8549] <... futex resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8570] <... set_robust_list resumed>) = 0 [pid 8565] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8550] <... futex resumed>) = 0 [pid 8549] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5002] getdents64(4, [pid 8570] memfd_create("syzkaller", 0 [pid 8569] <... memfd_create resumed>) = 3 [pid 8565] <... mmap resumed>) = 0x7f50500f1000 [pid 8569] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8549] <... mmap resumed>) = 0x7f5047d10000 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8565] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8550] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8570] <... memfd_create resumed>) = 3 [pid 8569] <... mmap resumed>) = 0x7f5047cf1000 [pid 8549] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5002] close(4 [pid 8570] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8569] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8567] close(3 [pid 8565] <... mprotect resumed>) = 0 [pid 8549] <... mprotect resumed>) = 0 [pid 8570] <... mmap resumed>) = 0x7f5047cf1000 [pid 8567] <... close resumed>) = 0 [pid 8565] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8549] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5002] <... close resumed>) = 0 [pid 8569] <... write resumed>) = 262144 [pid 8569] munmap(0x7f5047cf1000, 262144 [pid 8570] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8569] <... munmap resumed>) = 0 [pid 8569] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8565] <... clone resumed>, parent_tid=[8571], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8571 [pid 5002] rmdir("./96/file0" [pid 8569] <... openat resumed>) = 4 [pid 8569] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 8572 attached ./strace-static-x86_64: Process 8571 attached [pid 8570] <... write resumed>) = 262144 [pid 8567] mkdir("./file0", 0777 [pid 8565] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8549] <... clone resumed>, parent_tid=[8572], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8572 [pid 5002] <... rmdir resumed>) = 0 [pid 8572] set_robust_list(0x7f5047d309e0, 24 [pid 8571] set_robust_list(0x7f50501119e0, 24 [pid 8570] munmap(0x7f5047cf1000, 262144 [pid 8567] <... mkdir resumed>) = 0 [pid 8565] <... futex resumed>) = 0 [pid 8549] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] getdents64(3, [pid 8572] <... set_robust_list resumed>) = 0 [pid 8569] <... ioctl resumed>) = 0 [pid 8569] close(3) = 0 [pid 8569] mkdir("./file0", 0777) = 0 [pid 8570] <... munmap resumed>) = 0 [pid 8569] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8565] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8572] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8571] <... set_robust_list resumed>) = 0 [pid 8570] openat(AT_FDCWD, "/dev/loop5", O_RDWR [ 127.184275][ T8550] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 127.197212][ T8567] loop0: detected capacity change from 0 to 512 [ 127.221576][ T8569] loop4: detected capacity change from 0 to 512 [pid 8567] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8549] <... futex resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8572] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8571] memfd_create("syzkaller", 0 [pid 8570] <... openat resumed>) = 4 [pid 8549] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] close(3 [pid 8572] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8571] <... memfd_create resumed>) = 3 [pid 8570] ioctl(4, LOOP_SET_FD, 3 [pid 8549] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5002] <... close resumed>) = 0 [pid 8572] <... futex resumed>) = 0 [pid 8572] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8571] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 8570] <... ioctl resumed>) = 0 [pid 8549] exit_group(0 [pid 5002] rmdir("./96" [pid 8570] close(3 [pid 8550] <... futex resumed>) = ? [pid 8549] <... exit_group resumed>) = ? [pid 5002] <... rmdir resumed>) = 0 [pid 8572] <... futex resumed>) = ? [pid 8570] <... close resumed>) = 0 [pid 8550] +++ exited with 0 +++ [pid 5002] mkdir("./97", 0777 [pid 8570] mkdir("./file0", 0777 [pid 5002] <... mkdir resumed>) = 0 [pid 8570] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8570] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5002] <... openat resumed>) = 3 [pid 8572] +++ exited with 0 +++ [pid 8571] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8549] +++ exited with 0 +++ [pid 8571] <... write resumed>) = 262144 [pid 8571] munmap(0x7f5047cf1000, 262144 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8549, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 8571] <... munmap resumed>) = 0 [pid 5000] umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8571] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8571] <... openat resumed>) = 4 [pid 5000] openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8571] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... openat resumed>) = 3 [pid 8571] <... ioctl resumed>) = 0 [pid 5000] fstat(3, [pid 8571] close(3 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8571] <... close resumed>) = 0 [pid 5000] getdents64(3, [pid 8571] mkdir("./file0", 0777 [pid 5000] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 8571] <... mkdir resumed>) = 0 [pid 5000] umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8571] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5000] lstat("./98/binderfs", [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 127.230267][ T8569] EXT4-fs: Ignoring removed oldalloc option [ 127.234055][ T8567] EXT4-fs: Ignoring removed oldalloc option [ 127.245494][ T8570] loop5: detected capacity change from 0 to 512 [ 127.256987][ T8570] EXT4-fs: Ignoring removed oldalloc option [ 127.263360][ T8571] loop2: detected capacity change from 0 to 512 [ 127.267560][ T8571] EXT4-fs: Ignoring removed oldalloc option [pid 5002] close(3 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... close resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 8579 ./strace-static-x86_64: Process 8579 attached [pid 8579] set_robust_list(0x5555562025e0, 24) = 0 [pid 8579] chdir("./97") = 0 [pid 8579] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8579] setpgid(0, 0) = 0 [pid 8579] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] unlink("./98/binderfs") = 0 [pid 8579] <... openat resumed>) = 3 [pid 8579] write(3, "1000", 4) = 4 [pid 8579] close(3 [pid 5000] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8579] <... close resumed>) = 0 [pid 8579] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8579] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8579] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8579] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8579] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8582], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8582 [pid 8579] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8579] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8582 attached [pid 8582] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8582] memfd_create("syzkaller", 0) = 3 [pid 8582] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [ 127.279150][ T8567] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 127.289485][ T8567] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 127.298118][ T8569] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 127.313707][ T8570] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 127.322750][ T8571] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8582] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 8582] munmap(0x7f5047cf1000, 262144) = 0 [pid 8582] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 8582] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... umount2 resumed>) = 0 [ 127.323370][ T8569] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 127.331495][ T8567] EXT4-fs (loop0): 1 truncate cleaned up [ 127.352249][ T8569] EXT4-fs (loop4): 1 truncate cleaned up [ 127.363478][ T8582] loop3: detected capacity change from 0 to 512 [ 127.370711][ T8570] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 8582] <... ioctl resumed>) = 0 [pid 8582] close(3) = 0 [pid 8582] mkdir("./file0", 0777) = 0 [pid 8582] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8569] <... mount resumed>) = 0 [pid 5000] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8569] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8569] chdir("./file0") = 0 [pid 8569] ioctl(4, LOOP_CLR_FD) = 0 [pid 8569] close(4) = 0 [pid 8569] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8569] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./98/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./98/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, [pid 8563] <... futex resumed>) = 0 [pid 5000] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [ 127.381775][ T8569] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.390825][ T8582] EXT4-fs: Ignoring removed oldalloc option [ 127.399083][ T8567] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.415109][ T8571] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 8567] <... mount resumed>) = 0 [pid 8563] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./98/file0") = 0 [pid 5000] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./98") = 0 [pid 5000] mkdir("./99", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 8567] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8563] <... futex resumed>) = 1 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 8584 [pid 8567] <... openat resumed>) = 3 [pid 8563] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8569] <... futex resumed>) = 0 [pid 8567] chdir("./file0" [pid 8569] fspick(AT_FDCWD, ".", 0 [pid 8567] <... chdir resumed>) = 0 [pid 8569] <... fspick resumed>) = 4 [pid 8567] ioctl(4, LOOP_CLR_FD [pid 8569] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8567] <... ioctl resumed>) = 0 [pid 8569] <... futex resumed>) = 1 [pid 8567] close(4 [pid 8563] <... futex resumed>) = 0 [pid 8569] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8567] <... close resumed>) = 0 [pid 8563] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8569] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8567] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8563] <... futex resumed>) = 0 [pid 8569] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8567] <... futex resumed>) = 1 [pid 8564] <... futex resumed>) = 0 [pid 8563] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8569] <... fsconfig resumed>) = 0 [pid 8567] fspick(AT_FDCWD, ".", 0 [ 127.433139][ T8571] EXT4-fs (loop2): 1 truncate cleaned up [ 127.433331][ T8570] EXT4-fs (loop5): 1 truncate cleaned up [ 127.442341][ T8571] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 8564] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8564] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8571] <... mount resumed>) = 0 [pid 8571] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8571] chdir("./file0"./strace-static-x86_64: Process 8584 attached [pid 8569] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8567] <... fspick resumed>) = 4 [pid 8569] <... futex resumed>) = 1 [pid 8567] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8563] <... futex resumed>) = 0 [pid 8567] <... futex resumed>) = 1 [pid 8564] <... futex resumed>) = 0 [pid 8569] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8567] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8563] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8564] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8584] set_robust_list(0x5555562025e0, 24 [pid 8569] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8567] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8564] <... futex resumed>) = 0 [pid 8563] <... futex resumed>) = 0 [pid 8571] <... chdir resumed>) = 0 [pid 8571] ioctl(4, LOOP_CLR_FD) = 0 [pid 8571] close(4) = 0 [pid 8571] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8571] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8570] <... mount resumed>) = 0 [pid 8570] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8570] chdir("./file0") = 0 [pid 8570] ioctl(4, LOOP_CLR_FD) = 0 [pid 8570] close(4) = 0 [pid 8570] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8566] <... futex resumed>) = 0 [pid 8566] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8566] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8570] <... futex resumed>) = 1 [pid 8570] fspick(AT_FDCWD, ".", 0) = 4 [pid 8570] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8566] <... futex resumed>) = 0 [pid 8566] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8566] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8570] <... futex resumed>) = 1 [pid 8570] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 8570] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8566] <... futex resumed>) = 0 [pid 8566] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8566] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8570] <... futex resumed>) = 1 [pid 8570] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8584] <... set_robust_list resumed>) = 0 [pid 8569] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8567] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8564] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8563] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8565] <... futex resumed>) = 0 [pid 8565] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8567] <... fsconfig resumed>) = 0 [pid 8571] <... futex resumed>) = 0 [pid 8565] <... futex resumed>) = 1 [pid 8567] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8571] fspick(AT_FDCWD, ".", 0) = 4 [pid 8565] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8567] <... futex resumed>) = 1 [pid 8564] <... futex resumed>) = 0 [pid 8567] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8564] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8571] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8567] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8564] <... futex resumed>) = 0 [pid 8571] <... futex resumed>) = 1 [pid 8567] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8564] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8571] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8565] <... futex resumed>) = 0 [pid 8565] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8571] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8571] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8565] <... futex resumed>) = 0 [pid 8565] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8571] <... fsconfig resumed>) = 0 [pid 8571] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8565] <... futex resumed>) = 0 [pid 8571] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8565] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 127.479879][ T8582] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 127.483844][ T8570] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.501460][ T8582] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 8565] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8584] chdir("./99") = 0 [pid 8584] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8584] setpgid(0, 0) = 0 [pid 8584] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8584] write(3, "1000", 4) = 4 [pid 8584] close(3) = 0 [pid 8584] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8584] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8584] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8584] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8584] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8586], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8586 [pid 8584] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8584] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8586 attached [pid 8586] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8586] memfd_create("syzkaller", 0) = 3 [pid 8586] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 8566] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8566] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8566] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 8566] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8566] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8587], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8587 [pid 8566] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8566] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8586] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 8586] munmap(0x7f5047cf1000, 262144) = 0 [pid 8586] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8586] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 8587 attached [pid 8565] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8564] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8563] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8587] set_robust_list(0x7f5047d309e0, 24 [pid 8567] <... fsconfig resumed>) = 0 [pid 8565] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8564] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8563] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8587] <... set_robust_list resumed>) = 0 [pid 8569] <... fsconfig resumed>) = 0 [pid 8569] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 127.525793][ T8569] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 127.536924][ T8570] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 127.547792][ T8567] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 127.559488][ T8571] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 127.568968][ T8586] loop1: detected capacity change from 0 to 512 [pid 8569] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8564] <... futex resumed>) = 0 [pid 8563] <... futex resumed>) = 0 [pid 8586] <... ioctl resumed>) = 0 [pid 8563] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8564] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8563] <... mmap resumed>) = 0x7f5047d10000 [pid 8564] <... mmap resumed>) = 0x7f5047d10000 [pid 8564] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8563] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8586] close(3) = 0 [pid 8586] mkdir("./file0", 0777 [pid 8564] <... mprotect resumed>) = 0 [pid 8563] <... mprotect resumed>) = 0 [pid 8565] <... futex resumed>) = 0 [pid 8564] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8563] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8570] <... fsconfig resumed>) = 0 [pid 8570] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8563] <... clone resumed>, parent_tid=[8588], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8588 [pid 8564] <... clone resumed>, parent_tid=[8589], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8589 ./strace-static-x86_64: Process 8588 attached ./strace-static-x86_64: Process 8589 attached [pid 8587] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8571] <... fsconfig resumed>) = 0 [pid 8570] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8567] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8565] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8564] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8563] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8564] <... futex resumed>) = 0 [pid 8563] <... futex resumed>) = 0 [pid 8564] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8563] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8565] <... mmap resumed>) = 0x7f5047d10000 [pid 8565] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8587] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8571] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8586] <... mkdir resumed>) = 0 [pid 8571] <... futex resumed>) = 0 [pid 8565] <... mprotect resumed>) = 0 [pid 8587] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8589] set_robust_list(0x7f5047d309e0, 24 [pid 8567] <... futex resumed>) = 0 [pid 8586] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8589] <... set_robust_list resumed>) = 0 [pid 8588] set_robust_list(0x7f5047d309e0, 24 [pid 8587] <... futex resumed>) = 1 [pid 8571] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8567] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8566] <... futex resumed>) = 0 [pid 8565] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8589] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8588] <... set_robust_list resumed>) = 0 [pid 8587] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8566] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8590 attached [pid 8590] set_robust_list(0x7f5047d309e0, 24 [pid 8588] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8570] <... futex resumed>) = 0 [pid 8566] <... futex resumed>) = 1 [pid 8589] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8588] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8570] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8566] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8565] <... clone resumed>, parent_tid=[8590], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8590 [pid 8590] <... set_robust_list resumed>) = 0 [pid 8590] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8582] <... mount resumed>) = 0 [pid 8582] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8582] chdir("./file0") = 0 [pid 8582] ioctl(4, LOOP_CLR_FD) = 0 [pid 8582] close(4) = 0 [pid 8582] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8579] <... futex resumed>) = 0 [pid 8579] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8579] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8582] <... futex resumed>) = 1 [pid 8582] fspick(AT_FDCWD, ".", 0) = 4 [pid 8582] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8579] <... futex resumed>) = 0 [pid 8579] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8579] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8582] <... futex resumed>) = 1 [pid 8582] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 8582] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8579] <... futex resumed>) = 0 [pid 8579] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8579] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8582] <... futex resumed>) = 1 [pid 8582] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8589] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8564] <... futex resumed>) = 0 [pid 8589] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8588] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8588] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8565] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8565] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8564] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8563] <... futex resumed>) = 0 [pid 8563] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8564] <... futex resumed>) = 1 [pid 8567] <... futex resumed>) = 0 [pid 8563] <... futex resumed>) = 1 [pid 8569] <... futex resumed>) = 0 [pid 8567] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8564] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8563] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8590] <... futex resumed>) = 0 [pid 8590] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0) = -1 EBADF (Bad file descriptor) [pid 8590] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8565] <... futex resumed>) = 0 [pid 8565] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 127.580113][ T8582] EXT4-fs (loop3): 1 truncate cleaned up [ 127.585869][ T8582] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.609710][ T8586] EXT4-fs: Ignoring removed oldalloc option [ 127.618368][ T8570] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [pid 8565] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8571] <... futex resumed>) = 0 [pid 8569] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8590] <... futex resumed>) = 1 [pid 8590] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [ 127.634974][ T8567] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 127.635572][ T8570] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 127.644589][ T8569] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 127.657261][ T8571] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 127.666172][ T8582] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 8571] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8579] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8579] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8566] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8565] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8579] <... futex resumed>) = 0 [pid 8566] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8565] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8590] <... futex resumed>) = 0 [pid 8579] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8566] <... futex resumed>) = 1 [pid 8565] <... futex resumed>) = 1 [pid 8590] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8579] <... mmap resumed>) = 0x7f5047d10000 [pid 8566] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8565] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8590] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 8579] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8590] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8579] <... mprotect resumed>) = 0 [pid 8590] <... futex resumed>) = 1 [pid 8579] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8565] <... futex resumed>) = 0 [pid 8590] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8579] <... clone resumed>, parent_tid=[8592], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8592 [pid 8579] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8579] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8592 attached [pid 8587] <... futex resumed>) = 0 [pid 8582] <... fsconfig resumed>) = 0 [pid 8564] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8563] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8564] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8563] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8589] <... futex resumed>) = 0 [pid 8588] <... futex resumed>) = 0 [pid 8564] <... futex resumed>) = 1 [pid 8563] <... futex resumed>) = 1 [pid 8589] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8588] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8564] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8563] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8589] <... openat resumed>) = 5 [pid 8588] <... openat resumed>) = 5 [pid 8589] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8588] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8589] <... futex resumed>) = 1 [pid 8588] <... futex resumed>) = 1 [pid 8564] <... futex resumed>) = 0 [pid 8563] <... futex resumed>) = 0 [pid 8589] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8588] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8592] set_robust_list(0x7f5047d309e0, 24 [pid 8587] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8582] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8570] <... fsconfig resumed>) = 0 [pid 8592] <... set_robust_list resumed>) = 0 [pid 8582] <... futex resumed>) = 0 [pid 8592] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8582] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8592] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8592] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8592] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8570] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8570] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8579] <... futex resumed>) = 0 [pid 8579] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8579] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8587] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 8582] <... futex resumed>) = 0 [pid 8587] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [ 127.671355][ T8567] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 127.689800][ T8569] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 127.694924][ T8571] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 127.700460][ T8570] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 127.712702][ T8586] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8582] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8587] <... futex resumed>) = 1 [pid 8587] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8566] <... futex resumed>) = 0 [ 127.727424][ T8582] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 127.728005][ T8567] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 127.739211][ T8586] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 127.750293][ T8571] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 127.763311][ T8582] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8579] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8571] <... fsconfig resumed>) = 0 [pid 8567] <... fsconfig resumed>) = 0 [pid 8566] exit_group(0 [pid 8579] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8567] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8592] <... futex resumed>) = 0 [pid 8579] <... futex resumed>) = 1 [pid 8567] <... futex resumed>) = 0 [pid 8592] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8579] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8567] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8592] <... openat resumed>) = 5 [pid 8592] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8579] <... futex resumed>) = 0 [pid 8592] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8571] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8571] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8565] exit_group(0 [pid 8564] exit_group(0 [pid 8589] <... futex resumed>) = ? [pid 8567] <... futex resumed>) = ? [pid 8564] <... exit_group resumed>) = ? [pid 8590] <... futex resumed>) = ? [pid 8571] <... futex resumed>) = ? [pid 8565] <... exit_group resumed>) = ? [pid 8589] +++ exited with 0 +++ [pid 8590] +++ exited with 0 +++ [pid 8571] +++ exited with 0 +++ [pid 8567] +++ exited with 0 +++ [pid 8566] <... exit_group resumed>) = ? [pid 8570] <... futex resumed>) = ? [pid 8587] <... futex resumed>) = ? [pid 8587] +++ exited with 0 +++ [pid 8570] +++ exited with 0 +++ [pid 8569] <... fsconfig resumed>) = 0 [pid 8566] +++ exited with 0 +++ [pid 8565] +++ exited with 0 +++ [pid 8564] +++ exited with 0 +++ [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8566, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8565, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8564, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5005] umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./99", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5005] <... openat resumed>) = 3 [pid 5001] <... openat resumed>) = 3 [pid 4999] <... openat resumed>) = 3 [pid 5005] fstat(3, [pid 5001] fstat(3, [pid 4999] fstat(3, [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(3, [pid 5001] getdents64(3, [pid 5005] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5001] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 4999] getdents64(3, [pid 5005] umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./99/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] lstat("./97/binderfs", [pid 5001] lstat("./99/binderfs", [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] lstat("./97/binderfs", [pid 5005] unlink("./97/binderfs" [pid 5001] unlink("./99/binderfs" [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5005] <... unlink resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 4999] unlink("./97/binderfs" [pid 5005] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8569] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8569] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8582] <... fsconfig resumed>) = 0 [pid 8582] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8563] exit_group(0 [pid 8588] <... futex resumed>) = ? [pid 8582] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8563] <... exit_group resumed>) = ? [pid 8588] +++ exited with 0 +++ [pid 8569] <... futex resumed>) = ? [pid 8569] +++ exited with 0 +++ [pid 8563] +++ exited with 0 +++ [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8563, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 8579] exit_group(0 [pid 5004] restart_syscall(<... resuming interrupted clone ...> [pid 8592] <... futex resumed>) = ? [pid 8582] <... futex resumed>) = ? [pid 8579] <... exit_group resumed>) = ? [pid 5004] <... restart_syscall resumed>) = 0 [pid 8592] +++ exited with 0 +++ [pid 8582] +++ exited with 0 +++ [pid 8579] +++ exited with 0 +++ [pid 5004] umount2("./99", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8579, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5004] openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] <... restart_syscall resumed>) = 0 [pid 8586] <... mount resumed>) = 0 [pid 5004] fstat(3, [pid 8586] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8586] <... openat resumed>) = 3 [pid 8586] chdir("./file0" [pid 5004] getdents64(3, [pid 8586] <... chdir resumed>) = 0 [pid 8586] ioctl(4, LOOP_CLR_FD) = 0 [pid 8586] close(4) = 0 [pid 5004] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8586] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] umount2("./99/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8586] <... futex resumed>) = 1 [pid 8586] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8584] <... futex resumed>) = 0 [pid 8584] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] lstat("./99/binderfs", [pid 5002] <... openat resumed>) = 3 [pid 8584] <... futex resumed>) = 1 [pid 8584] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] fstat(3, [pid 8586] <... futex resumed>) = 0 [pid 8586] fspick(AT_FDCWD, ".", 0) = 4 [pid 8586] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8586] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8584] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] unlink("./99/binderfs" [pid 8584] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... unlink resumed>) = 0 [pid 5002] getdents64(3, [pid 8584] <... futex resumed>) = 1 [pid 5004] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8584] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 8586] <... futex resumed>) = 0 [pid 5002] umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8586] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 8586] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8586] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8584] <... futex resumed>) = 0 [pid 8584] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8584] <... futex resumed>) = 1 [pid 8584] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] lstat("./97/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./97/binderfs") = 0 [pid 5002] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8586] <... futex resumed>) = 0 [pid 8586] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5005] <... umount2 resumed>) = 0 [pid 5005] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5005] lstat("./97/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5005] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] openat(AT_FDCWD, "./97/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] <... openat resumed>) = 4 [pid 5005] fstat(4, [pid 5001] lstat("./99/file0", [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(4, [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5005] getdents64(4, [pid 5001] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] close(4 [pid 5001] openat(AT_FDCWD, "./99/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5005] <... close resumed>) = 0 [pid 5001] <... openat resumed>) = 4 [pid 5005] rmdir("./97/file0" [pid 5001] fstat(4, [pid 5005] <... rmdir resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 127.774678][ T8569] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 127.793311][ T8586] EXT4-fs (loop1): 1 truncate cleaned up [ 127.799915][ T8586] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.812193][ T8582] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 5005] getdents64(3, [pid 5001] getdents64(4, [pid 5005] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5004] <... umount2 resumed>) = 0 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5005] close(3 [pid 5001] getdents64(4, [pid 4999] <... umount2 resumed>) = 0 [pid 5005] <... close resumed>) = 0 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5005] rmdir("./97" [pid 5001] close(4 [pid 5005] <... rmdir resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5005] mkdir("./98", 0777 [pid 5001] rmdir("./99/file0" [pid 5005] <... mkdir resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] getdents64(3, [pid 5005] <... openat resumed>) = 3 [pid 5001] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5005] ioctl(3, LOOP_CLR_FD [pid 5001] close(3 [pid 5005] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... close resumed>) = 0 [pid 5005] close(3 [pid 5001] rmdir("./99" [pid 5005] <... close resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5004] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] mkdir("./100", 0777) = 0 [pid 4999] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] <... clone resumed>, child_tidptr=0x5555562025d0) = 8599 [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 8600 ./strace-static-x86_64: Process 8599 attached [pid 8599] set_robust_list(0x5555562025e0, 24) = 0 [pid 8599] chdir("./98") = 0 [pid 8599] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8599] setpgid(0, 0) = 0 [pid 8599] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./99/file0", [pid 8599] write(3, "1000", 4) = 4 [pid 8584] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8584] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8584] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8599] close(3./strace-static-x86_64: Process 8600 attached ) = 0 [pid 8584] <... mmap resumed>) = 0x7f5047d10000 [pid 5002] <... umount2 resumed>) = 0 [pid 8600] set_robust_list(0x5555562025e0, 24 [pid 8599] symlink("/dev/binderfs", "./binderfs" [pid 8600] <... set_robust_list resumed>) = 0 [pid 8599] <... symlink resumed>) = 0 [pid 8600] chdir("./100" [pid 8599] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8600] <... chdir resumed>) = 0 [pid 8599] <... futex resumed>) = 0 [pid 8584] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 8600] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8599] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8600] <... prctl resumed>) = 0 [pid 8599] <... mmap resumed>) = 0x7f50500f1000 [pid 8584] <... mprotect resumed>) = 0 [pid 8600] setpgid(0, 0 [pid 8599] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8584] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8600] <... setpgid resumed>) = 0 [pid 5004] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] lstat("./97/file0", [pid 8600] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8599] <... mprotect resumed>) = 0 [pid 5004] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8600] <... openat resumed>) = 3 [pid 8599] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8584] <... clone resumed>, parent_tid=[8601], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8601 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8600] write(3, "1000", 4 [pid 8584] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] openat(AT_FDCWD, "./99/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] lstat("./97/file0", [pid 4999] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8584] <... futex resumed>) = 0 [pid 5004] <... openat resumed>) = 4 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8584] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] fstat(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] openat(AT_FDCWD, "./97/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5004] getdents64(4, [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... openat resumed>) = 4 [pid 8600] <... write resumed>) = 4 [pid 8599] <... clone resumed>, parent_tid=[8603], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8603 [pid 5004] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5002] openat(AT_FDCWD, "./97/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] fstat(4, ./strace-static-x86_64: Process 8603 attached [pid 8600] close(3 [pid 8599] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] getdents64(4, [pid 5002] <... openat resumed>) = 4 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8603] set_robust_list(0x7f50501119e0, 24 [pid 8600] <... close resumed>) = 0 [pid 8599] <... futex resumed>) = 0 [pid 5004] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5002] fstat(4, [pid 4999] getdents64(4, [pid 8603] <... set_robust_list resumed>) = 0 [pid 8600] symlink("/dev/binderfs", "./binderfs" [pid 8599] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5004] close(4 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 8601 attached [pid 8603] memfd_create("syzkaller", 0 [pid 8600] <... symlink resumed>) = 0 [pid 5004] <... close resumed>) = 0 [pid 5002] getdents64(4, [pid 4999] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 8603] <... memfd_create resumed>) = 3 [pid 8601] set_robust_list(0x7f5047d309e0, 24 [pid 8600] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8603] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8600] <... futex resumed>) = 0 [pid 5004] rmdir("./99/file0" [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, [pid 8601] <... set_robust_list resumed>) = 0 [pid 8603] <... mmap resumed>) = 0x7f5047cf1000 [pid 8600] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8586] <... fsconfig resumed>) = 0 [pid 8603] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8600] <... mmap resumed>) = 0x7f50500f1000 [pid 8603] <... write resumed>) = 262144 [pid 8601] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8600] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8586] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... rmdir resumed>) = 0 [pid 5002] getdents64(4, [pid 4999] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 8601] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8600] <... mprotect resumed>) = 0 [pid 8601] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8600] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8586] <... futex resumed>) = 0 [pid 5004] getdents64(3, [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 4999] close(4 [pid 8603] munmap(0x7f5047cf1000, 262144 [pid 8601] <... futex resumed>) = 1 [pid 8586] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8584] <... futex resumed>) = 0 [pid 8603] <... munmap resumed>) = 0 [pid 8601] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8600] <... clone resumed>, parent_tid=[8604], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8604 [pid 5004] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5002] close(4 [pid 4999] <... close resumed>) = 0 [pid 8603] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 8600] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8584] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] close(3 [pid 5002] <... close resumed>) = 0 [pid 4999] rmdir("./97/file0" [pid 8603] <... openat resumed>) = 4 [pid 8600] <... futex resumed>) = 0 [pid 8603] ioctl(4, LOOP_SET_FD, 3 [pid 8600] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8584] <... futex resumed>) = 1 ./strace-static-x86_64: Process 8604 attached [ 127.875897][ T8586] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 8586] <... futex resumed>) = 0 [pid 8584] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... close resumed>) = 0 [pid 5002] rmdir("./97/file0" [pid 4999] <... rmdir resumed>) = 0 [pid 8604] set_robust_list(0x7f50501119e0, 24 [pid 8586] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5004] rmdir("./99" [pid 5002] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, [pid 8604] <... set_robust_list resumed>) = 0 [pid 8603] <... ioctl resumed>) = 0 [pid 8603] close(3) = 0 [pid 8603] mkdir("./file0", 0777) = 0 [pid 8603] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8604] memfd_create("syzkaller", 0 [pid 5004] <... rmdir resumed>) = 0 [pid 5002] getdents64(3, [pid 4999] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 8604] <... memfd_create resumed>) = 3 [pid 5004] mkdir("./100", 0777 [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 4999] close(3 [pid 8604] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5004] <... mkdir resumed>) = 0 [pid 5002] close(3 [pid 4999] <... close resumed>) = 0 [pid 8604] <... mmap resumed>) = 0x7f5047cf1000 [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5002] <... close resumed>) = 0 [pid 4999] rmdir("./97" [pid 8604] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5004] <... openat resumed>) = 3 [pid 5002] rmdir("./97" [pid 4999] <... rmdir resumed>) = 0 [pid 5004] ioctl(3, LOOP_CLR_FD [pid 5002] <... rmdir resumed>) = 0 [pid 4999] mkdir("./98", 0777 [pid 5002] mkdir("./98", 0777 [pid 4999] <... mkdir resumed>) = 0 [pid 8604] <... write resumed>) = 262144 [pid 5002] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] <... openat resumed>) = 3 [pid 5002] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5002] ioctl(3, LOOP_CLR_FD [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 5002] close(3 [pid 4999] <... close resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 8606 [pid 4999] <... clone resumed>, child_tidptr=0x5555562025d0) = 8605 [pid 8604] munmap(0x7f5047cf1000, 262144) = 0 [pid 8604] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8604] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 8605 attached [pid 5004] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5004] close(3) = 0 [pid 8605] set_robust_list(0x5555562025e0, 24 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 8607 [pid 8605] <... set_robust_list resumed>) = 0 [pid 8605] chdir("./98") = 0 ./strace-static-x86_64: Process 8607 attached [pid 8605] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8605] setpgid(0, 0) = 0 [pid 8607] set_robust_list(0x5555562025e0, 24) = 0 [pid 8607] chdir("./100") = 0 [pid 8607] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8607] setpgid(0, 0./strace-static-x86_64: Process 8606 attached [pid 8605] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8607] <... setpgid resumed>) = 0 [pid 8605] <... openat resumed>) = 3 [pid 8605] write(3, "1000", 4) = 4 [pid 8605] close(3) = 0 [pid 8605] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8605] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8605] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8604] <... ioctl resumed>) = 0 [pid 8605] <... mmap resumed>) = 0x7f50500f1000 [pid 8604] close(3 [pid 8607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8605] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8604] <... close resumed>) = 0 [pid 8605] <... mprotect resumed>) = 0 [pid 8604] mkdir("./file0", 0777 [pid 8584] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8607] <... openat resumed>) = 3 [pid 8606] set_robust_list(0x5555562025e0, 24 [pid 8605] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8604] <... mkdir resumed>) = 0 [pid 8584] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8604] mount("/dev/loop2", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8601] <... futex resumed>) = 0 [ 127.924537][ T8603] loop5: detected capacity change from 0 to 512 [ 127.927498][ T8586] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 127.932924][ T8603] EXT4-fs: Ignoring removed oldalloc option [ 127.946788][ T8586] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 127.956435][ T8604] loop2: detected capacity change from 0 to 512 [pid 8606] <... set_robust_list resumed>) = 0 [pid 8584] <... futex resumed>) = 1 [pid 8607] write(3, "1000", 4 [pid 8605] <... clone resumed>, parent_tid=[8609], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8609 [pid 8601] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8584] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8607] <... write resumed>) = 4 [pid 8606] chdir("./98" [pid 8605] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8601] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 8607] close(3 [pid 8605] <... futex resumed>) = 0 [pid 8601] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8606] <... chdir resumed>) = 0 [pid 8605] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8601] <... futex resumed>) = 1 [pid 8584] <... futex resumed>) = 0 [pid 8607] <... close resumed>) = 0 [pid 8606] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8601] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8607] symlink("/dev/binderfs", "./binderfs" [pid 8606] <... prctl resumed>) = 0 [pid 8607] <... symlink resumed>) = 0 [pid 8607] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8606] setpgid(0, 0 [pid 8607] <... futex resumed>) = 0 [pid 8606] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 8609 attached [pid 8607] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8606] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8609] set_robust_list(0x7f50501119e0, 24 [pid 8607] <... mmap resumed>) = 0x7f50500f1000 [pid 8606] <... openat resumed>) = 3 [pid 8609] <... set_robust_list resumed>) = 0 [pid 8607] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8606] write(3, "1000", 4 [pid 8609] memfd_create("syzkaller", 0 [pid 8607] <... mprotect resumed>) = 0 [pid 8606] <... write resumed>) = 4 [pid 8609] <... memfd_create resumed>) = 3 [pid 8607] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8606] close(3 [pid 8609] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8606] <... close resumed>) = 0 ./strace-static-x86_64: Process 8611 attached [pid 8609] <... mmap resumed>) = 0x7f5047cf1000 [pid 8607] <... clone resumed>, parent_tid=[8611], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8611 [pid 8606] symlink("/dev/binderfs", "./binderfs" [pid 8609] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8607] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8606] <... symlink resumed>) = 0 [pid 8611] set_robust_list(0x7f50501119e0, 24 [pid 8609] <... write resumed>) = 262144 [pid 8607] <... futex resumed>) = 0 [pid 8606] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8611] <... set_robust_list resumed>) = 0 [pid 8609] munmap(0x7f5047cf1000, 262144 [pid 8607] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8606] <... futex resumed>) = 0 [pid 8611] memfd_create("syzkaller", 0 [pid 8609] <... munmap resumed>) = 0 [pid 8606] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8611] <... memfd_create resumed>) = 3 [pid 8609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8606] <... mmap resumed>) = 0x7f50500f1000 [pid 8611] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8609] <... openat resumed>) = 4 [pid 8606] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE [pid 8611] <... mmap resumed>) = 0x7f5047cf1000 [ 127.978922][ T8604] EXT4-fs: Ignoring removed oldalloc option [ 127.994870][ T8603] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 128.005635][ T8586] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 8609] ioctl(4, LOOP_SET_FD, 3 [pid 8606] <... mprotect resumed>) = 0 [pid 8611] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8586] <... fsconfig resumed>) = 0 [pid 8586] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8586] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8584] exit_group(0 [pid 8601] <... futex resumed>) = ? [pid 8586] <... futex resumed>) = ? [pid 8584] <... exit_group resumed>) = ? [pid 8601] +++ exited with 0 +++ [pid 8586] +++ exited with 0 +++ [pid 8584] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8584, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5000] umount2("./99", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 8606] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5000] umount2("./99/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./99/binderfs", [pid 8606] <... clone resumed>, parent_tid=[8614], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8614 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./99/binderfs") = 0 [pid 5000] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8606] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8611] <... write resumed>) = 262144 [pid 8609] <... ioctl resumed>) = 0 [pid 8606] <... futex resumed>) = 0 ./strace-static-x86_64: Process 8614 attached [pid 8614] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8614] memfd_create("syzkaller", 0) = 3 [pid 8614] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 8614] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 8614] munmap(0x7f5047cf1000, 262144) = 0 [pid 8614] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 8614] ioctl(4, LOOP_SET_FD, 3 [pid 8611] munmap(0x7f5047cf1000, 262144 [pid 8609] close(3 [ 128.017434][ T8603] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 128.023747][ T8609] loop0: detected capacity change from 0 to 512 [ 128.042483][ T8603] __quota_error: 142 callbacks suppressed [ 128.042498][ T8603] Quota error (device loop5): write_blk: dquota write failed [ 128.056568][ T8614] loop3: detected capacity change from 0 to 512 [ 128.057116][ T8603] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [pid 8606] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8614] <... ioctl resumed>) = 0 [pid 8611] <... munmap resumed>) = 0 [pid 8609] <... close resumed>) = 0 [pid 8611] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8609] mkdir("./file0", 0777 [pid 8611] <... openat resumed>) = 4 [pid 8609] <... mkdir resumed>) = 0 [pid 8611] ioctl(4, LOOP_SET_FD, 3 [pid 8609] mount("/dev/loop0", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8611] <... ioctl resumed>) = 0 [pid 8611] close(3) = 0 [pid 8611] mkdir("./file0", 0777) = 0 [ 128.064482][ T8604] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 128.082892][ T8603] EXT4-fs (loop5): 1 truncate cleaned up [ 128.084609][ T8611] loop4: detected capacity change from 0 to 512 [ 128.089073][ T8603] ext4 filesystem being mounted at /root/syzkaller.jtJ2SE/98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.095557][ T8609] EXT4-fs: Ignoring removed oldalloc option [ 128.111923][ T8604] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [pid 8611] mount("/dev/loop4", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8614] close(3) = 0 [pid 8614] mkdir("./file0", 0777 [pid 8603] <... mount resumed>) = 0 [pid 8614] <... mkdir resumed>) = 0 [pid 8614] mount("/dev/loop3", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8603] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8603] chdir("./file0") = 0 [pid 8603] ioctl(4, LOOP_CLR_FD) = 0 [pid 8603] close(4) = 0 [pid 8603] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8599] <... futex resumed>) = 0 [pid 8599] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8599] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8603] <... futex resumed>) = 1 [pid 8603] fspick(AT_FDCWD, ".", 0) = 4 [pid 8603] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8599] <... futex resumed>) = 0 [pid 8599] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8599] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8603] <... futex resumed>) = 1 [pid 8603] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 8603] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8599] <... futex resumed>) = 0 [pid 8599] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8599] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8603] <... futex resumed>) = 1 [pid 8603] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./99/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./99/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./99/file0") = 0 [pid 5000] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./99") = 0 [pid 5000] mkdir("./100", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 128.116909][ T8611] EXT4-fs: Ignoring removed oldalloc option [ 128.135723][ T8614] EXT4-fs: Ignoring removed oldalloc option [ 128.152313][ T8604] Quota error (device loop2): write_blk: dquota write failed [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8599] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8599] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8599] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 8599] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8599] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8618], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8618 [pid 8599] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8599] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... clone resumed>, child_tidptr=0x5555562025d0) = 8619 ./strace-static-x86_64: Process 8619 attached [pid 8619] set_robust_list(0x5555562025e0, 24) = 0 [pid 8619] chdir("./100") = 0 [pid 8619] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8619] setpgid(0, 0) = 0 [pid 8619] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8619] write(3, "1000", 4) = 4 [pid 8619] close(3) = 0 [pid 8619] symlink("/dev/binderfs", "./binderfs" [pid 8603] <... fsconfig resumed>) = 0 [pid 8603] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8603] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8619] <... symlink resumed>) = 0 [pid 8619] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8619] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8619] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8619] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8622], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8622 [ 128.170481][ T8603] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 128.175367][ T8604] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 128.192596][ T8611] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 128.207646][ T8604] EXT4-fs (loop2): 1 truncate cleaned up [ 128.214965][ T8614] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 8619] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 8622 attached ./strace-static-x86_64: Process 8618 attached [pid 8619] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8599] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8599] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 8599] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8603] <... futex resumed>) = 0 [pid 8599] <... futex resumed>) = 1 [pid 8603] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 128.215727][ T8604] ext4 filesystem being mounted at /root/syzkaller.l8cnmm/100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.223337][ T8609] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 128.236708][ T8611] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 128.248260][ T8603] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [pid 8599] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8622] set_robust_list(0x7f50501119e0, 24 [pid 8618] set_robust_list(0x7f5047d309e0, 24 [pid 8604] <... mount resumed>) = 0 [pid 8622] <... set_robust_list resumed>) = 0 [pid 8618] <... set_robust_list resumed>) = 0 [pid 8604] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8622] memfd_create("syzkaller", 0 [pid 8618] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8604] <... openat resumed>) = 3 [pid 8622] <... memfd_create resumed>) = 3 [pid 8618] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8604] chdir("./file0" [pid 8622] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8618] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8604] <... chdir resumed>) = 0 [pid 8622] <... mmap resumed>) = 0x7f5047cf1000 [pid 8618] <... futex resumed>) = 0 [pid 8604] ioctl(4, LOOP_CLR_FD [pid 8622] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 8618] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8604] <... ioctl resumed>) = 0 [pid 8604] close(4) = 0 [pid 8604] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8604] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8622] <... write resumed>) = 262144 [ 128.260858][ T8609] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 128.269176][ T8614] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 128.298228][ T8611] Quota error (device loop4): write_blk: dquota write failed [ 128.304291][ T8609] Quota error (device loop0): write_blk: dquota write failed [ 128.306037][ T8611] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [pid 8622] munmap(0x7f5047cf1000, 262144) = 0 [pid 8600] <... futex resumed>) = 0 [pid 8599] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8600] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8622] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8604] <... futex resumed>) = 0 [pid 8600] <... futex resumed>) = 1 [pid 8599] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8600] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8622] <... openat resumed>) = 4 [pid 8618] <... futex resumed>) = 0 [pid 8604] fspick(AT_FDCWD, ".", 0 [pid 8599] <... futex resumed>) = 1 [pid 8622] ioctl(4, LOOP_SET_FD, 3 [pid 8618] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8604] <... fspick resumed>) = 4 [pid 8599] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8618] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 8604] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8618] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8604] <... futex resumed>) = 1 [pid 8618] <... futex resumed>) = 1 [pid 8604] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8599] <... futex resumed>) = 0 [pid 8618] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8622] <... ioctl resumed>) = 0 [pid 8622] close(3) = 0 [pid 8622] mkdir("./file0", 0777) = 0 [pid 8622] mount("/dev/loop1", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8600] <... futex resumed>) = 0 [ 128.313603][ T8609] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 128.337321][ T8622] loop1: detected capacity change from 0 to 512 [ 128.338175][ T8603] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 128.351526][ T8622] EXT4-fs: Ignoring removed oldalloc option [ 128.358330][ T8614] Quota error (device loop3): write_blk: dquota write failed [ 128.366096][ T8614] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [pid 8600] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8604] <... futex resumed>) = 0 [pid 8600] <... futex resumed>) = 1 [pid 8604] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 8604] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8604] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8600] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8609] <... mount resumed>) = 0 [pid 8609] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8609] chdir("./file0") = 0 [pid 8609] ioctl(4, LOOP_CLR_FD) = 0 [pid 8609] close(4 [pid 8600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 128.377881][ T8609] EXT4-fs (loop0): 1 truncate cleaned up [ 128.377943][ T8614] EXT4-fs (loop3): 1 truncate cleaned up [ 128.387588][ T8609] ext4 filesystem being mounted at /root/syzkaller.Od7xWb/98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.390296][ T8603] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 128.413135][ T8611] EXT4-fs (loop4): 1 truncate cleaned up [ 128.414445][ T8614] ext4 filesystem being mounted at /root/syzkaller.cfkyqr/98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 8600] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8604] <... futex resumed>) = 0 [pid 8600] <... futex resumed>) = 1 [pid 8604] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8600] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8609] <... close resumed>) = 0 [pid 8609] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8605] <... futex resumed>) = 0 [pid 8605] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8605] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8603] <... fsconfig resumed>) = 0 [pid 8614] <... mount resumed>) = 0 [pid 8611] <... mount resumed>) = 0 [pid 8609] <... futex resumed>) = 1 [pid 8603] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8614] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8611] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8603] <... futex resumed>) = 0 [pid 8614] <... openat resumed>) = 3 [pid 8611] <... openat resumed>) = 3 [pid 8603] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8614] chdir("./file0" [pid 8611] chdir("./file0" [pid 8614] <... chdir resumed>) = 0 [pid 8614] ioctl(4, LOOP_CLR_FD [pid 8611] <... chdir resumed>) = 0 [pid 8614] <... ioctl resumed>) = 0 [pid 8614] close(4 [pid 8611] ioctl(4, LOOP_CLR_FD [pid 8614] <... close resumed>) = 0 [pid 8611] <... ioctl resumed>) = 0 [ 128.425608][ T8611] ext4 filesystem being mounted at /root/syzkaller.YHTGbC/100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.451837][ T8622] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 128.457694][ T8604] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 8614] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8611] close(4 [pid 8614] <... futex resumed>) = 1 [pid 8611] <... close resumed>) = 0 [pid 8609] fspick(AT_FDCWD, ".", 0 [pid 8606] <... futex resumed>) = 0 [pid 8614] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8611] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8609] <... fspick resumed>) = 4 [pid 8606] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8611] <... futex resumed>) = 1 [pid 8609] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8607] <... futex resumed>) = 0 [pid 8606] <... futex resumed>) = 0 [pid 8614] fspick(AT_FDCWD, ".", 0 [pid 8611] fspick(AT_FDCWD, ".", 0 [pid 8609] <... futex resumed>) = 1 [pid 8607] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8606] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8614] <... fspick resumed>) = 4 [pid 8611] <... fspick resumed>) = 4 [pid 8609] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8607] <... futex resumed>) = 0 [pid 8614] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8611] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8607] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8614] <... futex resumed>) = 1 [pid 8611] <... futex resumed>) = 0 [pid 8607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8606] <... futex resumed>) = 0 [pid 8614] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8611] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8607] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8606] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8611] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8607] <... futex resumed>) = 0 [pid 8606] <... futex resumed>) = 0 [pid 8614] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8611] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8607] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8606] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8614] <... fsconfig resumed>) = 0 [pid 8611] <... fsconfig resumed>) = 0 [pid 8614] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8611] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8614] <... futex resumed>) = 1 [pid 8611] <... futex resumed>) = 1 [pid 8607] <... futex resumed>) = 0 [pid 8606] <... futex resumed>) = 0 [pid 8614] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8611] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8607] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8606] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8611] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8607] <... futex resumed>) = 0 [pid 8606] <... futex resumed>) = 0 [pid 8614] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8611] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8607] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8606] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8599] exit_group(0 [pid 8605] <... futex resumed>) = 0 [pid 8604] <... fsconfig resumed>) = 0 [pid 8600] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8618] <... futex resumed>) = ? [pid 8605] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8604] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8603] <... futex resumed>) = ? [pid 8600] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8599] <... exit_group resumed>) = ? [pid 8603] +++ exited with 0 +++ [pid 8600] <... futex resumed>) = 0 [pid 8600] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 8600] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8600] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8628], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8628 [pid 8600] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8600] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8618] +++ exited with 0 +++ [pid 8609] <... futex resumed>) = 0 [pid 8605] <... futex resumed>) = 1 [pid 8609] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8605] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8609] <... fsconfig resumed>) = 0 [pid 8604] <... futex resumed>) = 0 [pid 8609] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8605] <... futex resumed>) = 0 [pid 8609] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8605] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8628 attached [pid 8622] <... mount resumed>) = 0 [pid 8614] <... fsconfig resumed>) = 0 [pid 8611] <... fsconfig resumed>) = 0 [pid 8605] <... futex resumed>) = 0 [ 128.462393][ T8622] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 128.487599][ T8611] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 128.487780][ T8622] EXT4-fs (loop1): 1 truncate cleaned up [ 128.504495][ T8614] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 128.504879][ T8622] ext4 filesystem being mounted at /root/syzkaller.ohPIOg/100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 8604] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8599] +++ exited with 0 +++ [pid 8628] set_robust_list(0x7f5047d309e0, 24 [pid 8622] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8614] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8628] <... set_robust_list resumed>) = 0 [pid 8622] <... openat resumed>) = 3 [pid 8614] <... futex resumed>) = 1 [pid 8628] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8622] chdir("./file0" [pid 8614] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8628] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8622] <... chdir resumed>) = 0 [pid 8628] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8622] ioctl(4, LOOP_CLR_FD [pid 8628] <... futex resumed>) = 1 [pid 8622] <... ioctl resumed>) = 0 [pid 8628] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8622] close(4) = 0 [pid 8607] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8606] <... futex resumed>) = 0 [pid 8605] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8600] <... futex resumed>) = 0 [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8599, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 8622] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8622] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8606] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8619] <... futex resumed>) = 0 [pid 8607] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8600] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8614] <... futex resumed>) = 0 [pid 8606] <... futex resumed>) = 1 [pid 8619] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8614] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8607] <... futex resumed>) = 0 [pid 8604] <... futex resumed>) = 0 [pid 8600] <... futex resumed>) = 1 [pid 8622] <... futex resumed>) = 0 [pid 8619] <... futex resumed>) = 1 [pid 8614] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8607] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8606] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8604] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8600] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8622] fspick(AT_FDCWD, ".", 0 [pid 8619] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8614] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8607] <... mmap resumed>) = 0x7f5047d10000 [pid 8622] <... fspick resumed>) = 4 [pid 8614] <... futex resumed>) = 0 [pid 8611] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8622] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8614] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8611] <... futex resumed>) = 0 [pid 8622] <... futex resumed>) = 0 [pid 8611] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8622] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8606] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8607] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5005] umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8619] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8606] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8622] <... futex resumed>) = 0 [pid 8619] <... futex resumed>) = 1 [pid 8614] <... futex resumed>) = 0 [pid 8609] <... fsconfig resumed>) = 0 [pid 8607] <... mprotect resumed>) = 0 [pid 8606] <... futex resumed>) = 1 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8622] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 8614] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8622] <... fsconfig resumed>) = 0 [pid 8619] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8609] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8607] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8606] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8622] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8609] <... futex resumed>) = 1 [pid 8605] <... futex resumed>) = 0 [pid 5005] <... openat resumed>) = 3 [pid 8622] <... futex resumed>) = 0 [ 128.530393][ T8609] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 128.548110][ T8604] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 128.560024][ T8604] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 128.561188][ T8614] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [pid 8622] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 8630 attached [pid 8619] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8609] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8607] <... clone resumed>, parent_tid=[8630], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8630 [pid 8605] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8604] <... fsconfig resumed>) = 0 [pid 5005] fstat(3, [pid 8630] set_robust_list(0x7f5047d309e0, 24 [pid 8619] <... futex resumed>) = 1 [pid 8609] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8607] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8605] <... futex resumed>) = 0 [pid 8604] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8600] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5005] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8630] <... set_robust_list resumed>) = 0 [pid 8619] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8609] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8607] <... futex resumed>) = 0 [pid 8605] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8604] <... futex resumed>) = 0 [pid 8600] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] getdents64(3, [pid 8630] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8609] <... futex resumed>) = 0 [pid 8607] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8605] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8604] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8600] <... futex resumed>) = 0 [pid 8630] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8609] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5005] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 8622] <... futex resumed>) = 0 [pid 8622] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8630] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8600] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8605] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8605] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8609] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8609] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8630] <... futex resumed>) = 1 [pid 8604] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 5005] umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8630] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8604] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8604] <... futex resumed>) = 1 [pid 8600] <... futex resumed>) = 0 [pid 5005] lstat("./98/binderfs", [pid 8604] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8600] exit_group(0 [pid 5005] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8604] <... futex resumed>) = ? [pid 8600] <... exit_group resumed>) = ? [pid 5005] unlink("./98/binderfs" [pid 8604] +++ exited with 0 +++ [pid 5005] <... unlink resumed>) = 0 [pid 5005] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8607] <... futex resumed>) = 0 [pid 8628] <... futex resumed>) = ? [pid 8607] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8607] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8628] +++ exited with 0 +++ [pid 8611] <... futex resumed>) = 0 [pid 8600] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8600, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [ 128.579393][ T8604] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 128.581047][ T8614] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 128.601014][ T8609] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 128.611486][ T8609] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 128.621548][ T8622] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 8614] <... fsconfig resumed>) = 0 [pid 8611] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5001] <... restart_syscall resumed>) = 0 [pid 8622] <... fsconfig resumed>) = 0 [pid 8619] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8614] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8606] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8605] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5005] <... umount2 resumed>) = 0 [pid 8622] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8619] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8614] <... futex resumed>) = 0 [pid 8606] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8605] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8622] <... futex resumed>) = 0 [pid 8619] <... futex resumed>) = 0 [pid 8614] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8606] <... futex resumed>) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8622] ioctl(-1, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0 [pid 8619] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8606] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] lstat("./98/file0", [pid 8622] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 8622] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8605] <... futex resumed>) = 0 [pid 5005] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8622] <... futex resumed>) = 1 [pid 8619] <... futex resumed>) = 0 [pid 8614] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 5005] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8622] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8619] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8614] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8622] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8619] <... futex resumed>) = 0 [pid 5005] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8606] <... futex resumed>) = 0 [pid 8614] <... futex resumed>) = 1 [pid 8622] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 8619] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8606] exit_group(0 [pid 5005] openat(AT_FDCWD, "./98/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8605] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8605] <... mmap resumed>) = 0x7f5047d10000 [pid 5001] openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8605] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE [pid 5001] <... openat resumed>) = 3 [pid 8605] <... mprotect resumed>) = 0 [pid 5001] fstat(3, [pid 8605] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, [pid 8605] <... clone resumed>, parent_tid=[8633], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8633 [pid 5001] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 8605] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8605] <... futex resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8605] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] lstat("./100/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./100/binderfs") = 0 [pid 5001] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8633 attached [pid 8633] set_robust_list(0x7f5047d309e0, 24) = 0 [ 128.623036][ T8614] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 128.644029][ T8611] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 128.656986][ T8622] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 128.668783][ T8609] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [pid 8633] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8607] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8606] <... exit_group resumed>) = ? [pid 8605] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5005] <... openat resumed>) = 4 [pid 8609] <... fsconfig resumed>) = 0 [pid 8609] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8609] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8607] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8607] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8614] +++ exited with 0 +++ [pid 8606] +++ exited with 0 +++ [pid 5005] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5005] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5005] getdents64(4, 0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5005] close(4) = 0 [pid 5005] rmdir("./98/file0") = 0 [pid 5005] getdents64(3, 0x555556203620 /* 0 entries */, 32768) = 0 [pid 5005] close(3) = 0 [pid 5005] rmdir("./98") = 0 [pid 5005] mkdir("./99", 0777) = 0 [pid 5005] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5005] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5005] close(3) = 0 [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562025d0) = 8634 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8606, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 8630] <... futex resumed>) = 0 [pid 8630] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 8630] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8607] <... futex resumed>) = 0 [pid 8630] futex(0x7f50501ea7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5002] umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./98/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./98/binderfs") = 0 [ 128.669825][ T8633] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 128.679300][ T8622] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 128.690829][ T8633] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 128.690845][ T8633] CPU: 0 PID: 8633 Comm: syz-executor222 Not tainted 6.4.0-rc7-syzkaller-00014-g692b7dc87ca6 #0 [ 128.698834][ T8611] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [pid 5002] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8634 attached [pid 8634] set_robust_list(0x5555562025e0, 24) = 0 [pid 8634] chdir("./99") = 0 [pid 8634] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8634] setpgid(0, 0) = 0 [pid 8634] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 128.707192][ T8633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 128.707204][ T8633] RIP: 0010:ext4_acquire_dquot+0xc5/0x3d0 [ 128.741483][ T8633] Code: c1 ea 03 80 3c 02 00 0f 85 0e 03 00 00 4f 8b bc e5 30 02 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d 7f 28 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 dd 02 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 128.751250][ T8637] loop5: detected capacity change from 0 to 512 [ 128.761110][ T8633] RSP: 0018:ffffc9000e7e76c0 EFLAGS: 00010216 [ 128.761129][ T8633] RAX: dffffc0000000000 RBX: ffffffff8a645500 RCX: 0000000000000000 [ 128.761142][ T8633] RDX: 0000000000000005 RSI: ffffffff823ae5ca RDI: 0000000000000028 [ 128.769371][ T8637] EXT4-fs: Ignoring removed oldalloc option [ 128.773518][ T8633] RBP: ffff8880749eea80 R08: 0000000000000001 R09: 0000000000000000 [ 128.773533][ T8633] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 128.773544][ T8633] R13: ffff88801ef20000 R14: ffff8880749eeaa0 R15: 0000000000000000 [ 128.819271][ T8633] FS: 00007f5047d30700(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 128.828194][ T8633] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.834768][ T8633] CR2: 00007f50501b6988 CR3: 0000000017397000 CR4: 0000000000350ef0 [ 128.842737][ T8633] Call Trace: [ 128.846000][ T8633] [ 128.848918][ T8633] ? die_addr+0x3c/0xa0 [ 128.853078][ T8633] ? exc_general_protection+0x129/0x230 [ 128.858632][ T8633] ? asm_exc_general_protection+0x26/0x30 [ 128.864352][ T8633] ? ext4_acquire_dquot+0x1a/0x3d0 [ 128.869458][ T8633] ? ext4_acquire_dquot+0xc5/0x3d0 [ 128.874566][ T8633] dqget+0x67d/0x1080 [ 128.878545][ T8633] ? vfs_setup_quota_inode+0x340/0x340 [ 128.884000][ T8633] ? find_held_lock+0x2d/0x110 [ 128.888756][ T8633] __dquot_initialize+0x560/0xbe0 [ 128.893776][ T8633] ? dquot_get_next_dqblk+0x180/0x180 [ 128.899140][ T8633] ? dput+0x1a7/0xe10 [ 128.903113][ T8633] ? dget_parent+0x152/0x5e0 [ 128.907693][ T8633] dquot_file_open+0x90/0xb0 [ 128.912278][ T8633] ext4_file_open+0x35d/0xbf0 [ 128.916969][ T8633] ? ext4_file_write_iter+0x1740/0x1740 [ 128.922506][ T8633] ? lock_downgrade+0x690/0x690 [ 128.927352][ T8633] ? fsnotify_perm.part.0+0x221/0x610 [ 128.932714][ T8633] do_dentry_open+0x6cc/0x13f0 [ 128.937472][ T8633] ? ext4_file_write_iter+0x1740/0x1740 [ 128.943006][ T8633] ? may_open+0x1f6/0x420 [ 128.947324][ T8633] path_openat+0x1baa/0x2750 [ 128.951907][ T8633] ? path_lookupat+0x840/0x840 [ 128.956661][ T8633] do_filp_open+0x1ba/0x410 [ 128.961161][ T8633] ? may_open_dev+0xf0/0xf0 [ 128.965658][ T8633] ? find_held_lock+0x2d/0x110 [ 128.970414][ T8633] ? do_raw_spin_lock+0x124/0x2b0 [ 128.975433][ T8633] ? spin_bug+0x1c0/0x1c0 [ 128.979767][ T8633] ? _raw_spin_unlock+0x28/0x40 [ 128.984647][ T8633] ? alloc_fd+0x2e4/0x750 [ 128.989063][ T8633] do_sys_openat2+0x16d/0x4c0 [ 128.993736][ T8633] ? ptrace_stop.part.0+0x60f/0x8e0 [ 128.998929][ T8633] ? build_open_flags+0x720/0x720 [ 129.003947][ T8633] ? ptrace_notify+0xfe/0x140 [ 129.008617][ T8633] ? lock_downgrade+0x690/0x690 [ 129.013493][ T8633] __x64_sys_openat+0x143/0x1f0 [ 129.018346][ T8633] ? __ia32_sys_open+0x1c0/0x1c0 [ 129.023278][ T8633] ? _raw_spin_unlock_irq+0x23/0x50 [ 129.028479][ T8633] ? lockdep_hardirqs_on+0x7d/0x100 [ 129.033670][ T8633] ? _raw_spin_unlock_irq+0x2e/0x50 [ 129.038858][ T8633] ? ptrace_notify+0xfe/0x140 [ 129.043531][ T8633] do_syscall_64+0x39/0xb0 [ 129.047936][ T8633] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.053825][ T8633] RIP: 0033:0x7f5050165819 [ 129.058228][ T8633] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 129.077823][ T8633] RSP: 002b:00007f5047d302f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 129.086221][ T8633] RAX: ffffffffffffffda RBX: 00007f50501ea7b0 RCX: 00007f5050165819 [ 129.094178][ T8633] RDX: 000000000000275a RSI: 0000000020000100 RDI: 00000000ffffff9c [ 129.102140][ T8633] RBP: 00007f50501b758c R08: 00007f5047d30700 R09: 0000000000000000 [ 129.110104][ T8633] R10: 0000000000000000 R11: 0000000000000246 R12: 756f726776737973 [ 129.118063][ T8633] R13: 636f6c6c61646c6f R14: 0030656c69662f2e R15: 00007f50501ea7b8 [ 129.126029][ T8633] [ 129.129035][ T8633] Modules linked in: [pid 8634] write(3, "1000", 4) = 4 [pid 8634] close(3) = 0 [pid 8634] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8634] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8634] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f50500f1000 [pid 8634] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8634] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8637], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8637 [pid 8634] futex(0x7f50501ea7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8634] futex(0x7f50501ea7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8637 attached [pid 8637] set_robust_list(0x7f50501119e0, 24) = 0 [pid 8637] memfd_create("syzkaller", 0) = 3 [pid 8637] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5047cf1000 [pid 8637] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 8637] munmap(0x7f5047cf1000, 262144) = 0 [pid 8637] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 8637] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8637] close(3) = 0 [pid 8637] mkdir("./file0", 0777) = 0 [pid 8637] mount("/dev/loop5", "./file0", "ext4", MS_NODEV, "oldalloc,noblock_validity,stripe=0x0000000000000006,barrier=0x000000007fff0038,discard,sysvgroups,re"... [pid 8619] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8619] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8619] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5047d10000 [pid 8619] mprotect(0x7f5047d11000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8619] clone(child_stack=0x7f5047d303f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8638], tls=0x7f5047d30700, child_tidptr=0x7f5047d309d0) = 8638 [pid 8619] futex(0x7f50501ea7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8619] futex(0x7f50501ea7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8638 attached [pid 8622] <... fsconfig resumed>) = 0 [pid 8611] <... fsconfig resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [ 129.133632][ T8633] ---[ end trace 0000000000000000 ]--- [ 129.141162][ T8622] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 129.152243][ T8611] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 129.168517][ T8633] RIP: 0010:ext4_acquire_dquot+0xc5/0x3d0 [pid 8638] set_robust_list(0x7f5047d309e0, 24) = 0 [pid 8638] openat(AT_FDCWD, "blkio.bfq.io_merged", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 8622] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8622] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8611] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8611] futex(0x7f50501ea7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5001] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./100/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8607] exit_group(0 [pid 5001] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8630] <... futex resumed>) = ? [pid 8611] <... futex resumed>) = ? [pid 8607] <... exit_group resumed>) = ? [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8630] +++ exited with 0 +++ [pid 8611] +++ exited with 0 +++ [pid 8607] +++ exited with 0 +++ [pid 5001] openat(AT_FDCWD, "./100/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5004] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8607, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5001] fstat(4, [pid 5004] restart_syscall(<... resuming interrupted clone ...> [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, [pid 5004] <... restart_syscall resumed>) = 0 [pid 5001] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5004] umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] rmdir("./100/file0" [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... rmdir resumed>) = 0 [pid 5004] openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] getdents64(3, [pid 5004] <... openat resumed>) = 3 [pid 5001] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5004] fstat(3, [pid 5001] close(3 [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... close resumed>) = 0 [pid 5004] getdents64(3, [pid 5001] rmdir("./100" [pid 5004] <... getdents64 resumed>0x555556203620 /* 4 entries */, 32768) = 112 [pid 5001] <... rmdir resumed>) = 0 [pid 5004] umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] mkdir("./101", 0777 [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] lstat("./100/binderfs", [pid 5001] <... mkdir resumed>) = 0 [pid 5004] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5004] unlink("./100/binderfs" [pid 5001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5004] <... unlink resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5004] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 8638] <... openat resumed>) = -1 ENOSPC (No space left on device) [pid 5002] <... umount2 resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 8638] futex(0x7f50501ea7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8638] <... futex resumed>) = 1 [pid 8619] <... futex resumed>) = 0 [pid 5004] <... umount2 resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8619] exit_group(0 [pid 5004] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] lstat("./98/file0", [pid 8619] <... exit_group resumed>) = ? [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] lstat("./100/file0", [pid 5002] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5004] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] openat(AT_FDCWD, "./98/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5004] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... openat resumed>) = 4 [pid 5004] openat(AT_FDCWD, "./100/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] fstat(4, [pid 5004] <... openat resumed>) = 4 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] fstat(4, [pid 5002] getdents64(4, [pid 5004] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5004] getdents64(4, [pid 5002] getdents64(4, [pid 5004] <... getdents64 resumed>0x55555620b660 /* 2 entries */, 32768) = 48 [pid 5002] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5004] getdents64(4, [pid 5002] close(4 [pid 5004] <... getdents64 resumed>0x55555620b660 /* 0 entries */, 32768) = 0 [pid 5002] <... close resumed>) = 0 [pid 5004] close(4 [pid 5002] rmdir("./98/file0" [pid 5004] <... close resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5004] rmdir("./100/file0" [pid 5002] getdents64(3, [pid 5004] <... rmdir resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5004] getdents64(3, [pid 5002] close(3 [pid 5004] <... getdents64 resumed>0x555556203620 /* 0 entries */, 32768) = 0 [pid 5002] <... close resumed>) = 0 [pid 5004] close(3 [pid 5002] rmdir("./98" [pid 5004] <... close resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5004] rmdir("./100" [pid 5002] mkdir("./99", 0777 [pid 5004] <... rmdir resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5004] mkdir("./101", 0777 [pid 5002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8622] <... futex resumed>) = ? [pid 5004] <... mkdir resumed>) = 0 [pid 5002] <... openat resumed>) = 3 ./strace-static-x86_64: Process 8641 attached [pid 8638] +++ exited with 0 +++ [pid 8622] +++ exited with 0 +++ [pid 8619] +++ exited with 0 +++ [pid 5004] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5001] <... clone resumed>, child_tidptr=0x5555562025d0) = 8641 [pid 5004] <... openat resumed>) = 3 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 129.180727][ T8633] Code: c1 ea 03 80 3c 02 00 0f 85 0e 03 00 00 4f 8b bc e5 30 02 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d 7f 28 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 dd 02 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 129.209287][ T8637] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c842c018, mo2=0002] [ 129.214926][ T8633] RSP: 0018:ffffc9000e7e76c0 EFLAGS: 00010216 [pid 5004] ioctl(3, LOOP_CLR_FD [pid 5002] close(3 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8619, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 8641] set_robust_list(0x5555562025e0, 24 [pid 5004] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... close resumed>) = 0 [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 8641] <... set_robust_list resumed>) = 0 [pid 5004] close(3 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... restart_syscall resumed>) = 0 [pid 5004] <... close resumed>) = 0 [pid 5004] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... clone resumed>, child_tidptr=0x5555562025d0) = 8642 [pid 5000] umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] <... clone resumed>, child_tidptr=0x5555562025d0) = 8643 [pid 5000] getdents64(3, 0x555556203620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./100/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./100/binderfs") = 0 [pid 5000] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8642 attached ./strace-static-x86_64: Process 8643 attached [pid 8642] set_robust_list(0x5555562025e0, 24 [pid 8643] set_robust_list(0x5555562025e0, 24 [pid 8642] <... set_robust_list resumed>) = 0 [ 129.229055][ T8633] RAX: dffffc0000000000 RBX: ffffffff8a645500 RCX: 0000000000000000 [ 129.237228][ T8633] RDX: 0000000000000005 RSI: ffffffff823ae5ca RDI: 0000000000000028 [ 129.237513][ T8637] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor222: bg 0: block 41: padding at end of block bitmap is not set [ 129.245373][ T8633] RBP: ffff8880749eea80 R08: 0000000000000001 R09: 0000000000000000 [ 129.245388][ T8633] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 129.245399][ T8633] R13: ffff88801ef20000 R14: ffff8880749eeaa0 R15: 0000000000000000 [pid 8643] <... set_robust_list resumed>) = 0 [pid 8642] chdir("./99" [pid 8641] chdir("./101") = 0 [pid 8641] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8641] setpgid(0, 0) = 0 [pid 8641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8641] write(3, "1000", 4) = 4 [pid 8641] close(3) = 0 [pid 8641] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8643] chdir("./101" [pid 8642] <... chdir resumed>) = 0 [pid 8641] futex(0x7f50501ea7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8643] <... chdir resumed>) = 0 [pid 8642] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8641] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8643] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8642] <... prctl resumed>) = 0 [pid 8641] <... mmap resumed>) = 0x7f50500f1000 [pid 8643] <... prctl resumed>) = 0 [pid 8642] setpgid(0, 0 [pid 8641] mprotect(0x7f50500f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8641] clone(child_stack=0x7f50501113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8642] <... setpgid resumed>) = 0 [pid 8643] setpgid(0, 0 [pid 8642] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8641] <... clone resumed>, parent_tid=[8644], tls=0x7f5050111700, child_tidptr=0x7f50501119d0) = 8644 [pid 8643] <... setpgid resumed>) = 0 [pid 8642] <... openat resumed>) = 3 [ 129.245415][ T8633] FS: 00007f5047d30700(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 129.293465][ T8633] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.300180][ T8633] CR2: 00007f5050122890 CR3: 0000000017397000 CR4: 0000000000350ee0 [ 129.308323][ T8633] Kernel panic - not syncing: Fatal exception [ 129.315080][ T8633] Kernel Offset: disabled [ 129.319401][ T8633] Rebooting in 86400 seconds..